last executing test programs: 2m47.718445637s ago: executing program 3 (id=173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m47.525862264s ago: executing program 3 (id=175): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000400040000000400000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000017010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d0800000000000085000000d3000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m47.443609708s ago: executing program 3 (id=176): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x2, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 2m47.220269458s ago: executing program 3 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x16f0d8, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 2m47.067640318s ago: executing program 3 (id=182): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 2m46.71031332s ago: executing program 3 (id=185): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = fcntl$getown(r0, 0x9) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x1a, 0x2, @tid=r1}, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 2m46.570269807s ago: executing program 32 (id=185): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = fcntl$getown(r0, 0x9) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x1a, 0x2, @tid=r1}, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 2m2.388528662s ago: executing program 2 (id=510): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x40, 0x4, 0x800, 0x80, r2}, 0x10) 2m2.265027807s ago: executing program 2 (id=512): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002008000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m1.923454856s ago: executing program 2 (id=517): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) flistxattr(r0, &(0x7f00000001c0)=""/83, 0x53) 2m1.899151226s ago: executing program 1 (id=518): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) r2 = socket$inet(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40004) rt_tgsigqueueinfo(r0, r1, 0x36, &(0x7f0000000180)={0xa, 0x8, 0x29b}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) 2m1.842746932s ago: executing program 2 (id=519): pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) sendfile(r0, r1, 0x0, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7) 2m1.754619668s ago: executing program 1 (id=520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r0, &(0x7f0000000580)="fb6c", 0xc3ff, 0x4008804, 0x0, 0x0) 2m1.682847756s ago: executing program 1 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) unshare(0x62040200) 2m1.471743804s ago: executing program 2 (id=523): capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 2m1.398236955s ago: executing program 2 (id=524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="080008000001060003002d00c27ce5210a3fa03a08d48fcbb01e4000ab00c2aaa54b88f8491b00b2b2eca9ff0102a9"], 0x3f) 2m1.321111533s ago: executing program 1 (id=525): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 2m1.254611561s ago: executing program 1 (id=526): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x5, 0x26c}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24040810) 2m0.026008898s ago: executing program 1 (id=533): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x400001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) 1m59.75040653s ago: executing program 33 (id=533): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x400001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) 1m46.239678418s ago: executing program 34 (id=524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="080008000001060003002d00c27ce5210a3fa03a08d48fcbb01e4000ab00c2aaa54b88f8491b00b2b2eca9ff0102a9"], 0x3f) 1m31.231672306s ago: executing program 6 (id=715): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1m29.730184111s ago: executing program 6 (id=731): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x20, 0xff, 0x4, 0x40, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1, 0x93}, 0xe) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 1m29.363165128s ago: executing program 6 (id=736): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x48094}, 0x20001040) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) eventfd(0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000d40)={0x4c, 0x16, 0x0, 0x0, 0x1000, &(0x7f0000ffc000)}) 1m28.891175842s ago: executing program 6 (id=741): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], 0x0, 0x0, 0x2, 0x1}}, 0x40) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r2, 0x0) 1m28.508849975s ago: executing program 6 (id=743): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m28.266297022s ago: executing program 6 (id=746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0, 0x21}], 0x1, 0x22, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0xb6, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m13.16958382s ago: executing program 35 (id=746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0, 0x21}], 0x1, 0x22, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0xb6, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 34.561202889s ago: executing program 7 (id=1180): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000"], 0x8) close(0x3) 33.52354086s ago: executing program 7 (id=1188): openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) 33.219157907s ago: executing program 7 (id=1192): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2b8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x6, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x100, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf6, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}, {{0x4, 0x0, 0x3, 0x0, 0x7f, 0x8001, {0x4, 0x7, 0x7f, 0x8fbc, 0x8b, 0x2, 0x9, 0x0, 0x1, 0x6000, 0x0, r2, r3, 0x1, 0x6}}, {0x5, 0xa69, 0x7, 0x7, 'session'}}, {{0x2, 0x802, 0x3, 0x7, 0x9, 0x3, {0x1, 0x3, 0x8, 0x80000000, 0x3, 0x110, 0x8, 0x8, 0x2, 0x8000, 0x929, r2, r3, 0x236826c1}}, {0x4, 0x60ad1fe8, 0x8, 0x26, 'rootmode'}}, {{0x3, 0x1, 0x5, 0x1, 0xdc0, 0x4, {0x3, 0x7, 0x20000, 0x3, 0x20, 0x794a9e64, 0x85f, 0x8001, 0x80000000, 0x8000, 0x4, r2, r3, 0x6, 0x2}}, {0x5, 0xfffffffffffffff7, 0x3, 0x7fffffff, ',]-'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) 32.847042105s ago: executing program 7 (id=1195): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 31.96210931s ago: executing program 7 (id=1203): sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 31.357646164s ago: executing program 7 (id=1205): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000010101020000000000000800f8ff0b001980080001002d"], 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x20008, 0x0, 0x0, 0x40, 0x4000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) ioctl$EVIOCSABS0(r2, 0x40806685, &(0x7f00000002c0)={0x8276, 0x5, 0xfffffffc, 0x7, 0x7, 0x10}) 30.478773088s ago: executing program 0 (id=1216): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 30.273580825s ago: executing program 8 (id=1218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) pipe(0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 30.271263265s ago: executing program 4 (id=1219): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r1, 0x0, &(0x7f0000000540)=""/153}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) 30.004187605s ago: executing program 8 (id=1221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x9, 0x4519b3ea, 0x6, 0x6, 0x4c9, 0x3, 0x53, 0xa32a, 0x4, 0x94f, 0x7, 0x2, 0x400, 0x1, 0xffffffffffffffff], 0x8080000, 0x28000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.988664821s ago: executing program 4 (id=1222): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0x28ea00c3b4872574, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xfff3}, {0x1}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="080005", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 29.883537628s ago: executing program 5 (id=1223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500050007"], 0x4a) 29.820538704s ago: executing program 4 (id=1224): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000070c0)={&(0x7f0000006200)={0x50, 0x0, 0x9, {0x7, 0x2d, 0x1, 0x6000040, 0x1, 0x5, 0x8, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r2, 0x6700000000000000) 29.639989433s ago: executing program 5 (id=1225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a1080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 29.54893733s ago: executing program 4 (id=1226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x0, 0x87, '\x00', 0x8}, {0x8, 0x8, 0x40, '\x00', 0xfe}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0x1, '\x00', 0xff}, {0x7, 0x9, 0x8, '\x00', 0xfb}, {0x0, 0x0, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xd2, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0xfd, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 29.345944355s ago: executing program 0 (id=1227): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01e723"], 0x38}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x45, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) 29.296197666s ago: executing program 5 (id=1228): timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0x10001, 0x9, 0x1, 0xaaff}) 29.197135514s ago: executing program 0 (id=1229): mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 29.195890359s ago: executing program 8 (id=1230): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x101d) symlink(&(0x7f0000000140)='./mnt/test\x00', &(0x7f0000000300)='./mnt/test\x00') 28.939538558s ago: executing program 5 (id=1231): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xed8}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) setuid(0xee00) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0x9}) 28.839355155s ago: executing program 0 (id=1232): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5938f56e92bf77b0, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) read$FUSE(r2, 0x0, 0x2000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffc, 0x6, 0xe9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0x9, 0x0, 0x80, 0x0}) 28.731279347s ago: executing program 8 (id=1233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\v'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 28.669879687s ago: executing program 0 (id=1234): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x1, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 28.668542383s ago: executing program 5 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) 28.592377979s ago: executing program 8 (id=1236): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 28.518842867s ago: executing program 5 (id=1237): syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) 28.471820563s ago: executing program 4 (id=1238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) 28.45241368s ago: executing program 8 (id=1239): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xd9, 0x8000}}]}}}]}, 0x64}}, 0x20000000) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="f1168cfd72e8ff25ae2eb5ecdc41136c49a3c9039a13db0fa92d37c7f1e968bd5b8a91b2ccd751d7003b7e0758bd6de18777282d6966206c58fd3e9f47adbd2ad4ee277425b7da8b9b7edd597f4e92b0560c48974738da5308a6db5a555e9da204834cf283826fa09a4a443f529f446f933b363af8268c7e4edf0c5d0e138568d9eb7859c6b6b4c3d30f0b4dbed18738e72b38d54985b664e5e23d16b38e189a90906624ec212cea2b9b849d0135da8719fc5bce1a010aadd39106302ff8f0255699ba380bba961e94f38347fbe6b899853e68792f26256ac90779ce1d", 0xdd}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0) 28.389360202s ago: executing program 0 (id=1240): syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0 [ 159.794813][ T7932] ? __pfx___inet_stream_connect+0x10/0x10 [ 159.794843][ T7932] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 159.794876][ T7932] ? __local_bh_enable_ip+0xa5/0x120 [ 159.794904][ T7932] inet_stream_connect+0x57/0xa0 [ 159.794937][ T7932] __sys_connect_file+0x146/0x1a0 [ 159.794964][ T7932] __sys_connect+0x141/0x170 [ 159.794985][ T7932] ? __pfx___sys_connect+0x10/0x10 [ 159.795029][ T7932] __x64_sys_connect+0x72/0xb0 [ 159.795052][ T7932] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.795080][ T7932] do_syscall_64+0x123/0x790 [ 159.795113][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.795135][ T7932] RIP: 0033:0x7fc7fad9e159 [ 159.795154][ T7932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.795178][ T7932] RSP: 002b:00007fc7fbcdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 159.795198][ T7932] RAX: ffffffffffffffda RBX: 00007fc7fb025fa0 RCX: 00007fc7fad9e159 [ 159.795213][ T7932] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000005 [ 159.795227][ T7932] RBP: 00007fc7fae3506b R08: 0000000000000000 R09: 0000000000000000 [ 159.795240][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.795252][ T7932] R13: 00007fc7fb026038 R14: 00007fc7fb025fa0 R15: 00007ffd1deb2df8 [ 159.795283][ T7932] [ 159.941192][ T5724] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 160.097547][ T5724] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:0926:3333.0005/input/input21 [ 160.146381][ T31] audit: type=1400 audit(1790022381.244:526): avc: denied { read } for pid=7938 comm="syz.7.649" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.146763][ T31] audit: type=1400 audit(1790022381.244:527): avc: denied { open } for pid=7938 comm="syz.7.649" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.194702][ T7939] binder: 7938:7939 ioctl c0306201 0 returned -14 [ 160.195963][ T31] audit: type=1400 audit(1790022381.284:528): avc: denied { ioctl } for pid=7938 comm="syz.7.649" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.252878][ T7940] binder: 7938:7940 ioctl c0306201 0 returned -14 [ 160.268974][ T7908] cdc_acm 1-1:1.1: acm_start_wb - usb_submit_urb(write bulk) failed: -22 [ 160.312579][ T5724] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 160.336492][ T5724] usb 6-1: USB disconnect, device number 9 [ 160.441222][ T7941] fido_id[7941]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 160.445806][ T5690] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 160.575776][ T5690] usb 5-1: device descriptor read/64, error -71 [ 160.855788][ T5690] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 161.016306][ T5690] usb 5-1: device descriptor read/64, error -71 [ 161.141671][ T5690] usb usb5-port1: attempt power cycle [ 161.447700][ T5603] Bluetooth: hci5: command tx timeout [ 161.573629][ T5690] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 161.607897][ T5690] usb 5-1: device descriptor read/8, error -71 [ 161.620064][ T7949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.849145][ T5690] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 161.869512][ T5690] usb 5-1: device descriptor read/8, error -71 [ 161.976107][ T5690] usb usb5-port1: unable to enumerate USB device [ 162.140762][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.656'. [ 162.424114][ T31] audit: type=1400 audit(1790022383.514:529): avc: denied { module_load } for pid=7969 comm="syz.6.660" path="" dev="hugetlbfs" ino=23666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 162.510515][ T7970] Invalid ELF header magic: != ELF [ 162.815392][ T7985] netlink: 256 bytes leftover after parsing attributes in process `syz.7.664'. [ 162.828725][ T7985] unsupported nlmsg_type 40 [ 163.246431][ T31] audit: type=1400 audit(1790022384.344:530): avc: denied { read append } for pid=7999 comm="syz.4.673" name="file1" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 163.405710][ T5711] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 163.460744][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 163.460760][ T31] audit: type=1400 audit(1790022384.554:532): avc: denied { read write } for pid=8007 comm="syz.4.675" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 163.461027][ T31] audit: type=1400 audit(1790022384.554:533): avc: denied { open } for pid=8007 comm="syz.4.675" path="/124/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 163.465538][ T31] audit: type=1400 audit(1790022384.554:534): avc: denied { ioctl } for pid=8007 comm="syz.4.675" path="/124/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 163.465547][ T8008] size and base must be multiples of 4 kiB [ 163.465566][ T8008] CPU: 0 UID: 0 PID: 8008 Comm: syz.4.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.465595][ T8008] Tainted: [L]=SOFTLOCKUP [ 163.465601][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 163.465612][ T8008] Call Trace: [ 163.465619][ T8008] [ 163.465626][ T8008] dump_stack_lvl+0x100/0x190 [ 163.465667][ T8008] mtrr_add.cold+0x74/0x87 [ 163.465691][ T8008] mtrr_ioctl+0x25a/0xcf0 [ 163.465711][ T8008] ? __pfx_mtrr_ioctl+0x10/0x10 [ 163.465728][ T8008] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 163.465759][ T8008] ? __fget_files+0x34/0x3d0 [ 163.465799][ T8008] ? __pfx_mtrr_ioctl+0x10/0x10 [ 163.465822][ T8008] proc_reg_unlocked_ioctl+0x229/0x320 [ 163.465852][ T8008] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 163.465885][ T8008] __x64_sys_ioctl+0x18e/0x210 [ 163.465910][ T8008] do_syscall_64+0x123/0x790 [ 163.465942][ T8008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.465961][ T8008] RIP: 0033:0x7efd9bd9e159 [ 163.465980][ T8008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.465998][ T8008] RSP: 002b:00007efd9cd4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.466018][ T8008] RAX: ffffffffffffffda RBX: 00007efd9c025fa0 RCX: 00007efd9bd9e159 [ 163.466031][ T8008] RDX: 0000200000000a00 RSI: 00000000400c4d01 RDI: 0000000000000005 [ 163.466044][ T8008] RBP: 00007efd9be3506b R08: 0000000000000000 R09: 0000000000000000 [ 163.466056][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.466069][ T8008] R13: 00007efd9c026038 R14: 00007efd9c025fa0 R15: 00007ffe8197b2a8 [ 163.466098][ T8008] [ 163.657793][ T5711] usb 6-1: Using ep0 maxpacket: 16 [ 163.678578][ T5711] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 163.697173][ T5711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.697207][ T5711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.697242][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.722684][ T31] audit: type=1400 audit(1790022384.804:535): avc: denied { bind } for pid=8013 comm="syz.6.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.806504][ T5711] usb 6-1: config 0 descriptor?? [ 164.226116][ T5711] apple 0003:05AC:024B.0006: unknown global tag 0xe [ 164.226139][ T5711] apple 0003:05AC:024B.0006: item 0 1 1 14 parsing failed [ 164.226851][ T5711] apple 0003:05AC:024B.0006: parse failed [ 164.226959][ T5711] apple 0003:05AC:024B.0006: probe with driver apple failed with error -22 [ 164.453062][ T5724] usb 6-1: USB disconnect, device number 10 [ 164.565877][ T31] audit: type=1400 audit(1790022385.654:536): avc: denied { associate } for pid=8029 comm="syz.4.682" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 165.302246][ T5711] usb 1-1: USB disconnect, device number 12 [ 165.400242][ T31] audit: type=1400 audit(1790022386.494:537): avc: denied { read } for pid=8044 comm="syz.6.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.511837][ T8050] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 165.672692][ T8050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.722360][ T8056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.723839][ T8056] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 165.725353][ T8056] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 165.785576][ T8059] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 165.835569][ T8059] bond2: (slave wlan1): Enslaving as an active interface with a down link [ 165.837457][ T8063] lo speed is unknown, defaulting to 1000 [ 165.886628][ T8063] lo speed is unknown, defaulting to 1000 [ 165.888767][ T8063] lo speed is unknown, defaulting to 1000 [ 165.894244][ T8063] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 165.894282][ T8063] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 165.894325][ T8063] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 165.931192][ T8063] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 165.987807][ T8063] lo speed is unknown, defaulting to 1000 [ 166.021409][ T8063] lo speed is unknown, defaulting to 1000 [ 166.023017][ T8063] lo speed is unknown, defaulting to 1000 [ 166.024474][ T8063] lo speed is unknown, defaulting to 1000 [ 166.053713][ T8063] lo speed is unknown, defaulting to 1000 [ 166.061742][ T8063] lo speed is unknown, defaulting to 1000 [ 166.284979][ T60] IPVS: starting estimator thread 0... [ 166.377182][ T8071] IPVS: using max 39 ests per chain, 93600 per kthread [ 166.477524][ T8077] xt_hashlimit: size too large, truncated to 1048576 [ 166.686943][ T31] audit: type=1400 audit(1790022387.784:538): avc: denied { read write } for pid=8083 comm="syz.0.702" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 166.687425][ T31] audit: type=1400 audit(1790022387.784:539): avc: denied { open } for pid=8083 comm="syz.0.702" path="/140/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 166.691538][ T31] audit: type=1400 audit(1790022387.784:540): avc: denied { ioctl } for pid=8083 comm="syz.0.702" path="/140/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 166.738476][ T8084] device-mapper: table: 248:0: too large device [ 166.738497][ T8084] device-mapper: ioctl: error adding target to table [ 166.962135][ T8089] input: syz0 as /devices/virtual/input/input22 [ 167.340069][ T8103] openvswitch: netlink: IPv6 tunnel dst address is zero [ 167.381586][ T8103] lo speed is unknown, defaulting to 1000 [ 167.428758][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.7.709'. [ 167.432194][ T8106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.432206][ T8106] IPv6: NLM_F_CREATE should be set when creating new route [ 167.432540][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.7.709'. [ 167.432848][ T8106] Zero length message leads to an empty skb [ 167.569142][ T31] audit: type=1400 audit(1790022388.664:541): avc: denied { mount } for pid=8107 comm="syz.5.710" name="/" dev="overlay" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 167.654756][ T8114] xt_hashlimit: size too large, truncated to 1048576 [ 168.175559][ T8128] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.175836][ T8128] block device autoloading is deprecated and will be removed. [ 168.378661][ T8133] syzkaller1: entered promiscuous mode [ 168.378683][ T8133] syzkaller1: entered allmulticast mode [ 168.792794][ T8150] openvswitch: netlink: IPv6 tunnel dst address is zero [ 168.906994][ T8150] lo speed is unknown, defaulting to 1000 [ 168.925547][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 168.925563][ T31] audit: type=1400 audit(1790022390.014:548): avc: denied { watch } for pid=8154 comm="syz.5.727" path="pipe:[24258]" dev="pipefs" ino=24258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 168.946873][ T31] audit: type=1400 audit(1790022390.044:549): avc: denied { bind } for pid=8147 comm="syz.7.725" lport=64 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.946920][ T31] audit: type=1400 audit(1790022390.044:550): avc: denied { node_bind } for pid=8147 comm="syz.7.725" saddr=ffff:0:a0:100:60ea:0:6d69:7363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 169.771915][ T31] audit: type=1400 audit(1790022390.864:551): avc: denied { read } for pid=8176 comm="syz.4.734" path="socket:[23160]" dev="sockfs" ino=23160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 169.853955][ T8188] FAULT_INJECTION: forcing a failure. [ 169.853955][ T8188] name failslab, interval 1, probability 0, space 0, times 0 [ 169.853988][ T8188] CPU: 0 UID: 0 PID: 8188 Comm: syz.6.736 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.854017][ T8188] Tainted: [L]=SOFTLOCKUP [ 169.854025][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 169.854038][ T8188] Call Trace: [ 169.854045][ T8188] [ 169.854054][ T8188] dump_stack_lvl+0x100/0x190 [ 169.854089][ T8188] should_fail_ex.cold+0x5/0xa [ 169.854119][ T8188] should_failslab+0xc2/0x120 [ 169.854145][ T8188] __kmalloc_noprof+0xfc/0x840 [ 169.854167][ T8188] ? dma_buf_export+0x389/0xc60 [ 169.854195][ T8188] dma_buf_export+0x389/0xc60 [ 169.854221][ T8188] iommufd_test+0x1759/0x6600 [ 169.854249][ T8188] ? __lock_acquire+0x5c0/0x1f40 [ 169.854273][ T8188] ? __lock_acquire+0x5c0/0x1f40 [ 169.854292][ T8188] ? __pfx_iommufd_test+0x10/0x10 [ 169.854314][ T8188] ? tomoyo_path_number_perm+0x188/0x580 [ 169.854341][ T8188] ? lock_acquire+0x1d1/0x380 [ 169.854360][ T8188] ? __might_fault+0xc5/0x140 [ 169.854390][ T8188] ? find_held_lock+0x2b/0x80 [ 169.854417][ T8188] ? __might_fault+0xc5/0x140 [ 169.854445][ T8188] ? __might_fault+0xc5/0x140 [ 169.854485][ T8188] iommufd_fops_ioctl+0x358/0x520 [ 169.854513][ T8188] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 169.854539][ T8188] ? __fget_files+0x34/0x3d0 [ 169.854576][ T8188] ? selinux_file_ioctl+0x13b/0x290 [ 169.854604][ T8188] ? selinux_file_ioctl+0xb6/0x290 [ 169.854631][ T8188] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 169.854669][ T8188] __x64_sys_ioctl+0x18e/0x210 [ 169.854695][ T8188] do_syscall_64+0x123/0x790 [ 169.854730][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.854751][ T8188] RIP: 0033:0x7fc7fad9e159 [ 169.854770][ T8188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.854789][ T8188] RSP: 002b:00007fc7fbcdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.854809][ T8188] RAX: ffffffffffffffda RBX: 00007fc7fb025fa0 RCX: 00007fc7fad9e159 [ 169.854824][ T8188] RDX: 0000200000000d40 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 169.854837][ T8188] RBP: 00007fc7fae3506b R08: 0000000000000000 R09: 0000000000000000 [ 169.854851][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.854863][ T8188] R13: 00007fc7fb026038 R14: 00007fc7fb025fa0 R15: 00007ffd1deb2df8 [ 169.854892][ T8188] [ 170.757271][ T31] audit: type=1400 audit(1790022391.854:552): avc: denied { unmount } for pid=7411 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 171.335340][ T8218] FAULT_INJECTION: forcing a failure. [ 171.335340][ T8218] name failslab, interval 1, probability 0, space 0, times 0 [ 171.335364][ T8218] CPU: 0 UID: 0 PID: 8218 Comm: syz.4.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.335381][ T8218] Tainted: [L]=SOFTLOCKUP [ 171.335386][ T8218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 171.335394][ T8218] Call Trace: [ 171.335398][ T8218] [ 171.335403][ T8218] dump_stack_lvl+0x100/0x190 [ 171.335426][ T8218] should_fail_ex.cold+0x5/0xa [ 171.335452][ T8218] should_failslab+0xc2/0x120 [ 171.335469][ T8218] __kmalloc_cache_noprof+0x91/0x6d0 [ 171.335488][ T8218] ? lockdep_init_map_type+0x5c/0x250 [ 171.335502][ T8218] ? qdisc_get_rtab+0x14d/0x810 [ 171.335517][ T8218] qdisc_get_rtab+0x14d/0x810 [ 171.335532][ T8218] ? tcf_action_check_ctrlact+0x56/0x260 [ 171.335547][ T8218] tcf_police_init+0xe5e/0x1690 [ 171.335566][ T8218] ? __pfx_tcf_police_init+0x10/0x10 [ 171.335596][ T8218] ? tcf_action_init_1+0x2d8/0x6c0 [ 171.335619][ T8218] ? __asan_memcpy+0x3c/0x60 [ 171.335642][ T8218] tcf_action_init_1+0x466/0x6c0 [ 171.335669][ T8218] ? __pfx_tcf_action_init_1+0x10/0x10 [ 171.335691][ T8218] ? tc_action_load_ops+0x1f5/0x3e0 [ 171.335730][ T8218] ? __nla_parse+0x40/0x60 [ 171.335761][ T8218] tcf_action_init+0x43f/0xa60 [ 171.335796][ T8218] ? __pfx_tcf_action_init+0x10/0x10 [ 171.335836][ T8218] ? __kernel_text_address+0xd/0x30 [ 171.335861][ T8218] ? unwind_get_return_address+0x59/0xa0 [ 171.335886][ T8218] ? arch_stack_walk+0xa6/0xf0 [ 171.335929][ T8218] ? __lock_acquire+0x5c0/0x1f40 [ 171.335952][ T8218] tcf_action_add+0xed/0x5c0 [ 171.335978][ T8218] ? __pfx_tcf_action_add+0x10/0x10 [ 171.336036][ T8218] ? __nla_parse+0x40/0x60 [ 171.336064][ T8218] tc_ctl_action+0x2e3/0x470 [ 171.336087][ T8218] ? __pfx_tc_ctl_action+0x10/0x10 [ 171.336118][ T8218] ? __pfx_tc_ctl_action+0x10/0x10 [ 171.336140][ T8218] rtnetlink_rcv_msg+0x3c9/0xe90 [ 171.336166][ T8218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.336196][ T8218] ? ref_tracker_free+0x37e/0x6c0 [ 171.336221][ T8218] netlink_rcv_skb+0x159/0x420 [ 171.336242][ T8218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.336266][ T8218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.336295][ T8218] ? netlink_deliver_tap+0x1ae/0xcc0 [ 171.336318][ T8218] netlink_unicast+0x585/0x850 [ 171.336342][ T8218] ? __pfx_netlink_unicast+0x10/0x10 [ 171.336369][ T8218] netlink_sendmsg+0x8b0/0xda0 [ 171.336392][ T8218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.336415][ T8218] ? selinux_socket_sendmsg+0x198/0x2f0 [ 171.336444][ T8218] ____sys_sendmsg+0xa4d/0xbe0 [ 171.336472][ T8218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.336496][ T8218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.336535][ T8218] ___sys_sendmsg+0x190/0x1e0 [ 171.336557][ T8218] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.336575][ T8218] ? futex_wait+0x11e/0x370 [ 171.336603][ T8218] ? find_held_lock+0x2b/0x80 [ 171.336641][ T8218] __sys_sendmsg+0x160/0x210 [ 171.336663][ T8218] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.336698][ T8218] do_syscall_64+0x123/0x790 [ 171.336725][ T8218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.336744][ T8218] RIP: 0033:0x7efd9bd9e159 [ 171.336759][ T8218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.336777][ T8218] RSP: 002b:00007efd9cd4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.336795][ T8218] RAX: ffffffffffffffda RBX: 00007efd9c025fa0 RCX: 00007efd9bd9e159 [ 171.336807][ T8218] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 171.336818][ T8218] RBP: 00007efd9be3506b R08: 0000000000000000 R09: 0000000000000000 [ 171.336830][ T8218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.336841][ T8218] R13: 00007efd9c026038 R14: 00007efd9c025fa0 R15: 00007ffe8197b2a8 [ 171.336867][ T8218] [ 171.889160][ T31] audit: type=1400 audit(1790022392.984:553): avc: denied { write } for pid=8226 comm="syz.5.754" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 171.990242][ T8230] netlink: 24 bytes leftover after parsing attributes in process `syz.5.755'. [ 172.015165][ T31] audit: type=1800 audit(1790022393.104:554): pid=8216 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.748" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 172.084954][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.755'. [ 172.310111][ T31] audit: type=1400 audit(1790022393.404:555): avc: denied { remount } for pid=8232 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 173.195862][ T30] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 173.315359][ T31] audit: type=1400 audit(1790022394.404:556): avc: denied { create } for pid=8255 comm="syz.7.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 173.338211][ T31] audit: type=1400 audit(1790022394.434:557): avc: denied { bind } for pid=8255 comm="syz.7.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 173.346210][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 173.346966][ T30] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 173.347955][ T30] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 173.347978][ T30] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 173.347998][ T30] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 173.348058][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.348080][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 173.348103][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.348140][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.350584][ T30] usb 5-1: config 0 descriptor?? [ 173.569545][ T30] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 173.590894][ T30] usb 5-1: USB disconnect, device number 17 [ 173.603639][ T30] usblp0: removed [ 173.895341][ T8276] FAULT_INJECTION: forcing a failure. [ 173.895341][ T8276] name failslab, interval 1, probability 0, space 0, times 0 [ 173.895374][ T8276] CPU: 0 UID: 60928 PID: 8276 Comm: syz.5.771 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.895403][ T8276] Tainted: [L]=SOFTLOCKUP [ 173.895411][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 173.895423][ T8276] Call Trace: [ 173.895430][ T8276] [ 173.895438][ T8276] dump_stack_lvl+0x100/0x190 [ 173.895474][ T8276] should_fail_ex.cold+0x5/0xa [ 173.895505][ T8276] should_failslab+0xc2/0x120 [ 173.895532][ T8276] kmem_cache_alloc_noprof+0x92/0x6a0 [ 173.895556][ T8276] ? copy_utsname+0x1a8/0x690 [ 173.895585][ T8276] copy_utsname+0x1a8/0x690 [ 173.895607][ T8276] create_new_namespaces+0x16a/0xac0 [ 173.895629][ T8276] ? bpf_lsm_capable+0x9/0x10 [ 173.895655][ T8276] ? security_capable+0x80/0x260 [ 173.895688][ T8276] unshare_nsproxy_namespaces+0xf2/0x220 [ 173.895714][ T8276] ksys_unshare+0x4a2/0xa70 [ 173.895738][ T8276] ? __pfx_ksys_unshare+0x10/0x10 [ 173.895773][ T8276] __x64_sys_unshare+0x31/0x40 [ 173.895796][ T8276] do_syscall_64+0x123/0x790 [ 173.895828][ T8276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.895848][ T8276] RIP: 0033:0x7ff921b9e159 [ 173.895864][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.895882][ T8276] RSP: 002b:00007ff9229f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 173.895903][ T8276] RAX: ffffffffffffffda RBX: 00007ff921e25fa0 RCX: 00007ff921b9e159 [ 173.895916][ T8276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 173.895927][ T8276] RBP: 00007ff921c3506b R08: 0000000000000000 R09: 0000000000000000 [ 173.895938][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.895948][ T8276] R13: 00007ff921e26038 R14: 00007ff921e25fa0 R15: 00007ffd84b0ecf8 [ 173.895974][ T8276] [ 173.921321][ T8278] FAULT_INJECTION: forcing a failure. [ 173.921321][ T8278] name failslab, interval 1, probability 0, space 0, times 0 [ 173.921354][ T8278] CPU: 1 UID: 0 PID: 8278 Comm: syz.7.772 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.921383][ T8278] Tainted: [L]=SOFTLOCKUP [ 173.921391][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 173.921403][ T8278] Call Trace: [ 173.921411][ T8278] [ 173.921419][ T8278] dump_stack_lvl+0x100/0x190 [ 173.921454][ T8278] should_fail_ex.cold+0x5/0xa [ 173.921484][ T8278] should_failslab+0xc2/0x120 [ 173.921511][ T8278] __kmalloc_cache_noprof+0x91/0x6d0 [ 173.921542][ T8278] ? __request_module+0x2b7/0x6a0 [ 173.921575][ T8278] __request_module+0x2b7/0x6a0 [ 173.921603][ T8278] ? __pfx___request_module+0x10/0x10 [ 173.921630][ T8278] ? __pfx___mutex_lock+0x10/0x10 [ 173.921660][ T8278] ? lock_acquire+0x1d1/0x380 [ 173.921710][ T8278] bpf_fill_super+0x742/0x960 [ 173.921742][ T8278] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 173.921772][ T8278] ? __pfx_bpf_fill_super+0x10/0x10 [ 173.921809][ T8278] ? rcu_is_watching+0x13/0xc0 [ 173.921835][ T8278] ? cap_capable+0x107/0x430 [ 173.921869][ T8278] ? __pfx_bpf_fill_super+0x10/0x10 [ 173.921898][ T8278] get_tree_nodev+0xdd/0x190 [ 173.921922][ T8278] vfs_get_tree+0x92/0x320 [ 173.921951][ T8278] vfs_cmd_create+0xd7/0x2a0 [ 173.921974][ T8278] __do_sys_fsconfig+0x55a/0xcb0 [ 173.921997][ T8278] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 173.922034][ T8278] do_syscall_64+0x123/0x790 [ 173.922066][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.922086][ T8278] RIP: 0033:0x7fbc3999e159 [ 173.922103][ T8278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.922122][ T8278] RSP: 002b:00007fbc37bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 173.922142][ T8278] RAX: ffffffffffffffda RBX: 00007fbc39c25fa0 RCX: 00007fbc3999e159 [ 173.922156][ T8278] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 173.922168][ T8278] RBP: 00007fbc39a3506b R08: 0000000000000000 R09: 0000000000000000 [ 173.922180][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.922192][ T8278] R13: 00007fbc39c26038 R14: 00007fbc39c25fa0 R15: 00007ffc28cd9778 [ 173.922220][ T8278] [ 174.089295][ T30] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 174.163213][ T8281] netlink: zone id is out of range [ 174.235772][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 174.236662][ T30] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.243195][ T30] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 174.243218][ T30] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 174.243237][ T30] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 174.243277][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.243299][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.243322][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.243359][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.253930][ T30] usb 5-1: config 0 descriptor?? [ 174.454686][ T8290] openvswitch: netlink: Duplicate or invalid key (type 0). [ 174.478724][ T30] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.596648][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 174.596671][ T31] audit: type=1400 audit(1790022395.694:560): avc: denied { listen } for pid=8295 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.598720][ T31] audit: type=1400 audit(1790022395.694:561): avc: denied { accept } for pid=8295 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.760821][ C1] usblp0: nonzero read bulk status received: -71 [ 174.762158][ T8254] usblp0: error -71 reading from printer [ 174.764226][ C1] usblp0: nonzero read bulk status received: -71 [ 174.766485][ T30] usb 5-1: USB disconnect, device number 18 [ 174.873386][ T8306] netlink: 32 bytes leftover after parsing attributes in process `syz.5.784'. [ 174.873576][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.784'. [ 174.891778][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.784'. [ 174.970663][ T8253] usblp0: removed [ 175.250674][ T8308] fuse: Bad value for 'fd' [ 175.260425][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057e61c00: rx timeout, send abort [ 175.266413][ T31] audit: type=1400 audit(1790022396.364:562): avc: denied { read } for pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 175.266698][ T31] audit: type=1400 audit(1790022396.364:563): avc: denied { search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.267313][ T31] audit: type=1400 audit(1790022396.364:564): avc: denied { write search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.267548][ T31] audit: type=1400 audit(1790022396.364:565): avc: denied { add_name } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.267816][ T31] audit: type=1400 audit(1790022396.364:566): avc: denied { create } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.268414][ T31] audit: type=1400 audit(1790022396.364:567): avc: denied { append open } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.268864][ T31] audit: type=1400 audit(1790022396.364:568): avc: denied { getattr } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.310705][ T8310] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 175.344231][ T8310] bond3: (slave veth0_to_bond): making interface the new active one [ 175.345122][ T8310] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 175.669087][ T8325] loop4: detected capacity change from 0 to 7 [ 175.680622][ T8325] loop4: [ 175.680645][ T8325] loop4: partition table partially beyond EOD, truncated [ 175.761800][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057e61c00: abort rx timeout. Force session deactivation [ 175.904594][ T8332] sctp: [Deprecated]: syz.5.795 (pid 8332) Use of int in max_burst socket option deprecated. [ 175.904594][ T8332] Use struct sctp_assoc_value instead [ 176.104061][ T8337] FAULT_INJECTION: forcing a failure. [ 176.104061][ T8337] name failslab, interval 1, probability 0, space 0, times 0 [ 176.104092][ T8337] CPU: 0 UID: 0 PID: 8337 Comm: syz.4.797 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.104118][ T8337] Tainted: [L]=SOFTLOCKUP [ 176.104126][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 176.104139][ T8337] Call Trace: [ 176.104152][ T8337] [ 176.104161][ T8337] dump_stack_lvl+0x100/0x190 [ 176.104197][ T8337] should_fail_ex.cold+0x5/0xa [ 176.104226][ T8337] should_failslab+0xc2/0x120 [ 176.104252][ T8337] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 176.104278][ T8337] ? x509_get_sig_params+0xf5/0x6c0 [ 176.104306][ T8337] kmemdup_noprof+0x29/0x60 [ 176.104341][ T8337] x509_get_sig_params+0xf5/0x6c0 [ 176.104363][ T8337] ? __asan_memcpy+0x3c/0x60 [ 176.104384][ T8337] x509_cert_parse+0x4e9/0x910 [ 176.104409][ T8337] x509_key_preparse+0x65/0x9c0 [ 176.104436][ T8337] asymmetric_key_preparse+0xce/0x1d0 [ 176.104465][ T8337] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 176.104495][ T8337] __key_create_or_update+0x463/0xe30 [ 176.104526][ T8337] ? __pfx___key_create_or_update+0x10/0x10 [ 176.104552][ T8337] ? lookup_user_key+0x3f3/0x1300 [ 176.104585][ T8337] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 176.104614][ T8337] key_create_or_update+0x42/0x60 [ 176.104642][ T8337] __do_sys_add_key+0x2e8/0x460 [ 176.104673][ T8337] ? __pfx___do_sys_add_key+0x10/0x10 [ 176.104714][ T8337] do_syscall_64+0x123/0x790 [ 176.104744][ T8337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.104766][ T8337] RIP: 0033:0x7efd9bd9e159 [ 176.104784][ T8337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.104803][ T8337] RSP: 002b:00007efd9cd4c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 176.104824][ T8337] RAX: ffffffffffffffda RBX: 00007efd9c025fa0 RCX: 00007efd9bd9e159 [ 176.104836][ T8337] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 176.104848][ T8337] RBP: 00007efd9be3506b R08: ffffffffffffffff R09: 0000000000000000 [ 176.104861][ T8337] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 176.104872][ T8337] R13: 00007efd9c026038 R14: 00007efd9c025fa0 R15: 00007ffe8197b2a8 [ 176.104900][ T8337] [ 176.356416][ T31] audit: type=1400 audit(1790022397.454:569): avc: denied { setopt } for pid=8344 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 176.457913][ T8351] FAULT_INJECTION: forcing a failure. [ 176.457913][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 176.457945][ T8351] CPU: 1 UID: 0 PID: 8351 Comm: syz.4.803 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.457974][ T8351] Tainted: [L]=SOFTLOCKUP [ 176.457981][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 176.457995][ T8351] Call Trace: [ 176.458002][ T8351] [ 176.458010][ T8351] dump_stack_lvl+0x100/0x190 [ 176.458046][ T8351] should_fail_ex.cold+0x5/0xa [ 176.458077][ T8351] should_failslab+0xc2/0x120 [ 176.458106][ T8351] kmem_cache_alloc_noprof+0x92/0x6a0 [ 176.458128][ T8351] ? __pud_alloc+0x4f6/0x690 [ 176.458156][ T8351] ? __pmd_alloc+0xbf/0x950 [ 176.458187][ T8351] __pmd_alloc+0xbf/0x950 [ 176.458209][ T8351] ? __pud_alloc+0x4fb/0x690 [ 176.458236][ T8351] __handle_mm_fault+0xa9d/0x2f60 [ 176.458271][ T8351] ? __pfx___handle_mm_fault+0x10/0x10 [ 176.458298][ T8351] ? __pfx_mt_find+0x10/0x10 [ 176.458343][ T8351] handle_mm_fault+0x363/0xa20 [ 176.458379][ T8351] __get_user_pages+0x8ae/0x2c30 [ 176.458420][ T8351] ? __pfx___get_user_pages+0x10/0x10 [ 176.458446][ T8351] ? lock_acquire+0x1d1/0x380 [ 176.458469][ T8351] ? mmap_read_lock_maybe_expand+0x1e2/0x3d0 [ 176.458506][ T8351] get_user_pages_remote+0x3d2/0xb10 [ 176.458536][ T8351] ? __pfx_get_user_pages_remote+0x10/0x10 [ 176.458572][ T8351] get_arg_page+0xf4/0x310 [ 176.458594][ T8351] ? __pfx_get_arg_page+0x10/0x10 [ 176.458620][ T8351] ? do_raw_spin_lock+0x128/0x260 [ 176.458649][ T8351] ? alloc_bprm+0x54e/0x9e0 [ 176.458671][ T8351] ? alloc_bprm+0x54e/0x9e0 [ 176.458698][ T8351] copy_string_kernel+0x17d/0x3f0 [ 176.458721][ T8351] ? alloc_bprm+0x596/0x9e0 [ 176.458747][ T8351] do_execveat_common.isra.0+0x2e6/0x580 [ 176.458777][ T8351] __x64_sys_execveat+0xdf/0x130 [ 176.458803][ T8351] do_syscall_64+0x123/0x790 [ 176.458835][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.458856][ T8351] RIP: 0033:0x7efd9bd9e159 [ 176.458874][ T8351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.458892][ T8351] RSP: 002b:00007efd9cd4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 176.458913][ T8351] RAX: ffffffffffffffda RBX: 00007efd9c025fa0 RCX: 00007efd9bd9e159 [ 176.458927][ T8351] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 176.458940][ T8351] RBP: 00007efd9be3506b R08: 0000000000001000 R09: 0000000000000000 [ 176.458953][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.458966][ T8351] R13: 00007efd9c026038 R14: 00007efd9c025fa0 R15: 00007ffe8197b2a8 [ 176.458995][ T8351] [ 176.608464][ T8355] SELinux: failed to load policy [ 176.829863][ T8362] nvme nvme0: failed to connect socket: -101 [ 177.362250][ T8372] sctp: [Deprecated]: syz.0.812 (pid 8372) Use of int in max_burst socket option deprecated. [ 177.362250][ T8372] Use struct sctp_assoc_value instead [ 177.774196][ T1436] maxtcpc 0-0050: error -EIO: Failed to read TCPC_POWER_STATUS [ 177.787508][ T8381] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x50 [ 177.790021][ T1436] maxtcpc 0-0050: probe with driver maxtcpc failed with error -5 [ 177.802992][ T8381] i2c i2c-0: delete_device: Deleting device maxtcpc at 0x50 [ 177.948066][ T8387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 177.963039][ T8389] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 177.963066][ T8389] overlayfs: missing 'lowerdir' [ 177.975513][ T8389] SELinux: Context system_u:object_r:modem_device_t:s0 is not valid (left unmapped). [ 178.112025][ T8396] device-mapper: table: 248:1: thin-pool: Gap in table (-EINVAL) [ 178.112047][ T8396] device-mapper: ioctl: error adding target to table [ 178.204129][ T8403] FAULT_INJECTION: forcing a failure. [ 178.204129][ T8403] name fail_futex, interval 1, probability 0, space 0, times 0 [ 178.204173][ T8403] CPU: 1 UID: 0 PID: 8403 Comm: syz.4.825 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.204202][ T8403] Tainted: [L]=SOFTLOCKUP [ 178.204210][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 178.204229][ T8403] Call Trace: [ 178.204236][ T8403] [ 178.204244][ T8403] dump_stack_lvl+0x100/0x190 [ 178.204280][ T8403] should_fail_ex.cold+0x5/0xa [ 178.204310][ T8403] get_futex_key+0x1d0/0x14f0 [ 178.204341][ T8403] ? __pfx_get_futex_key+0x10/0x10 [ 178.204364][ T8403] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 178.204388][ T8403] ? __smp_call_single_queue+0x17e/0x450 [ 178.204413][ T8403] ? __pfx___smp_call_single_queue+0x10/0x10 [ 178.204442][ T8403] futex_wait_setup+0x91/0x540 [ 178.204469][ T8403] __futex_wait+0x19f/0x300 [ 178.204490][ T8403] ? __pfx___futex_wait+0x10/0x10 [ 178.204506][ T8403] ? __pfx_try_to_wake_up+0x10/0x10 [ 178.204526][ T8403] ? futex_hash+0x311/0x400 [ 178.204548][ T8403] ? __pfx_futex_wake_mark+0x10/0x10 [ 178.204578][ T8403] ? find_held_lock+0x2b/0x80 [ 178.204601][ T8403] ? futex_wake+0x4ea/0x5e0 [ 178.204621][ T8403] futex_wait+0xe6/0x370 [ 178.204638][ T8403] ? __pfx_futex_wait+0x10/0x10 [ 178.204659][ T8403] ? find_held_lock+0x2b/0x80 [ 178.204687][ T8403] do_futex+0x265/0x440 [ 178.204711][ T8403] ? __pfx_do_futex+0x10/0x10 [ 178.204735][ T8403] ? fput+0x7c/0x100 [ 178.204759][ T8403] __x64_sys_futex+0x34f/0x4d0 [ 178.204785][ T8403] ? __pfx___x64_sys_futex+0x10/0x10 [ 178.204822][ T8403] do_syscall_64+0x123/0x790 [ 178.204860][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.204880][ T8403] RIP: 0033:0x7efd9bd9e159 [ 178.204896][ T8403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.204913][ T8403] RSP: 002b:00007efd9cd4c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 178.204932][ T8403] RAX: ffffffffffffffda RBX: 00007efd9c025fa8 RCX: 00007efd9bd9e159 [ 178.204944][ T8403] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efd9c025fa8 [ 178.204956][ T8403] RBP: 00007efd9c025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 178.204968][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.204979][ T8403] R13: 00007efd9c026038 R14: 00007ffe8197b1c0 R15: 00007ffe8197b2a8 [ 178.205004][ T8403] [ 178.799568][ T8414] smpboot: CPU 1 is now offline [ 179.419175][ T8428] FAULT_INJECTION: forcing a failure. [ 179.419175][ T8428] name failslab, interval 1, probability 0, space 0, times 0 [ 179.419199][ T8428] CPU: 0 UID: 0 PID: 8428 Comm: syz.7.833 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.419216][ T8428] Tainted: [L]=SOFTLOCKUP [ 179.419220][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 179.419228][ T8428] Call Trace: [ 179.419233][ T8428] [ 179.419238][ T8428] dump_stack_lvl+0x100/0x190 [ 179.419261][ T8428] should_fail_ex.cold+0x5/0xa [ 179.419279][ T8428] should_failslab+0xc2/0x120 [ 179.419295][ T8428] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 179.419309][ T8428] ? __d_alloc+0x35/0xa50 [ 179.419328][ T8428] __d_alloc+0x35/0xa50 [ 179.419346][ T8428] d_alloc+0x4a/0x1e0 [ 179.419363][ T8428] lookup_one_qstr_excl+0x171/0x250 [ 179.419382][ T8428] start_dirop+0x59/0xb0 [ 179.419396][ T8428] simple_start_creating+0xf9/0x110 [ 179.419411][ T8428] ? __pfx_simple_start_creating+0x10/0x10 [ 179.419426][ T8428] ? _raw_spin_unlock+0x28/0x50 [ 179.419441][ T8428] ? d_instantiate+0x8f/0xb0 [ 179.419460][ T8428] devpts_fill_super+0x387/0x610 [ 179.419475][ T8428] ? __pfx_devpts_fill_super+0x10/0x10 [ 179.419489][ T8428] get_tree_nodev+0xdd/0x190 [ 179.419502][ T8428] vfs_get_tree+0x92/0x320 [ 179.419519][ T8428] path_mount+0x7d0/0x24c0 [ 179.419539][ T8428] ? __pfx_path_mount+0x10/0x10 [ 179.419554][ T8428] ? lockdep_hardirqs_on+0x7d/0x110 [ 179.419573][ T8428] ? putname+0xb1/0x110 [ 179.419586][ T8428] ? kmem_cache_free+0x127/0x6c0 [ 179.419609][ T8428] ? __x64_sys_mount+0x293/0x310 [ 179.419625][ T8428] __x64_sys_mount+0x293/0x310 [ 179.419642][ T8428] ? __pfx___x64_sys_mount+0x10/0x10 [ 179.419667][ T8428] do_syscall_64+0x123/0x790 [ 179.419687][ T8428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.419700][ T8428] RIP: 0033:0x7fbc3999e159 [ 179.419710][ T8428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.419721][ T8428] RSP: 002b:00007fbc37bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.419733][ T8428] RAX: ffffffffffffffda RBX: 00007fbc39c25fa0 RCX: 00007fbc3999e159 [ 179.419740][ T8428] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 179.419748][ T8428] RBP: 00007fbc39a3506b R08: 0000000000000000 R09: 0000000000000000 [ 179.419755][ T8428] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 179.419762][ T8428] R13: 00007fbc39c26038 R14: 00007fbc39c25fa0 R15: 00007ffc28cd9778 [ 179.419784][ T8428] [ 179.422297][ T8428] devpts: Unable to alloc dentry for ptmx node [ 179.730500][ T8418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.550570][ T8461] FAULT_INJECTION: forcing a failure. [ 180.550570][ T8461] name failslab, interval 1, probability 0, space 0, times 0 [ 180.550593][ T8461] CPU: 0 UID: 0 PID: 8461 Comm: syz.0.847 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.550609][ T8461] Tainted: [L]=SOFTLOCKUP [ 180.550613][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 180.550621][ T8461] Call Trace: [ 180.550625][ T8461] [ 180.550630][ T8461] dump_stack_lvl+0x100/0x190 [ 180.550659][ T8461] should_fail_ex.cold+0x5/0xa [ 180.550677][ T8461] should_failslab+0xc2/0x120 [ 180.550692][ T8461] __kmalloc_cache_noprof+0x91/0x6d0 [ 180.550710][ T8461] ? landlock_restrict_sibling_threads+0x50d/0x14c0 [ 180.550732][ T8461] landlock_restrict_sibling_threads+0x50d/0x14c0 [ 180.550757][ T8461] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 180.550775][ T8461] ? lock_acquire+0x1d1/0x380 [ 180.550801][ T8461] ? __pfx___might_resched+0x10/0x10 [ 180.550814][ T8461] ? landlock_merge_ruleset+0x3c0/0xd10 [ 180.550829][ T8461] __do_sys_landlock_restrict_self+0x9bf/0x10a0 [ 180.550847][ T8461] do_syscall_64+0x123/0x790 [ 180.550866][ T8461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.550877][ T8461] RIP: 0033:0x7f27b439e159 [ 180.550888][ T8461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.550899][ T8461] RSP: 002b:00007f27b52b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 180.550911][ T8461] RAX: ffffffffffffffda RBX: 00007f27b4625fa0 RCX: 00007f27b439e159 [ 180.550918][ T8461] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000004 [ 180.550925][ T8461] RBP: 00007f27b443506b R08: 0000000000000000 R09: 0000000000000000 [ 180.550931][ T8461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.550938][ T8461] R13: 00007f27b4626038 R14: 00007f27b4625fa0 R15: 00007ffcc43797f8 [ 180.550953][ T8461] [ 181.055941][ T5710] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 181.088144][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 181.217159][ T5710] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 181.217703][ T5710] usb 5-1: config 0 has no interfaces? [ 181.217722][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.253414][ T8479] input: syz0 as /devices/virtual/input/input23 [ 181.255018][ T5710] usb 5-1: config 0 descriptor?? [ 181.504858][ T5710] usb 5-1: USB disconnect, device number 19 [ 181.655915][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 181.806202][ T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 181.806955][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.806980][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 181.807002][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.015892][ T9] rtsx_usb 6-1:1.0: probe with driver rtsx_usb failed with error -22 [ 182.023249][ T9] usb 6-1: USB disconnect, device number 11 [ 182.327015][ T8504] batman_adv: batadv0: Adding interface: syzkaller0 [ 182.327027][ T8504] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.327044][ T8504] batman_adv: batadv0: Interface activated: syzkaller0 [ 182.999988][ T8510] FAULT_INJECTION: forcing a failure. [ 182.999988][ T8510] name failslab, interval 1, probability 0, space 0, times 0 [ 183.000010][ T8510] CPU: 0 UID: 0 PID: 8510 Comm: syz.7.866 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.000027][ T8510] Tainted: [L]=SOFTLOCKUP [ 183.000031][ T8510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 183.000039][ T8510] Call Trace: [ 183.000044][ T8510] [ 183.000049][ T8510] dump_stack_lvl+0x100/0x190 [ 183.000072][ T8510] should_fail_ex.cold+0x5/0xa [ 183.000090][ T8510] should_failslab+0xc2/0x120 [ 183.000106][ T8510] kmem_cache_alloc_noprof+0x92/0x6a0 [ 183.000120][ T8510] ? mas_preallocate+0xc22/0xee0 [ 183.000134][ T8510] mas_preallocate+0xc22/0xee0 [ 183.000147][ T8510] ? __pfx_mas_preallocate+0x10/0x10 [ 183.000157][ T8510] ? mt_find+0x136/0x9b0 [ 183.000172][ T8510] ? lock_acquire+0x1d1/0x380 [ 183.000185][ T8510] ? avc_has_perm_noaudit+0x56/0x470 [ 183.000205][ T8510] vma_link+0x14a/0x8c0 [ 183.000224][ T8510] ? __pfx_vma_link+0x10/0x10 [ 183.000244][ T8510] ? __pfx_selinux_vm_enough_memory+0x10/0x10 [ 183.000260][ T8510] ? rcu_is_watching+0x13/0xc0 [ 183.000274][ T8510] ? percpu_counter_add_batch+0xb9/0x230 [ 183.000294][ T8510] insert_vm_struct+0x1f7/0x890 [ 183.000308][ T8510] create_init_stack_vma+0x830/0xcf0 [ 183.000324][ T8510] ? __pfx_create_init_stack_vma+0x10/0x10 [ 183.000338][ T8510] ? lock_acquire+0x1d1/0x380 [ 183.000350][ T8510] ? do_raw_spin_lock+0x128/0x260 [ 183.000366][ T8510] ? alloc_bprm+0x54e/0x9e0 [ 183.000378][ T8510] ? alloc_bprm+0x54e/0x9e0 [ 183.000393][ T8510] alloc_bprm+0x57b/0x9e0 [ 183.000407][ T8510] do_execveat_common.isra.0+0x19c/0x580 [ 183.000420][ T8510] ? do_getname+0x191/0x390 [ 183.000459][ T8510] __x64_sys_execve+0x93/0xd0 [ 183.000474][ T8510] do_syscall_64+0x123/0x790 [ 183.000494][ T8510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.000507][ T8510] RIP: 0033:0x7fbc3999e159 [ 183.000517][ T8510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.000527][ T8510] RSP: 002b:00007fbc37bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 183.000539][ T8510] RAX: ffffffffffffffda RBX: 00007fbc39c25fa0 RCX: 00007fbc3999e159 [ 183.000548][ T8510] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000200000000000 [ 183.000557][ T8510] RBP: 00007fbc39a3506b R08: 0000000000000000 R09: 0000000000000000 [ 183.000564][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.000571][ T8510] R13: 00007fbc39c26038 R14: 00007fbc39c25fa0 R15: 00007ffc28cd9778 [ 183.000586][ T8510] [ 183.366507][ T8504] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 183.429914][ T8504] batman_adv: batadv0: Removing interface: syzkaller0 [ 183.575683][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 183.620475][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 183.620487][ T31] audit: type=1400 audit(1790022404.714:575): avc: denied { bind } for pid=8518 comm="syz.7.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.727112][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 183.727819][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 183.728575][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 183.728590][ T10] usb 6-1: config 0 has no interface number 0 [ 183.728610][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.728624][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 183.728637][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.728651][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.728672][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.730141][ T10] usb 6-1: config 0 descriptor?? [ 183.732592][ T10] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 183.909738][ T8522] input: syz1 as /devices/virtual/input/input24 [ 183.956153][ T10] usb 6-1: USB disconnect, device number 12 [ 183.956270][ C0] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 183.963151][ T10] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 183.988547][ T8526] ldusb: No device or device unplugged -19 [ 183.988575][ T8526] ldusb: No device or device unplugged -19 [ 183.988584][ T8526] ldusb: No device or device unplugged -19 [ 183.988594][ T8526] ldusb: No device or device unplugged -19 [ 184.191983][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 184.192061][ T8530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.238000][ T8530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.274955][ T31] audit: type=1400 audit(1790022405.364:576): avc: denied { bind } for pid=8531 comm="syz.0.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.275505][ T31] audit: type=1400 audit(1790022405.364:577): avc: denied { read } for pid=8531 comm="syz.0.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.480970][ T31] audit: type=1400 audit(1790022405.574:578): avc: denied { ioctl } for pid=8539 comm="syz.0.878" path="mnt:[4026532803]" dev="nsfs" ino=4026532803 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 184.932866][ T8561] ip_tables: iptables: counters copy to user failed while replacing table [ 185.005287][ T8563] FAULT_INJECTION: forcing a failure. [ 185.005287][ T8563] name failslab, interval 1, probability 0, space 0, times 0 [ 185.005311][ T8563] CPU: 0 UID: 0 PID: 8563 Comm: syz.4.888 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.005328][ T8563] Tainted: [L]=SOFTLOCKUP [ 185.005332][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 185.005340][ T8563] Call Trace: [ 185.005345][ T8563] [ 185.005350][ T8563] dump_stack_lvl+0x100/0x190 [ 185.005372][ T8563] should_fail_ex.cold+0x5/0xa [ 185.005390][ T8563] should_failslab+0xc2/0x120 [ 185.005406][ T8563] __kmalloc_cache_noprof+0x91/0x6d0 [ 185.005425][ T8563] ? get_mountpoint+0x174/0x4f0 [ 185.005440][ T8563] get_mountpoint+0x174/0x4f0 [ 185.005453][ T8563] attach_recursive_mnt.isra.0+0x21f/0x1c50 [ 185.005474][ T8563] ? __pfx_attach_recursive_mnt.isra.0+0x10/0x10 [ 185.005494][ T8563] ? find_held_lock+0x2b/0x80 [ 185.005514][ T8563] ? do_raw_spin_unlock+0x145/0x1e0 [ 185.005531][ T8563] ? graft_tree+0x19f/0x250 [ 185.005546][ T8563] ? do_lock_mount.part.0+0x40b/0xb10 [ 185.005561][ T8563] graft_tree+0x19f/0x250 [ 185.005578][ T8563] do_add_mount+0x1e2/0x360 [ 185.005596][ T8563] path_mount+0x907/0x24c0 [ 185.005615][ T8563] ? __pfx_path_mount+0x10/0x10 [ 185.005631][ T8563] ? lockdep_hardirqs_on+0x7d/0x110 [ 185.005657][ T8563] ? __x64_sys_mount+0x293/0x310 [ 185.005672][ T8563] __x64_sys_mount+0x293/0x310 [ 185.005689][ T8563] ? __pfx___x64_sys_mount+0x10/0x10 [ 185.005712][ T8563] do_syscall_64+0x123/0x790 [ 185.005732][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.005744][ T8563] RIP: 0033:0x7efd9bd9e159 [ 185.005754][ T8563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.005765][ T8563] RSP: 002b:00007efd9cd4c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.005777][ T8563] RAX: ffffffffffffffda RBX: 00007efd9c025fa0 RCX: 00007efd9bd9e159 [ 185.005784][ T8563] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000000 [ 185.005791][ T8563] RBP: 00007efd9be3506b R08: 0000000000000000 R09: 0000000000000000 [ 185.005798][ T8563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.005804][ T8563] R13: 00007efd9c026038 R14: 00007efd9c025fa0 R15: 00007ffe8197b2a8 [ 185.005820][ T8563] [ 185.441132][ T31] audit: type=1800 audit(1790022406.534:579): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.889" name="file1" dev="tmpfs" ino=1096 res=0 errno=0 [ 185.607092][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 185.756280][ T10] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 185.757162][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 185.757186][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.761071][ T8567] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 185.763870][ T10] opticon 5-1:1.0: opticon converter detected [ 185.777090][ T56] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 185.824499][ T10] usb 5-1: opticon converter now attached to ttyUSB0 [ 185.969628][ T56] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 185.986491][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.986507][ T56] usb 6-1: Product: syz [ 185.986515][ T56] usb 6-1: Manufacturer: syz [ 185.986524][ T56] usb 6-1: SerialNumber: syz [ 186.241367][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.253944][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.265046][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.276103][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.276593][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.578274][ T56] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 186.578309][ T56] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 186.650785][ T5710] usb 5-1: USB disconnect, device number 20 [ 186.663299][ T5710] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 186.663631][ T5710] opticon 5-1:1.0: device disconnected [ 186.900544][ T8593] uprobe: syz.0.899:8593 failed to unregister, leaking uprobe [ 186.918950][ T63] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.961172][ T8593] uprobe: syz.0.899:8593 failed to unregister, leaking uprobe [ 187.052629][ T63] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.249845][ T63] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.411891][ T56] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 187.411938][ T56] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 187.463739][ T56] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 187.500501][ T56] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 187.523812][ T63] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.548411][ T56] usb 6-1: USB disconnect, device number 13 [ 187.609800][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.609834][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.711981][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.904'. [ 187.711999][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.904'. [ 187.748154][ T8585] lo speed is unknown, defaulting to 1000 [ 187.848831][ T8618] FAULT_INJECTION: forcing a failure. [ 187.848831][ T8618] name failslab, interval 1, probability 0, space 0, times 0 [ 187.848855][ T8618] CPU: 0 UID: 0 PID: 8618 Comm: syz.0.906 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.848871][ T8618] Tainted: [L]=SOFTLOCKUP [ 187.848876][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 187.848884][ T8618] Call Trace: [ 187.848889][ T8618] [ 187.848894][ T8618] dump_stack_lvl+0x100/0x190 [ 187.848917][ T8618] should_fail_ex.cold+0x5/0xa [ 187.848935][ T8618] should_failslab+0xc2/0x120 [ 187.848952][ T8618] __kmalloc_noprof+0xfc/0x840 [ 187.848965][ T8618] ? __memcg_list_lru_alloc+0x418/0x680 [ 187.848984][ T8618] __memcg_list_lru_alloc+0x418/0x680 [ 187.849001][ T8618] ? xa_load+0x149/0x2c0 [ 187.849016][ T8618] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 187.849036][ T8618] ? rcu_read_unlock+0x17/0x60 [ 187.849064][ T8618] memcg_list_lru_alloc+0xd3/0x100 [ 187.849085][ T8618] __memcg_slab_post_alloc_hook+0x280/0x10c0 [ 187.849110][ T8618] ? kasan_save_track+0x14/0x30 [ 187.849125][ T8618] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 187.849139][ T8618] ? __d_alloc+0x35/0xa50 [ 187.849157][ T8618] __d_alloc+0x35/0xa50 [ 187.849172][ T8618] ? lockdep_init_map_type+0x5c/0x250 [ 187.849187][ T8618] d_make_root+0x3e/0x90 [ 187.849204][ T8618] shmem_fill_super+0xc16/0x13e0 [ 187.849217][ T8618] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 187.849235][ T8618] ? __pfx_shmem_fill_super+0x10/0x10 [ 187.849251][ T8618] ? cap_capable+0x107/0x430 [ 187.849271][ T8618] ? __pfx_shmem_fill_super+0x10/0x10 [ 187.849285][ T8618] get_tree_nodev+0xdd/0x190 [ 187.849299][ T8618] vfs_get_tree+0x92/0x320 [ 187.849316][ T8618] path_mount+0x7d0/0x24c0 [ 187.849336][ T8618] ? __pfx_path_mount+0x10/0x10 [ 187.849353][ T8618] ? lockdep_hardirqs_on+0x7d/0x110 [ 187.849371][ T8618] ? putname+0xb1/0x110 [ 187.849385][ T8618] ? kmem_cache_free+0x127/0x6c0 [ 187.849408][ T8618] ? __x64_sys_mount+0x293/0x310 [ 187.849424][ T8618] __x64_sys_mount+0x293/0x310 [ 187.849441][ T8618] ? __pfx___x64_sys_mount+0x10/0x10 [ 187.849463][ T8618] do_syscall_64+0x123/0x790 [ 187.849482][ T8618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.849494][ T8618] RIP: 0033:0x7f27b439e159 [ 187.849504][ T8618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.849515][ T8618] RSP: 002b:00007f27b52b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 187.849527][ T8618] RAX: ffffffffffffffda RBX: 00007f27b4625fa0 RCX: 00007f27b439e159 [ 187.849535][ T8618] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 187.849543][ T8618] RBP: 00007f27b443506b R08: 0000000000000000 R09: 0000000000000000 [ 187.849551][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.849558][ T8618] R13: 00007f27b4626038 R14: 00007f27b4625fa0 R15: 00007ffcc43797f8 [ 187.849575][ T8618] [ 188.325967][ T5609] Bluetooth: hci4: command tx timeout [ 188.459345][ T31] audit: type=1400 audit(1790022409.554:580): avc: denied { write } for pid=8626 comm="syz.7.909" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.538361][ T8627] FAULT_INJECTION: forcing a failure. [ 188.538361][ T8627] name failslab, interval 1, probability 0, space 0, times 0 [ 188.538387][ T8627] CPU: 0 UID: 0 PID: 8627 Comm: syz.7.909 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.538405][ T8627] Tainted: [L]=SOFTLOCKUP [ 188.538410][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 188.538421][ T8627] Call Trace: [ 188.538425][ T8627] [ 188.538429][ T8627] dump_stack_lvl+0x100/0x190 [ 188.538453][ T8627] should_fail_ex.cold+0x5/0xa [ 188.538473][ T8627] should_failslab+0xc2/0x120 [ 188.538488][ T8627] __kvmalloc_node_noprof+0x113/0x9b0 [ 188.538502][ T8627] ? rcu_is_watching+0x13/0xc0 [ 188.538520][ T8627] ? pipapo_realloc_scratch+0x122/0x3f0 [ 188.538541][ T8627] pipapo_realloc_scratch+0x122/0x3f0 [ 188.538560][ T8627] pipapo_maybe_clone.part.0+0x315/0xe00 [ 188.538579][ T8627] ? nft_trans_alloc+0x1d/0x2d0 [ 188.538590][ T8627] ? nft_add_set_elem+0x302a/0x4280 [ 188.538603][ T8627] ? nf_tables_newsetelem+0x721/0xa60 [ 188.538616][ T8627] ? nfnetlink_rcv_batch+0x1410/0x2880 [ 188.538632][ T8627] ? nfnetlink_rcv+0x3bd/0x440 [ 188.538648][ T8627] ? ____sys_sendmsg+0xa4d/0xbe0 [ 188.538668][ T8627] nft_pipapo_insert+0x546/0x1bf0 [ 188.538695][ T8627] ? __pfx_nft_pipapo_insert+0x10/0x10 [ 188.538718][ T8627] ? __kmalloc_noprof+0x350/0x840 [ 188.538731][ T8627] ? nft_trans_alloc+0x1d/0x2d0 [ 188.538747][ T8627] nft_add_set_elem+0x31c4/0x4280 [ 188.538764][ T8627] ? entry_SYSCALL_64_after_hwframe+0x47/0x7f [ 188.538779][ T8627] ? __pfx_nft_add_set_elem+0x10/0x10 [ 188.538804][ T8627] ? lockdep_count_forward_deps+0x180/0x200 [ 188.538817][ T8627] ? net_generic+0x25/0x2a0 [ 188.538830][ T8627] ? find_held_lock+0x2b/0x80 [ 188.538846][ T8627] ? net_generic+0xea/0x2a0 [ 188.538858][ T8627] ? net_generic+0xea/0x2a0 [ 188.538877][ T8627] ? __nla_validate_parse+0x1e7/0x28b0 [ 188.538904][ T8627] ? nla_strcmp+0xff/0x130 [ 188.538922][ T8627] ? nft_set_lookup_global+0x163/0x390 [ 188.538935][ T8627] nf_tables_newsetelem+0x721/0xa60 [ 188.538952][ T8627] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 188.538966][ T8627] ? net_generic+0x25/0x2a0 [ 188.538984][ T8627] ? __nla_parse+0x40/0x60 [ 188.539003][ T8627] nfnetlink_rcv_batch+0x1410/0x2880 [ 188.539028][ T8627] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 188.539047][ T8627] ? lock_acquire+0x1d1/0x380 [ 188.539059][ T8627] ? avc_has_perm_noaudit+0x56/0x470 [ 188.539082][ T8627] ? avc_has_perm_noaudit+0x145/0x470 [ 188.539113][ T8627] ? __nla_parse+0x40/0x60 [ 188.539132][ T8627] nfnetlink_rcv+0x3bd/0x440 [ 188.539156][ T8627] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 188.539179][ T8627] netlink_unicast+0x585/0x850 [ 188.539196][ T8627] ? __pfx_netlink_unicast+0x10/0x10 [ 188.539216][ T8627] netlink_sendmsg+0x8b0/0xda0 [ 188.539233][ T8627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.539249][ T8627] ? selinux_socket_sendmsg+0x198/0x2f0 [ 188.539265][ T8627] ____sys_sendmsg+0xa4d/0xbe0 [ 188.539282][ T8627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.539296][ T8627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.539321][ T8627] ___sys_sendmsg+0x190/0x1e0 [ 188.539333][ T8627] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.539345][ T8627] ? futex_wait+0x11e/0x370 [ 188.539362][ T8627] ? find_held_lock+0x2b/0x80 [ 188.539388][ T8627] __sys_sendmsg+0x160/0x210 [ 188.539404][ T8627] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.539427][ T8627] do_syscall_64+0x123/0x790 [ 188.539446][ T8627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.539459][ T8627] RIP: 0033:0x7fbc3999e159 [ 188.539469][ T8627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.539480][ T8627] RSP: 002b:00007fbc37bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.539492][ T8627] RAX: ffffffffffffffda RBX: 00007fbc39c25fa0 RCX: 00007fbc3999e159 [ 188.539500][ T8627] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 188.539508][ T8627] RBP: 00007fbc39a3506b R08: 0000000000000000 R09: 0000000000000000 [ 188.539515][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.539523][ T8627] R13: 00007fbc39c26038 R14: 00007fbc39c25fa0 R15: 00007ffc28cd9778 [ 188.539540][ T8627] [ 188.628610][ T5710] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 188.828620][ T5710] usb 6-1: Using ep0 maxpacket: 16 [ 188.860017][ T5710] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 189.065865][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.065883][ T5710] usb 6-1: Product: syz [ 189.065892][ T5710] usb 6-1: Manufacturer: syz [ 189.065900][ T5710] usb 6-1: SerialNumber: syz [ 189.093751][ T5710] usb 6-1: config 0 descriptor?? [ 189.109422][ T5710] usb 6-1: selecting invalid altsetting 1 [ 189.109436][ T5710] technisat-usb2: could not set alternate setting to 0 [ 189.163352][ T31] audit: type=1400 audit(1790022410.254:581): avc: denied { read } for pid=5264 comm="dhcpcd" name="n39" dev="tmpfs" ino=5696 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.193116][ T31] audit: type=1400 audit(1790022410.284:582): avc: denied { open } for pid=5264 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=5696 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.193360][ T31] audit: type=1400 audit(1790022410.284:583): avc: denied { getattr } for pid=5264 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=5696 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.275055][ T8632] FAULT_INJECTION: forcing a failure. [ 189.275055][ T8632] name failslab, interval 1, probability 0, space 0, times 0 [ 189.275081][ T8632] CPU: 0 UID: 0 PID: 8632 Comm: syz.4.912 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.275100][ T8632] Tainted: [L]=SOFTLOCKUP [ 189.275104][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 189.275114][ T8632] Call Trace: [ 189.275119][ T8632] [ 189.275124][ T8632] dump_stack_lvl+0x100/0x190 [ 189.275147][ T8632] should_fail_ex.cold+0x5/0xa [ 189.275165][ T8632] should_failslab+0xc2/0x120 [ 189.275181][ T8632] kmem_cache_alloc_noprof+0x92/0x6a0 [ 189.275194][ T8632] ? lockdep_init_map_type+0x5c/0x250 [ 189.275208][ T8632] ? sk_prot_alloc+0x60/0x2a0 [ 189.275228][ T8632] sk_prot_alloc+0x60/0x2a0 [ 189.275246][ T8632] sk_clone+0x7b/0x16f0 [ 189.275262][ T8632] sctp_clone_sock+0x34/0x1970 [ 189.275274][ T8632] ? security_socket_post_create+0x85/0x270 [ 189.275289][ T8632] ? sock_create_lite+0x48/0x120 [ 189.275307][ T8632] sctp_getsockopt_peeloff_common.constprop.0+0x237/0x640 [ 189.275323][ T8632] ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10 [ 189.275342][ T8632] sctp_getsockopt+0x2fb2/0x7110 [ 189.275358][ T8632] ? avc_has_perm_noaudit+0x56/0x470 [ 189.275376][ T8632] ? find_held_lock+0x2b/0x80 [ 189.275392][ T8632] ? avc_has_perm_noaudit+0x11e/0x470 [ 189.275407][ T8632] ? avc_has_perm_noaudit+0x11e/0x470 [ 189.275424][ T8632] ? __pfx_sctp_getsockopt+0x10/0x10 [ 189.275444][ T8632] ? __pfx_avc_has_perm+0x10/0x10 [ 189.275464][ T8632] ? lock_acquire+0x1d1/0x380 [ 189.275475][ T8632] ? __might_fault+0xc5/0x140 [ 189.275492][ T8632] ? find_held_lock+0x2b/0x80 [ 189.275508][ T8632] ? __might_fault+0xc5/0x140 [ 189.275523][ T8632] ? __might_fault+0xc5/0x140 [ 189.275544][ T8632] ? _copy_from_user+0x59/0xd0 [ 189.275557][ T8632] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 189.275575][ T8632] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 189.275596][ T8632] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 189.275613][ T8632] do_sock_getsockopt+0x50a/0x6e0 [ 189.275633][ T8632] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 189.275653][ T8632] ? __fget_files+0x34/0x3d0 [ 189.275668][ T8632] ? find_held_lock+0x2b/0x80 [ 189.275688][ T8632] ? __fget_files+0x21f/0x3d0 [ 189.275705][ T8632] __sys_getsockopt+0x148/0x260 [ 189.275724][ T8632] ? __x64_sys_getsockopt+0xbd/0x160 [ 189.275738][ T8632] __x64_sys_getsockopt+0xbd/0x160 [ 189.275751][ T8632] ? do_syscall_64+0xae/0x790 [ 189.275767][ T8632] ? lockdep_hardirqs_on+0x7d/0x110 [ 189.275783][ T8632] do_syscall_64+0x123/0x790 [ 189.275801][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.275813][ T8632] RIP: 0033:0x7efd9bd9e159 [ 189.275823][ T8632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.275834][ T8632] RSP: 002b:00007efd9cd4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 189.275846][ T8632] RAX: ffffffffffffffda RBX: 00007efd9c025fa0 RCX: 00007efd9bd9e159 [ 189.275854][ T8632] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 189.275861][ T8632] RBP: 00007efd9be3506b R08: 0000200000000040 R09: 0000000000000000 [ 189.275868][ T8632] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 189.275875][ T8632] R13: 00007efd9c026038 R14: 00007efd9c025fa0 R15: 00007ffe8197b2a8 [ 189.275891][ T8632] [ 189.662710][ T5710] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 189.780295][ T63] bridge_slave_1: left allmulticast mode [ 189.780313][ T63] bridge_slave_1: left promiscuous mode [ 189.780439][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.813775][ T5710] usb 6-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 189.815740][ T31] audit: type=1400 audit(1790022410.904:584): avc: denied { firmware_load } for pid=5710 comm="kworker/0:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 189.859736][ T5710] usb 6-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 189.880986][ T63] bridge_slave_0: left allmulticast mode [ 189.881003][ T63] bridge_slave_0: left promiscuous mode [ 189.881119][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.269604][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'. [ 190.355236][ T31] audit: type=1400 audit(1790022411.444:585): avc: denied { mount } for pid=8650 comm="syz.0.917" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 190.410988][ T5609] Bluetooth: hci4: command tx timeout [ 190.497913][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.499281][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.528319][ T63] bond0 (unregistering): Released all slaves [ 190.630934][ T31] audit: type=1400 audit(1790022411.724:586): avc: denied { write } for pid=8641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.630967][ T31] audit: type=1400 audit(1790022411.724:587): avc: denied { create } for pid=8641 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 190.630990][ T31] audit: type=1400 audit(1790022411.724:588): avc: denied { write } for pid=8641 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.link" dev="tmpfs" ino=5715 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 190.631014][ T31] audit: type=1400 audit(1790022411.724:589): avc: denied { append } for pid=8641 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" dev="tmpfs" ino=5715 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 190.902496][ T8652] lo speed is unknown, defaulting to 1000 [ 190.966041][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 190.983535][ T31] audit: type=1400 audit(1790022412.054:590): avc: denied { write } for pid=8666 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.263151][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 191.310920][ T63] hsr_slave_0: left promiscuous mode [ 191.311240][ T63] hsr_slave_1: left promiscuous mode [ 191.311679][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.311691][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.312190][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.312211][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.373120][ T63] veth1_macvtap: left promiscuous mode [ 191.373158][ T63] veth0_macvtap: left promiscuous mode [ 191.373234][ T63] veth1_vlan: left promiscuous mode [ 191.373268][ T63] veth0_vlan: left promiscuous mode [ 191.740587][ T63] team0 (unregistering): Port device team_slave_1 removed [ 191.758868][ T63] team0 (unregistering): Port device team_slave_0 removed [ 192.230668][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.233648][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.233756][ T8585] bridge_slave_0: entered allmulticast mode [ 192.262633][ T8585] bridge_slave_0: entered promiscuous mode [ 192.287475][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.287527][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.287624][ T8585] bridge_slave_1: entered allmulticast mode [ 192.293179][ T8585] bridge_slave_1: entered promiscuous mode [ 192.338261][ T56] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 192.369219][ T41] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 192.486937][ T5603] Bluetooth: hci4: command tx timeout [ 192.598516][ T8585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.625940][ T8585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.799590][ T8585] team0: Port device team_slave_0 added [ 192.805432][ T8585] team0: Port device team_slave_1 added [ 192.904816][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.904829][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.904844][ T8585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.954718][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.954731][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.954747][ T8585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.192281][ T8585] hsr_slave_0: entered promiscuous mode [ 193.212857][ T8585] hsr_slave_1: entered promiscuous mode [ 193.213205][ T8585] debugfs: 'hsr0' already exists in 'hsr' [ 193.213217][ T8585] Cannot create hsr debugfs directory [ 193.465776][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.928'. [ 193.944815][ T8715] FAULT_INJECTION: forcing a failure. [ 193.944815][ T8715] name failslab, interval 1, probability 0, space 0, times 0 [ 193.944840][ T8715] CPU: 0 UID: 0 PID: 8715 Comm: syz.7.930 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.944858][ T8715] Tainted: [L]=SOFTLOCKUP [ 193.944862][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 193.944869][ T8715] Call Trace: [ 193.944874][ T8715] [ 193.944879][ T8715] dump_stack_lvl+0x100/0x190 [ 193.944904][ T8715] should_fail_ex.cold+0x5/0xa [ 193.944922][ T8715] should_failslab+0xc2/0x120 [ 193.944938][ T8715] __kmalloc_cache_noprof+0x91/0x6d0 [ 193.944956][ T8715] ? afs_get_tree+0x380/0x1420 [ 193.944975][ T8715] afs_get_tree+0x380/0x1420 [ 193.944994][ T8715] vfs_get_tree+0x92/0x320 [ 193.945014][ T8715] path_mount+0x7d0/0x24c0 [ 193.945034][ T8715] ? __pfx_path_mount+0x10/0x10 [ 193.945050][ T8715] ? lockdep_hardirqs_on+0x7d/0x110 [ 193.945069][ T8715] ? putname+0xb1/0x110 [ 193.945084][ T8715] ? kmem_cache_free+0x127/0x6c0 [ 193.945107][ T8715] ? __x64_sys_mount+0x293/0x310 [ 193.945124][ T8715] __x64_sys_mount+0x293/0x310 [ 193.945142][ T8715] ? __pfx___x64_sys_mount+0x10/0x10 [ 193.945163][ T8715] do_syscall_64+0x123/0x790 [ 193.945181][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.945193][ T8715] RIP: 0033:0x7fbc3999e159 [ 193.945203][ T8715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.945214][ T8715] RSP: 002b:00007fbc37bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 193.945225][ T8715] RAX: ffffffffffffffda RBX: 00007fbc39c25fa0 RCX: 00007fbc3999e159 [ 193.945233][ T8715] RDX: 00002000000002c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 193.945240][ T8715] RBP: 00007fbc39a3506b R08: 0000200000000200 R09: 0000000000000000 [ 193.945247][ T8715] R10: 0000000002000400 R11: 0000000000000246 R12: 0000000000000000 [ 193.945253][ T8715] R13: 00007fbc39c26038 R14: 00007fbc39c25fa0 R15: 00007ffc28cd9778 [ 193.945269][ T8715] [ 194.231311][ T8717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.931'. [ 194.326591][ T8720] FAULT_INJECTION: forcing a failure. [ 194.326591][ T8720] name failslab, interval 1, probability 0, space 0, times 0 [ 194.326617][ T8720] CPU: 0 UID: 0 PID: 8720 Comm: syz.0.932 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.326635][ T8720] Tainted: [L]=SOFTLOCKUP [ 194.326639][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 194.326647][ T8720] Call Trace: [ 194.326651][ T8720] [ 194.326657][ T8720] dump_stack_lvl+0x100/0x190 [ 194.326680][ T8720] should_fail_ex.cold+0x5/0xa [ 194.326697][ T8720] should_failslab+0xc2/0x120 [ 194.326712][ T8720] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 194.326728][ T8720] ? hashlimit_mt_check_common+0x947/0x1420 [ 194.326749][ T8720] kstrdup+0x51/0xe0 [ 194.326761][ T8720] hashlimit_mt_check_common+0x947/0x1420 [ 194.326782][ T8720] hashlimit_mt_check+0x71/0x90 [ 194.326801][ T8720] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 194.326817][ T8720] xt_check_match+0x117/0x1c0 [ 194.326833][ T8720] find_check_entry.isra.0+0x323/0x990 [ 194.326855][ T8720] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 194.326878][ T8720] ? kasan_quarantine_put+0x104/0x240 [ 194.326890][ T8720] ? lockdep_hardirqs_on+0x7d/0x110 [ 194.326907][ T8720] ? translate_table+0xad0/0x1630 [ 194.326924][ T8720] ? translate_table+0xaf2/0x1630 [ 194.326940][ T8720] ? kfree+0x22b/0x6d0 [ 194.326956][ T8720] ? xt_check_table_hooks+0x206/0x330 [ 194.326973][ T8720] translate_table+0xbcd/0x1630 [ 194.326998][ T8720] ? __pfx_translate_table+0x10/0x10 [ 194.327020][ T8720] do_ipt_set_ctl+0x689/0xcf0 [ 194.327031][ T8720] ? nf_sockopt_find.isra.0+0x222/0x290 [ 194.327046][ T8720] ? nf_sockopt_find.isra.0+0x222/0x290 [ 194.327064][ T8720] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 194.327075][ T8720] ? __mutex_unlock_slowpath+0x35d/0x930 [ 194.327093][ T8720] ? sockopt_release_sock+0x5c/0x70 [ 194.327110][ T8720] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.327134][ T8720] ? nf_sockopt_find.isra.0+0x222/0x290 [ 194.327151][ T8720] nf_setsockopt+0x8d/0xf0 [ 194.327168][ T8720] ip_setsockopt+0xcb/0xf0 [ 194.327182][ T8720] udp_setsockopt+0x64/0xb0 [ 194.327198][ T8720] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 194.327216][ T8720] do_sock_setsockopt+0xf3/0x1d0 [ 194.327235][ T8720] __sys_setsockopt+0x195/0x220 [ 194.327252][ T8720] __x64_sys_setsockopt+0xbd/0x160 [ 194.327266][ T8720] ? do_syscall_64+0xae/0x790 [ 194.327282][ T8720] ? lockdep_hardirqs_on+0x7d/0x110 [ 194.327298][ T8720] do_syscall_64+0x123/0x790 [ 194.327317][ T8720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.327329][ T8720] RIP: 0033:0x7f27b439e159 [ 194.327340][ T8720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.327351][ T8720] RSP: 002b:00007f27b52b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 194.327363][ T8720] RAX: ffffffffffffffda RBX: 00007f27b4625fa0 RCX: 00007f27b439e159 [ 194.327371][ T8720] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 194.327378][ T8720] RBP: 00007f27b443506b R08: 00000000000003d0 R09: 0000000000000000 [ 194.327386][ T8720] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 194.327393][ T8720] R13: 00007f27b4626038 R14: 00007f27b4625fa0 R15: 00007ffcc43797f8 [ 194.327410][ T8720] [ 194.332441][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10 [ 194.567991][ T5603] Bluetooth: hci4: command tx timeout [ 194.927692][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 194.927704][ T31] audit: type=1400 audit(1790022416.024:594): avc: denied { mount } for pid=8726 comm="syz.4.935" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 195.211742][ T31] audit: type=1400 audit(1790022416.304:595): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 195.358174][ T8736] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8736 comm=syz.5.936 [ 195.660589][ T8585] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 195.675153][ T8585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.683446][ T8585] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 195.701246][ T8585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.703565][ T8585] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 195.733799][ T8585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.749041][ T8585] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 195.763783][ T31] audit: type=1400 audit(1790022416.854:596): avc: denied { write } for pid=8727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.764015][ T8585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.934681][ T8762] openvswitch: netlink: IPv6 tunnel dst address is zero [ 195.945340][ T31] audit: type=1400 audit(1790022417.034:597): avc: denied { create } for pid=8756 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 196.093997][ T31] audit: type=1400 audit(1790022417.184:598): avc: denied { write } for pid=8763 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.225890][ T8585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.291071][ T8585] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.367966][ T5264] 8021q: adding VLAN 0 to HW filter on device eth11 [ 196.369297][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.369351][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.412019][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.412076][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.608644][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.945'. [ 196.783661][ T8782] FAULT_INJECTION: forcing a failure. [ 196.783661][ T8782] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 196.783685][ T8782] CPU: 0 UID: 0 PID: 8782 Comm: syz.4.946 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.783702][ T8782] Tainted: [L]=SOFTLOCKUP [ 196.783707][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 196.783714][ T8782] Call Trace: [ 196.783718][ T8782] [ 196.783723][ T8782] dump_stack_lvl+0x100/0x190 [ 196.783745][ T8782] should_fail_ex.cold+0x5/0xa [ 196.783763][ T8782] _copy_from_user+0x2e/0xd0 [ 196.783777][ T8782] snd_seq_ioctl+0x1bf/0x410 [ 196.783794][ T8782] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 196.783818][ T8782] ? selinux_file_ioctl+0x13b/0x290 [ 196.783832][ T8782] ? selinux_file_ioctl+0xb6/0x290 [ 196.783847][ T8782] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 196.783862][ T8782] __x64_sys_ioctl+0x18e/0x210 [ 196.783877][ T8782] do_syscall_64+0x123/0x790 [ 196.783895][ T8782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.783907][ T8782] RIP: 0033:0x7efd9bd9e159 [ 196.783917][ T8782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.783929][ T8782] RSP: 002b:00007efd9cd4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.783941][ T8782] RAX: ffffffffffffffda RBX: 00007efd9c025fa0 RCX: 00007efd9bd9e159 [ 196.783948][ T8782] RDX: 0000200000000040 RSI: 00000000c08c5332 RDI: 0000000000000005 [ 196.783955][ T8782] RBP: 00007efd9be3506b R08: 0000000000000000 R09: 0000000000000000 [ 196.783962][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.783968][ T8782] R13: 00007efd9c026038 R14: 00007efd9c025fa0 R15: 00007ffe8197b2a8 [ 196.783984][ T8782] [ 197.873719][ T31] audit: type=1400 audit(1790022418.964:599): avc: denied { write } for pid=8781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.262919][ T31] audit: type=1400 audit(1790022419.354:600): avc: denied { write } for pid=8816 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.498725][ T8585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.593306][ T5264] 8021q: adding VLAN 0 to HW filter on device eth12 [ 198.797850][ T31] audit: type=1400 audit(1790022419.894:601): avc: denied { read } for pid=8826 comm="syz.7.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.868647][ T8833] block2mtd: error: cannot open device /dev/ram0 [ 199.470294][ T8585] veth0_vlan: entered promiscuous mode [ 199.507823][ T8585] veth1_vlan: entered promiscuous mode [ 199.638964][ T8585] veth0_macvtap: entered promiscuous mode [ 199.662970][ T8585] veth1_macvtap: entered promiscuous mode [ 199.738542][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.760403][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.765056][ T8866] netlink: 'syz.7.968': attribute type 1 has an invalid length. [ 199.765070][ T8866] netlink: 224 bytes leftover after parsing attributes in process `syz.7.968'. [ 199.825808][ T7161] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.825834][ T7161] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.825853][ T7161] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.825871][ T7161] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.098783][ T31] audit: type=1400 audit(1790022421.194:602): avc: denied { connect } for pid=8868 comm="syz.7.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.150748][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.150764][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.259149][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.259164][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.321864][ T5603] Bluetooth: hci2: Invalid handle: 0xed88 > 0x0eff [ 201.398661][ T8908] batman_adv: batadv0: Adding interface: syzkaller0 [ 201.398674][ T8908] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.398691][ T8908] batman_adv: batadv0: Interface activated: syzkaller0 [ 201.509205][ T8907] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 201.590965][ T8907] batman_adv: batadv0: Removing interface: syzkaller0 [ 201.833558][ T8919] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock [ 202.019656][ T31] audit: type=1400 audit(1790022423.114:603): avc: denied { read } for pid=8926 comm="syz.0.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.518573][ T31] audit: type=1400 audit(1790022423.614:604): avc: denied { read } for pid=8940 comm="syz.0.996" dev="nsfs" ino=4026533084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 202.518605][ T31] audit: type=1400 audit(1790022423.614:605): avc: denied { open } for pid=8940 comm="syz.0.996" path="net:[4026533084]" dev="nsfs" ino=4026533084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 202.580546][ T31] audit: type=1400 audit(1790022423.674:606): avc: denied { setopt } for pid=8940 comm="syz.0.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 202.997374][ T5724] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 203.062810][ T8950] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 203.155806][ T5724] usb 9-1: Using ep0 maxpacket: 32 [ 203.161893][ T5724] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 203.172867][ T5724] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.172886][ T5724] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.172908][ T5724] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.175631][ T5724] usb 9-1: config 0 descriptor?? [ 203.604993][ T8961] kvm: emulating exchange as write [ 203.605162][ T8961] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.674788][ T5724] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 203.674811][ T5724] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 203.840217][ T5724] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 203.991882][ T8969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1007'. [ 204.046733][ T5724] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 204.283114][ T5724] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 204.525249][ T8945] ft260 0003:0403:6030.0007: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 204.555731][ T31] audit: type=1400 audit(1790022425.654:607): avc: denied { call } for pid=8982 comm="syz.4.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 204.555992][ T8983] binder_alloc: 8982: binder_alloc_buf, no vma [ 204.667787][ T8980] FAULT_INJECTION: forcing a failure. [ 204.667787][ T8980] name fail_futex, interval 1, probability 0, space 0, times 0 [ 204.667812][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.0.1011 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.667831][ T8980] Tainted: [L]=SOFTLOCKUP [ 204.667836][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 204.667844][ T8980] Call Trace: [ 204.667851][ T8980] [ 204.667856][ T8980] dump_stack_lvl+0x100/0x190 [ 204.667880][ T8980] should_fail_ex.cold+0x5/0xa [ 204.667899][ T8980] get_futex_key+0x1d0/0x14f0 [ 204.667916][ T8980] ? __pfx_get_futex_key+0x10/0x10 [ 204.667933][ T8980] ? __lock_acquire+0x5c0/0x1f40 [ 204.667944][ T8980] ? _parse_integer_limit+0x1ac/0x220 [ 204.667964][ T8980] futex_wait_setup+0x91/0x540 [ 204.667979][ T8980] __futex_wait+0x19f/0x300 [ 204.667992][ T8980] ? __pfx___futex_wait+0x10/0x10 [ 204.668003][ T8980] ? futex_hash+0x311/0x400 [ 204.668018][ T8980] ? __pfx_futex_wake_mark+0x10/0x10 [ 204.668039][ T8980] ? __pfx_futex_hash+0x10/0x10 [ 204.668055][ T8980] ? get_pid_task+0xfc/0x250 [ 204.668070][ T8980] ? get_pid_task+0xfc/0x250 [ 204.668088][ T8980] futex_wait+0xe6/0x370 [ 204.668099][ T8980] ? __pfx_futex_wait+0x10/0x10 [ 204.668109][ T8980] ? find_held_lock+0x2b/0x80 [ 204.668128][ T8980] ? rcu_read_lock_any_held+0x6a/0x90 [ 204.668144][ T8980] ? find_held_lock+0x2b/0x80 [ 204.668160][ T8980] ? ksys_write+0x190/0x250 [ 204.668171][ T8980] ? ksys_write+0x190/0x250 [ 204.668185][ T8980] do_futex+0x265/0x440 [ 204.668201][ T8980] ? __pfx_do_futex+0x10/0x10 [ 204.668217][ T8980] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.668238][ T8980] __x64_sys_futex+0x34f/0x4d0 [ 204.668255][ T8980] ? fput+0x7c/0x100 [ 204.668269][ T8980] ? __pfx___x64_sys_futex+0x10/0x10 [ 204.668284][ T8980] ? ksys_write+0x1ac/0x250 [ 204.668295][ T8980] ? __pfx_ksys_write+0x10/0x10 [ 204.668312][ T8980] do_syscall_64+0x123/0x790 [ 204.668330][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.668346][ T8980] RIP: 0033:0x7f27b439e159 [ 204.668357][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.668369][ T8980] RSP: 002b:00007f27b52b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 204.668381][ T8980] RAX: ffffffffffffffda RBX: 00007f27b4625fa8 RCX: 00007f27b439e159 [ 204.668389][ T8980] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f27b4625fa8 [ 204.668397][ T8980] RBP: 00007f27b4625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 204.668404][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.668412][ T8980] R13: 00007f27b4626038 R14: 00007ffcc4379710 R15: 00007ffcc43797f8 [ 204.668429][ T8980] [ 204.986831][ T8945] ft260 0003:0403:6030.0007: failed to reset I2C controller: -108 [ 204.986848][ T8945] ft260 0003:0403:6030.0007: ft260_i2c_write: failed with -38 [ 205.062937][ T8986] binder: 8985:8986 ioctl c0306201 2000000001c0 returned -14 [ 205.324072][ T31] audit: type=1400 audit(1790022426.414:608): avc: denied { mounton } for pid=8997 comm="syz.5.1018" path="/145/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 205.324547][ T8998] FAULT_INJECTION: forcing a failure. [ 205.324547][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 205.324566][ T8998] CPU: 0 UID: 0 PID: 8998 Comm: syz.5.1018 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.324583][ T8998] Tainted: [L]=SOFTLOCKUP [ 205.324588][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 205.324596][ T8998] Call Trace: [ 205.324601][ T8998] [ 205.324606][ T8998] dump_stack_lvl+0x100/0x190 [ 205.324628][ T8998] should_fail_ex.cold+0x5/0xa [ 205.324647][ T8998] should_failslab+0xc2/0x120 [ 205.324662][ T8998] __kmalloc_cache_noprof+0x91/0x6d0 [ 205.324679][ T8998] ? __kasan_kmalloc+0xaa/0xb0 [ 205.324692][ T8998] ? init_pseudo+0x48/0x1b0 [ 205.324709][ T8998] init_pseudo+0x48/0x1b0 [ 205.324725][ T8998] sockfs_init_fs_context+0x1a/0xc0 [ 205.324742][ T8998] alloc_fs_context+0x60c/0xf40 [ 205.324765][ T8998] path_mount+0xdbd/0x24c0 [ 205.324785][ T8998] ? __pfx_path_mount+0x10/0x10 [ 205.324802][ T8998] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.324821][ T8998] ? putname+0xb1/0x110 [ 205.324835][ T8998] ? kmem_cache_free+0x127/0x6c0 [ 205.324857][ T8998] ? __x64_sys_mount+0x293/0x310 [ 205.324874][ T8998] __x64_sys_mount+0x293/0x310 [ 205.324892][ T8998] ? __pfx___x64_sys_mount+0x10/0x10 [ 205.324913][ T8998] do_syscall_64+0x123/0x790 [ 205.324931][ T8998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.324943][ T8998] RIP: 0033:0x7ff921b9e159 [ 205.324954][ T8998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.324964][ T8998] RSP: 002b:00007ff9229f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.324976][ T8998] RAX: ffffffffffffffda RBX: 00007ff921e25fa0 RCX: 00007ff921b9e159 [ 205.324983][ T8998] RDX: 0000200000000300 RSI: 0000200000000280 RDI: 0000000000000000 [ 205.324990][ T8998] RBP: 00007ff921c3506b R08: 0000000000000000 R09: 0000000000000000 [ 205.324997][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.325004][ T8998] R13: 00007ff921e26038 R14: 00007ff921e25fa0 R15: 00007ffd84b0ecf8 [ 205.325019][ T8998] [ 205.896835][ T5724] usb 9-1: USB disconnect, device number 2 [ 206.873189][ T9023] fuse: Bad value for 'fd' [ 207.571079][ T31] audit: type=1800 audit(1790022428.664:609): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1030" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 208.655526][ T31] audit: type=1400 audit(1790022429.744:610): avc: denied { map } for pid=9057 comm="syz.4.1039" path="socket:[29981]" dev="sockfs" ino=29981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.655559][ T31] audit: type=1400 audit(1790022429.744:611): avc: denied { write } for pid=9057 comm="syz.4.1039" path="socket:[29981]" dev="sockfs" ino=29981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.214834][ T9075] FAULT_INJECTION: forcing a failure. [ 209.214834][ T9075] name failslab, interval 1, probability 0, space 0, times 0 [ 209.214858][ T9075] CPU: 0 UID: 0 PID: 9075 Comm: syz.4.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.214876][ T9075] Tainted: [L]=SOFTLOCKUP [ 209.214884][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 209.214892][ T9075] Call Trace: [ 209.214896][ T9075] [ 209.214901][ T9075] dump_stack_lvl+0x100/0x190 [ 209.214924][ T9075] should_fail_ex.cold+0x5/0xa [ 209.214943][ T9075] should_failslab+0xc2/0x120 [ 209.214959][ T9075] __kvmalloc_node_noprof+0x113/0x9b0 [ 209.214975][ T9075] ? bpf_check+0x1b8e/0xa980 [ 209.214993][ T9075] bpf_check+0x1b8e/0xa980 [ 209.215008][ T9075] ? __css_rstat_updated+0x1ce/0x590 [ 209.215022][ T9075] ? __lock_acquire+0x5c0/0x1f40 [ 209.215035][ T9075] ? __pfx___css_rstat_updated+0x10/0x10 [ 209.215059][ T9075] ? __pfx_bpf_check+0x10/0x10 [ 209.215074][ T9075] ? lock_acquire+0x1d1/0x380 [ 209.215086][ T9075] ? bpf_prog_load+0x1a09/0x2a80 [ 209.215101][ T9075] ? find_held_lock+0x2b/0x80 [ 209.215116][ T9075] ? bpf_prog_load+0x1a09/0x2a80 [ 209.215134][ T9075] ? __asan_memset+0x23/0x50 [ 209.215147][ T9075] ? bpf_prog_load+0x1ac3/0x2a80 [ 209.215162][ T9075] bpf_prog_load+0x1ac3/0x2a80 [ 209.215189][ T9075] ? __pfx_bpf_prog_load+0x10/0x10 [ 209.215219][ T9075] __sys_bpf+0x1f46/0x4a30 [ 209.215236][ T9075] ? __pfx___sys_bpf+0x10/0x10 [ 209.215247][ T9075] ? find_held_lock+0x2b/0x80 [ 209.215263][ T9075] ? futex_wake+0x4ea/0x5e0 [ 209.215285][ T9075] ? __lock_acquire+0x5c0/0x1f40 [ 209.215298][ T9075] ? do_vfs_ioctl+0x226/0x13e0 [ 209.215319][ T9075] ? __x64_sys_futex+0x34f/0x4d0 [ 209.215334][ T9075] ? __x64_sys_futex+0x358/0x4d0 [ 209.215351][ T9075] ? xfd_validate_state+0x129/0x190 [ 209.215366][ T9075] ? __x64_sys_bpf+0xce/0x140 [ 209.215377][ T9075] __x64_sys_bpf+0xce/0x140 [ 209.215389][ T9075] ? do_syscall_64+0xae/0x790 [ 209.215407][ T9075] do_syscall_64+0x123/0x790 [ 209.215425][ T9075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.215438][ T9075] RIP: 0033:0x7efd9bd9e159 [ 209.215448][ T9075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.215459][ T9075] RSP: 002b:00007efd9cd4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.215471][ T9075] RAX: ffffffffffffffda RBX: 00007efd9c025fa0 RCX: 00007efd9bd9e159 [ 209.215478][ T9075] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 209.215485][ T9075] RBP: 00007efd9be3506b R08: 0000000000000000 R09: 0000000000000000 [ 209.215492][ T9075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.215498][ T9075] R13: 00007efd9c026038 R14: 00007efd9c025fa0 R15: 00007ffe8197b2a8 [ 209.215514][ T9075] [ 209.972223][ T9093] overlayfs: failed to clone upperpath [ 210.323260][ T9103] orangefs_devreq_open: device cannot be opened in blocking mode [ 210.366679][ T31] audit: type=1400 audit(1790022431.464:612): avc: denied { write } for pid=9080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.760925][ T31] audit: type=1400 audit(1790022431.854:613): avc: denied { write } for pid=9115 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.269933][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'. [ 211.726867][ T41] IPVS: starting estimator thread 0... [ 211.819199][ T9153] IPVS: using max 62 ests per chain, 148800 per kthread [ 212.055417][ T31] audit: type=1400 audit(1790022433.144:614): avc: denied { write } for pid=9130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.312662][ T31] audit: type=1400 audit(1790022433.404:615): avc: denied { write } for pid=9176 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.690730][ T31] audit: type=1800 audit(1790022433.784:616): pid=9189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1077" name="(" dev="sda1" ino=2056 res=0 errno=0 [ 212.691103][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1076'. [ 212.952429][ T9175] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 213.002972][ T31] audit: type=1400 audit(1790022434.094:617): avc: denied { append } for pid=9174 comm="syz.8.1073" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 213.280695][ T31] audit: type=1400 audit(1790022434.374:618): avc: denied { write } for pid=9185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.390582][ T9208] overlayfs: failed to clone upperpath [ 213.537222][ T31] audit: type=1400 audit(1790022434.624:619): avc: denied { write } for pid=9211 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.720361][ T9216] syzkaller1: entered promiscuous mode [ 213.720378][ T9216] syzkaller1: entered allmulticast mode [ 214.340446][ T31] audit: type=1400 audit(1790022435.434:620): avc: denied { write } for pid=9220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.421071][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1088'. [ 214.421605][ T9243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.459818][ T9243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.567349][ T31] audit: type=1400 audit(1790022435.664:621): avc: denied { write } for pid=9246 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.989959][ T9258] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.117440][ T9261] fuse: Bad value for 'fd' [ 215.218753][ T9265] FAULT_INJECTION: forcing a failure. [ 215.218753][ T9265] name failslab, interval 1, probability 0, space 0, times 0 [ 215.218778][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz.5.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.218796][ T9265] Tainted: [L]=SOFTLOCKUP [ 215.218801][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 215.218809][ T9265] Call Trace: [ 215.218813][ T9265] [ 215.218818][ T9265] dump_stack_lvl+0x100/0x190 [ 215.218844][ T9265] should_fail_ex.cold+0x5/0xa [ 215.218861][ T9265] should_failslab+0xc2/0x120 [ 215.218877][ T9265] __kmalloc_cache_noprof+0x91/0x6d0 [ 215.218897][ T9265] ? vhost_net_open+0xb9/0x8b0 [ 215.218917][ T9265] vhost_net_open+0xb9/0x8b0 [ 215.218933][ T9265] ? __pfx_vhost_net_open+0x10/0x10 [ 215.218951][ T9265] misc_open+0x26d/0x450 [ 215.218963][ T9265] ? __pfx_misc_open+0x10/0x10 [ 215.218975][ T9265] chrdev_open+0x234/0x6a0 [ 215.218990][ T9265] ? __pfx_chrdev_open+0x10/0x10 [ 215.219005][ T9265] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 215.219027][ T9265] do_dentry_open+0x6ab/0x14d0 [ 215.219041][ T9265] ? __pfx_chrdev_open+0x10/0x10 [ 215.219058][ T9265] vfs_open+0x82/0x3f0 [ 215.219075][ T9265] path_openat+0x19fa/0x2440 [ 215.219093][ T9265] ? __pfx_path_openat+0x10/0x10 [ 215.219112][ T9265] do_file_open+0x20e/0x430 [ 215.219128][ T9265] ? __pfx_do_file_open+0x10/0x10 [ 215.219154][ T9265] ? _raw_spin_unlock+0x28/0x50 [ 215.219169][ T9265] ? alloc_fd+0x471/0x7a0 [ 215.219188][ T9265] do_sys_openat2+0x10f/0x1e0 [ 215.219204][ T9265] ? __pfx_do_sys_openat2+0x10/0x10 [ 215.219226][ T9265] __x64_sys_openat+0x12d/0x210 [ 215.219244][ T9265] ? __pfx___x64_sys_openat+0x10/0x10 [ 215.219268][ T9265] do_syscall_64+0x123/0x790 [ 215.219287][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.219299][ T9265] RIP: 0033:0x7ff921b9e159 [ 215.219310][ T9265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.219321][ T9265] RSP: 002b:00007ff9229f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.219333][ T9265] RAX: ffffffffffffffda RBX: 00007ff921e25fa0 RCX: 00007ff921b9e159 [ 215.219341][ T9265] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 215.219348][ T9265] RBP: 00007ff921c3506b R08: 0000000000000000 R09: 0000000000000000 [ 215.219355][ T9265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.219362][ T9265] R13: 00007ff921e26038 R14: 00007ff921e25fa0 R15: 00007ffd84b0ecf8 [ 215.219379][ T9265] [ 215.392015][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1096'. [ 216.088041][ T31] audit: type=1400 audit(1700000001.880:622): avc: denied { name_bind } for pid=9291 comm="syz.8.1107" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 216.565702][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 216.756486][ T9314] FAULT_INJECTION: forcing a failure. [ 216.756486][ T9314] name failslab, interval 1, probability 0, space 0, times 0 [ 216.756511][ T9314] CPU: 0 UID: 0 PID: 9314 Comm: syz.4.1116 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.756546][ T9314] Tainted: [L]=SOFTLOCKUP [ 216.756550][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 216.756558][ T9314] Call Trace: [ 216.756563][ T9314] [ 216.756568][ T9314] dump_stack_lvl+0x100/0x190 [ 216.756592][ T9314] should_fail_ex.cold+0x5/0xa [ 216.756609][ T9314] should_failslab+0xc2/0x120 [ 216.756626][ T9314] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 216.756640][ T9314] ? __d_alloc+0x35/0xa50 [ 216.756659][ T9314] __d_alloc+0x35/0xa50 [ 216.756674][ T9314] ? __pfx_selinux_inode_init_security_anon+0x10/0x10 [ 216.756690][ T9314] d_alloc_pseudo+0x1c/0xc0 [ 216.756702][ T9314] alloc_file_pseudo+0x118/0x290 [ 216.756720][ T9314] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 216.756737][ T9314] ? security_inode_init_security_anon+0x7b/0x230 [ 216.756754][ T9314] __anon_inode_getfile+0xe8/0x280 [ 216.756767][ T9314] ? _copy_to_user+0xaf/0xd0 [ 216.756780][ T9314] io_uring_setup.cold+0x19ce/0x1cde [ 216.756795][ T9314] ? __pfx_io_uring_setup+0x10/0x10 [ 216.756809][ T9314] ? find_held_lock+0x2b/0x80 [ 216.756836][ T9314] ? xfd_validate_state+0x129/0x190 [ 216.756853][ T9314] __x64_sys_io_uring_setup+0xc2/0x170 [ 216.756868][ T9314] do_syscall_64+0x123/0x790 [ 216.756887][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.756899][ T9314] RIP: 0033:0x7efd9bd9e159 [ 216.756910][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.756922][ T9314] RSP: 002b:00007efd9cd4c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 216.756933][ T9314] RAX: ffffffffffffffda RBX: 00007efd9c025fa0 RCX: 00007efd9bd9e159 [ 216.756941][ T9314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 216.756948][ T9314] RBP: 00007efd9be3506b R08: 0000000000000000 R09: 0000000000000000 [ 216.756954][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.756961][ T9314] R13: 00007efd9c026038 R14: 00007efd9c025fa0 R15: 00007ffe8197b2a8 [ 216.756976][ T9314] [ 216.809964][ T5609] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 217.212582][ T31] audit: type=1400 audit(1700000003.000:623): avc: denied { create } for pid=9325 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.243381][ T31] audit: type=1400 audit(1700000003.030:624): avc: denied { connect } for pid=9325 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.268511][ T31] audit: type=1400 audit(1700000003.060:625): avc: denied { bind } for pid=9325 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.272050][ T31] audit: type=1400 audit(1700000003.060:626): avc: denied { write } for pid=9325 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.273775][ T9326] FAULT_INJECTION: forcing a failure. [ 217.273775][ T9326] name failslab, interval 1, probability 0, space 0, times 0 [ 217.273796][ T9326] CPU: 0 UID: 0 PID: 9326 Comm: syz.4.1122 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.273814][ T9326] Tainted: [L]=SOFTLOCKUP [ 217.273818][ T9326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 217.273827][ T9326] Call Trace: [ 217.273831][ T9326] [ 217.273835][ T9326] dump_stack_lvl+0x100/0x190 [ 217.273859][ T9326] should_fail_ex.cold+0x5/0xa [ 217.273877][ T9326] should_failslab+0xc2/0x120 [ 217.273894][ T9326] __kmalloc_cache_node_noprof+0x94/0x720 [ 217.273909][ T9326] ? __alloc_workqueue+0x1211/0x1950 [ 217.273928][ T9326] __alloc_workqueue+0x1211/0x1950 [ 217.273947][ T9326] alloc_workqueue_noprof+0xc7/0x130 [ 217.273962][ T9326] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 217.273979][ T9326] ? lockdep_init_map_type+0x5c/0x250 [ 217.273993][ T9326] ? lockdep_init_map_type+0x5c/0x250 [ 217.274008][ T9326] __rds_conn_create+0x1234/0x25a0 [ 217.274032][ T9326] ? __pfx___rds_conn_create+0x10/0x10 [ 217.274048][ T9326] ? trace_kmalloc+0xeb/0x110 [ 217.274062][ T9326] ? __kasan_kmalloc+0xaa/0xb0 [ 217.274075][ T9326] ? lockdep_init_map_type+0x5c/0x250 [ 217.274091][ T9326] rds_conn_create_outgoing+0x44/0x60 [ 217.274110][ T9326] rds_sendmsg+0x10da/0x34d0 [ 217.274130][ T9326] ? __pfx_rds_sendmsg+0x10/0x10 [ 217.274151][ T9326] ? selinux_socket_sendmsg+0x198/0x2f0 [ 217.274167][ T9326] ? ____sys_sendmsg+0xa4d/0xbe0 [ 217.274184][ T9326] ____sys_sendmsg+0xa4d/0xbe0 [ 217.274200][ T9326] ? __pfx_rds_sendmsg+0x10/0x10 [ 217.274215][ T9326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.274237][ T9326] ? plist_check_list+0x1b8/0x280 [ 217.274251][ T9326] ? plist_del+0x308/0x510 [ 217.274265][ T9326] ___sys_sendmsg+0x190/0x1e0 [ 217.274277][ T9326] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.274289][ T9326] ? futex_wake+0x220/0x5e0 [ 217.274305][ T9326] ? find_held_lock+0x2b/0x80 [ 217.274331][ T9326] __sys_sendmsg+0x160/0x210 [ 217.274346][ T9326] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.274368][ T9326] do_syscall_64+0x123/0x790 [ 217.274387][ T9326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.274399][ T9326] RIP: 0033:0x7efd9bd9e159 [ 217.274410][ T9326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.274420][ T9326] RSP: 002b:00007efd9cd4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.274432][ T9326] RAX: ffffffffffffffda RBX: 00007efd9c025fa0 RCX: 00007efd9bd9e159 [ 217.274440][ T9326] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 217.274446][ T9326] RBP: 00007efd9be3506b R08: 0000000000000000 R09: 0000000000000000 [ 217.274453][ T9326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.274460][ T9326] R13: 00007efd9c026038 R14: 00007efd9c025fa0 R15: 00007ffe8197b2a8 [ 217.274475][ T9326] [ 218.061042][ T31] audit: type=1800 audit(1700000003.850:627): pid=9343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.1127" name="file1" dev="tmpfs" ino=203 res=0 errno=0 [ 218.491874][ T31] audit: type=1400 audit(1700000004.280:628): avc: denied { ioctl } for pid=9349 comm="syz.4.1131" path="socket:[31535]" dev="sockfs" ino=31535 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.736536][ T9353] netlink: 'syz.4.1132': attribute type 12 has an invalid length. [ 218.736595][ T9353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1132'. [ 219.370955][ T9373] FAULT_INJECTION: forcing a failure. [ 219.370955][ T9373] name failslab, interval 1, probability 0, space 0, times 0 [ 219.370979][ T9373] CPU: 0 UID: 0 PID: 9373 Comm: syz.7.1139 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.370995][ T9373] Tainted: [L]=SOFTLOCKUP [ 219.371000][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 219.371007][ T9373] Call Trace: [ 219.371011][ T9373] [ 219.371016][ T9373] dump_stack_lvl+0x100/0x190 [ 219.371039][ T9373] should_fail_ex.cold+0x5/0xa [ 219.371056][ T9373] should_failslab+0xc2/0x120 [ 219.371071][ T9373] kmem_cache_alloc_noprof+0x92/0x6a0 [ 219.371086][ T9373] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 219.371105][ T9373] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 219.371123][ T9373] idr_get_free+0x52e/0xa00 [ 219.371146][ T9373] idr_alloc_u32+0x1ac/0x320 [ 219.371165][ T9373] ? __pfx_idr_alloc_u32+0x10/0x10 [ 219.371181][ T9373] ? do_raw_spin_lock+0x128/0x260 [ 219.371201][ T9373] l2tp_tunnel_register+0xfc/0xc10 [ 219.371218][ T9373] ? __pfx___debug_object_init+0x10/0x10 [ 219.371233][ T9373] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 219.371248][ T9373] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 219.371265][ T9373] ? l2tp_tunnel_get+0x20c/0x490 [ 219.371279][ T9373] ? lockdep_init_map_type+0x5c/0x250 [ 219.371293][ T9373] ? l2tp_tunnel_create+0x2cf/0x460 [ 219.371305][ T9373] ? l2tp_tunnel_create+0x37d/0x460 [ 219.371320][ T9373] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 219.371345][ T9373] ? __pfx_pppol2tp_tunnel_get.constprop.0+0x10/0x10 [ 219.371362][ T9373] ? __lock_acquire+0x5c0/0x1f40 [ 219.371383][ T9373] pppol2tp_connect+0xaf0/0x1c20 [ 219.371401][ T9373] ? __pfx_pppol2tp_connect+0x10/0x10 [ 219.371417][ T9373] ? print_kernel_ident+0x10/0x40 [ 219.371437][ T9373] ? __local_bh_enable_ip+0xa5/0x120 [ 219.371452][ T9373] ? selinux_netlbl_socket_connect+0x30/0x40 [ 219.371467][ T9373] ? selinux_socket_connect+0x6b/0x80 [ 219.371481][ T9373] __sys_connect_file+0x146/0x1a0 [ 219.371496][ T9373] __sys_connect+0x141/0x170 [ 219.371508][ T9373] ? __pfx___sys_connect+0x10/0x10 [ 219.371530][ T9373] __x64_sys_connect+0x72/0xb0 [ 219.371543][ T9373] ? lockdep_hardirqs_on+0x7d/0x110 [ 219.371561][ T9373] do_syscall_64+0x123/0x790 [ 219.371579][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.371591][ T9373] RIP: 0033:0x7fbc3999e159 [ 219.371602][ T9373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.371613][ T9373] RSP: 002b:00007fbc37bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 219.371625][ T9373] RAX: ffffffffffffffda RBX: 00007fbc39c25fa0 RCX: 00007fbc3999e159 [ 219.371634][ T9373] RDX: 0000000000000026 RSI: 00002000000002c0 RDI: 0000000000000005 [ 219.371641][ T9373] RBP: 00007fbc39a3506b R08: 0000000000000000 R09: 0000000000000000 [ 219.371649][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.371656][ T9373] R13: 00007fbc39c26038 R14: 00007fbc39c25fa0 R15: 00007ffc28cd9778 [ 219.371672][ T9373] [ 219.872314][ T9375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.566283][ T9404] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1148'. [ 221.179417][ T9419] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1153'. [ 221.360190][ T9427] xt_hashlimit: size too large, truncated to 1048576 [ 221.877981][ T9355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.180422][ T31] audit: type=1400 audit(1700000007.970:629): avc: denied { view } for pid=9443 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 223.091010][ T31] audit: type=1400 audit(1700000008.880:630): avc: denied { write } for pid=9468 comm="syz.4.1173" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 224.814834][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.816310][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.019474][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1183'. [ 225.019508][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1183'. [ 225.195816][ T9489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.217179][ T9489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.252866][ T9502] fuse: Bad value for 'fd' [ 225.388576][ T1436] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.388607][ T1436] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.388626][ T1436] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.388644][ T1436] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.557843][ T9511] loop6: detected capacity change from 0 to 8 [ 226.242330][ T9526] overlayfs: failed to clone upperpath [ 226.347076][ T9529] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 226.389434][ T9530] netlink: 'syz.7.1195': attribute type 1 has an invalid length. [ 226.435238][ T9529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.477878][ T9530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.622329][ T9540] netlink: 'syz.7.1195': attribute type 10 has an invalid length. [ 226.622344][ T9540] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1195'. [ 226.624389][ T9533] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 226.715657][ T9538] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 226.744487][ T63] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 226.818302][ T9530] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 226.849649][ T9540] dummy0: entered promiscuous mode [ 226.882306][ T9540] bond1: (slave dummy0): Releasing backup interface [ 226.914314][ T1436] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 226.997787][ T31] audit: type=1400 audit(1700000012.790:631): avc: denied { connect } for pid=9545 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 227.940891][ T31] audit: type=1400 audit(1700000013.730:632): avc: denied { watch } for pid=9566 comm="syz.8.1208" path="/59/file5" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 227.940923][ T31] audit: type=1400 audit(1700000013.730:633): avc: denied { watch_sb } for pid=9566 comm="syz.8.1208" path="/59/file5" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 228.440645][ T9584] futex_wake_op: syz.0.1213 tries to shift op by 144; fix this program [ 228.440804][ T9584] futex_wake_op: syz.0.1213 tries to shift op by 144; fix this program [ 228.639945][ T9591] fuse: Bad value for 'fd' [ 229.140004][ T9607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1222'. [ 241.934088][ C0] sched: DL replenish lagged too much [ 251.085268][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.122082][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.425826][ T5603] Bluetooth: hci5: command 0x0406 tx timeout [ 287.677478][ T5710] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 309.780391][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 312.783733][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.796268][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.310038][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.316884][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.593158][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 408.600119][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6297/1:b..l P4958/1:b..l P9648/1:b..l P10/1:b..l P7166/1:b..l [ 408.612371][ C0] rcu: (detected by 0, t=10502 jiffies, g=56417, q=1287460 ncpus=1) [ 408.620403][ C0] task:kworker/u8:16 state:R running task stack:26288 pid:7166 tgid:7166 ppid:2 task_flags:0x24208060 flags:0x00080000 [ 408.634049][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 408.640022][ C0] Call Trace: [ 408.643272][ C0] [ 408.646178][ C0] __schedule+0x1259/0x6920 [ 408.650673][ C0] ? kasan_save_stack+0x3f/0x50 [ 408.655496][ C0] ? kasan_save_stack+0x30/0x50 [ 408.660321][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 408.665230][ C0] ? worker_thread+0x5ef/0xe50 [ 408.669967][ C0] ? kthread+0x373/0x450 [ 408.674189][ C0] ? __pfx___schedule+0x10/0x10 [ 408.679019][ C0] ? mark_held_locks+0x40/0x70 [ 408.683755][ C0] preempt_schedule_irq+0x4e/0x90 [ 408.688755][ C0] irqentry_exit+0x205/0xa10 [ 408.693320][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.699271][ C0] RIP: 0010:__orc_find+0x13/0xf0 [ 408.704186][ C0] Code: 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 49 89 cd 89 d1 41 54 4c 8d 64 8f fc 55 <53> 48 83 ec 08 85 d2 0f 84 99 00 00 00 49 89 fe 48 89 f0 49 39 fc [ 408.723763][ C0] RSP: 0018:ffffc9000309ecc8 EFLAGS: 00000206 [ 408.729809][ C0] RAX: ffffffff91fafde8 RBX: 0000000000000001 RCX: 0000000000000009 [ 408.737752][ C0] RDX: 0000000000000009 RSI: ffffffff91fafde8 RDI: ffffffff916ac544 [ 408.745702][ C0] RBP: ffffc9000309edb0 R08: ffffffff91fafe1e R09: 0000000000000007 [ 408.753655][ C0] R10: 0000000000000200 R11: 000000000001aae1 R12: ffffffff916ac564 [ 408.761594][ C0] R13: ffffffff82aae18a R14: ffffc9000309ed9d R15: ffffffff82aae18a [ 408.769535][ C0] ? __block_write_full_folio+0x7da/0xfb0 [ 408.775232][ C0] ? __block_write_full_folio+0x7da/0xfb0 [ 408.780931][ C0] ? __block_write_full_folio+0x7da/0xfb0 [ 408.786633][ C0] unwind_next_frame+0x2ec/0x2090 [ 408.791647][ C0] ? __block_write_full_folio+0x7db/0xfb0 [ 408.797339][ C0] ? bvec_phys+0x1dc/0x5c0 [ 408.801738][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 408.807872][ C0] arch_stack_walk+0x94/0xf0 [ 408.812439][ C0] ? __block_write_full_folio+0x7db/0xfb0 [ 408.818138][ C0] stack_trace_save+0x8e/0xc0 [ 408.822785][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 408.828144][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 408.833067][ C0] kasan_save_stack+0x30/0x50 [ 408.837718][ C0] ? kasan_save_stack+0x30/0x50 [ 408.842540][ C0] ? kasan_save_track+0x14/0x30 [ 408.847360][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 408.852355][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 408.857958][ C0] ? bio_alloc_bioset+0x173/0x1060 [ 408.863043][ C0] ? __bh_submit+0x225/0xaa0 [ 408.867601][ C0] ? __block_write_full_folio+0x7db/0xfb0 [ 408.873323][ C0] kasan_save_track+0x14/0x30 [ 408.877997][ C0] __kasan_slab_alloc+0x89/0x90 [ 408.882823][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 408.888260][ C0] ? bio_alloc_bioset+0x173/0x1060 [ 408.893349][ C0] bio_alloc_bioset+0x173/0x1060 [ 408.898264][ C0] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 408.903609][ C0] ? __pfx___folio_start_writeback+0x10/0x10 [ 408.909570][ C0] __bh_submit+0x225/0xaa0 [ 408.913960][ C0] ? __pfx_bh_end_async_write+0x10/0x10 [ 408.919479][ C0] ? folio_clear_dirty_for_io+0x34d/0x960 [ 408.925175][ C0] ? folio_clear_dirty_for_io+0x34d/0x960 [ 408.930872][ C0] __block_write_full_folio+0x7db/0xfb0 [ 408.936396][ C0] ? __pfx_blkdev_get_block+0x10/0x10 [ 408.941757][ C0] block_write_full_folio+0x3b5/0x4e0 [ 408.947112][ C0] ? __pfx_blkdev_get_block+0x10/0x10 [ 408.952459][ C0] blkdev_writepages+0xc7/0x150 [ 408.957283][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 408.962712][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 408.967622][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 408.972528][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 408.977958][ C0] do_writepages+0x278/0x600 [ 408.982521][ C0] ? __pfx_do_writepages+0x10/0x10 [ 408.987602][ C0] ? reacquire_held_locks+0xdd/0x1f0 [ 408.992856][ C0] ? writeback_sb_inodes+0x3e1/0x1c50 [ 408.998200][ C0] __writeback_single_inode+0x164/0x1560 [ 409.003806][ C0] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 409.009671][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 409.015708][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 409.020882][ C0] writeback_sb_inodes+0x766/0x1c50 [ 409.026071][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 409.031676][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 409.036598][ C0] ? __pfx___up_read+0x10/0x10 [ 409.041337][ C0] ? __writeback_inodes_wb+0x107/0x2d0 [ 409.046772][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 409.051949][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 409.057741][ C0] wb_writeback+0x6f6/0xb50 [ 409.062222][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 409.067219][ C0] ? get_nr_inodes+0x100/0x150 [ 409.071957][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.077129][ C0] wb_workfn+0x93f/0xc80 [ 409.081355][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 409.086526][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 409.091264][ C0] ? process_one_work+0x906/0x1b10 [ 409.096348][ C0] ? process_one_work+0x906/0x1b10 [ 409.101450][ C0] process_one_work+0xac7/0x1b10 [ 409.106370][ C0] ? __pfx_process_one_work+0x10/0x10 [ 409.111716][ C0] ? lock_acquire+0x1d1/0x380 [ 409.116369][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 409.121107][ C0] worker_thread+0x5ef/0xe50 [ 409.125677][ C0] ? kthread+0x13a/0x450 [ 409.129890][ C0] ? __pfx_worker_thread+0x10/0x10 [ 409.134975][ C0] kthread+0x373/0x450 [ 409.139017][ C0] ? __pfx_kthread+0x10/0x10 [ 409.143581][ C0] ret_from_fork+0x730/0xd60 [ 409.148143][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 409.153226][ C0] ? __switch_to+0x800/0x10f0 [ 409.157890][ C0] ? __pfx_kthread+0x10/0x10 [ 409.162455][ C0] ret_from_fork_asm+0x1a/0x30 [ 409.167198][ C0] [ 409.170190][ C0] task:kworker/0:1 state:R running task stack:21784 pid:10 tgid:10 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 409.183720][ C0] Workqueue: events_power_efficient gc_worker [ 409.189865][ C0] Call Trace: [ 409.193116][ C0] [ 409.196021][ C0] __schedule+0x1259/0x6920 [ 409.200508][ C0] ? __pfx___schedule+0x10/0x10 [ 409.205345][ C0] ? find_held_lock+0x2b/0x80 [ 409.209995][ C0] ? __nf_ct_delete_from_lists+0x4a7/0x580 [ 409.215777][ C0] ? __nf_ct_delete_from_lists+0x4a7/0x580 [ 409.221557][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 409.226910][ C0] preempt_schedule_common+0x3c/0xb0 [ 409.232188][ C0] preempt_schedule_thunk+0x16/0x40 [ 409.237366][ C0] ? nf_ct_delete+0x244/0x650 [ 409.242015][ C0] __local_bh_enable_ip+0x106/0x120 [ 409.247188][ C0] ? nf_ct_delete+0x244/0x650 [ 409.251838][ C0] nf_ct_delete+0x261/0x650 [ 409.256321][ C0] nf_ct_gc_expired.part.0+0x17e/0x200 [ 409.261754][ C0] gc_worker+0xc1f/0x1a10 [ 409.266061][ C0] ? __pfx_gc_worker+0x10/0x10 [ 409.270802][ C0] ? process_one_work+0x906/0x1b10 [ 409.275904][ C0] ? process_one_work+0x906/0x1b10 [ 409.280996][ C0] process_one_work+0xac7/0x1b10 [ 409.285927][ C0] ? __pfx_process_one_work+0x10/0x10 [ 409.291276][ C0] ? lock_acquire+0x1d1/0x380 [ 409.295934][ C0] ? __pfx_gc_worker+0x10/0x10 [ 409.300674][ C0] worker_thread+0x5ef/0xe50 [ 409.305247][ C0] ? __pfx_worker_thread+0x10/0x10 [ 409.310337][ C0] ? kthread+0x13a/0x450 [ 409.314557][ C0] ? __pfx_worker_thread+0x10/0x10 [ 409.319643][ C0] kthread+0x373/0x450 [ 409.323688][ C0] ? __pfx_kthread+0x10/0x10 [ 409.328256][ C0] ret_from_fork+0x730/0xd60 [ 409.332819][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 409.337904][ C0] ? __switch_to+0x800/0x10f0 [ 409.342558][ C0] ? __pfx_kthread+0x10/0x10 [ 409.347126][ C0] ret_from_fork_asm+0x1a/0x30 [ 409.351871][ C0] [ 409.354863][ C0] task:syz.5.1237 state:R running task stack:26264 pid:9648 tgid:9646 ppid:6297 task_flags:0x400040 flags:0x00080002 [ 409.368308][ C0] Call Trace: [ 409.371562][ C0] [ 409.374472][ C0] __schedule+0x1259/0x6920 [ 409.378961][ C0] ? ref_tracker_alloc+0x307/0x590 [ 409.384050][ C0] ? __pfx___schedule+0x10/0x10 [ 409.388879][ C0] ? do_raw_spin_lock+0x128/0x260 [ 409.393878][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 409.399242][ C0] preempt_schedule_common+0x3c/0xb0 [ 409.404506][ C0] preempt_schedule_thunk+0x16/0x40 [ 409.409684][ C0] ? rt_set_nexthop.isra.0+0x349/0x1240 [ 409.415201][ C0] __local_bh_enable_ip+0x106/0x120 [ 409.420375][ C0] rt_set_nexthop.isra.0+0x349/0x1240 [ 409.425720][ C0] ? dst_alloc+0xc0/0x1a0 [ 409.430028][ C0] ip_route_output_key_hash_rcu+0x94a/0x2870 [ 409.435985][ C0] ip_route_output_key_hash+0x118/0x2b0 [ 409.441506][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 409.447548][ C0] ? udp_sendmsg+0x6db/0x2710 [ 409.452210][ C0] ? find_held_lock+0x2b/0x80 [ 409.456884][ C0] ip_route_output_flow+0x27/0x150 [ 409.461968][ C0] udp_sendmsg+0x19c5/0x2710 [ 409.466547][ C0] ? __pfx_udp_sendmsg+0x10/0x10 [ 409.471471][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 409.476499][ C0] ? __pfx_sock_has_perm+0x10/0x10 [ 409.481603][ C0] ? __pfx_udp_sendmsg+0x10/0x10 [ 409.486519][ C0] inet_sendmsg+0x105/0x140 [ 409.491103][ C0] ____sys_sendmsg+0x9c9/0xbe0 [ 409.495846][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 409.500850][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.506126][ C0] ? rcu_is_watching+0x13/0xc0 [ 409.510865][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 409.515697][ C0] ? kfree+0x1e5/0x6d0 [ 409.519744][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 409.526138][ C0] ___sys_sendmsg+0x190/0x1e0 [ 409.530789][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.535967][ C0] ? do_user_addr_fault+0x7d7/0x12f0 [ 409.541244][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 409.546425][ C0] ? __pfx___might_resched+0x10/0x10 [ 409.551685][ C0] __sys_sendmmsg+0x20c/0x440 [ 409.556340][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 409.561513][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 409.566774][ C0] ? __pfx_do_futex+0x10/0x10 [ 409.571433][ C0] ? xfd_validate_state+0x129/0x190 [ 409.576607][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 409.581518][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 409.586692][ C0] do_syscall_64+0x123/0x790 [ 409.591260][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.597129][ C0] RIP: 0033:0x7ff921b9e159 [ 409.601513][ C0] RSP: 002b:00007ff9229f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 409.609917][ C0] RAX: ffffffffffffffda RBX: 00007ff921e25fa0 RCX: 00007ff921b9e159 [ 409.617860][ C0] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000003 [ 409.625801][ C0] RBP: 00007ff921c3506b R08: 0000000000000000 R09: 0000000000000000 [ 409.633745][ C0] R10: 0000000000000f1c R11: 0000000000000246 R12: 0000000000000000 [ 409.641690][ C0] R13: 00007ff921e26038 R14: 00007ff921e25fa0 R15: 00007ffd84b0ecf8 [ 409.649642][ C0] [ 409.652634][ C0] task:klogd state:R running task stack:24568 pid:4958 tgid:4958 ppid:1 task_flags:0x400100 flags:0x00080000 [ 409.666175][ C0] Call Trace: [ 409.669427][ C0] [ 409.672333][ C0] __schedule+0x1259/0x6920 [ 409.676814][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 409.681992][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 409.686922][ C0] ? __pfx___schedule+0x10/0x10 [ 409.691749][ C0] ? autoremove_wake_function+0x3d/0x150 [ 409.697360][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 409.702707][ C0] preempt_schedule_common+0x3c/0xb0 [ 409.707969][ C0] preempt_schedule_thunk+0x16/0x40 [ 409.713143][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 409.718752][ C0] sock_def_readable+0x154/0x600 [ 409.723662][ C0] unix_dgram_sendmsg+0xc8f/0x1810 [ 409.728755][ C0] ? __pfx_syslog_print+0x10/0x10 [ 409.733751][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 409.739287][ C0] ? selinux_socket_sendmsg+0x198/0x2f0 [ 409.744807][ C0] __sys_sendto+0x48b/0x4e0 [ 409.749280][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 409.754800][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 409.759817][ C0] ? do_syslog+0x18c/0x6d0 [ 409.764214][ C0] ? xfd_validate_state+0x129/0x190 [ 409.769385][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 409.774122][ C0] ? do_syscall_64+0xae/0x790 [ 409.778784][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 409.783960][ C0] do_syscall_64+0x123/0x790 [ 409.788527][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.794393][ C0] RIP: 0033:0x7efdd9084407 [ 409.798796][ C0] RSP: 002b:00007fff7d509630 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 409.807175][ C0] RAX: ffffffffffffffda RBX: 00007efdd8f34c80 RCX: 00007efdd9084407 [ 409.815119][ C0] RDX: 000000000000005c RSI: 00007fff7d509770 RDI: 0000000000000003 [ 409.823076][ C0] RBP: 00007fff7d509ba0 R08: 0000000000000000 R09: 0000000000000000 [ 409.831024][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff7d509bb8 [ 409.838980][ C0] R13: 00007fff7d509770 R14: 0000000000000041 R15: 00007fff7d509770 [ 409.846963][ C0] [ 409.849970][ C0] task:syz-executor state:R running task stack:23272 pid:6297 tgid:6297 ppid:6293 task_flags:0x400140 flags:0x00080000 [ 409.863444][ C0] Call Trace: [ 409.866721][ C0] [ 409.869630][ C0] __schedule+0x1259/0x6920 [ 409.874114][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 409.879295][ C0] ? __pfx___schedule+0x10/0x10 [ 409.884119][ C0] ? mark_held_locks+0x40/0x70 [ 409.888855][ C0] preempt_schedule_irq+0x4e/0x90 [ 409.893875][ C0] irqentry_exit+0x205/0xa10 [ 409.898441][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.904393][ C0] RIP: 0010:__orc_find+0x4f/0xf0 [ 409.909330][ C0] Code: f0 49 39 fc 72 7b 48 b9 00 00 00 00 00 fc ff df 49 89 ff 48 89 fd eb 0c 48 8d 6b 04 49 89 df 49 39 ec 72 4e 4c 89 e2 48 29 ea <48> 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 [ 409.928921][ C0] RSP: 0018:ffffc90005ff75a0 EFLAGS: 00000202 [ 409.934968][ C0] RAX: ffffffff91f83952 RBX: ffffffff9168ecf4 RCX: dffffc0000000000 [ 409.942912][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffffff9168ece0 [ 409.950864][ C0] RBP: ffffffff9168ece0 R08: ffffffff91f8399a R09: 0000000000000007 [ 409.958807][ C0] R10: 0000000000000200 R11: 0000000000018a4f R12: ffffffff9168ecf0 [ 409.966746][ C0] R13: ffffffff828a4f13 R14: ffffffff9168ece0 R15: ffffffff9168ece0 [ 409.974693][ C0] ? __reset_page_owner+0x83/0x190 [ 409.979806][ C0] ? __reset_page_owner+0x83/0x190 [ 409.984888][ C0] unwind_next_frame+0x2ec/0x2090 [ 409.989899][ C0] ? __reset_page_owner+0x84/0x190 [ 409.994986][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 410.001114][ C0] arch_stack_walk+0x94/0xf0 [ 410.005679][ C0] ? __reset_page_owner+0x84/0x190 [ 410.010765][ C0] stack_trace_save+0x8e/0xc0 [ 410.015411][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 410.020751][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 410.025660][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 410.030580][ C0] save_stack+0x162/0x1e0 [ 410.034894][ C0] ? __pfx_save_stack+0x10/0x10 [ 410.039721][ C0] ? page_ext_put+0x3e/0xd0 [ 410.044211][ C0] __reset_page_owner+0x84/0x190 [ 410.049133][ C0] __free_frozen_pages+0x79f/0x10f0 [ 410.054305][ C0] ? __free_slab+0xd0/0x220 [ 410.058784][ C0] qlist_free_all+0x47/0xf0 [ 410.063258][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 410.068699][ C0] __kasan_slab_alloc+0x69/0x90 [ 410.073525][ C0] __kmalloc_noprof+0x2cc/0x840 [ 410.078347][ C0] ? rcu_is_watching+0x13/0xc0 [ 410.083081][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 410.087819][ C0] tomoyo_encode2+0xfb/0x3c0 [ 410.092394][ C0] tomoyo_encode+0x29/0x50 [ 410.096784][ C0] tomoyo_realpath_from_path+0x18c/0x690 [ 410.102396][ C0] tomoyo_path_perm+0x276/0x460 [ 410.107216][ C0] ? tomoyo_path_perm+0x262/0x460 [ 410.112210][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 410.117564][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 410.122740][ C0] ? putname+0xb1/0x110 [ 410.126870][ C0] ? kmem_cache_free+0x127/0x6c0 [ 410.131784][ C0] security_inode_getattr+0x116/0x280 [ 410.137126][ C0] vfs_fstat+0x4b/0xe0 [ 410.141169][ C0] __do_sys_newfstat+0x8b/0x110 [ 410.145995][ C0] ? __pfx___do_sys_newfstat+0x10/0x10 [ 410.151440][ C0] do_syscall_64+0x123/0x790 [ 410.156006][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.161886][ C0] RIP: 0033:0x7ff921b9c767 [ 410.166270][ C0] RSP: 002b:00007ffd84b0ef98 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 410.174651][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff921b9c767 [ 410.182591][ C0] RDX: 0000000000000000 RSI: 00007ffd84b0efa0 RDI: 0000000000000003 [ 410.190543][ C0] RBP: 00007ffd84b0f09c R08: 0000000000000000 R09: 0000000000000000 [ 410.198486][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000b0 [ 410.206426][ C0] R13: 0000000000000000 R14: 00000000000384d0 R15: 00007ffd84b0f0f0 [ 410.214387][ C0] [ 410.217392][ C0] rcu: rcu_preempt kthread starved for 1060 jiffies! g56417 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 410.228303][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 410.238238][ C0] rcu: RCU grace-period kthread stack dump: [ 410.244094][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 410.257675][ C0] Call Trace: [ 410.260940][ C0] [ 410.263860][ C0] __schedule+0x1259/0x6920 [ 410.268357][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 410.273278][ C0] ? lock_acquire+0x1d1/0x380 [ 410.277934][ C0] ? __pfx___schedule+0x10/0x10 [ 410.282757][ C0] ? find_held_lock+0x2b/0x80 [ 410.287411][ C0] ? schedule+0x225/0x2c0 [ 410.291715][ C0] schedule+0xdd/0x2c0 [ 410.295760][ C0] schedule_timeout+0x127/0x280 [ 410.300583][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 410.305927][ C0] ? __pfx_process_timeout+0x10/0x10 [ 410.311186][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 410.316966][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 410.322400][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 410.327140][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 410.332403][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 410.337318][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 410.342486][ C0] ? rcu_is_watching+0x13/0xc0 [ 410.347223][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 410.353005][ C0] rcu_gp_kthread+0x17a/0x220 [ 410.357655][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 410.362827][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 410.368609][ C0] ? __kthread_parkme+0x18f/0x230 [ 410.373619][ C0] ? kthread+0x13a/0x450 [ 410.377838][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 410.383021][ C0] kthread+0x373/0x450 [ 410.387064][ C0] ? __pfx_kthread+0x10/0x10 [ 410.391631][ C0] ret_from_fork+0x730/0xd60 [ 410.396197][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 410.401280][ C0] ? __switch_to+0x800/0x10f0 [ 410.405934][ C0] ? __pfx_kthread+0x10/0x10 [ 410.410502][ C0] ret_from_fork_asm+0x1a/0x30 [ 410.415245][ C0] [ 410.418237][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 410.424536][ C0] CPU: 0 UID: 0 PID: 3223 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 410.435790][ C0] Tainted: [L]=SOFTLOCKUP [ 410.440097][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 410.450126][ C0] Workqueue: bat_events batadv_tt_purge [ 410.455651][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70 [ 410.461693][ C0] Code: 00 be 03 00 00 00 5b e9 82 c4 1e 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 05 8c ad 80 12 <48> 8b 34 24 65 48 8b 15 70 ad 80 12 48 63 c8 a9 00 01 00 ff 74 1e [ 410.481271][ C0] RSP: 0018:ffffc900000071b0 EFLAGS: 00000246 [ 410.487321][ C0] RAX: 8000000000000101 RBX: ffffc900000073b8 RCX: 0000000000000101 [ 410.495264][ C0] RDX: 1ffff92000000e50 RSI: ffffffff8a30d9d0 RDI: ffff88801c1a80e0 [ 410.503208][ C0] RBP: ffff88801c1a84c0 R08: 0000000000000005 R09: 0000000000000000 [ 410.511151][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888035f00000 [ 410.519093][ C0] R13: 0000000000000000 R14: ffffc90000007268 R15: ffff88801c1a8000 [ 410.527038][ C0] FS: 0000000000000000(0000) GS:ffff888123b53000(0000) knlGS:0000000000000000 [ 410.535940][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.542494][ C0] CR2: 00007f27b43c6bd2 CR3: 0000000037367000 CR4: 00000000003526f0 [ 410.550438][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 410.558382][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 410.566324][ C0] Call Trace: [ 410.569578][ C0] [ 410.572394][ C0] ip_route_output_key_hash_rcu+0x375/0x2870 [ 410.578373][ C0] ip_route_output_key_hash+0x118/0x2b0 [ 410.583889][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 410.589942][ C0] ? ip_route_me_harder+0x3e4/0x1260 [ 410.595201][ C0] ? find_held_lock+0x2b/0x80 [ 410.599866][ C0] ip_route_output_flow+0x27/0x150 [ 410.604956][ C0] ip_route_me_harder+0x562/0x1260 [ 410.610056][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 410.615577][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 410.621026][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 410.626459][ C0] ? kmalloc_reserve+0x148/0x350 [ 410.631379][ C0] ? __pfx_cookie_hash+0x10/0x10 [ 410.636295][ C0] synproxy_send_tcp.isra.0+0x341/0x6e0 [ 410.641818][ C0] synproxy_send_client_synack+0x6ea/0x970 [ 410.647601][ C0] ? find_held_lock+0x2b/0x80 [ 410.652258][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 410.658559][ C0] ? net_generic+0xea/0x2a0 [ 410.663041][ C0] nft_synproxy_do_eval+0xa1c/0xce0 [ 410.668217][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 410.673927][ C0] ? ip_vs_conn_in_get+0x85/0x270 [ 410.678928][ C0] ? ip_vs_service_find+0x154/0x390 [ 410.684112][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 410.689577][ C0] nft_do_chain+0x2e5/0x19d0 [ 410.694162][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 410.699168][ C0] ? mark_held_locks+0x40/0x70 [ 410.703910][ C0] ? ip_vs_in_hook+0x9fe/0x2840 [ 410.708731][ C0] ? ip_vs_in_hook+0xa7b/0x2840 [ 410.713564][ C0] nft_do_chain_inet+0xf3/0x400 [ 410.718390][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 410.723847][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 410.729202][ C0] nf_hook_slow+0xbf/0x220 [ 410.733594][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 410.738677][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 410.744641][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 410.750260][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 410.755345][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 410.761297][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 410.766556][ C0] ip_local_deliver+0x163/0x1f0 [ 410.771381][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 410.776724][ C0] ip_rcv+0x33a/0x3c0 [ 410.780681][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 410.785156][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 410.791021][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 410.797417][ C0] ? lock_acquire+0x1d1/0x380 [ 410.802066][ C0] ? process_backlog+0x437/0x1600 [ 410.807066][ C0] ? process_backlog+0x437/0x1600 [ 410.812062][ C0] __netif_receive_skb+0x1f/0x120 [ 410.817060][ C0] process_backlog+0x487/0x1600 [ 410.821894][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 410.827239][ C0] net_rx_action+0xa40/0xf20 [ 410.831807][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 410.836894][ C0] ? hrtimer_bases_first+0x120/0x210 [ 410.842155][ C0] ? __hrtimer_get_next_event+0x1b7/0x360 [ 410.847868][ C0] ? mark_held_locks+0x40/0x70 [ 410.852606][ C0] handle_softirqs+0x1e6/0x9d0 [ 410.857343][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 410.862602][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 410.867872][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 410.872808][ C0] do_softirq+0xaf/0xf0 [ 410.876948][ C0] [ 410.879856][ C0] [ 410.882764][ C0] __local_bh_enable_ip+0xff/0x120 [ 410.887849][ C0] batadv_tt_purge+0x25d/0xbd0 [ 410.892603][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 410.897859][ C0] ? lock_acquire+0x1d1/0x380 [ 410.902521][ C0] ? process_one_work+0xa2c/0x1b10 [ 410.907612][ C0] ? process_one_work+0x906/0x1b10 [ 410.912700][ C0] ? process_one_work+0x906/0x1b10 [ 410.917800][ C0] process_one_work+0xac7/0x1b10 [ 410.922720][ C0] ? __pfx_process_one_work+0x10/0x10 [ 410.928069][ C0] ? lock_acquire+0x1d1/0x380 [ 410.932726][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 410.937985][ C0] rescuer_thread+0x918/0x14e0 [ 410.942730][ C0] ? rescuer_thread+0x256/0x14e0 [ 410.947641][ C0] ? rescuer_thread+0x118/0x14e0 [ 410.952556][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 410.957731][ C0] ? __kthread_parkme+0x18f/0x230 [ 410.962729][ C0] ? kthread+0x13a/0x450 [ 410.966945][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 410.972116][ C0] kthread+0x373/0x450 [ 410.976162][ C0] ? __pfx_kthread+0x10/0x10 [ 410.980729][ C0] ret_from_fork+0x730/0xd60 [ 410.985294][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 410.990376][ C0] ? __switch_to+0x800/0x10f0 [ 410.995030][ C0] ? __pfx_kthread+0x10/0x10 [ 410.999594][ C0] ret_from_fork_asm+0x1a/0x30 [ 411.004338][ C0] [ 411.040294][ T32] INFO: task syz.7.1205:9559 blocked for more than 165 seconds. [ 411.040314][ T32] Tainted: G L syzkaller #0 [ 411.040321][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.040327][ T32] task:syz.7.1205 state:D stack:27128 pid:9559 tgid:9559 ppid:7727 task_flags:0x400040 flags:0x00080003 [ 411.040364][ T32] Call Trace: [ 411.040368][ T32] [ 411.040376][ T32] __schedule+0x1259/0x6920 [ 411.040397][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 411.040418][ T32] ? lock_acquire+0x1d1/0x380 [ 411.040431][ T32] ? __pfx___schedule+0x10/0x10 [ 411.040446][ T32] ? find_held_lock+0x2b/0x80 [ 411.040463][ T32] ? schedule+0x225/0x2c0 [ 411.040481][ T32] schedule+0xdd/0x2c0 [ 411.040496][ T32] request_wait_answer+0x531/0x860 [ 411.040512][ T32] ? __pfx_request_wait_answer+0x10/0x10 [ 411.040525][ T32] ? fuse_dev_queue_req+0x26c/0x370 [ 411.040536][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 411.040556][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 411.040571][ T32] ? _raw_spin_unlock+0x28/0x50 [ 411.040587][ T32] ? fuse_dev_queue_req+0x2cb/0x370 [ 411.040600][ T32] fuse_chan_send+0x5a3/0x9c0 [ 411.040615][ T32] __fuse_simple_request+0x18e/0x1e0 [ 411.040629][ T32] fuse_flush+0x4d6/0x6a0 [ 411.040642][ T32] ? __pfx_fuse_flush+0x10/0x10 [ 411.040667][ T32] ? find_held_lock+0x2b/0x80 [ 411.040684][ T32] ? __pfx_fuse_flush+0x10/0x10 [ 411.040696][ T32] filp_flush+0xe7/0x190 [ 411.040709][ T32] filp_close+0x1c/0x30 [ 411.040721][ T32] __range_close+0x137/0x7a0 [ 411.040741][ T32] __x64_sys_close_range+0x3ce/0x5d0 [ 411.040760][ T32] ? __pfx___x64_sys_close_range+0x10/0x10 [ 411.040781][ T32] do_syscall_64+0x123/0x790 [ 411.040800][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.040813][ T32] RIP: 0033:0x7fbc3999e159 [ 411.040823][ T32] RSP: 002b:00007ffc28cd98d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 411.040835][ T32] RAX: ffffffffffffffda RBX: 00007ffc28cd99c0 RCX: 00007fbc3999e159 [ 411.040842][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 411.040850][ T32] RBP: 00000000000379bc R08: 0000000000000001 R09: 0000000000000000 [ 411.040857][ T32] R10: 0000001b2e720000 R11: 0000000000000246 R12: 00007ffc28cd9a00 [ 411.040864][ T32] R13: 00007fbc39c25fac R14: 0000000000037a5f R15: 00007fbc39c25fa0 [ 411.040880][ T32] [ 411.040893][ T32] [ 411.040893][ T32] Showing all locks held in the system: [ 411.040898][ T32] locks held by kworker/0:0/9: 2, last CPU#0: [ 411.040907][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.040942][ T32] #1: ffffc900000e7d08 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.040977][ T32] locks held by kworker/0:1/10: 3, last CPU#0: [ 411.040986][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.041018][ T32] #1: ffffc900000f7d08 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.041052][ T32] #2: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x21a/0x1a10 [ 411.041084][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 411.041092][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.041125][ T32] #1: ffffc90000117d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.041159][ T32] #2: ffff888034d19258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 411.041194][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 411.041203][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.041236][ T32] #1: ffffc90000127d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.041274][ T32] #2: ffff88802729f258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 411.041312][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 411.041320][ T32] #0: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 411.041353][ T32] locks held by kworker/u8:2/41: 3, last CPU#0: [ 411.041361][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.041394][ T32] #1: ffffc90000b17d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.041427][ T32] #2: ffff888056580800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 411.041457][ T32] locks held by kworker/u8:3/50: 3, last CPU#0: [ 411.041465][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.041498][ T32] #1: ffffc90000ba7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.041530][ T32] #2: ffff88804ab70800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 411.041559][ T32] locks held by kworker/u8:4/60: 3, last CPU#0: [ 411.041567][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.041600][ T32] #1: ffffc9000202fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.041633][ T32] #2: ffff888056750800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 411.041660][ T32] locks held by kworker/u8:5/63: 2, last CPU#0: [ 411.041668][ T32] #0: ffff88801c093940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.041701][ T32] #1: ffffc9000205fd08 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.041738][ T32] locks held by kworker/u8:6/151: 3, last CPU#0: [ 411.041746][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.041779][ T32] #1: ffffc9000204fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.041811][ T32] #2: ffff888057090800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 411.041840][ T32] locks held by kworker/u8:7/980: 2, last CPU#0: [ 411.041847][ T32] #0: ffff8880517fe940 ((wq_completion)wg-kex-wg0#15){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.041883][ T32] #1: ffffc90004e87d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.041919][ T32] locks held by kworker/u8:8/1436: 3, last CPU#0: [ 411.041927][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.041960][ T32] #1: ffffc90005f37d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.041993][ T32] #2: ffff8880571c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 411.042020][ T32] locks held by kworker/u8:9/1442: 2, last CPU#0: [ 411.042028][ T32] #0: ffff888078f13140 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.042063][ T32] #1: ffffc90005f87d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.042096][ T32] locks held by kworker/u8:10/1459: 3, last CPU#0: [ 411.042104][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.042137][ T32] #1: ffffc90005f97d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.042169][ T32] #2: ffff888056b40800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 411.042206][ T32] locks held by kworker/R-bat_e/3223: 2, last CPU#0: [ 411.042214][ T32] #0: ffff8880341fb940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.042246][ T32] #1: ffffc9000e527c68 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.042288][ T32] locks held by klogd/4958: 1, last CPU#0: [ 411.042296][ T32] #0: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0x90/0x600 [ 411.042325][ T32] locks held by udevd/4969: 2, last CPU#0: [ 411.042333][ T32] #0: ffffffff8f90a878 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 411.042361][ T32] #1: ffffffff8effd218 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 411.042391][ T32] locks held by dhcpcd/5264: 1, last CPU#0: [ 411.042399][ T32] #0: ffffffff8effd218 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 411.042427][ T32] locks held by getty/5355: 2, on CPU#0: [ 411.042435][ T32] #0: ffff88803630b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 411.042463][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 411.042496][ T32] locks held by syz-executor/5586: 4, last CPU#0: [ 411.042504][ T32] #0: ffff88802c02a9f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x35/0x6f0 [ 411.042536][ T32] #1: ffff8880360c2558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 411.042564][ T32] #2: ffffffff8effd218 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 411.042592][ T32] #3: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x25/0x1a0 [ 411.042624][ T32] locks held by syz-executor/5597: 5, last CPU#0: [ 411.042632][ T32] #0: ffff888079358460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 411.042666][ T32] #1: ffff8880237c56f8 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x262/0x730 [ 411.042702][ T32] #2: ffffffff8f90a878 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 411.042729][ T32] #3: ffffffff8effd218 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 411.042756][ T32] #4: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 411.042788][ T32] locks held by kworker/u9:3/5603: 5, on CPU#0: [ 411.042797][ T32] #0: ffff888026919140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.042829][ T32] #1: ffffc90003ed7d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.042862][ T32] #2: ffff88805402cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 411.042889][ T32] #3: ffff88805402c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 411.042915][ T32] #4: ffffffff90f55f40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x11d/0x3c0 [ 411.042947][ T32] locks held by kworker/0:3/5607: 3, last CPU#0: [ 411.042955][ T32] #0: ffff888035a6d140 ((wq_completion)wg-kex-wg0#16){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.060206][ T32] #1: ffffc90003ef7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.060252][ T32] #2: ffff8880382dd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 411.060297][ T32] locks held by kworker/u9:5/5609: 7, on CPU#0: [ 411.060306][ T32] #0: ffff888078dcb940 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.060339][ T32] #1: ffffc90003f17d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.060371][ T32] #2: ffff8880572c8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 411.060398][ T32] #3: ffff8880572c80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 411.060425][ T32] #4: ffffffff90f55f40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x11d/0x3c0 [ 411.060457][ T32] #5: ffff88807642aaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0xa1/0x6c0 [ 411.060487][ T32] #6: ffffffff8edf83e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 411.060520][ T32] locks held by kworker/0:4/5710: 5, last CPU#0: [ 411.060528][ T32] #0: ffff8880206ca140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.060561][ T32] #1: ffffc9000426fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.060595][ T32] #2: ffff8880270a71d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 411.060627][ T32] #3: ffff88802cf681d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 411.060656][ T32] #4: ffffffff8effd218 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 411.060686][ T32] locks held by kworker/0:5/5724: 3, on CPU#0: [ 411.060694][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.060728][ T32] #1: ffffc9000435fd08 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.060760][ T32] #2: ffffffff8edf83e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 411.060787][ T32] locks held by syz-executor/6297: 3, last CPU#0: [ 411.060796][ T32] #0: ffffffff8f90a878 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 411.060823][ T32] #1: ffffffff8effd218 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 411.060851][ T32] #2: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 411.060883][ T32] locks held by kworker/u8:11/6342: 4, last CPU#0: [ 411.060891][ T32] #0: ffff888078f12940 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.060927][ T32] #1: ffffc90003a67d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.060960][ T32] #2: ffff888026481440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 411.060992][ T32] #3: ffff88807e6a7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 411.061027][ T32] locks held by udevd/6937: 4, on CPU#0: [ 411.061034][ T32] #0: ffff8880327ff638 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 411.061063][ T32] #1: ffff88805718b080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 411.061094][ T32] #2: ffff8880628735a8 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 411.061123][ T32] #3: ffff88802cf681d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 411.061152][ T32] locks held by kworker/u8:12/7161: 3, last CPU#0: [ 411.061160][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.061193][ T32] #1: ffffc900030dfd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.061227][ T32] #2: ffff888026e16258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 411.061271][ T32] locks held by kworker/u8:13/7162: 3, last CPU#0: [ 411.061280][ T32] #0: ffff8880517fe940 ((wq_completion)wg-kex-wg0#15){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.061315][ T32] #1: ffffc9000316fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.061348][ T32] #2: ffff888078d82cb0 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x37/0x1c0 [ 411.061380][ T32] locks held by kworker/u8:14/7163: 1, last CPU#0: [ 411.061388][ T32] #0: ffffffff8effd218 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 411.061416][ T32] locks held by kworker/u8:15/7164: 4, last CPU#0: [ 411.061425][ T32] #0: ffff88807c428140 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.061460][ T32] #1: ffffc9000495fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.061493][ T32] #2: ffff8880354c1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 411.061525][ T32] #3: ffff888051525c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 411.061557][ T32] locks held by kworker/u8:16/7166: 4, last CPU#0: [ 411.061565][ T32] #0: ffff888021a91140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.061597][ T32] #1: ffffc9000309fd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.061630][ T32] #2: ffff88801da860e8 (&type->s_umount_key#38){.+.+}-{4:4}, at: super_trylock_shared+0x21/0xf0 [ 411.061661][ T32] #3: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 411.061692][ T32] locks held by kworker/u8:17/7168: 4, last CPU#0: [ 411.061701][ T32] #0: ffff88802be24140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 411.061733][ T32] #1: ffffc9000451fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 411.061766][ T32] #2: ffff888078835440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 411.061798][ T32] #3: ffff888078d85c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 411.061831][ T32] locks held by syz-executor/7727: 1, last CPU#0: [ 411.061839][ T32] #0: ffffffff8effd218 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 411.061872][ T32] locks held by syz.5.1237/9648: 1, last CPU#0: [ 411.061880][ T32] #0: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd6/0x2b0 [ 411.061908][ T32] locks held by syz.8.1239/9651: 2, last CPU#0: [ 411.061916][ T32] #0: ffff8880555d7b00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 411.061950][ T32] #1: ffff888027391c60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 411.061977][ T32] locks held by syz-executor/9653: 2, last CPU#0: [ 411.061985][ T32] #0: ffff8880740411c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 411.062017][ T32] #1: ffffffff8effd218 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 411.062045][ T32] [ 411.062048][ T32] ============================================= [ 411.062048][ T32] [ 411.062071][ T32] NMI backtrace for cpu 0 [ 411.062083][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 411.062099][ T32] Tainted: [L]=SOFTLOCKUP [ 411.062103][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 411.062110][ T32] Call Trace: [ 411.062114][ T32] [ 411.062120][ T32] dump_stack_lvl+0x100/0x190 [ 411.062138][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 411.062156][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 411.062170][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 411.062186][ T32] sys_info+0x141/0x190 [ 411.062199][ T32] watchdog+0xcb1/0x1030 [ 411.062216][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 411.062232][ T32] ? __pfx_watchdog+0x10/0x10 [ 411.062245][ T32] ? __kthread_parkme+0x18f/0x230 [ 411.062265][ T32] ? kthread+0x13a/0x450 [ 411.062280][ T32] ? __pfx_watchdog+0x10/0x10 [ 411.062293][ T32] kthread+0x373/0x450 [ 411.062308][ T32] ? __pfx_kthread+0x10/0x10 [ 411.062324][ T32] ret_from_fork+0x730/0xd60 [ 411.062338][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 411.062351][ T32] ? __switch_to+0x800/0x10f0 [ 411.062367][ T32] ? __pfx_kthread+0x10/0x10 [ 411.062383][ T32] ret_from_fork_asm+0x1a/0x30 [ 411.062403][ T32] [ 411.062419][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 412.915153][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 412.925807][ T32] Tainted: [L]=SOFTLOCKUP [ 412.930106][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 412.940134][ T32] Call Trace: [ 412.943388][ T32] [ 412.946295][ T32] dump_stack_lvl+0x100/0x190 [ 412.950953][ T32] vpanic+0x553/0x970 [ 412.954907][ T32] ? __pfx_vpanic+0x10/0x10 [ 412.959383][ T32] panic+0xd1/0xe0 [ 412.963075][ T32] ? __pfx_panic+0x10/0x10 [ 412.967461][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 412.972459][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 412.978597][ T32] ? watchdog.cold+0x1ec/0x234 [ 412.983350][ T32] watchdog.cold+0x1fd/0x234 [ 412.987916][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 412.993699][ T32] ? __pfx_watchdog+0x10/0x10 [ 412.998351][ T32] ? __kthread_parkme+0x18f/0x230 [ 413.003453][ T32] ? kthread+0x13a/0x450 [ 413.007671][ T32] ? __pfx_watchdog+0x10/0x10 [ 413.012338][ T32] kthread+0x373/0x450 [ 413.016383][ T32] ? __pfx_kthread+0x10/0x10 [ 413.020949][ T32] ret_from_fork+0x730/0xd60 [ 413.025531][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 413.030620][ T32] ? __switch_to+0x800/0x10f0 [ 413.035273][ T32] ? __pfx_kthread+0x10/0x10 [ 413.039837][ T32] ret_from_fork_asm+0x1a/0x30 [ 413.044594][ T32] [ 413.047639][ T32] Kernel Offset: disabled [ 413.051953][ T32] Rebooting in 86400 seconds..