last executing test programs: 2m26.052520694s ago: executing program 1 (id=232): madvise(&(0x7f00003de000/0x4000)=nil, 0x4000, 0x9) 2m25.987676911s ago: executing program 1 (id=235): r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000380)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18) 2m25.95258449s ago: executing program 1 (id=237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x0) 2m25.851594779s ago: executing program 1 (id=238): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x2e800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x1f0, 0x138, 0x1, 0x0, 0x21000, 0x0, 0x0, @by_dev={r1}, [@multipath={0x0, 0xc90, 0x0, 0xb8, 'multipath\x00', {'1 retain_attached_hw_handler', 0x20, '1 rdac', 0x20, 0x1, 0x20, 0x1, [{0x20, 'service-time 0', 0x20, 0x2, 0x20, '1', [{0x20, @ram={'/dev/ram', 0x0}}, {0x20, @ram={'/dev/ram', 0x0}, ' 1000'}]}]}}]}) 2m25.850011899s ago: executing program 1 (id=239): r0 = syz_open_dev$mtd(0x0, 0x0, 0x80) ioctl$OTPSELECT(r0, 0x80044d0d, &(0x7f00000004c0)=0x2) 2m25.802781488s ago: executing program 1 (id=240): r0 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) 2m10.761734077s ago: executing program 32 (id=240): r0 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) 7.556937866s ago: executing program 2 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/119, 0x77}], 0x1, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00'}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) socket$inet6(0xa, 0x3, 0xff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x103, 0x101, 0x551}}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x4f00, 0x500, 0x100, 0x1, 0x4000}}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd6ba}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x400c4) 6.342921583s ago: executing program 2 (id=1652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000708000100000000001400"], 0x4a) 5.946340306s ago: executing program 2 (id=1656): socket(0x1e, 0x805, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 5.924298515s ago: executing program 5 (id=1658): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000002c0)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003840)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000003880)='./tracing\x00', &(0x7f00000038c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000003900)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003940)={0x1, &(0x7f0000003980)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r2, r1, 0x0, 0x7ffff000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.915952171s ago: executing program 3 (id=1659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "e47659dbc6c2e230", "9cb869f7a5f6b56b760691833225b354", "dc518267", "d2124f7eb268b655"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001200)=[{&(0x7f0000001040)="e42e2e4c7cf2a2673b016b67398748b6ab8f7a5014d614d198f5cac9868b78d378749a76719dca4d8320533b640950ba72751ba4314709082f53f6344d72bf0508bfb4a8d5539e60197472dc4c964059d33142d4d5514eac4e3de589c0d4c9c362cc565ca28a79c4bb4739e1552d81b0498ecdf992314186622011437565b2925d354ebfdf", 0x85}], 0x1) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 5.560026215s ago: executing program 4 (id=1662): prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/119, 0x77}], 0x1, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00'}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) socket$inet6(0xa, 0x3, 0xff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x103, 0x101, 0x551}}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x4f00, 0x500, 0x100, 0x1, 0x4000}}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd6ba}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x400c4) 4.952509323s ago: executing program 2 (id=1664): pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) semop(0x0, &(0x7f0000001140)=[{0x2}, {0x4, 0xe038, 0x800}], 0x2) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141b42, 0xa) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r4}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x400002a2) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYRES16=r1, @ANYRES16=r0], 0x107c) capset(&(0x7f0000000040)={0x20080522}, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) read$midi(r5, 0x0, 0x3b) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) write$binfmt_elf64(r4, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x1, 0x1, 0x9, 0xfff, 0x3, 0x3e, 0x50a694da, 0x3ca, 0x40, 0x2f6, 0x80000000, 0x4, 0x38, 0x2, 0x7, 0x2, 0x6}, [{0x70000000, 0x8, 0x2, 0x2, 0x8ef, 0x0, 0x1, 0xe8}, {0x70000000, 0x9, 0xc, 0x561c0da5, 0x0, 0x4, 0x10001, 0xffffffffffffffff}], "966df988c82b2cd86f50830741c34cc8e1289e24d400b4b2fa9568c5847c53a236d269f5837b37ca7762", ['\x00', '\x00']}, 0x2da) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102e98a9940720c0c003d0e0102030109022400010103c0040904"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 4.92240234s ago: executing program 5 (id=1665): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='trace/events/sched/sched_switch/filter\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000340)=0x4) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file7\x00', 0x1ac) fchmodat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0xfffffffb) mkdir(&(0x7f0000000680)='./file0\x00', 0x2) 4.759933973s ago: executing program 3 (id=1666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000708000100000000001400"], 0x4a) 4.627208723s ago: executing program 3 (id=1667): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(0x0, 0x100000, 0x0) flock(r1, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) flock(r0, 0x5) 4.595243723s ago: executing program 3 (id=1668): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'netdevsim0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.496086472s ago: executing program 0 (id=1669): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='27', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth1_macvtap\x00', 0xfffffffc}, 0x18) 4.472295783s ago: executing program 4 (id=1670): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f0000000040), 0x0, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) 4.471243335s ago: executing program 3 (id=1671): syz_usb_connect$uac2(0x0, 0xa0, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x2e, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x3, 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000100)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000180)='minix\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x300, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000001c0)={0x0, 0x30b5, 0x0, 0xfffffffe, 0x12c}, &(0x7f0000000240)=0x0, 0x0, 0x0) syz_ublk_add_dev(r4, r5, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000400)=0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/udp6\x00') r9 = socket(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f00000004c0)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) r10 = syz_open_dev$sg(&(0x7f0000000580), 0x0, 0x5) writev(r10, &(0x7f00000005c0)=[{&(0x7f0000000600)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) ioctl$SG_GET_REQUEST_TABLE(r10, 0x2286, &(0x7f0000000740)) sched_getscheduler(r0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r8, r6, &(0x7f00000008c0)={0x0, 0x1fffd, 0x40, 0x3}, &(0x7f0000000940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x200, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x6, 0x368}}], 0x1, &(0x7f0000000bc0)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, r11, '\x00', {0x2, 0x6fb, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) sendmmsg$inet(r12, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000d00)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000dc0)}, {&(0x7f0000000e00)}, {0x0}, {&(0x7f0000000f40)="214bc39b157d689fe22c6a000a72ef1c0d2b51f7a7c8bfcc3deabc46a118b8fc5093a2c290c5f5c5200e6cb8e1190f9ffc7e7a904b6ffbd70040f7addb1e44b8c5456ec5d10754ea9a", 0x49}], 0x4, &(0x7f0000000fc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x80000) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0) 4.44987429s ago: executing program 0 (id=1672): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) userfaultfd(0x80001) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f000000ad80)={0x0, 0x0, &(0x7f000000adc0)={0x0}, 0x1, 0x0, 0x0, 0x20000850}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f000000ae00)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f000000ae40)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f000000ae80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000aec0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000000af00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f000000af80), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f000000b000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f000000b040)={0x1f, @none, 0x18}, 0xa) 4.186244531s ago: executing program 4 (id=1673): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x181081) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x0, 0x4}) 3.873523397s ago: executing program 5 (id=1674): socket(0x1e, 0x805, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 3.512211667s ago: executing program 0 (id=1675): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x8b8d, 0x12, 0x11, 0xa, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x2000000003, 0x20000, 0x82a, 0x0, 0xc1, 0x80}) io_setup(0x2, &(0x7f0000000580)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000740)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) 2.801920844s ago: executing program 4 (id=1676): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x1, 0x2, &(0x7f00000017c0)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x88}, @exit], &(0x7f0000001800)='GPL\x00'}, 0x90) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4040800) sendmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000540)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000700)}, {&(0x7f0000000740)}, {0x0}], 0x4, 0x0, 0xf50}, 0x4004412) mount$bpf(0x200000002000, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x40, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) sendmsg$xdp(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@gettaction={0x80, 0x32, 0x20, 0xc676, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000091}, 0x200040d0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="880100003e00010324bd702202dcdf25"], 0x188}, 0x1, 0x0, 0x0, 0x4018}, 0x40c00) 2.685682658s ago: executing program 2 (id=1677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x68, 0x2c, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000708000100000000001400"], 0x4a) 2.586022515s ago: executing program 4 (id=1678): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x8b8d, 0x12, 0x11, 0xa, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x2000000003, 0x20000, 0x82a, 0x0, 0xc1, 0x80}) io_setup(0x2, &(0x7f0000000580)) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x8002, 0x0) r3 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000740)="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", 0x558, r3) 2.527929132s ago: executing program 5 (id=1679): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000680)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed", 0x39}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/81, 0x7ffff000}, {&(0x7f0000000940)=""/83, 0x20000253}], 0x2}, 0x0) 2.452388028s ago: executing program 0 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='trace/events/sched/sched_switch/filter\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file7\x00', 0x1ac) fchmodat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0xfffffffb) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000680)='./file0\x00', 0x2) 1.55408677s ago: executing program 5 (id=1681): prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000780)=[{&(0x7f00000008c0)=""/119, 0x77}], 0x1, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00'}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) socket$inet6(0xa, 0x3, 0xff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x103, 0x101, 0x551}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x4f00, 0x500, 0x100, 0x1, 0x4000}}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd6ba}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x400c4) 1.505653543s ago: executing program 4 (id=1682): r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190008000000000001000000fe880000000000000000000000000101ac1414aa000000000000000000ad000000001973000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000300000000000000080000000000000000000000b76b6e000001000000000000c4000500ac1414aa0000000000000000000000000000000033000000000000000a010100000000000000000000000000ff34000001000000050000000000000040000000ac1e0001000000000000000000000000000000006c00000000000000fc0000000000000000000000000000010020000000000000810000000000000000000000ff020000000000000000000000000001000004d66c"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x8000080) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000001a40)="95", 0x1}], 0x1}, 0x3e8) 1.487444514s ago: executing program 2 (id=1683): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) 1.369492485s ago: executing program 0 (id=1684): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='trace/events/sched/sched_switch/filter\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file7\x00', 0x1ac) fchmodat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0xfffffffb) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000680)='./file0\x00', 0x2) 1.120692954s ago: executing program 3 (id=1685): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x8b8d, 0x12, 0x11, 0xa, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x2000000003, 0x20000, 0x82a, 0x0, 0xc1, 0x80}) io_setup(0x2, &(0x7f0000000580)) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x8002, 0x0) r4 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000740)="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", 0x559, r4) write$P9_RSTATu(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0200000400000005"], 0x21e) 391.380166ms ago: executing program 5 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) io_setup(0x2, 0x0) r3 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000740), 0x0, r3) 0s ago: executing program 0 (id=1687): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) fchown(0xffffffffffffffff, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x40de, 0x0, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_io_uring_submit$UBLK(0x0, r3, 0x0, &(0x7f0000000540)=@ublk_get_params_sqe={0x2e, 0x0, 0x0, r5, 0x80207509, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ftruncate(r8, 0x3) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x10000, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 0x1f58/0x22e0 [ 122.891125][ T7400] ? __pfx_futex_wait+0x10/0x10 [ 122.891160][ T7400] ? kmem_cache_free+0x127/0x6c0 [ 122.891188][ T7400] ? __pfx_get_signal+0x10/0x10 [ 122.891213][ T7400] ? do_futex+0x190/0x440 [ 122.891240][ T7400] arch_do_signal_or_restart+0x91/0x7e0 [ 122.891263][ T7400] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 122.891292][ T7400] ? __x64_sys_openat+0x12d/0x210 [ 122.891328][ T7400] exit_to_user_mode_loop+0x139/0x700 [ 122.891349][ T7400] ? rcu_is_watching+0x13/0xc0 [ 122.891373][ T7400] do_syscall_64+0x661/0x790 [ 122.891402][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.891423][ T7400] RIP: 0033:0x7fe4d999fb19 [ 122.891439][ T7400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.891457][ T7400] RSP: 002b:00007fe4d7bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.891477][ T7400] RAX: fffffffffffffe00 RBX: 00007fe4d9c25fa8 RCX: 00007fe4d999fb19 [ 122.891489][ T7400] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe4d9c25fa8 [ 122.891500][ T7400] RBP: 00007fe4d9c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 122.891511][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.891522][ T7400] R13: 00007fe4d9c26038 R14: 00007fff53150840 R15: 00007fff53150928 [ 122.891549][ T7400] [ 122.916870][ T1517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.916890][ T1517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.926976][ T1167] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.237481][ T30] audit: type=1400 audit(1794005375.110:448): avc: denied { create } for pid=7407 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.559037][ T7430] 9p: Bad value for 'rfdno' [ 123.986007][ T7458] 9p: Bad value for 'rfdno' [ 125.526206][ T7525] device-mapper: table: 248:6: mirror: Device lookup failure (-ENOENT) [ 125.526237][ T7525] device-mapper: ioctl: error adding target to table [ 126.548954][ T7551] FAULT_INJECTION: forcing a failure. [ 126.548954][ T7551] name failslab, interval 1, probability 0, space 0, times 0 [ 126.548989][ T7551] CPU: 0 UID: 0 PID: 7551 Comm: syz.0.579 Not tainted syzkaller #0 PREEMPT(full) [ 126.549015][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 126.549028][ T7551] Call Trace: [ 126.549036][ T7551] [ 126.549044][ T7551] dump_stack_lvl+0x100/0x190 [ 126.549085][ T7551] should_fail_ex.cold+0x5/0xa [ 126.549119][ T7551] should_failslab+0xc2/0x120 [ 126.549152][ T7551] __kmalloc_noprof+0xfc/0x840 [ 126.549184][ T7551] ? fib_default_rule_add+0x4f/0x420 [ 126.549212][ T7551] fib_default_rule_add+0x4f/0x420 [ 126.549234][ T7551] ? __pfx_fib6_rules_net_init+0x10/0x10 [ 126.549269][ T7551] fib6_rules_net_init+0x52/0x140 [ 126.549303][ T7551] ops_init+0x1e2/0x5f0 [ 126.549333][ T7551] setup_net+0x118/0x3a0 [ 126.549356][ T7551] ? __pfx_setup_net+0x10/0x10 [ 126.549381][ T7551] ? bpf_lsm_namespace_init+0x9/0x10 [ 126.549406][ T7551] copy_net_ns+0x340/0x7a0 [ 126.549435][ T7551] create_new_namespaces+0x3ea/0xac0 [ 126.549469][ T7551] unshare_nsproxy_namespaces+0xf6/0x210 [ 126.549499][ T7551] ksys_unshare+0x44f/0x980 [ 126.549526][ T7551] ? __pfx_ksys_unshare+0x10/0x10 [ 126.549565][ T7551] __x64_sys_unshare+0x31/0x40 [ 126.549590][ T7551] do_syscall_64+0x123/0x790 [ 126.549616][ T7551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.549637][ T7551] RIP: 0033:0x7fd896b9fb19 [ 126.549654][ T7551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.549672][ T7551] RSP: 002b:00007fd897b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 126.549692][ T7551] RAX: ffffffffffffffda RBX: 00007fd896e25fa0 RCX: 00007fd896b9fb19 [ 126.549705][ T7551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 126.549717][ T7551] RBP: 00007fd896c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 126.549729][ T7551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.549741][ T7551] R13: 00007fd896e26038 R14: 00007fd896e25fa0 R15: 00007fffc164f048 [ 126.549769][ T7551] [ 126.913115][ T7568] overlayfs: failed to resolve './file1/file0': -2 [ 127.541768][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.541876][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.672846][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 127.672865][ T30] audit: type=1400 audit(1794005379.550:454): avc: denied { mounton } for pid=7584 comm="syz.0.591" path="/137/file0" dev="tmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.792887][ T7587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.593'. [ 127.922932][ T30] audit: type=1400 audit(1794005379.800:455): avc: denied { connect } for pid=7594 comm="syz.0.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.044731][ T30] audit: type=1400 audit(1794005379.920:456): avc: denied { setopt } for pid=7603 comm="syz.5.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 128.069322][ T7602] overlayfs: failed to resolve './file1/file0': -2 [ 128.179408][ T4952] block nbd1: Possible stuck request ffff888029c50000: control (read@0,2048B). Runtime 30 seconds [ 128.608919][ T7644] overlayfs: failed to resolve './file1/file0': -2 [ 129.414877][ T30] audit: type=1400 audit(1794005381.290:457): avc: denied { bind } for pid=7660 comm="iou-wrk-7661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.678145][ T30] audit: type=1400 audit(1794005381.550:458): avc: denied { mount } for pid=7677 comm="syz.3.632" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 129.686915][ T30] audit: type=1400 audit(1794005381.560:459): avc: denied { search } for pid=7677 comm="syz.3.632" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.686975][ T30] audit: type=1400 audit(1794005381.560:460): avc: denied { search } for pid=7677 comm="syz.3.632" name="events" dev="tracefs" ino=3200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.759863][ T30] audit: type=1400 audit(1794005381.630:461): avc: denied { search } for pid=7677 comm="syz.3.632" name="sched" dev="tracefs" ino=14662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.759915][ T30] audit: type=1400 audit(1794005381.630:462): avc: denied { search } for pid=7677 comm="syz.3.632" name="sched_switch" dev="tracefs" ino=14664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 129.759952][ T30] audit: type=1400 audit(1794005381.640:463): avc: denied { read write } for pid=7677 comm="syz.3.632" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 130.029812][ T7702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.641'. [ 130.224614][ T7713] ip_tables: iptables: counters copy to user failed while replacing table [ 130.966015][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 131.146619][ T7736] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 131.146647][ T7736] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 131.316275][ T7755] overlayfs: failed to resolve './file1/file0': -2 [ 131.791910][ T7784] overlayfs: failed to resolve './file1/file0': -2 [ 131.877541][ T7785] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.339377][ T7809] tun0: tun_chr_ioctl cmd 2147767519 [ 133.339851][ T7809] tun0: tun_chr_ioctl cmd 1074812117 [ 133.452633][ T7815] syzkaller0: entered promiscuous mode [ 133.452657][ T7815] syzkaller0: entered allmulticast mode [ 134.004331][ T7824] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.009165][ T7829] tmpfs: Unknown parameter 'Zpol' [ 134.995854][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 134.995875][ T30] audit: type=1400 audit(1794005386.870:469): avc: denied { shutdown } for pid=7854 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.104121][ T7857] syzkaller0: entered promiscuous mode [ 135.104146][ T7857] syzkaller0: entered allmulticast mode [ 135.234565][ T30] audit: type=1400 audit(1794005387.110:470): avc: denied { connect } for pid=7854 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.328144][ T7871] FAULT_INJECTION: forcing a failure. [ 135.328144][ T7871] name fail_futex, interval 1, probability 0, space 0, times 0 [ 135.328172][ T7871] CPU: 1 UID: 0 PID: 7871 Comm: syz.3.714 Not tainted syzkaller #0 PREEMPT(full) [ 135.328193][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 135.328204][ T7871] Call Trace: [ 135.328210][ T7871] [ 135.328217][ T7871] dump_stack_lvl+0x100/0x190 [ 135.328258][ T7871] should_fail_ex.cold+0x5/0xa [ 135.328288][ T7871] get_futex_key+0x1c9/0x13e0 [ 135.328314][ T7871] ? __pfx_get_futex_key+0x10/0x10 [ 135.328333][ T7871] ? futex_wake+0x4ea/0x5e0 [ 135.328365][ T7871] futex_wake+0xf4/0x5e0 [ 135.328395][ T7871] ? __pfx_futex_wake+0x10/0x10 [ 135.328426][ T7871] ? find_held_lock+0x2b/0x80 [ 135.328448][ T7871] ? __fget_files+0x215/0x3d0 [ 135.328472][ T7871] ? __fget_files+0x215/0x3d0 [ 135.328508][ T7871] do_futex+0x2b2/0x440 [ 135.328533][ T7871] ? __pfx_do_futex+0x10/0x10 [ 135.328563][ T7871] __x64_sys_futex+0x34f/0x4d0 [ 135.328590][ T7871] ? __pfx___x64_sys_futex+0x10/0x10 [ 135.328623][ T7871] do_syscall_64+0x123/0x790 [ 135.328647][ T7871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.328667][ T7871] RIP: 0033:0x7f319519fb19 [ 135.328683][ T7871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.328700][ T7871] RSP: 002b:00007f3195f890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.328720][ T7871] RAX: ffffffffffffffda RBX: 00007f3195425fa8 RCX: 00007f319519fb19 [ 135.328732][ T7871] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3195425fac [ 135.328744][ T7871] RBP: 00007f3195425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 135.328755][ T7871] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 135.328766][ T7871] R13: 00007f3195426038 R14: 00007ffef0867e90 R15: 00007ffef0867f78 [ 135.328792][ T7871] [ 135.425199][ T7874] vlan0: entered promiscuous mode [ 136.218011][ T7899] ip_tables: iptables: counters copy to user failed while replacing table [ 136.350985][ T7898] FAULT_INJECTION: forcing a failure. [ 136.350985][ T7898] name failslab, interval 1, probability 0, space 0, times 0 [ 136.351018][ T7898] CPU: 1 UID: 0 PID: 7898 Comm: syz.2.725 Not tainted syzkaller #0 PREEMPT(full) [ 136.351042][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 136.351057][ T7898] Call Trace: [ 136.351064][ T7898] [ 136.351072][ T7898] dump_stack_lvl+0x100/0x190 [ 136.351113][ T7898] should_fail_ex.cold+0x5/0xa [ 136.351144][ T7898] should_failslab+0xc2/0x120 [ 136.351169][ T7898] kmem_cache_alloc_noprof+0x92/0x6a0 [ 136.351201][ T7898] ? __page_table_check_ptes_set+0x1d5/0x530 [ 136.351227][ T7898] ? ptlock_alloc+0x1f/0x70 [ 136.351255][ T7898] ptlock_alloc+0x1f/0x70 [ 136.351278][ T7898] pte_alloc_one+0x82/0x3d0 [ 136.351301][ T7898] __pte_alloc+0x6d/0x3e0 [ 136.351330][ T7898] ? __pfx___pte_alloc+0x10/0x10 [ 136.351360][ T7898] ? mm_alloc_pmd+0x2c2/0x470 [ 136.351389][ T7898] mfill_establish_pmd+0x197/0x210 [ 136.351419][ T7898] mfill_atomic_poison.constprop.0+0x358/0x1620 [ 136.351462][ T7898] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 136.351492][ T7898] ? __pfx_mfill_atomic_poison.constprop.0+0x10/0x10 [ 136.351522][ T7898] ? lock_acquire+0x1d1/0x380 [ 136.351549][ T7898] ? __might_fault+0xc5/0x140 [ 136.351572][ T7898] ? find_held_lock+0x2b/0x80 [ 136.351614][ T7898] userfaultfd_ioctl+0x283b/0x6550 [ 136.351649][ T7898] ? do_vfs_ioctl+0x9f3/0x13e0 [ 136.351669][ T7898] ? __sanitizer_cov_trace_pc+0x64/0x70 [ 136.351695][ T7898] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 136.351726][ T7898] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 136.351746][ T7898] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 136.351776][ T7898] ? __fget_files+0x34/0x3d0 [ 136.351814][ T7898] ? selinux_file_ioctl+0x1e0/0x290 [ 136.351833][ T7898] ? selinux_file_ioctl+0x1e7/0x290 [ 136.351852][ T7898] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 136.351885][ T7898] ? __x64_sys_ioctl+0x18e/0x210 [ 136.351903][ T7898] __x64_sys_ioctl+0x18e/0x210 [ 136.351924][ T7898] do_syscall_64+0x123/0x790 [ 136.351952][ T7898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.351973][ T7898] RIP: 0033:0x7fe4d999fb19 [ 136.351990][ T7898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.352009][ T7898] RSP: 002b:00007fe4d7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.352030][ T7898] RAX: ffffffffffffffda RBX: 00007fe4d9c25fa0 RCX: 00007fe4d999fb19 [ 136.352045][ T7898] RDX: 00002000000000c0 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 136.352058][ T7898] RBP: 00007fe4d9a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 136.352071][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.352084][ T7898] R13: 00007fe4d9c26038 R14: 00007fe4d9c25fa0 R15: 00007fff53150928 [ 136.352114][ T7898] [ 136.578924][ T7905] team0: Port device vlan0 removed [ 136.820590][ T30] audit: type=1807 audit(1794005388.700:471): action=measure func=FILE res=0 [ 136.820765][ T30] audit: type=1802 audit(1794005388.700:472): pid=7918 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.4.734" res=0 errno=-22 [ 136.820958][ T7916] ima: policy update failed [ 136.821064][ T30] audit: type=1802 audit(1794005388.700:473): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.734" res=0 errno=-22 [ 136.950591][ T5626] Bluetooth: Wrong link type (-71) [ 136.951299][ T5626] Bluetooth: hci3: link tx timeout [ 136.951313][ T5626] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.074651][ T7933] syzkaller0: entered promiscuous mode [ 137.074675][ T7933] syzkaller0: entered allmulticast mode [ 137.296793][ T5626] Bluetooth: hci5: command 0x0405 tx timeout [ 137.435525][ T7942] tipc: Started in network mode [ 137.435543][ T7942] tipc: Node identity 4, cluster identity 4711 [ 137.435550][ T7942] tipc: Node number set to 4 [ 137.512645][ T7949] ip_tables: iptables: counters copy to user failed while replacing table [ 137.765589][ T7961] syzkaller0: entered promiscuous mode [ 137.765612][ T7961] syzkaller0: entered allmulticast mode [ 138.107759][ T7967] overlayfs: failed to resolve './file1': -2 [ 138.592046][ T7975] FAULT_INJECTION: forcing a failure. [ 138.592046][ T7975] name failslab, interval 1, probability 0, space 0, times 0 [ 138.592076][ T7975] CPU: 1 UID: 0 PID: 7975 Comm: syz.4.757 Not tainted syzkaller #0 PREEMPT(full) [ 138.592101][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 138.592114][ T7975] Call Trace: [ 138.592122][ T7975] [ 138.592131][ T7975] dump_stack_lvl+0x100/0x190 [ 138.592173][ T7975] should_fail_ex.cold+0x5/0xa [ 138.592208][ T7975] should_failslab+0xc2/0x120 [ 138.592234][ T7975] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 138.592269][ T7975] ? __d_alloc+0x34/0xad0 [ 138.592303][ T7975] __d_alloc+0x34/0xad0 [ 138.592334][ T7975] d_alloc+0x4a/0x1e0 [ 138.592364][ T7975] lookup_one_qstr_excl+0x171/0x250 [ 138.592402][ T7975] start_dirop+0x59/0xb0 [ 138.592423][ T7975] simple_start_creating+0xf9/0x110 [ 138.592449][ T7975] ? __pfx_simple_start_creating+0x10/0x10 [ 138.592476][ T7975] ? do_raw_spin_unlock+0x145/0x1e0 [ 138.592496][ T7975] ? mntput+0x70/0xa0 [ 138.592523][ T7975] debugfs_start_creating.part.0+0x7b/0x150 [ 138.592557][ T7975] debugfs_create_symlink+0x84/0x220 [ 138.592585][ T7975] ref_tracker_dir_symlink+0x257/0x3b0 [ 138.592610][ T7975] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 138.592631][ T7975] ? __lock_acquire+0x5c0/0x1f40 [ 138.592688][ T7975] ? rcu_is_watching+0x13/0xc0 [ 138.592711][ T7975] ? ida_alloc_range+0x70d/0x830 [ 138.592738][ T7975] ? kfree+0x1e5/0x6d0 [ 138.592764][ T7975] ? xas_nomem+0x189/0x2c0 [ 138.592794][ T7975] ? __pfx_net_ns_net_init+0x10/0x10 [ 138.592821][ T7975] net_ns_net_init+0xd2/0x120 [ 138.592848][ T7975] ops_init+0x1e2/0x5f0 [ 138.592879][ T7975] setup_net+0x118/0x3a0 [ 138.592908][ T7975] ? __pfx_setup_net+0x10/0x10 [ 138.592936][ T7975] ? bpf_lsm_namespace_init+0x9/0x10 [ 138.592965][ T7975] copy_net_ns+0x340/0x7a0 [ 138.592997][ T7975] create_new_namespaces+0x3ea/0xac0 [ 138.593032][ T7975] unshare_nsproxy_namespaces+0xf6/0x210 [ 138.593061][ T7975] ksys_unshare+0x44f/0x980 [ 138.593086][ T7975] ? __pfx_ksys_unshare+0x10/0x10 [ 138.593125][ T7975] __x64_sys_unshare+0x31/0x40 [ 138.593151][ T7975] do_syscall_64+0x123/0x790 [ 138.593175][ T7975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.593195][ T7975] RIP: 0033:0x7fa1e939fb19 [ 138.593213][ T7975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.593234][ T7975] RSP: 002b:00007fa1ea212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 138.593256][ T7975] RAX: ffffffffffffffda RBX: 00007fa1e9625fa0 RCX: 00007fa1e939fb19 [ 138.593270][ T7975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 138.593284][ T7975] RBP: 00007fa1e9437b70 R08: 0000000000000000 R09: 0000000000000000 [ 138.593297][ T7975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.593310][ T7975] R13: 00007fa1e9626038 R14: 00007fa1e9625fa0 R15: 00007ffefa7d9cd8 [ 138.593336][ T7975] [ 138.966588][ T7975] rxe_eth0 speed is unknown, defaulting to 1000 [ 138.980092][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 139.206364][ T30] audit: type=1400 audit(1794005391.080:474): avc: denied { getopt } for pid=7989 comm="syz.2.763" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.406392][ T7995] syzkaller0: entered promiscuous mode [ 139.406426][ T7995] syzkaller0: entered allmulticast mode [ 140.782744][ T30] audit: type=1400 audit(1794005392.660:475): avc: denied { ioctl } for pid=8052 comm="syz.4.787" path="socket:[15929]" dev="sockfs" ino=15929 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.783978][ T30] audit: type=1400 audit(1794005392.660:476): avc: denied { ioctl } for pid=8052 comm="syz.4.787" path="socket:[15932]" dev="sockfs" ino=15932 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.783990][ T8053] ip6tnl0: mtu less than device minimum [ 140.920978][ T8063] tipc: New replicast peer: 172.20.20.187 [ 140.922476][ T8063] tipc: Enabled bearer , priority 10 [ 141.351533][ T8083] ip_tables: iptables: counters copy to user failed while replacing table [ 141.958616][ T8114] tmpfs: Unknown parameter 'usrquota_' [ 142.104742][ T8119] nvme nvme0: failed to connect socket: -111 [ 142.398255][ T8144] tmpfs: Unknown parameter 'usrquota_block_har' [ 142.445306][ T30] audit: type=1400 audit(1794005394.320:477): avc: denied { write } for pid=8145 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.730037][ T8168] syzkaller0: entered promiscuous mode [ 142.730068][ T8168] syzkaller0: entered allmulticast mode [ 142.906225][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'. [ 142.984415][ T30] audit: type=1400 audit(1794005394.860:478): avc: denied { getattr } for pid=8179 comm="syz.0.842" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 143.180857][ T8194] smc: net device lo applied user defined pnetid SYZ0 [ 143.259160][ T8198] FAULT_INJECTION: forcing a failure. [ 143.259160][ T8198] name failslab, interval 1, probability 0, space 0, times 0 [ 143.259190][ T8198] CPU: 1 UID: 0 PID: 8198 Comm: syz.2.850 Not tainted syzkaller #0 PREEMPT(full) [ 143.259210][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 143.259222][ T8198] Call Trace: [ 143.259230][ T8198] [ 143.259238][ T8198] dump_stack_lvl+0x100/0x190 [ 143.259279][ T8198] should_fail_ex.cold+0x5/0xa [ 143.259312][ T8198] should_failslab+0xc2/0x120 [ 143.259337][ T8198] __kmalloc_cache_noprof+0x91/0x6d0 [ 143.259365][ T8198] ? vhost_vsock_dev_open+0x79/0x6b0 [ 143.259400][ T8198] ? __pfx_vhost_vsock_dev_open+0x10/0x10 [ 143.259429][ T8198] vhost_vsock_dev_open+0x79/0x6b0 [ 143.259458][ T8198] ? __pfx_vhost_vsock_dev_open+0x10/0x10 [ 143.259489][ T8198] misc_open+0x26d/0x450 [ 143.259516][ T8198] ? __pfx_misc_open+0x10/0x10 [ 143.259542][ T8198] chrdev_open+0x234/0x6a0 [ 143.259566][ T8198] ? __pfx_chrdev_open+0x10/0x10 [ 143.259593][ T8198] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 143.259632][ T8198] do_dentry_open+0x674/0x1470 [ 143.259653][ T8198] ? __pfx_chrdev_open+0x10/0x10 [ 143.259682][ T8198] vfs_open_consume+0xcc/0x460 [ 143.259712][ T8198] path_openat+0x1547/0x23f0 [ 143.259742][ T8198] ? __pfx_path_openat+0x10/0x10 [ 143.259774][ T8198] do_file_open+0x20e/0x430 [ 143.259801][ T8198] ? __pfx_do_file_open+0x10/0x10 [ 143.259848][ T8198] ? _raw_spin_unlock+0x28/0x50 [ 143.259876][ T8198] ? alloc_fd+0x471/0x7a0 [ 143.259912][ T8198] do_sys_openat2+0x163/0x1d0 [ 143.259940][ T8198] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.259969][ T8198] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.259998][ T8198] __x64_sys_openat+0x12d/0x210 [ 143.260027][ T8198] ? __pfx___x64_sys_openat+0x10/0x10 [ 143.260067][ T8198] do_syscall_64+0x123/0x790 [ 143.260093][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.260113][ T8198] RIP: 0033:0x7fe4d999fb19 [ 143.260131][ T8198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.260151][ T8198] RSP: 002b:00007fe4d7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.260174][ T8198] RAX: ffffffffffffffda RBX: 00007fe4d9c25fa0 RCX: 00007fe4d999fb19 [ 143.260187][ T8198] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 143.260199][ T8198] RBP: 00007fe4d9a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 143.260211][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.260222][ T8198] R13: 00007fe4d9c26038 R14: 00007fe4d9c25fa0 R15: 00007fff53150928 [ 143.260251][ T8198] [ 144.174087][ T8216] ip_tables: iptables: counters copy to user failed while replacing table [ 145.018714][ T8248] ip_tables: iptables: counters copy to user failed while replacing table [ 145.023193][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 146.447387][ T8265] FAULT_INJECTION: forcing a failure. [ 146.447387][ T8265] name failslab, interval 1, probability 0, space 0, times 0 [ 146.447417][ T8265] CPU: 1 UID: 0 PID: 8265 Comm: syz.5.876 Not tainted syzkaller #0 PREEMPT(full) [ 146.447440][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 146.447452][ T8265] Call Trace: [ 146.447459][ T8265] [ 146.447467][ T8265] dump_stack_lvl+0x100/0x190 [ 146.447508][ T8265] should_fail_ex.cold+0x5/0xa [ 146.447542][ T8265] should_failslab+0xc2/0x120 [ 146.447565][ T8265] __kmalloc_noprof+0xfc/0x840 [ 146.447596][ T8265] ? __vb2_queue_alloc+0x23e/0x1160 [ 146.447621][ T8265] __vb2_queue_alloc+0x23e/0x1160 [ 146.447655][ T8265] vb2_core_reqbufs+0x899/0xf30 [ 146.447680][ T8265] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 146.447699][ T8265] ? rcu_is_watching+0x13/0xc0 [ 146.447728][ T8265] ? __video_do_ioctl+0x50f/0xdf0 [ 146.447756][ T8265] ? avc_has_extended_perms+0x4a5/0x10b0 [ 146.447785][ T8265] vb2_reqbufs+0x1a3/0x1f0 [ 146.447813][ T8265] ? __pfx_vb2_reqbufs+0x10/0x10 [ 146.447843][ T8265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 146.447878][ T8265] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 146.447907][ T8265] v4l_reqbufs+0x175/0x1d0 [ 146.447932][ T8265] __video_do_ioctl+0xb2a/0xdf0 [ 146.447966][ T8265] ? __might_fault+0xc5/0x140 [ 146.447989][ T8265] ? __pfx___video_do_ioctl+0x10/0x10 [ 146.448027][ T8265] video_usercopy+0x47a/0x1730 [ 146.448056][ T8265] ? __pfx___video_do_ioctl+0x10/0x10 [ 146.448083][ T8265] ? __pfx_video_usercopy+0x10/0x10 [ 146.448127][ T8265] v4l2_ioctl+0x1bd/0x250 [ 146.448151][ T8265] ? __pfx_v4l2_ioctl+0x10/0x10 [ 146.448176][ T8265] __x64_sys_ioctl+0x18e/0x210 [ 146.448197][ T8265] do_syscall_64+0x123/0x790 [ 146.448220][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.448239][ T8265] RIP: 0033:0x7faee8f9fb19 [ 146.448256][ T8265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.448273][ T8265] RSP: 002b:00007faee71ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.448291][ T8265] RAX: ffffffffffffffda RBX: 00007faee9225fa0 RCX: 00007faee8f9fb19 [ 146.448303][ T8265] RDX: 0000200000000500 RSI: 00000000c0145608 RDI: 0000000000000004 [ 146.448315][ T8265] RBP: 00007faee9037b70 R08: 0000000000000000 R09: 0000000000000000 [ 146.448326][ T8265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.448338][ T8265] R13: 00007faee9226038 R14: 00007faee9225fa0 R15: 00007fff860bce68 [ 146.448362][ T8265] [ 146.498095][ T5624] Bluetooth: hci6: command 0x1003 tx timeout [ 146.499129][ T53] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 146.555638][ T8272] nvme nvme0: failed to connect socket: -111 [ 148.205009][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.258965][ T30] audit: type=1807 audit(1794005400.140:479): action=measure func=FILE_CHECK UNKNOWN=obj_type res=0 [ 148.259133][ T30] audit: type=1802 audit(1794005400.140:480): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.4.904" res=0 errno=-22 [ 148.259313][ T8333] ima: policy update failed [ 148.259411][ T30] audit: type=1802 audit(1794005400.140:481): pid=8333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.904" res=0 errno=-22 [ 148.331215][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 148.829941][ T8345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.907'. [ 149.705621][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'. [ 149.705708][ T8383] block nbd0: Unsupported socket: should be TCP or UNIX. [ 150.857455][ T8407] device-mapper: table: 248:8: writecache: Invalid block size (-EINVAL) [ 150.857493][ T8407] device-mapper: ioctl: error adding target to table [ 150.987431][ T30] audit: type=1807 audit(1794005402.870:482): action=measure func=FILE_CHECK UNKNOWN=obj_type= res=0 [ 150.987533][ T30] audit: type=1802 audit(1794005402.870:483): pid=8414 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.927" res=0 errno=-22 [ 150.987682][ T8413] ima: policy update failed [ 150.987821][ T30] audit: type=1802 audit(1794005402.870:484): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.927" res=0 errno=-22 [ 152.083174][ T8437] bridge0: port 1(syz_tun) entered blocking state [ 152.084764][ T8437] bridge0: port 1(syz_tun) entered disabled state [ 152.084900][ T8437] syz_tun: entered allmulticast mode [ 152.087049][ T8437] syz_tun: entered promiscuous mode [ 152.089015][ T8437] bridge0: port 1(syz_tun) entered blocking state [ 152.089096][ T8437] bridge0: port 1(syz_tun) entered forwarding state [ 152.646447][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 152.765577][ T8441] ima: policy update failed [ 152.810727][ T30] audit: type=1804 audit(1794005404.640:485): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.3.938" name="ima_policy_written" res=0 errno=-17 [ 152.810774][ T30] audit: type=1807 audit(1794005404.640:486): action=measure func=FILE_CHECK UNKNOWN=obj_type= res=0 [ 152.810805][ T30] audit: type=1802 audit(1794005404.640:487): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.3.938" res=0 errno=-22 [ 152.810839][ T30] audit: type=1802 audit(1794005404.640:488): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.938" res=0 errno=-22 [ 153.706185][ T8460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 155.141270][ T8492] nvme_fabrics: missing parameter 'transport=%s' [ 155.141292][ T8492] nvme_fabrics: missing parameter 'nqn=%s' [ 155.233393][ T8500] 9p: Bad value for 'rfdno' [ 156.054646][ T8508] syzkaller0: entered promiscuous mode [ 156.054673][ T8508] syzkaller0: entered allmulticast mode [ 156.097057][ T8510] ip_tables: iptables: counters copy to user failed while replacing table [ 156.432486][ T8529] FAULT_INJECTION: forcing a failure. [ 156.432486][ T8529] name failslab, interval 1, probability 0, space 0, times 0 [ 156.432518][ T8529] CPU: 1 UID: 0 PID: 8529 Comm: syz.4.970 Not tainted syzkaller #0 PREEMPT(full) [ 156.432543][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 156.432557][ T8529] Call Trace: [ 156.432564][ T8529] [ 156.432573][ T8529] dump_stack_lvl+0x100/0x190 [ 156.432619][ T8529] should_fail_ex.cold+0x5/0xa [ 156.432654][ T8529] should_failslab+0xc2/0x120 [ 156.432680][ T8529] kmem_cache_alloc_noprof+0x92/0x6a0 [ 156.432714][ T8529] ? __pfx_map_id_range_down+0x10/0x10 [ 156.432750][ T8529] ? security_inode_alloc+0x3b/0x2c0 [ 156.432788][ T8529] security_inode_alloc+0x3b/0x2c0 [ 156.432820][ T8529] inode_init_always_gfp+0xc75/0xfb0 [ 156.432858][ T8529] alloc_inode+0x8e/0x250 [ 156.432879][ T8529] new_inode+0x22/0x1c0 [ 156.432902][ T8529] proc_pid_make_inode+0x22/0x160 [ 156.432937][ T8529] proc_pident_instantiate+0x85/0x310 [ 156.432979][ T8529] proc_pident_lookup+0x1e3/0x270 [ 156.433037][ T8529] ? __pfx_down_read+0x10/0x10 [ 156.433074][ T8529] __lookup_slow+0x155/0x320 [ 156.433111][ T8529] lookup_slow+0x54/0x80 [ 156.433154][ T8529] link_path_walk+0x1449/0x1bd0 [ 156.433196][ T8529] path_openat+0x1a7/0x23f0 [ 156.433229][ T8529] ? __pfx_path_openat+0x10/0x10 [ 156.433266][ T8529] do_file_open+0x20e/0x430 [ 156.433297][ T8529] ? __pfx_do_file_open+0x10/0x10 [ 156.433335][ T8529] ? __pfx_kfree_link+0x10/0x10 [ 156.433367][ T8529] ? _raw_spin_unlock+0x28/0x50 [ 156.433386][ T8529] ? alloc_fd+0x471/0x7a0 [ 156.433420][ T8529] do_sys_openat2+0x163/0x1d0 [ 156.433449][ T8529] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.433478][ T8529] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.433512][ T8529] __x64_sys_openat+0x12d/0x210 [ 156.433539][ T8529] ? __pfx___x64_sys_openat+0x10/0x10 [ 156.433577][ T8529] do_syscall_64+0x123/0x790 [ 156.433604][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.433626][ T8529] RIP: 0033:0x7fa1e936034e [ 156.433644][ T8529] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.433663][ T8529] RSP: 002b:00007fa1ea211f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 156.433683][ T8529] RAX: ffffffffffffffda RBX: 00007fa1ea2126c0 RCX: 00007fa1e936034e [ 156.433696][ T8529] RDX: 0000000000000000 RSI: 00007fa1e943729e RDI: ffffffffffffff9c [ 156.433708][ T8529] RBP: 00007fa1e9437b70 R08: 0000000000000000 R09: 0000000000000000 [ 156.433721][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.433733][ T8529] R13: 00007fa1e9626038 R14: 00007fa1e9625fa0 R15: 00007ffefa7d9cd8 [ 156.433762][ T8529] [ 156.878259][ T8533] 9p: Bad value for 'rfdno' [ 158.184565][ T4990] udevd[4990]: worker [6227] /devices/virtual/block/nbd1 is taking a long time [ 158.206887][ T30] audit: type=1400 audit(1794005409.800:489): avc: denied { write } for pid=8541 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 158.276589][ T4952] block nbd1: Possible stuck request ffff888029c50000: control (read@0,2048B). Runtime 60 seconds [ 158.828454][ T8561] 9p: Bad value for 'rfdno' [ 159.990744][ T8580] FAULT_INJECTION: forcing a failure. [ 159.990744][ T8580] name fail_futex, interval 1, probability 0, space 0, times 0 [ 159.990782][ T8580] CPU: 1 UID: 0 PID: 8580 Comm: syz.2.989 Not tainted syzkaller #0 PREEMPT(full) [ 159.990804][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 159.990815][ T8580] Call Trace: [ 159.990821][ T8580] [ 159.990829][ T8580] dump_stack_lvl+0x100/0x190 [ 159.990867][ T8580] should_fail_ex.cold+0x5/0xa [ 159.990897][ T8580] get_futex_key+0x1c9/0x13e0 [ 159.990924][ T8580] ? __pfx_get_futex_key+0x10/0x10 [ 159.990943][ T8580] ? wakeup_preempt_fair+0x4fc/0xf60 [ 159.990979][ T8580] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 159.991007][ T8580] futex_wait_setup+0x91/0x540 [ 159.991042][ T8580] __futex_wait+0x19f/0x360 [ 159.991072][ T8580] ? __pfx___futex_wait+0x10/0x10 [ 159.991097][ T8580] ? __pfx_try_to_wake_up+0x10/0x10 [ 159.991123][ T8580] ? futex_hash+0x311/0x400 [ 159.991145][ T8580] ? __pfx_futex_wake_mark+0x10/0x10 [ 159.991176][ T8580] ? find_held_lock+0x2b/0x80 [ 159.991197][ T8580] ? futex_wake+0x4ea/0x5e0 [ 159.991230][ T8580] futex_wait+0xe6/0x370 [ 159.991260][ T8580] ? __pfx_futex_wait+0x10/0x10 [ 159.991294][ T8580] ? rcu_read_lock_any_held+0x6a/0x90 [ 159.991317][ T8580] ? find_held_lock+0x2b/0x80 [ 159.991338][ T8580] ? ksys_write+0x190/0x250 [ 159.991358][ T8580] ? ksys_write+0x190/0x250 [ 159.991382][ T8580] do_futex+0x265/0x440 [ 159.991406][ T8580] ? __pfx_do_futex+0x10/0x10 [ 159.991431][ T8580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 159.991463][ T8580] __x64_sys_futex+0x34f/0x4d0 [ 159.991488][ T8580] ? fput+0x7c/0x100 [ 159.991514][ T8580] ? __pfx___x64_sys_futex+0x10/0x10 [ 159.991539][ T8580] ? ksys_write+0x1ac/0x250 [ 159.991559][ T8580] ? __pfx_ksys_write+0x10/0x10 [ 159.991588][ T8580] do_syscall_64+0x123/0x790 [ 159.991615][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.991641][ T8580] RIP: 0033:0x7fe4d999fb19 [ 159.991658][ T8580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.991678][ T8580] RSP: 002b:00007fe4d7bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 159.991698][ T8580] RAX: ffffffffffffffda RBX: 00007fe4d9c25fa8 RCX: 00007fe4d999fb19 [ 159.991712][ T8580] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe4d9c25fa8 [ 159.991724][ T8580] RBP: 00007fe4d9c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 159.991737][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.991748][ T8580] R13: 00007fe4d9c26038 R14: 00007fff53150840 R15: 00007fff53150928 [ 159.991783][ T8580] [ 160.747555][ T8597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.166771][ T30] audit: type=1400 audit(1794005415.040:490): avc: denied { map } for pid=8629 comm="syz.3.1008" path="/dev/video0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 163.233688][ T8632] FAULT_INJECTION: forcing a failure. [ 163.233688][ T8632] name fail_futex, interval 1, probability 0, space 0, times 0 [ 163.233718][ T8632] CPU: 0 UID: 0 PID: 8632 Comm: syz.4.1009 Not tainted syzkaller #0 PREEMPT(full) [ 163.233741][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 163.233754][ T8632] Call Trace: [ 163.233761][ T8632] [ 163.233769][ T8632] dump_stack_lvl+0x100/0x190 [ 163.233810][ T8632] should_fail_ex.cold+0x5/0xa [ 163.233844][ T8632] get_futex_key+0x1c9/0x13e0 [ 163.233873][ T8632] ? __pfx_get_futex_key+0x10/0x10 [ 163.233893][ T8632] ? futex_wake+0x4ea/0x5e0 [ 163.233927][ T8632] futex_wake+0xf4/0x5e0 [ 163.233957][ T8632] ? __pfx_futex_wake+0x10/0x10 [ 163.233988][ T8632] ? find_held_lock+0x2b/0x80 [ 163.234010][ T8632] ? __fget_files+0x215/0x3d0 [ 163.234035][ T8632] ? __fget_files+0x215/0x3d0 [ 163.234064][ T8632] do_futex+0x2b2/0x440 [ 163.234088][ T8632] ? __pfx_do_futex+0x10/0x10 [ 163.234119][ T8632] __x64_sys_futex+0x34f/0x4d0 [ 163.234146][ T8632] ? __pfx___x64_sys_futex+0x10/0x10 [ 163.234181][ T8632] do_syscall_64+0x123/0x790 [ 163.234209][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.234229][ T8632] RIP: 0033:0x7fa1e939fb19 [ 163.234247][ T8632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.234266][ T8632] RSP: 002b:00007fa1ea2120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 163.234286][ T8632] RAX: ffffffffffffffda RBX: 00007fa1e9625fa8 RCX: 00007fa1e939fb19 [ 163.234299][ T8632] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa1e9625fac [ 163.234311][ T8632] RBP: 00007fa1e9625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 163.234323][ T8632] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 163.234335][ T8632] R13: 00007fa1e9626038 R14: 00007ffefa7d9bf0 R15: 00007ffefa7d9cd8 [ 163.234362][ T8632] [ 164.324326][ T8661] process 'syz.4.1020' launched '/dev/fd/3' with NULL argv: empty string added [ 164.329480][ T30] audit: type=1400 audit(1794005416.200:491): avc: denied { execute_no_trans } for pid=8660 comm="syz.4.1020" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.331525][ T30] audit: type=1400 audit(1794005416.200:492): avc: denied { create } for pid=8660 comm="syz.4.1020" name="md1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 164.377969][ T30] audit: type=1400 audit(1794005416.240:493): avc: denied { unlink } for pid=5619 comm="syz-executor" name="md1" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 164.509872][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1024'. [ 164.567849][ T8674] FAULT_INJECTION: forcing a failure. [ 164.567849][ T8674] name failslab, interval 1, probability 0, space 0, times 0 [ 164.567881][ T8674] CPU: 0 UID: 0 PID: 8674 Comm: syz.0.1026 Not tainted syzkaller #0 PREEMPT(full) [ 164.567904][ T8674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 164.567917][ T8674] Call Trace: [ 164.567924][ T8674] [ 164.567933][ T8674] dump_stack_lvl+0x100/0x190 [ 164.567972][ T8674] should_fail_ex.cold+0x5/0xa [ 164.568003][ T8674] should_failslab+0xc2/0x120 [ 164.568027][ T8674] __kmalloc_cache_noprof+0x91/0x6d0 [ 164.568057][ T8674] ? proc_self_get_link+0x189/0x1f0 [ 164.568101][ T8674] proc_self_get_link+0x189/0x1f0 [ 164.568132][ T8674] pick_link+0xabc/0x13c0 [ 164.568155][ T8674] ? __pfx_proc_self_get_link+0x10/0x10 [ 164.568190][ T8674] step_into_slowpath+0x9ba/0xf90 [ 164.568218][ T8674] ? __pfx_step_into_slowpath+0x10/0x10 [ 164.568245][ T8674] ? lookup_fast+0x2da/0x600 [ 164.568263][ T8674] ? inode_permission+0x377/0x630 [ 164.568297][ T8674] link_path_walk+0xe4a/0x1bd0 [ 164.568327][ T8674] path_openat+0x1a7/0x23f0 [ 164.568357][ T8674] ? __pfx_path_openat+0x10/0x10 [ 164.568388][ T8674] do_file_open+0x20e/0x430 [ 164.568413][ T8674] ? __pfx_do_file_open+0x10/0x10 [ 164.568458][ T8674] ? _raw_spin_unlock+0x28/0x50 [ 164.568477][ T8674] ? alloc_fd+0x471/0x7a0 [ 164.568509][ T8674] do_sys_openat2+0x163/0x1d0 [ 164.568538][ T8674] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.568574][ T8674] __x64_sys_openat+0x12d/0x210 [ 164.568601][ T8674] ? __pfx___x64_sys_openat+0x10/0x10 [ 164.568638][ T8674] do_syscall_64+0x123/0x790 [ 164.568663][ T8674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.568683][ T8674] RIP: 0033:0x7fd896b6034e [ 164.568699][ T8674] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.568717][ T8674] RSP: 002b:00007fd897b3eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.568736][ T8674] RAX: ffffffffffffffda RBX: 00007fd897b3f6c0 RCX: 00007fd896b6034e [ 164.568748][ T8674] RDX: 0000000000000000 RSI: 00007fd897b3ef90 RDI: ffffffffffffff9c [ 164.568759][ T8674] RBP: 00007fd896c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 164.568771][ T8674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.568782][ T8674] R13: 00007fd896e26038 R14: 00007fd896e25fa0 R15: 00007fffc164f048 [ 164.568808][ T8674] [ 164.917371][ T30] audit: type=1400 audit(1794005416.790:494): avc: denied { append } for pid=8692 comm="syz.0.1035" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 165.044447][ T8702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.044534][ T8702] IPv6: NLM_F_CREATE should be set when creating new route [ 165.044561][ T8702] IPv6: NLM_F_CREATE should be set when creating new route [ 165.351030][ T8719] overlayfs: missing 'lowerdir' [ 165.685459][ T8726] No control pipe specified [ 166.536810][ T30] audit: type=1400 audit(1794005418.400:495): avc: denied { read } for pid=8748 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.743048][ T8759] overlayfs: missing 'lowerdir' [ 166.764088][ T8761] No control pipe specified [ 166.837728][ T8765] ip_tables: iptables: counters copy to user failed while replacing table [ 166.850411][ T8765] syzkaller1: entered promiscuous mode [ 166.850434][ T8765] syzkaller1: entered allmulticast mode [ 166.901879][ T8770] netlink: 'syz.4.1066': attribute type 21 has an invalid length. [ 166.901902][ T8770] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1066'. [ 166.943934][ T8770] device-mapper: ioctl: Unable to change uuid of mapped device syze1 to syze1 because uuid is already set to LVM-syze0 [ 167.011860][ T8775] overlayfs: missing 'lowerdir' [ 167.078283][ T13] nvmet: connect request for invalid subsystem testsubsys! [ 167.081475][ T8770] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 167.297116][ T53] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 167.444971][ T8789] No control pipe specified [ 167.594908][ T8797] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 167.594952][ T8797] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 167.845633][ T8803] ip_tables: iptables: counters copy to user failed while replacing table [ 167.892054][ T8803] syzkaller1: entered promiscuous mode [ 167.892076][ T8803] syzkaller1: entered allmulticast mode [ 168.855843][ T8830] pim6reg: entered allmulticast mode [ 168.862838][ T8829] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 168.862880][ T8829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 168.866649][ T8828] pim6reg: left allmulticast mode [ 169.099379][ T8840] ip_tables: iptables: counters copy to user failed while replacing table [ 169.307026][ T8840] syzkaller1: entered promiscuous mode [ 169.307047][ T8840] syzkaller1: entered allmulticast mode [ 169.652849][ T8852] trusted_key: encrypted_key: keylen parameter is missing [ 169.714141][ T30] audit: type=1400 audit(1794005421.350:496): avc: denied { kexec_image_load } for pid=8845 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 169.714324][ T30] audit: type=1400 audit(1794005421.530:497): avc: denied { read } for pid=8843 comm="syz.0.1094" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.714481][ T30] audit: type=1400 audit(1794005421.540:498): avc: denied { open } for pid=8843 comm="syz.0.1094" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.714608][ T30] audit: type=1400 audit(1794005421.560:499): avc: denied { ioctl } for pid=8843 comm="syz.0.1094" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0xc0109207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 170.246290][ T8862] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 170.246337][ T8862] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 170.528643][ T8885] syzkaller0: entered promiscuous mode [ 170.528667][ T8885] syzkaller0: entered allmulticast mode [ 170.606286][ T8890] FAULT_INJECTION: forcing a failure. [ 170.606286][ T8890] name failslab, interval 1, probability 0, space 0, times 0 [ 170.606319][ T8890] CPU: 1 UID: 0 PID: 8890 Comm: syz.5.1115 Not tainted syzkaller #0 PREEMPT(full) [ 170.606343][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 170.606357][ T8890] Call Trace: [ 170.606365][ T8890] [ 170.606374][ T8890] dump_stack_lvl+0x100/0x190 [ 170.606415][ T8890] should_fail_ex.cold+0x5/0xa [ 170.606450][ T8890] should_failslab+0xc2/0x120 [ 170.606477][ T8890] __kvmalloc_node_noprof+0x113/0x9b0 [ 170.606513][ T8890] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 170.606549][ T8890] v4l2_ctrl_new+0x4a6/0x23a0 [ 170.606594][ T8890] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 170.606639][ T8890] v4l2_ctrl_new_std+0x1bb/0x290 [ 170.606678][ T8890] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 170.606711][ T8890] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 170.606753][ T8890] ? media_request_object_init+0x105/0x180 [ 170.606787][ T8890] vicodec_open+0x2a6/0xf70 [ 170.606808][ T8890] ? kobject_get_unless_zero+0x100/0x200 [ 170.606848][ T8890] v4l2_open+0x1d2/0x490 [ 170.606878][ T8890] ? __pfx_v4l2_open+0x10/0x10 [ 170.606923][ T8890] chrdev_open+0x234/0x6a0 [ 170.606952][ T8890] ? __pfx_chrdev_open+0x10/0x10 [ 170.606981][ T8890] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 170.607032][ T8890] do_dentry_open+0x674/0x1470 [ 170.607056][ T8890] ? __pfx_chrdev_open+0x10/0x10 [ 170.607087][ T8890] vfs_open_consume+0xcc/0x460 [ 170.607121][ T8890] path_openat+0x1547/0x23f0 [ 170.607154][ T8890] ? __pfx_path_openat+0x10/0x10 [ 170.607191][ T8890] do_file_open+0x20e/0x430 [ 170.607221][ T8890] ? __pfx_do_file_open+0x10/0x10 [ 170.607270][ T8890] ? _raw_spin_unlock+0x28/0x50 [ 170.607291][ T8890] ? alloc_fd+0x471/0x7a0 [ 170.607328][ T8890] do_sys_openat2+0x163/0x1d0 [ 170.607358][ T8890] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.607388][ T8890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 170.607424][ T8890] __x64_sys_openat+0x12d/0x210 [ 170.607455][ T8890] ? __pfx___x64_sys_openat+0x10/0x10 [ 170.607497][ T8890] do_syscall_64+0x123/0x790 [ 170.607525][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.607549][ T8890] RIP: 0033:0x7faee8f9fb19 [ 170.607568][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.607589][ T8890] RSP: 002b:00007faee71ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.607613][ T8890] RAX: ffffffffffffffda RBX: 00007faee9225fa0 RCX: 00007faee8f9fb19 [ 170.607627][ T8890] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 170.607640][ T8890] RBP: 00007faee9037b70 R08: 0000000000000000 R09: 0000000000000000 [ 170.607653][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.607666][ T8890] R13: 00007faee9226038 R14: 00007faee9225fa0 R15: 00007fff860bce68 [ 170.607696][ T8890] [ 171.018318][ T8902] overlayfs: missing 'lowerdir' [ 171.852770][ T8924] syzkaller0: entered promiscuous mode [ 171.852794][ T8924] syzkaller0: entered allmulticast mode [ 172.686160][ T8938] overlayfs: missing 'lowerdir' [ 172.780345][ T30] audit: type=1400 audit(1794005424.660:500): avc: denied { create } for pid=8945 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.800975][ T30] audit: type=1400 audit(1794005424.680:501): avc: denied { connect } for pid=8945 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.821016][ T30] audit: type=1400 audit(1794005424.700:502): avc: denied { setopt } for pid=8945 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.840522][ T30] audit: type=1400 audit(1794005424.710:503): avc: denied { bind } for pid=8945 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.840580][ T30] audit: type=1400 audit(1794005424.710:504): avc: denied { write } for pid=8945 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.891996][ T8950] overlayfs: missing 'lowerdir' [ 173.316270][ T8971] overlayfs: missing 'lowerdir' [ 174.308251][ T8981] ip6t_frag: unknown flags 4 [ 174.418810][ T8988] overlayfs: missing 'lowerdir' [ 174.569651][ T8993] netlink: 'syz.0.1156': attribute type 21 has an invalid length. [ 174.569678][ T8993] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1156'. [ 175.119031][ T9005] overlayfs: missing 'workdir' [ 175.290379][ T1517] nvmet: connect request for invalid subsystem testsubsys! [ 175.290888][ T8993] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 176.634073][ T30] audit: type=1326 audit(1794005428.510:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.2.1179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d999fb19 code=0x7ffc0000 [ 176.634128][ T30] audit: type=1326 audit(1794005428.510:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.2.1179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d999fb19 code=0x7ffc0000 [ 177.297199][ T30] audit: type=1326 audit(1794005429.180:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9049 comm="syz.2.1179" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe4d999fb19 code=0x7ffc0000 [ 178.987539][ T30] audit: type=1400 audit(1794005430.860:508): avc: denied { read write } for pid=9127 comm="syz.2.1210" name="md0" dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 178.987593][ T30] audit: type=1400 audit(1794005430.860:509): avc: denied { open } for pid=9127 comm="syz.2.1210" path="/239/md0" dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 179.185274][ T9128] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 179.185508][ T9128] block device autoloading is deprecated and will be removed. [ 179.762381][ T9139] syzkaller0: entered promiscuous mode [ 179.762405][ T9139] syzkaller0: entered allmulticast mode [ 180.217663][ T9147] FAULT_INJECTION: forcing a failure. [ 180.217663][ T9147] name failslab, interval 1, probability 0, space 0, times 0 [ 180.217699][ T9147] CPU: 1 UID: 0 PID: 9147 Comm: syz.4.1216 Not tainted syzkaller #0 PREEMPT(full) [ 180.217725][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 180.217738][ T9147] Call Trace: [ 180.217745][ T9147] [ 180.217752][ T9147] dump_stack_lvl+0x100/0x190 [ 180.217795][ T9147] should_fail_ex.cold+0x5/0xa [ 180.217830][ T9147] should_failslab+0xc2/0x120 [ 180.217854][ T9147] __kmalloc_cache_noprof+0x91/0x6d0 [ 180.217881][ T9147] ? ip6addrlbl_add+0x8c3/0xdb0 [ 180.217906][ T9147] ? ip6addrlbl_add+0xe0/0xdb0 [ 180.217935][ T9147] ip6addrlbl_add+0xe0/0xdb0 [ 180.217967][ T9147] ip6addrlbl_net_init+0x10a/0x330 [ 180.217992][ T9147] ? __pfx_ip6addrlbl_net_init+0x10/0x10 [ 180.218018][ T9147] ops_init+0x1e2/0x5f0 [ 180.218046][ T9147] setup_net+0x118/0x3a0 [ 180.218072][ T9147] ? __pfx_setup_net+0x10/0x10 [ 180.218099][ T9147] ? bpf_lsm_namespace_init+0x9/0x10 [ 180.218128][ T9147] copy_net_ns+0x340/0x7a0 [ 180.218159][ T9147] create_new_namespaces+0x3ea/0xac0 [ 180.218192][ T9147] unshare_nsproxy_namespaces+0xf6/0x210 [ 180.218221][ T9147] ksys_unshare+0x44f/0x980 [ 180.218246][ T9147] ? __pfx_ksys_unshare+0x10/0x10 [ 180.218272][ T9147] ? fput+0x7c/0x100 [ 180.218297][ T9147] ? ksys_write+0x1ac/0x250 [ 180.218326][ T9147] __x64_sys_unshare+0x31/0x40 [ 180.218352][ T9147] do_syscall_64+0x123/0x790 [ 180.218385][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.218408][ T9147] RIP: 0033:0x7fa1e939fb19 [ 180.218427][ T9147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.218448][ T9147] RSP: 002b:00007fa1ea212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 180.218469][ T9147] RAX: ffffffffffffffda RBX: 00007fa1e9625fa0 RCX: 00007fa1e939fb19 [ 180.218484][ T9147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 180.218496][ T9147] RBP: 00007fa1e9437b70 R08: 0000000000000000 R09: 0000000000000000 [ 180.218508][ T9147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.218519][ T9147] R13: 00007fa1e9626038 R14: 00007fa1e9625fa0 R15: 00007ffefa7d9cd8 [ 180.218547][ T9147] [ 180.628525][ T9155] pim6reg: entered allmulticast mode [ 180.930594][ T53] Bluetooth: hci2: unexpected cc 0x080e length: 5 > 3 [ 181.282303][ T9165] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 181.681038][ T30] audit: type=1400 audit(1794005433.560:510): avc: denied { audit_write } for pid=9181 comm="syz.4.1232" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 182.125118][ T9185] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1226'. [ 182.141657][ T30] audit: type=1400 audit(1794005434.020:511): avc: denied { watch watch_reads } for pid=9181 comm="syz.4.1232" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 182.196254][ T9197] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 182.227655][ T9199] FAULT_INJECTION: forcing a failure. [ 182.227655][ T9199] name failslab, interval 1, probability 0, space 0, times 0 [ 182.227686][ T9199] CPU: 0 UID: 0 PID: 9199 Comm: syz.0.1235 Not tainted syzkaller #0 PREEMPT(full) [ 182.227710][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 182.227723][ T9199] Call Trace: [ 182.227730][ T9199] [ 182.227739][ T9199] dump_stack_lvl+0x100/0x190 [ 182.227781][ T9199] should_fail_ex.cold+0x5/0xa [ 182.227814][ T9199] should_failslab+0xc2/0x120 [ 182.227847][ T9199] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 182.227881][ T9199] ? proc_alloc_inode+0x25/0x200 [ 182.227912][ T9199] ? __pfx_proc_alloc_inode+0x10/0x10 [ 182.227944][ T9199] proc_alloc_inode+0x25/0x200 [ 182.227975][ T9199] alloc_inode+0x68/0x250 [ 182.227997][ T9199] new_inode+0x22/0x1c0 [ 182.228019][ T9199] proc_pid_make_inode+0x22/0x160 [ 182.228051][ T9199] proc_ns_dir_lookup+0x25b/0x390 [ 182.228085][ T9199] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 182.228115][ T9199] lookup_open+0xb29/0x19e0 [ 182.228135][ T9199] ? __d_lookup+0x1e1/0x4a0 [ 182.228168][ T9199] path_openat+0xe75/0x23f0 [ 182.228198][ T9199] ? __pfx_path_openat+0x10/0x10 [ 182.228233][ T9199] do_file_open+0x20e/0x430 [ 182.228261][ T9199] ? __pfx_do_file_open+0x10/0x10 [ 182.228296][ T9199] ? __pfx_kfree_link+0x10/0x10 [ 182.228328][ T9199] ? _raw_spin_unlock+0x28/0x50 [ 182.228348][ T9199] ? alloc_fd+0x471/0x7a0 [ 182.228383][ T9199] do_sys_openat2+0x163/0x1d0 [ 182.228413][ T9199] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.228453][ T9199] __x64_sys_openat+0x12d/0x210 [ 182.228482][ T9199] ? __pfx___x64_sys_openat+0x10/0x10 [ 182.228522][ T9199] do_syscall_64+0x123/0x790 [ 182.228550][ T9199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.228571][ T9199] RIP: 0033:0x7fd896b6034e [ 182.228589][ T9199] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.228610][ T9199] RSP: 002b:00007fd897b3eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.228631][ T9199] RAX: ffffffffffffffda RBX: 00007fd897b3f6c0 RCX: 00007fd896b6034e [ 182.228645][ T9199] RDX: 0000000000000002 RSI: 00007fd897b3ef90 RDI: ffffffffffffff9c [ 182.228659][ T9199] RBP: 00007fd896c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 182.228672][ T9199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.228684][ T9199] R13: 00007fd896e26038 R14: 00007fd896e25fa0 R15: 00007fffc164f048 [ 182.228713][ T9199] [ 183.089072][ T9214] netlink: 'syz.4.1238': attribute type 6 has an invalid length. [ 183.719519][ T9225] nvme_fabrics: unknown parameter or missing value 'nqn=' in ctrl creation request [ 184.933344][ T9252] nvme_fabrics: unknown parameter or missing value 'nqn=' in ctrl creation request [ 185.950358][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 185.950487][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 185.950627][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 185.950697][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 186.051860][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'. [ 186.677957][ T9317] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 186.678003][ T9317] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 187.130112][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 187.132209][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 187.134227][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 187.135836][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 187.648541][ T9350] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 187.648587][ T9350] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 188.364794][ T4952] block nbd1: Possible stuck request ffff888029c50000: control (read@0,2048B). Runtime 90 seconds [ 188.613819][ T9371] FAULT_INJECTION: forcing a failure. [ 188.613819][ T9371] name failslab, interval 1, probability 0, space 0, times 0 [ 188.613840][ T9371] CPU: 0 UID: 0 PID: 9371 Comm: syz.2.1304 Not tainted syzkaller #0 PREEMPT(full) [ 188.613856][ T9371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 188.613864][ T9371] Call Trace: [ 188.613870][ T9371] [ 188.613881][ T9371] dump_stack_lvl+0x100/0x190 [ 188.613906][ T9371] should_fail_ex.cold+0x5/0xa [ 188.613927][ T9371] should_failslab+0xc2/0x120 [ 188.613943][ T9371] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 188.613962][ T9371] ? find_held_lock+0x2b/0x80 [ 188.613976][ T9371] ? alloc_inode+0x183/0x250 [ 188.613991][ T9371] alloc_inode+0x183/0x250 [ 188.614002][ T9371] path_from_stashed+0x25b/0x760 [ 188.614025][ T9371] ns_get_path+0x60/0x80 [ 188.614044][ T9371] proc_ns_get_link+0x260/0x2e0 [ 188.614065][ T9371] ? __pfx_proc_ns_get_link+0x10/0x10 [ 188.614088][ T9371] ? try_to_unlazy+0x2f1/0x910 [ 188.614112][ T9371] pick_link+0xd11/0x13c0 [ 188.614130][ T9371] ? __pfx_proc_ns_get_link+0x10/0x10 [ 188.614161][ T9371] step_into_slowpath+0x9ba/0xf90 [ 188.614174][ T9371] ? security_task_to_inode+0x7d/0x140 [ 188.614189][ T9371] ? find_held_lock+0x2b/0x80 [ 188.614204][ T9371] ? __pfx_step_into_slowpath+0x10/0x10 [ 188.614220][ T9371] ? lookup_fast+0x2da/0x600 [ 188.614234][ T9371] path_openat+0xcc4/0x23f0 [ 188.614252][ T9371] ? __pfx_path_openat+0x10/0x10 [ 188.614274][ T9371] do_file_open+0x20e/0x430 [ 188.614290][ T9371] ? __pfx_do_file_open+0x10/0x10 [ 188.614317][ T9371] ? _raw_spin_unlock+0x28/0x50 [ 188.614329][ T9371] ? alloc_fd+0x471/0x7a0 [ 188.614349][ T9371] do_sys_openat2+0x163/0x1d0 [ 188.614367][ T9371] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.614392][ T9371] __x64_sys_openat+0x12d/0x210 [ 188.614411][ T9371] ? __pfx___x64_sys_openat+0x10/0x10 [ 188.614435][ T9371] do_syscall_64+0x123/0x790 [ 188.614451][ T9371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.614464][ T9371] RIP: 0033:0x7fe4d996034e [ 188.614474][ T9371] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 188.614486][ T9371] RSP: 002b:00007fe4d7bf5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.614499][ T9371] RAX: ffffffffffffffda RBX: 00007fe4d7bf66c0 RCX: 00007fe4d996034e [ 188.614506][ T9371] RDX: 0000000000000000 RSI: 00007fe4d7bf5f90 RDI: ffffffffffffff9c [ 188.614514][ T9371] RBP: 00007fe4d9a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 188.614521][ T9371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.614528][ T9371] R13: 00007fe4d9c26038 R14: 00007fe4d9c25fa0 R15: 00007fff53150928 [ 188.614543][ T9371] [ 188.999148][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.999198][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.671739][ T9413] 9pnet_fd: Insufficient options for proto=fd [ 190.910935][ T9425] device-mapper: table: 248:5: mirror: Invalid number of mirrors (-EINVAL) [ 190.910952][ T9425] device-mapper: ioctl: error adding target to table [ 191.020551][ T9430] FAULT_INJECTION: forcing a failure. [ 191.020551][ T9430] name failslab, interval 1, probability 0, space 0, times 0 [ 191.020574][ T9430] CPU: 0 UID: 0 PID: 9430 Comm: syz.0.1327 Not tainted syzkaller #0 PREEMPT(full) [ 191.020590][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 191.020600][ T9430] Call Trace: [ 191.020605][ T9430] [ 191.020611][ T9430] dump_stack_lvl+0x100/0x190 [ 191.020637][ T9430] should_fail_ex.cold+0x5/0xa [ 191.020660][ T9430] should_failslab+0xc2/0x120 [ 191.020676][ T9430] __kmalloc_noprof+0xfc/0x840 [ 191.020704][ T9430] ? __register_sysctl_table+0xac/0x1650 [ 191.020724][ T9430] __register_sysctl_table+0xac/0x1650 [ 191.020737][ T9430] ? trace_kmalloc+0xeb/0x110 [ 191.020752][ T9430] ? __kasan_kmalloc+0xaa/0xb0 [ 191.020766][ T9430] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 191.020790][ T9430] ? __pfx___register_sysctl_table+0x10/0x10 [ 191.020805][ T9430] ? setup_mq_sysctls+0x5d/0x240 [ 191.020828][ T9430] ? __asan_memcpy+0x3c/0x60 [ 191.020848][ T9430] setup_mq_sysctls+0x124/0x240 [ 191.020868][ T9430] copy_ipcs+0x51f/0x7e0 [ 191.020887][ T9430] create_new_namespaces+0x20a/0xac0 [ 191.020906][ T9430] ? security_capable+0x80/0x260 [ 191.020925][ T9430] unshare_nsproxy_namespaces+0xf6/0x210 [ 191.020944][ T9430] ksys_unshare+0x44f/0x980 [ 191.020961][ T9430] ? __pfx_ksys_unshare+0x10/0x10 [ 191.020977][ T9430] ? fput+0x7c/0x100 [ 191.020993][ T9430] ? ksys_write+0x1ac/0x250 [ 191.021010][ T9430] __x64_sys_unshare+0x31/0x40 [ 191.021026][ T9430] do_syscall_64+0x123/0x790 [ 191.021044][ T9430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.021058][ T9430] RIP: 0033:0x7fd896b9fb19 [ 191.021068][ T9430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.021080][ T9430] RSP: 002b:00007fd897b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 191.021093][ T9430] RAX: ffffffffffffffda RBX: 00007fd896e25fa0 RCX: 00007fd896b9fb19 [ 191.021102][ T9430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 191.021109][ T9430] RBP: 00007fd896c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 191.021116][ T9430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.021123][ T9430] R13: 00007fd896e26038 R14: 00007fd896e25fa0 R15: 00007fffc164f048 [ 191.021139][ T9430] [ 191.132104][ T9432] FAULT_INJECTION: forcing a failure. [ 191.132104][ T9432] name fail_futex, interval 1, probability 0, space 0, times 0 [ 191.132135][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.0.1328 Not tainted syzkaller #0 PREEMPT(full) [ 191.132156][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 191.132167][ T9432] Call Trace: [ 191.132174][ T9432] [ 191.132181][ T9432] dump_stack_lvl+0x100/0x190 [ 191.132225][ T9432] should_fail_ex.cold+0x5/0xa [ 191.132257][ T9432] get_futex_key+0x1c9/0x13e0 [ 191.132283][ T9432] ? __pfx_get_futex_key+0x10/0x10 [ 191.132302][ T9432] ? futex_wake+0x4ea/0x5e0 [ 191.132335][ T9432] futex_wake+0xf4/0x5e0 [ 191.132363][ T9432] ? __pfx_futex_wake+0x10/0x10 [ 191.132391][ T9432] ? find_held_lock+0x2b/0x80 [ 191.132411][ T9432] ? __fget_files+0x215/0x3d0 [ 191.132434][ T9432] ? __fget_files+0x215/0x3d0 [ 191.132463][ T9432] do_futex+0x2b2/0x440 [ 191.132485][ T9432] ? __pfx_do_futex+0x10/0x10 [ 191.132514][ T9432] __x64_sys_futex+0x34f/0x4d0 [ 191.132539][ T9432] ? __pfx___x64_sys_futex+0x10/0x10 [ 191.132571][ T9432] do_syscall_64+0x123/0x790 [ 191.132597][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.132616][ T9432] RIP: 0033:0x7fd896b9fb19 [ 191.132631][ T9432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.132649][ T9432] RSP: 002b:00007fd897b3f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 191.132669][ T9432] RAX: ffffffffffffffda RBX: 00007fd896e25fa8 RCX: 00007fd896b9fb19 [ 191.132681][ T9432] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd896e25fac [ 191.132692][ T9432] RBP: 00007fd896e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 191.132703][ T9432] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 191.132714][ T9432] R13: 00007fd896e26038 R14: 00007fffc164ef60 R15: 00007fffc164f048 [ 191.132739][ T9432] [ 191.643883][ T30] audit: type=1326 audit(1794005443.520:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.1337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd896b9fb19 code=0x7ffc0000 [ 191.645391][ T30] audit: type=1326 audit(1794005443.520:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.1337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd896b9fb19 code=0x7ffc0000 [ 191.650971][ T30] audit: type=1326 audit(1794005443.530:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.1337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd896b9fb19 code=0x7ffc0000 [ 191.651362][ T30] audit: type=1326 audit(1794005443.530:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.1337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fd896b9fb19 code=0x7ffc0000 [ 191.651399][ T30] audit: type=1326 audit(1794005443.530:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.1337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd896b9fb19 code=0x7ffc0000 [ 191.651433][ T30] audit: type=1326 audit(1794005443.530:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.1337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd896b9fb19 code=0x7ffc0000 [ 191.651568][ T30] audit: type=1326 audit(1794005443.530:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.1337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd896b9fb19 code=0x7ffc0000 [ 191.652413][ T30] audit: type=1326 audit(1794005443.530:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.1337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd896b9fb19 code=0x7ffc0000 [ 191.652559][ T30] audit: type=1326 audit(1794005443.530:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.1337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd896b9fb19 code=0x7ffc0000 [ 191.661588][ T9453] device-mapper: ioctl: Unable to change uuid of mapped device syze1 to syze1 because uuid is already set to LVM-syze0 [ 192.075955][ T30] audit: type=1400 audit(1794005443.950:521): avc: denied { write } for pid=9470 comm="syz.4.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 192.313626][ T9482] device-mapper: ioctl: Unable to rename non-existent device, syzf1 to uuid syzf1 [ 192.771682][ T9492] FAULT_INJECTION: forcing a failure. [ 192.771682][ T9492] name fail_futex, interval 1, probability 0, space 0, times 0 [ 192.771710][ T9492] CPU: 1 UID: 0 PID: 9492 Comm: syz.0.1354 Not tainted syzkaller #0 PREEMPT(full) [ 192.771727][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 192.771735][ T9492] Call Trace: [ 192.771739][ T9492] [ 192.771744][ T9492] dump_stack_lvl+0x100/0x190 [ 192.771770][ T9492] should_fail_ex.cold+0x5/0xa [ 192.771789][ T9492] get_futex_key+0x1c9/0x13e0 [ 192.771805][ T9492] ? __pfx_get_futex_key+0x10/0x10 [ 192.771817][ T9492] ? futex_wake+0x4ea/0x5e0 [ 192.771837][ T9492] futex_wake+0xf4/0x5e0 [ 192.771855][ T9492] ? __pfx_futex_wake+0x10/0x10 [ 192.771873][ T9492] ? find_held_lock+0x2b/0x80 [ 192.771893][ T9492] ? __fget_files+0x215/0x3d0 [ 192.771917][ T9492] ? __fget_files+0x215/0x3d0 [ 192.771947][ T9492] do_futex+0x2b2/0x440 [ 192.771965][ T9492] ? __pfx_do_futex+0x10/0x10 [ 192.771985][ T9492] __x64_sys_futex+0x34f/0x4d0 [ 192.772003][ T9492] ? __pfx___x64_sys_futex+0x10/0x10 [ 192.772026][ T9492] do_syscall_64+0x123/0x790 [ 192.772043][ T9492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.772057][ T9492] RIP: 0033:0x7fd896b9fb19 [ 192.772067][ T9492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.772079][ T9492] RSP: 002b:00007fd897b3f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 192.772092][ T9492] RAX: ffffffffffffffda RBX: 00007fd896e25fa8 RCX: 00007fd896b9fb19 [ 192.772100][ T9492] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd896e25fac [ 192.772108][ T9492] RBP: 00007fd896e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 192.772115][ T9492] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 192.772124][ T9492] R13: 00007fd896e26038 R14: 00007fffc164ef60 R15: 00007fffc164f048 [ 192.772141][ T9492] [ 193.830385][ T9515] nvme_fabrics: missing parameter 'transport=%s' [ 193.830404][ T9515] nvme_fabrics: missing parameter 'nqn=%s' [ 194.626113][ T9543] 9pnet_fd: Insufficient options for proto=fd [ 194.879929][ T9557] FAULT_INJECTION: forcing a failure. [ 194.879929][ T9557] name failslab, interval 1, probability 0, space 0, times 0 [ 194.879949][ T9557] CPU: 0 UID: 0 PID: 9557 Comm: syz.2.1381 Not tainted syzkaller #0 PREEMPT(full) [ 194.879967][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 194.879978][ T9557] Call Trace: [ 194.879985][ T9557] [ 194.879992][ T9557] dump_stack_lvl+0x100/0x190 [ 194.880030][ T9557] should_fail_ex.cold+0x5/0xa [ 194.880054][ T9557] should_failslab+0xc2/0x120 [ 194.880070][ T9557] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 194.880097][ T9557] ? selinux_inode_alloc_security+0x104/0x290 [ 194.880117][ T9557] ? __d_alloc+0x34/0xad0 [ 194.880137][ T9557] __d_alloc+0x34/0xad0 [ 194.880156][ T9557] ? __ns_ref_active_get+0x9f/0x1b0 [ 194.880189][ T9557] path_from_stashed+0x431/0x760 [ 194.880221][ T9557] ns_get_path+0x60/0x80 [ 194.880249][ T9557] proc_ns_get_link+0x260/0x2e0 [ 194.880278][ T9557] ? __pfx_proc_ns_get_link+0x10/0x10 [ 194.880302][ T9557] pick_link+0xd11/0x13c0 [ 194.880313][ T9557] ? rcu_is_watching+0x13/0xc0 [ 194.880327][ T9557] ? __pfx_proc_ns_get_link+0x10/0x10 [ 194.880347][ T9557] step_into_slowpath+0x9ba/0xf90 [ 194.880361][ T9557] ? rcu_read_lock_any_held+0x6a/0x90 [ 194.880379][ T9557] ? __pfx_step_into_slowpath+0x10/0x10 [ 194.880392][ T9557] ? __d_lookup+0x1e1/0x4a0 [ 194.880410][ T9557] path_openat+0xcc4/0x23f0 [ 194.880428][ T9557] ? __pfx_path_openat+0x10/0x10 [ 194.880447][ T9557] do_file_open+0x20e/0x430 [ 194.880464][ T9557] ? __pfx_do_file_open+0x10/0x10 [ 194.880489][ T9557] ? _raw_spin_unlock+0x28/0x50 [ 194.880501][ T9557] ? alloc_fd+0x471/0x7a0 [ 194.880520][ T9557] do_sys_openat2+0x163/0x1d0 [ 194.880538][ T9557] ? __pfx_do_sys_openat2+0x10/0x10 [ 194.880560][ T9557] __x64_sys_openat+0x12d/0x210 [ 194.880578][ T9557] ? __pfx___x64_sys_openat+0x10/0x10 [ 194.880603][ T9557] do_syscall_64+0x123/0x790 [ 194.880619][ T9557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.880632][ T9557] RIP: 0033:0x7fe4d996034e [ 194.880643][ T9557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.880655][ T9557] RSP: 002b:00007fe4d7bf5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.880668][ T9557] RAX: ffffffffffffffda RBX: 00007fe4d7bf66c0 RCX: 00007fe4d996034e [ 194.880675][ T9557] RDX: 0000000000000002 RSI: 00007fe4d7bf5f90 RDI: ffffffffffffff9c [ 194.880682][ T9557] RBP: 00007fe4d9a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 194.880689][ T9557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.880696][ T9557] R13: 00007fe4d9c26038 R14: 00007fe4d9c25fa0 R15: 00007fff53150928 [ 194.880712][ T9557] [ 195.279462][ T9572] 9pnet_fd: Insufficient options for proto=fd [ 195.641584][ T4941] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 195.650963][ T9591] FAULT_INJECTION: forcing a failure. [ 195.650963][ T9591] name failslab, interval 1, probability 0, space 0, times 0 [ 195.650991][ T9591] CPU: 1 UID: 0 PID: 9591 Comm: syz.2.1395 Not tainted syzkaller #0 PREEMPT(full) [ 195.651012][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 195.651023][ T9591] Call Trace: [ 195.651029][ T9591] [ 195.651036][ T9591] dump_stack_lvl+0x100/0x190 [ 195.651072][ T9591] should_fail_ex.cold+0x5/0xa [ 195.651100][ T9591] should_failslab+0xc2/0x120 [ 195.651124][ T9591] __kmalloc_cache_noprof+0x91/0x6d0 [ 195.651149][ T9591] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 195.651185][ T9591] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 195.651214][ T9591] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 195.651235][ T9591] selinux_socket_post_create+0x363/0x7e0 [ 195.651264][ T9591] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 195.651289][ T9591] ? udp_init_sock+0x384/0x450 [ 195.651317][ T9591] ? inet_create+0x962/0x1060 [ 195.651341][ T9591] security_socket_post_create+0xaf/0x270 [ 195.651368][ T9591] __sock_create+0x70b/0x860 [ 195.651400][ T9591] start_sync_thread+0x1013/0x2b60 [ 195.651422][ T9591] ? __pfx_sync_thread_backup+0x10/0x10 [ 195.651454][ T9591] ? __pfx_start_sync_thread+0x10/0x10 [ 195.651473][ T9591] ? lock_acquire+0x1d1/0x380 [ 195.651496][ T9591] ? __might_fault+0xc5/0x140 [ 195.651519][ T9591] ? find_held_lock+0x2b/0x80 [ 195.651538][ T9591] ? __might_fault+0xc5/0x140 [ 195.651571][ T9591] ? do_ip_vs_set_ctl+0x471/0xc90 [ 195.651594][ T9591] do_ip_vs_set_ctl+0x471/0xc90 [ 195.651620][ T9591] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 195.651642][ T9591] ? rcu_is_watching+0x13/0xc0 [ 195.651668][ T9591] ? find_held_lock+0x2b/0x80 [ 195.651690][ T9591] ? nf_sockopt_find.isra.0+0x222/0x290 [ 195.651729][ T9591] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.651767][ T9591] ? nf_setsockopt+0x8d/0xf0 [ 195.651792][ T9591] nf_setsockopt+0x8d/0xf0 [ 195.651822][ T9591] ip_setsockopt+0xcb/0xf0 [ 195.651850][ T9591] tcp_setsockopt+0xa7/0x100 [ 195.651880][ T9591] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 195.651908][ T9591] do_sock_setsockopt+0xf3/0x1d0 [ 195.651935][ T9591] __sys_setsockopt+0x195/0x220 [ 195.651961][ T9591] __x64_sys_setsockopt+0xbd/0x160 [ 195.651980][ T9591] ? do_syscall_64+0xae/0x790 [ 195.652000][ T9591] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.652020][ T9591] do_syscall_64+0x123/0x790 [ 195.652042][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.652061][ T9591] RIP: 0033:0x7fe4d999fb19 [ 195.652076][ T9591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.652092][ T9591] RSP: 002b:00007fe4d7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.652111][ T9591] RAX: ffffffffffffffda RBX: 00007fe4d9c25fa0 RCX: 00007fe4d999fb19 [ 195.652122][ T9591] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000005 [ 195.652132][ T9591] RBP: 00007fe4d9a37b70 R08: 0000000000000018 R09: 0000000000000000 [ 195.652142][ T9591] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 195.652152][ T9591] R13: 00007fe4d9c26038 R14: 00007fe4d9c25fa0 R15: 00007fff53150928 [ 195.652178][ T9591] [ 195.661621][ T9591] IPVS: Error during creation of socket; terminating [ 197.160966][ T4941] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 197.344100][ T9647] FAULT_INJECTION: forcing a failure. [ 197.344100][ T9647] name fail_futex, interval 1, probability 0, space 0, times 0 [ 197.344132][ T9647] CPU: 1 UID: 0 PID: 9647 Comm: syz.5.1418 Not tainted syzkaller #0 PREEMPT(full) [ 197.344158][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 197.344170][ T9647] Call Trace: [ 197.344177][ T9647] [ 197.344185][ T9647] dump_stack_lvl+0x100/0x190 [ 197.344225][ T9647] should_fail_ex.cold+0x5/0xa [ 197.344259][ T9647] get_futex_key+0x1c9/0x13e0 [ 197.344284][ T9647] ? __pfx_get_futex_key+0x10/0x10 [ 197.344307][ T9647] ? ___sys_sendmsg+0x127/0x1e0 [ 197.344344][ T9647] futex_wake+0xf4/0x5e0 [ 197.344369][ T9647] ? futex_wait+0x11e/0x370 [ 197.344399][ T9647] ? __pfx_futex_wake+0x10/0x10 [ 197.344430][ T9647] ? find_held_lock+0x2b/0x80 [ 197.344459][ T9647] do_futex+0x2b2/0x440 [ 197.344480][ T9647] ? __pfx_do_futex+0x10/0x10 [ 197.344504][ T9647] ? fput+0x7c/0x100 [ 197.344529][ T9647] __x64_sys_futex+0x34f/0x4d0 [ 197.344557][ T9647] ? __pfx___x64_sys_futex+0x10/0x10 [ 197.344598][ T9647] do_syscall_64+0x123/0x790 [ 197.344627][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.344648][ T9647] RIP: 0033:0x7faee8f9fb19 [ 197.344667][ T9647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.344691][ T9647] RSP: 002b:00007faee71ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 197.344712][ T9647] RAX: ffffffffffffffda RBX: 00007faee9225fa8 RCX: 00007faee8f9fb19 [ 197.344725][ T9647] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faee9225fac [ 197.344737][ T9647] RBP: 00007faee9225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 197.344747][ T9647] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 197.344758][ T9647] R13: 00007faee9226038 R14: 00007fff860bcd80 R15: 00007fff860bce68 [ 197.344783][ T9647] [ 197.360620][ T9649] ip_tables: iptables: counters copy to user failed while replacing table [ 197.706844][ T4941] Bluetooth: hci5: command 0x0405 tx timeout [ 200.093103][ T9686] ip_tables: iptables: counters copy to user failed while replacing table [ 200.356778][ T5848] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 200.431797][ T9697] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1437'. [ 200.509034][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 200.514822][ T5848] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.514869][ T5848] usb 4-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 200.516230][ T5848] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 200.516256][ T5848] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 200.516277][ T5848] usb 4-1: config 14 has no interface number 0 [ 200.516292][ T5848] usb 4-1: config 14 has no interface number 1 [ 200.516342][ T5848] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 200.516364][ T5848] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 200.516386][ T5848] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 200.516411][ T5848] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 200.516438][ T5848] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 200.516463][ T5848] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.516487][ T5848] usb 4-1: config 14 interface 57 has no altsetting 0 [ 200.516503][ T5848] usb 4-1: config 14 interface 228 has no altsetting 0 [ 200.581132][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 200.653269][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.653297][ T5848] usb 4-1: Product: syz [ 200.653315][ T5848] usb 4-1: Manufacturer: syz [ 200.653330][ T5848] usb 4-1: SerialNumber: syz [ 200.768640][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 200.769102][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 200.769131][ T9] usb 6-1: New USB device found: idVendor=0c72, idProduct=000c, bcdDevice=e.3d [ 200.770161][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.772214][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.772238][ T9] usb 6-1: Product: syz [ 200.772252][ T9] usb 6-1: Manufacturer: syz [ 200.772266][ T9] usb 6-1: SerialNumber: syz [ 200.891534][ T9719] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.014438][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 201.014458][ T30] audit: type=1400 audit(1794005452.890:530): avc: denied { read } for pid=9690 comm="syz.5.1435" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.014994][ T30] audit: type=1400 audit(1794005452.890:531): avc: denied { open } for pid=9690 comm="syz.5.1435" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.319842][ T5848] legousbtower 4-1:14.57: interrupt endpoints not found [ 201.333869][ T9] peak_usb 6-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 201.333914][ T9] peak_usb 6-1:1.0: unable to read PCAN-USB serial number (err -22) [ 201.415008][ T9] peak_usb 6-1:1.0: probe with driver peak_usb failed with error -22 [ 201.422546][ T9] usb 6-1: USB disconnect, device number 2 [ 201.573610][ T5848] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 201.578236][ T5848] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 201.720935][ T9739] FAULT_INJECTION: forcing a failure. [ 201.720935][ T9739] name fail_futex, interval 1, probability 0, space 0, times 0 [ 201.720966][ T9739] CPU: 0 UID: 0 PID: 9739 Comm: syz.5.1442 Not tainted syzkaller #0 PREEMPT(full) [ 201.720989][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 201.721007][ T9739] Call Trace: [ 201.721014][ T9739] [ 201.721022][ T9739] dump_stack_lvl+0x100/0x190 [ 201.721061][ T9739] should_fail_ex.cold+0x5/0xa [ 201.721096][ T9739] get_futex_key+0x1c9/0x13e0 [ 201.721123][ T9739] ? __pfx_get_futex_key+0x10/0x10 [ 201.721142][ T9739] ? futex_wake+0x4ea/0x5e0 [ 201.721177][ T9739] futex_wake+0xf4/0x5e0 [ 201.721209][ T9739] ? __pfx_futex_wake+0x10/0x10 [ 201.721240][ T9739] ? find_held_lock+0x2b/0x80 [ 201.721262][ T9739] ? __fget_files+0x215/0x3d0 [ 201.721285][ T9739] ? __fget_files+0x215/0x3d0 [ 201.721314][ T9739] do_futex+0x2b2/0x440 [ 201.721339][ T9739] ? __pfx_do_futex+0x10/0x10 [ 201.721369][ T9739] __x64_sys_futex+0x34f/0x4d0 [ 201.721396][ T9739] ? __pfx___x64_sys_futex+0x10/0x10 [ 201.721431][ T9739] do_syscall_64+0x123/0x790 [ 201.721459][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.721481][ T9739] RIP: 0033:0x7faee8f9fb19 [ 201.721496][ T9739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.721512][ T9739] RSP: 002b:00007faee71ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.721529][ T9739] RAX: ffffffffffffffda RBX: 00007faee9225fa8 RCX: 00007faee8f9fb19 [ 201.721540][ T9739] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faee9225fac [ 201.721552][ T9739] RBP: 00007faee9225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 201.721564][ T9739] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 201.721576][ T9739] R13: 00007faee9226038 R14: 00007fff860bcd80 R15: 00007fff860bce68 [ 201.721604][ T9739] [ 202.152406][ T9753] usb 4-1: LEGO USB Tower reset control request failed [ 202.166281][ T9752] Bluetooth: Error in BCSP hdr checksum [ 202.183354][ T9756] ip_tables: iptables: counters copy to user failed while replacing table [ 202.363597][ T9] usb 4-1: USB disconnect, device number 3 [ 202.411573][ T9] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 202.506386][ T30] audit: type=1400 audit(1794005454.380:532): avc: denied { read write } for pid=9766 comm="syz.0.1453" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.529953][ T30] audit: type=1400 audit(1794005454.410:533): avc: denied { open } for pid=9766 comm="syz.0.1453" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.554452][ T9767] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1453'. [ 202.564406][ T30] audit: type=1400 audit(1794005454.440:534): avc: denied { ioctl } for pid=9766 comm="syz.0.1453" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.873820][ T9773] FAULT_INJECTION: forcing a failure. [ 202.873820][ T9773] name fail_futex, interval 1, probability 0, space 0, times 0 [ 202.873854][ T9773] CPU: 0 UID: 0 PID: 9773 Comm: syz.2.1454 Not tainted syzkaller #0 PREEMPT(full) [ 202.873880][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 202.873893][ T9773] Call Trace: [ 202.873901][ T9773] [ 202.873910][ T9773] dump_stack_lvl+0x100/0x190 [ 202.873953][ T9773] should_fail_ex.cold+0x5/0xa [ 202.873998][ T9773] get_futex_key+0x1c9/0x13e0 [ 202.874027][ T9773] ? __pfx_get_futex_key+0x10/0x10 [ 202.874050][ T9773] ? futex_wake+0x4ea/0x5e0 [ 202.874091][ T9773] futex_wake+0xf4/0x5e0 [ 202.874128][ T9773] ? __pfx_futex_wake+0x10/0x10 [ 202.874166][ T9773] ? find_held_lock+0x2b/0x80 [ 202.874191][ T9773] ? __fget_files+0x215/0x3d0 [ 202.874223][ T9773] ? __fget_files+0x215/0x3d0 [ 202.874257][ T9773] do_futex+0x2b2/0x440 [ 202.874285][ T9773] ? __pfx_do_futex+0x10/0x10 [ 202.874325][ T9773] __x64_sys_futex+0x34f/0x4d0 [ 202.874357][ T9773] ? __pfx___x64_sys_futex+0x10/0x10 [ 202.874398][ T9773] do_syscall_64+0x123/0x790 [ 202.874429][ T9773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.874452][ T9773] RIP: 0033:0x7fe4d999fb19 [ 202.874470][ T9773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.874490][ T9773] RSP: 002b:00007fe4d7bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 202.874510][ T9773] RAX: ffffffffffffffda RBX: 00007fe4d9c25fa8 RCX: 00007fe4d999fb19 [ 202.874524][ T9773] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe4d9c25fac [ 202.874536][ T9773] RBP: 00007fe4d9c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 202.874549][ T9773] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 202.874561][ T9773] R13: 00007fe4d9c26038 R14: 00007fff53150840 R15: 00007fff53150928 [ 202.874591][ T9773] [ 202.938604][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 203.576072][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.622282][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 203.626417][ T9] usb 5-1: New USB device found: idVendor=0c72, idProduct=000c, bcdDevice=e.3d [ 203.637515][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.639134][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.639154][ T9] usb 5-1: Product: syz [ 203.639167][ T9] usb 5-1: Manufacturer: syz [ 203.639180][ T9] usb 5-1: SerialNumber: syz [ 203.899224][ T9] peak_usb 5-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 203.899257][ T9] peak_usb 5-1:1.0: unable to read PCAN-USB serial number (err -22) [ 203.938112][ T9] peak_usb 5-1:1.0: probe with driver peak_usb failed with error -22 [ 203.955048][ T9] usb 5-1: USB disconnect, device number 2 [ 204.177173][ T53] Bluetooth: hci6: command 0x1003 tx timeout [ 204.177320][ T4941] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 205.288700][ T9812] FAULT_INJECTION: forcing a failure. [ 205.288700][ T9812] name fail_futex, interval 1, probability 0, space 0, times 0 [ 205.288734][ T9812] CPU: 1 UID: 0 PID: 9812 Comm: syz.5.1466 Not tainted syzkaller #0 PREEMPT(full) [ 205.288757][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 205.288769][ T9812] Call Trace: [ 205.288777][ T9812] [ 205.288785][ T9812] dump_stack_lvl+0x100/0x190 [ 205.288822][ T9812] should_fail_ex.cold+0x5/0xa [ 205.288851][ T9812] get_futex_key+0x1c9/0x13e0 [ 205.288877][ T9812] ? __pfx_get_futex_key+0x10/0x10 [ 205.288895][ T9812] ? futex_wake+0x4ea/0x5e0 [ 205.288927][ T9812] futex_wake+0xf4/0x5e0 [ 205.288958][ T9812] ? __pfx_futex_wake+0x10/0x10 [ 205.288987][ T9812] ? find_held_lock+0x2b/0x80 [ 205.289009][ T9812] ? __fget_files+0x215/0x3d0 [ 205.289032][ T9812] ? __fget_files+0x215/0x3d0 [ 205.289058][ T9812] do_futex+0x2b2/0x440 [ 205.289082][ T9812] ? __pfx_do_futex+0x10/0x10 [ 205.289111][ T9812] __x64_sys_futex+0x34f/0x4d0 [ 205.289135][ T9812] ? __pfx___x64_sys_futex+0x10/0x10 [ 205.289168][ T9812] do_syscall_64+0x123/0x790 [ 205.289194][ T9812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.289215][ T9812] RIP: 0033:0x7faee8f9fb19 [ 205.289230][ T9812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.289249][ T9812] RSP: 002b:00007faee71ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.289268][ T9812] RAX: ffffffffffffffda RBX: 00007faee9225fa8 RCX: 00007faee8f9fb19 [ 205.289281][ T9812] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faee9225fac [ 205.289292][ T9812] RBP: 00007faee9225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 205.289302][ T9812] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 205.289313][ T9812] R13: 00007faee9226038 R14: 00007fff860bcd80 R15: 00007fff860bce68 [ 205.289337][ T9812] [ 207.317998][ T9846] overlayfs: overlapping lowerdir path [ 207.393844][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 207.394686][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 207.394917][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 207.395368][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 207.896877][ T5797] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 208.009676][ T9852] FAULT_INJECTION: forcing a failure. [ 208.009676][ T9852] name fail_futex, interval 1, probability 0, space 0, times 0 [ 208.009711][ T9852] CPU: 0 UID: 0 PID: 9852 Comm: syz.0.1479 Not tainted syzkaller #0 PREEMPT(full) [ 208.009736][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 208.009749][ T9852] Call Trace: [ 208.009757][ T9852] [ 208.009766][ T9852] dump_stack_lvl+0x100/0x190 [ 208.009808][ T9852] should_fail_ex.cold+0x5/0xa [ 208.009839][ T9852] get_futex_key+0x1c9/0x13e0 [ 208.009864][ T9852] ? __pfx_get_futex_key+0x10/0x10 [ 208.009883][ T9852] ? clockevents_program_event+0x23e/0x820 [ 208.009916][ T9852] futex_wake+0xf4/0x5e0 [ 208.009946][ T9852] ? __pfx_futex_wake+0x10/0x10 [ 208.009977][ T9852] ? find_held_lock+0x2b/0x80 [ 208.009997][ T9852] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 208.010023][ T9852] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 208.010052][ T9852] do_futex+0x2b2/0x440 [ 208.010078][ T9852] ? __pfx_do_futex+0x10/0x10 [ 208.010109][ T9852] __x64_sys_futex+0x34f/0x4d0 [ 208.010135][ T9852] ? __pfx___x64_sys_futex+0x10/0x10 [ 208.010169][ T9852] do_syscall_64+0x123/0x790 [ 208.010194][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.010215][ T9852] RIP: 0033:0x7fd896b9fb19 [ 208.010232][ T9852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.010250][ T9852] RSP: 002b:00007fd897b3f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 208.010271][ T9852] RAX: ffffffffffffffda RBX: 00007fd896e25fa8 RCX: 00007fd896b9fb19 [ 208.010284][ T9852] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd896e25fac [ 208.010294][ T9852] RBP: 00007fd896e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 208.010305][ T9852] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 208.010317][ T9852] R13: 00007fd896e26038 R14: 00007fffc164ef60 R15: 00007fffc164f048 [ 208.010341][ T9852] [ 208.095718][ T5797] usb 4-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 208.230807][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.230833][ T5797] usb 4-1: Product: syz [ 208.230848][ T5797] usb 4-1: Manufacturer: syz [ 208.230862][ T5797] usb 4-1: SerialNumber: syz [ 208.259433][ T5797] usb 4-1: config 0 descriptor?? [ 208.405839][ T9870] overlayfs: overlapping lowerdir path [ 209.049710][ T5797] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 004 [ 209.304218][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 209.304777][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 209.305010][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 209.305262][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 209.885893][ T9884] FAULT_INJECTION: forcing a failure. [ 209.885893][ T9884] name failslab, interval 1, probability 0, space 0, times 0 [ 209.885930][ T9884] CPU: 1 UID: 0 PID: 9884 Comm: syz.5.1490 Not tainted syzkaller #0 PREEMPT(full) [ 209.885955][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 209.885967][ T9884] Call Trace: [ 209.885974][ T9884] [ 209.885983][ T9884] dump_stack_lvl+0x100/0x190 [ 209.886023][ T9884] should_fail_ex.cold+0x5/0xa [ 209.886053][ T9884] should_failslab+0xc2/0x120 [ 209.886077][ T9884] kmem_cache_alloc_noprof+0x92/0x6a0 [ 209.886110][ T9884] ? sk_prot_alloc+0x60/0x2a0 [ 209.886145][ T9884] sk_prot_alloc+0x60/0x2a0 [ 209.886176][ T9884] sk_alloc+0x36/0xe80 [ 209.886201][ T9884] inet_create+0x3a0/0x1060 [ 209.886229][ T9884] ? inet_create+0x94/0x1060 [ 209.886260][ T9884] __sock_create+0x339/0x860 [ 209.886296][ T9884] start_sync_thread+0x1013/0x2b60 [ 209.886320][ T9884] ? __pfx_sync_thread_backup+0x10/0x10 [ 209.886374][ T9884] ? __pfx_start_sync_thread+0x10/0x10 [ 209.886397][ T9884] ? lock_acquire+0x1d1/0x380 [ 209.886424][ T9884] ? __might_fault+0xc5/0x140 [ 209.886449][ T9884] ? find_held_lock+0x2b/0x80 [ 209.886470][ T9884] ? __might_fault+0xc5/0x140 [ 209.886507][ T9884] ? do_ip_vs_set_ctl+0x471/0xc90 [ 209.886533][ T9884] do_ip_vs_set_ctl+0x471/0xc90 [ 209.886563][ T9884] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 209.886589][ T9884] ? rcu_is_watching+0x13/0xc0 [ 209.886619][ T9884] ? find_held_lock+0x2b/0x80 [ 209.886640][ T9884] ? nf_sockopt_find.isra.0+0x222/0x290 [ 209.886684][ T9884] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 209.886723][ T9884] ? nf_setsockopt+0x8d/0xf0 [ 209.886748][ T9884] nf_setsockopt+0x8d/0xf0 [ 209.886779][ T9884] ip_setsockopt+0xcb/0xf0 [ 209.886809][ T9884] tcp_setsockopt+0xa7/0x100 [ 209.886837][ T9884] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 209.886869][ T9884] do_sock_setsockopt+0xf3/0x1d0 [ 209.886902][ T9884] __sys_setsockopt+0x195/0x220 [ 209.886939][ T9884] __x64_sys_setsockopt+0xbd/0x160 [ 209.886963][ T9884] ? do_syscall_64+0xae/0x790 [ 209.886988][ T9884] ? lockdep_hardirqs_on+0x7d/0x110 [ 209.887012][ T9884] do_syscall_64+0x123/0x790 [ 209.887040][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.887062][ T9884] RIP: 0033:0x7faee8f9fb19 [ 209.887081][ T9884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.887101][ T9884] RSP: 002b:00007faee71ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 209.887122][ T9884] RAX: ffffffffffffffda RBX: 00007faee9225fa0 RCX: 00007faee8f9fb19 [ 209.887135][ T9884] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000005 [ 209.887146][ T9884] RBP: 00007faee9037b70 R08: 0000000000000018 R09: 0000000000000000 [ 209.887158][ T9884] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 209.887170][ T9884] R13: 00007faee9226038 R14: 00007faee9225fa0 R15: 00007fff860bce68 [ 209.887199][ T9884] [ 209.955655][ T9889] FAULT_INJECTION: forcing a failure. [ 209.955655][ T9889] name fail_futex, interval 1, probability 0, space 0, times 0 [ 209.955683][ T9889] CPU: 0 UID: 0 PID: 9889 Comm: syz.4.1493 Not tainted syzkaller #0 PREEMPT(full) [ 209.955704][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 209.955715][ T9889] Call Trace: [ 209.955721][ T9889] [ 209.955728][ T9889] dump_stack_lvl+0x100/0x190 [ 209.955764][ T9889] should_fail_ex.cold+0x5/0xa [ 209.955794][ T9889] get_futex_key+0x1c9/0x13e0 [ 209.955818][ T9889] ? __pfx_get_futex_key+0x10/0x10 [ 209.955835][ T9889] ? futex_wake+0x4ea/0x5e0 [ 209.955866][ T9889] futex_wake+0xf4/0x5e0 [ 209.955891][ T9889] ? __pfx_futex_wake+0x10/0x10 [ 209.955918][ T9889] ? find_held_lock+0x2b/0x80 [ 209.955937][ T9889] ? __fget_files+0x215/0x3d0 [ 209.955959][ T9889] ? __fget_files+0x215/0x3d0 [ 209.955983][ T9889] do_futex+0x2b2/0x440 [ 209.956003][ T9889] ? __pfx_do_futex+0x10/0x10 [ 209.956033][ T9889] __x64_sys_futex+0x34f/0x4d0 [ 209.956056][ T9889] ? __pfx___x64_sys_futex+0x10/0x10 [ 209.956086][ T9889] do_syscall_64+0x123/0x790 [ 209.956110][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.956128][ T9889] RIP: 0033:0x7fa1e939fb19 [ 209.956143][ T9889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.956159][ T9889] RSP: 002b:00007fa1ea2120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 209.956177][ T9889] RAX: ffffffffffffffda RBX: 00007fa1e9625fa8 RCX: 00007fa1e939fb19 [ 209.956189][ T9889] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa1e9625fac [ 209.956199][ T9889] RBP: 00007fa1e9625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 209.956210][ T9889] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 209.956220][ T9889] R13: 00007fa1e9626038 R14: 00007ffefa7d9bf0 R15: 00007ffefa7d9cd8 [ 209.956244][ T9889] [ 209.956359][ T9884] IPVS: Error during creation of socket; terminating [ 210.269559][ T9895] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1495'. [ 210.621569][ T5749] usb 4-1: USB disconnect, device number 4 [ 211.063980][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'. [ 211.918121][ T30] audit: type=1326 audit(1794005463.790:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.2.1503" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d999fb19 code=0x7ffc0000 [ 211.918175][ T30] audit: type=1326 audit(1794005463.800:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.2.1503" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d999fb19 code=0x7ffc0000 [ 211.922254][ T30] audit: type=1326 audit(1794005463.800:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9933 comm="syz.2.1503" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fe4d999fb19 code=0x7ffc0000 [ 212.546361][ T9944] FAULT_INJECTION: forcing a failure. [ 212.546361][ T9944] name fail_futex, interval 1, probability 0, space 0, times 0 [ 212.546392][ T9944] CPU: 0 UID: 0 PID: 9944 Comm: syz.4.1505 Not tainted syzkaller #0 PREEMPT(full) [ 212.546416][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 212.546429][ T9944] Call Trace: [ 212.546436][ T9944] [ 212.546444][ T9944] dump_stack_lvl+0x100/0x190 [ 212.546484][ T9944] should_fail_ex.cold+0x5/0xa [ 212.546518][ T9944] get_futex_key+0x1c9/0x13e0 [ 212.546542][ T9944] ? __pfx_get_futex_key+0x10/0x10 [ 212.546562][ T9944] ? futex_wake+0x4ea/0x5e0 [ 212.546599][ T9944] futex_wake+0xf4/0x5e0 [ 212.546630][ T9944] ? __pfx_futex_wake+0x10/0x10 [ 212.546661][ T9944] ? find_held_lock+0x2b/0x80 [ 212.546682][ T9944] ? __fget_files+0x215/0x3d0 [ 212.546705][ T9944] ? __fget_files+0x215/0x3d0 [ 212.546734][ T9944] do_futex+0x2b2/0x440 [ 212.546759][ T9944] ? __pfx_do_futex+0x10/0x10 [ 212.546791][ T9944] __x64_sys_futex+0x34f/0x4d0 [ 212.546819][ T9944] ? __pfx___x64_sys_futex+0x10/0x10 [ 212.546854][ T9944] do_syscall_64+0x123/0x790 [ 212.546882][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.546903][ T9944] RIP: 0033:0x7fa1e939fb19 [ 212.546922][ T9944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.546941][ T9944] RSP: 002b:00007fa1ea2120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.546962][ T9944] RAX: ffffffffffffffda RBX: 00007fa1e9625fa8 RCX: 00007fa1e939fb19 [ 212.546977][ T9944] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa1e9625fac [ 212.546990][ T9944] RBP: 00007fa1e9625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 212.547003][ T9944] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 212.547017][ T9944] R13: 00007fa1e9626038 R14: 00007ffefa7d9bf0 R15: 00007ffefa7d9cd8 [ 212.547052][ T9944] [ 212.956244][ T9958] __nla_validate_parse: 9 callbacks suppressed [ 212.956268][ T9958] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1512'. [ 214.237971][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1516'. [ 214.238943][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1516'. [ 214.239167][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1516'. [ 214.239681][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1516'. [ 214.419092][ T5848] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 214.566903][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 214.568434][ T5848] usb 5-1: unable to get BOS descriptor or descriptor too short [ 214.568461][ T5848] usb 5-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 214.569217][ T5848] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 214.569233][ T5848] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 214.569246][ T5848] usb 5-1: config 14 has no interface number 0 [ 214.569256][ T5848] usb 5-1: config 14 has no interface number 1 [ 214.569283][ T5848] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 214.569297][ T5848] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 214.569312][ T5848] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 214.569329][ T5848] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 214.569346][ T5848] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 214.569362][ T5848] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.569378][ T5848] usb 5-1: config 14 interface 57 has no altsetting 0 [ 214.569388][ T5848] usb 5-1: config 14 interface 228 has no altsetting 0 [ 214.574261][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.574280][ T5848] usb 5-1: Product: syz [ 214.574289][ T5848] usb 5-1: Manufacturer: syz [ 214.574298][ T5848] usb 5-1: SerialNumber: syz [ 215.191788][ T5848] legousbtower 5-1:14.57: interrupt endpoints not found [ 215.286521][ T30] audit: type=1400 audit(1794005467.160:538): avc: denied { read } for pid=9995 comm="syz.5.1521" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 215.292489][ T30] audit: type=1400 audit(1794005467.170:539): avc: denied { open } for pid=9995 comm="syz.5.1521" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 215.413847][ T5848] legousbtower 5-1:14.228: get version request failed: -71 [ 215.415669][ T5848] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 215.464885][ T5848] usb 5-1: USB disconnect, device number 3 [ 216.705996][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1535'. [ 216.707258][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1535'. [ 216.708449][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1535'. [ 216.710898][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1535'. [ 217.318830][T10046] FAULT_INJECTION: forcing a failure. [ 217.318830][T10046] name fail_futex, interval 1, probability 0, space 0, times 0 [ 217.318872][T10046] CPU: 0 UID: 0 PID: 10046 Comm: syz.4.1538 Not tainted syzkaller #0 PREEMPT(full) [ 217.318902][T10046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 217.318917][T10046] Call Trace: [ 217.318926][T10046] [ 217.318937][T10046] dump_stack_lvl+0x100/0x190 [ 217.318985][T10046] should_fail_ex.cold+0x5/0xa [ 217.319024][T10046] get_futex_key+0x1c9/0x13e0 [ 217.319054][T10046] ? __pfx_get_futex_key+0x10/0x10 [ 217.319077][T10046] ? futex_wake+0x4ea/0x5e0 [ 217.319117][T10046] futex_wake+0xf4/0x5e0 [ 217.319154][T10046] ? __pfx_futex_wake+0x10/0x10 [ 217.319192][T10046] ? find_held_lock+0x2b/0x80 [ 217.319220][T10046] ? __fget_files+0x215/0x3d0 [ 217.319250][T10046] ? __fget_files+0x215/0x3d0 [ 217.319284][T10046] do_futex+0x2b2/0x440 [ 217.319313][T10046] ? __pfx_do_futex+0x10/0x10 [ 217.319349][T10046] __x64_sys_futex+0x34f/0x4d0 [ 217.319390][T10046] ? __pfx___x64_sys_futex+0x10/0x10 [ 217.319431][T10046] do_syscall_64+0x123/0x790 [ 217.319466][T10046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.319490][T10046] RIP: 0033:0x7fa1e939fb19 [ 217.319509][T10046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.319530][T10046] RSP: 002b:00007fa1ea2120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 217.319554][T10046] RAX: ffffffffffffffda RBX: 00007fa1e9625fa8 RCX: 00007fa1e939fb19 [ 217.319568][T10046] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa1e9625fac [ 217.319582][T10046] RBP: 00007fa1e9625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 217.319596][T10046] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 217.319609][T10046] R13: 00007fa1e9626038 R14: 00007ffefa7d9bf0 R15: 00007ffefa7d9cd8 [ 217.319640][T10046] [ 217.887506][ T30] audit: type=1400 audit(1794005469.770:540): avc: denied { read write } for pid=10066 comm="syz.4.1546" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 217.887711][ T30] audit: type=1400 audit(1794005469.770:541): avc: denied { open } for pid=10066 comm="syz.4.1546" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 217.922039][ T5749] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 218.097547][ T5749] usb 6-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 218.102711][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.102740][ T5749] usb 6-1: Product: syz [ 218.102754][ T5749] usb 6-1: Manufacturer: syz [ 218.102767][ T5749] usb 6-1: SerialNumber: syz [ 218.162129][ T5749] usb 6-1: config 0 descriptor?? [ 218.857634][ T4952] block nbd1: Possible stuck request ffff888029c50000: control (read@0,2048B). Runtime 120 seconds [ 218.930909][ T5749] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 003 [ 221.106978][ T5797] usb 6-1: USB disconnect, device number 3 [ 223.617421][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 223.619253][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 223.620418][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 223.621689][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 225.872226][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 225.872778][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 225.873007][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 225.873244][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 225.873414][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 226.095816][T10178] evm: overlay not supported [ 227.122471][T10207] FAULT_INJECTION: forcing a failure. [ 227.122471][T10207] name fail_futex, interval 1, probability 0, space 0, times 0 [ 227.122506][T10207] CPU: 1 UID: 0 PID: 10207 Comm: syz.4.1595 Not tainted syzkaller #0 PREEMPT(full) [ 227.122531][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 227.122544][T10207] Call Trace: [ 227.122551][T10207] [ 227.122560][T10207] dump_stack_lvl+0x100/0x190 [ 227.122602][T10207] should_fail_ex.cold+0x5/0xa [ 227.122634][T10207] get_futex_key+0x1c9/0x13e0 [ 227.122660][T10207] ? __pfx_get_futex_key+0x10/0x10 [ 227.122680][T10207] ? wakeup_preempt_fair+0x4fc/0xf60 [ 227.122715][T10207] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 227.122744][T10207] futex_wait_setup+0x91/0x540 [ 227.122781][T10207] __futex_wait+0x19f/0x360 [ 227.122812][T10207] ? __pfx___futex_wait+0x10/0x10 [ 227.122838][T10207] ? __pfx_try_to_wake_up+0x10/0x10 [ 227.122866][T10207] ? futex_hash+0x311/0x400 [ 227.122889][T10207] ? __pfx_futex_wake_mark+0x10/0x10 [ 227.122922][T10207] ? find_held_lock+0x2b/0x80 [ 227.122942][T10207] ? futex_wake+0x4ea/0x5e0 [ 227.122974][T10207] futex_wait+0xe6/0x370 [ 227.122998][T10207] ? __pfx_futex_wait+0x10/0x10 [ 227.123030][T10207] ? find_held_lock+0x2b/0x80 [ 227.123051][T10207] ? __fget_files+0x215/0x3d0 [ 227.123076][T10207] ? __fget_files+0x215/0x3d0 [ 227.123105][T10207] do_futex+0x265/0x440 [ 227.123131][T10207] ? __pfx_do_futex+0x10/0x10 [ 227.123163][T10207] __x64_sys_futex+0x34f/0x4d0 [ 227.123192][T10207] ? __pfx___x64_sys_futex+0x10/0x10 [ 227.123227][T10207] do_syscall_64+0x123/0x790 [ 227.123255][T10207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.123276][T10207] RIP: 0033:0x7fa1e939fb19 [ 227.123294][T10207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.123322][T10207] RSP: 002b:00007fa1ea2120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 227.123345][T10207] RAX: ffffffffffffffda RBX: 00007fa1e9625fa8 RCX: 00007fa1e939fb19 [ 227.123357][T10207] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa1e9625fa8 [ 227.123369][T10207] RBP: 00007fa1e9625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 227.123381][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.123393][T10207] R13: 00007fa1e9626038 R14: 00007ffefa7d9bf0 R15: 00007ffefa7d9cd8 [ 227.123421][T10207] [ 228.510173][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'. [ 229.715538][T10251] overlayfs: failed to resolve './file1/file0': -2 [ 229.777018][T10252] FAULT_INJECTION: forcing a failure. [ 229.777018][T10252] name fail_futex, interval 1, probability 0, space 0, times 0 [ 229.777045][T10252] CPU: 1 UID: 0 PID: 10252 Comm: syz.0.1609 Not tainted syzkaller #0 PREEMPT(full) [ 229.777061][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 229.777068][T10252] Call Trace: [ 229.777073][T10252] [ 229.777079][T10252] dump_stack_lvl+0x100/0x190 [ 229.777104][T10252] should_fail_ex.cold+0x5/0xa [ 229.777125][T10252] get_futex_key+0x1c9/0x13e0 [ 229.777147][T10252] ? __pfx_get_futex_key+0x10/0x10 [ 229.777160][T10252] ? futex_wake+0x4ea/0x5e0 [ 229.777181][T10252] futex_wake+0xf4/0x5e0 [ 229.777202][T10252] ? __pfx_futex_wake+0x10/0x10 [ 229.777222][T10252] ? find_held_lock+0x2b/0x80 [ 229.777236][T10252] ? __fget_files+0x215/0x3d0 [ 229.777252][T10252] ? __fget_files+0x215/0x3d0 [ 229.777270][T10252] do_futex+0x2b2/0x440 [ 229.777286][T10252] ? __pfx_do_futex+0x10/0x10 [ 229.777304][T10252] __x64_sys_futex+0x34f/0x4d0 [ 229.777321][T10252] ? __pfx___x64_sys_futex+0x10/0x10 [ 229.777341][T10252] do_syscall_64+0x123/0x790 [ 229.777357][T10252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.777371][T10252] RIP: 0033:0x7fd896b9fb19 [ 229.777381][T10252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.777393][T10252] RSP: 002b:00007fd897b3f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 229.777405][T10252] RAX: ffffffffffffffda RBX: 00007fd896e25fa8 RCX: 00007fd896b9fb19 [ 229.777413][T10252] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd896e25fac [ 229.777420][T10252] RBP: 00007fd896e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 229.777430][T10252] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 229.777437][T10252] R13: 00007fd896e26038 R14: 00007fffc164ef60 R15: 00007fffc164f048 [ 229.777453][T10252] [ 230.053829][T10258] __nla_validate_parse: 3 callbacks suppressed [ 230.053852][T10258] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1611'. [ 231.066091][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 231.066525][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 231.066791][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 231.067032][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 232.282540][ T30] audit: type=1400 audit(1794005484.160:542): avc: denied { create } for pid=10302 comm="syz.2.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 232.435836][ T30] audit: type=1400 audit(1794005484.310:543): avc: denied { accept } for pid=10302 comm="syz.2.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 232.586166][T10310] overlayfs: failed to resolve './file1/file0': -2 [ 234.232345][T10343] overlayfs: failed to resolve './file1/file0': -2 [ 234.325716][ T5848] hid_parser_main: 24 callbacks suppressed [ 234.325740][ T5848] hid-sensor-hub 0003:1234:5678.0002: unknown main item tag 0x0 [ 234.325762][ T5848] hid-sensor-hub 0003:1234:5678.0002: unknown main item tag 0x0 [ 234.325782][ T5848] hid-sensor-hub 0003:1234:5678.0002: unknown main item tag 0x0 [ 234.325802][ T5848] hid-sensor-hub 0003:1234:5678.0002: unknown main item tag 0x0 [ 234.325821][ T5848] hid-sensor-hub 0003:1234:5678.0002: unknown main item tag 0x0 [ 234.325840][ T5848] hid-sensor-hub 0003:1234:5678.0002: unknown main item tag 0x0 [ 234.325860][ T5848] hid-sensor-hub 0003:1234:5678.0002: unknown main item tag 0x0 [ 234.325879][ T5848] hid-sensor-hub 0003:1234:5678.0002: unknown main item tag 0x0 [ 234.325898][ T5848] hid-sensor-hub 0003:1234:5678.0002: unknown main item tag 0x0 [ 234.325917][ T5848] hid-sensor-hub 0003:1234:5678.0002: unknown main item tag 0x0 [ 234.417982][ T5848] hid-sensor-hub 0003:1234:5678.0002: unbalanced collection at end of report description [ 234.418956][ T5848] hid-sensor-hub 0003:1234:5678.0002: parse failed [ 234.419032][ T5848] hid-sensor-hub 0003:1234:5678.0002: probe with driver hid-sensor-hub failed with error -22 [ 234.782394][T10361] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = -4, id = 0 [ 234.890141][ T30] audit: type=1400 audit(1794005486.760:544): avc: denied { write } for pid=10363 comm="syz.2.1641" path="socket:[24061]" dev="sockfs" ino=24061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 235.186508][T10370] tipc: Started in network mode [ 235.186530][T10370] tipc: Node identity 4, cluster identity 4711 [ 235.186542][T10370] tipc: Node number set to 4 [ 235.654386][T10377] overlayfs: failed to resolve './file1/file0': -2 [ 237.721845][T10400] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = -4, id = 0 [ 237.923888][T10406] overlayfs: failed to resolve './file1/file0': -2 [ 237.946264][ T30] audit: type=1326 audit(1794005489.820:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.5.1658" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee8f9fb19 code=0x7ffc0000 [ 237.950276][ T30] audit: type=1326 audit(1794005489.830:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.5.1658" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee8f9fb19 code=0x7ffc0000 [ 238.013208][ T30] audit: type=1326 audit(1794005489.890:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10408 comm="syz.5.1658" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7faee8f9fb19 code=0x7ffc0000 [ 238.095187][T10416] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1661'. [ 238.299029][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 238.299719][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 238.299945][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 238.300199][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 239.246770][ T5797] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 239.450149][ T5797] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.450679][ T5797] usb 3-1: not running at top speed; connect to a high speed hub [ 239.450707][ T5797] usb 3-1: New USB device found: idVendor=0c72, idProduct=000c, bcdDevice=e.3d [ 239.452503][ T5797] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.454961][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.454986][ T5797] usb 3-1: Product: syz [ 239.455000][ T5797] usb 3-1: Manufacturer: syz [ 239.455014][ T5797] usb 3-1: SerialNumber: syz [ 239.892232][ T5797] peak_usb 3-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 239.892263][ T5797] peak_usb 3-1:1.0: unable to read PCAN-USB serial number (err -22) [ 239.916786][ T5749] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 239.969624][ T5797] peak_usb 3-1:1.0: probe with driver peak_usb failed with error -22 [ 239.993254][ T5797] usb 3-1: USB disconnect, device number 2 [ 240.071741][ T5749] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.073439][ T5749] usb 4-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 240.093042][ T5749] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 240.099646][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.099670][ T5749] usb 4-1: Product: syz [ 240.099683][ T5749] usb 4-1: Manufacturer: syz [ 240.099697][ T5749] usb 4-1: SerialNumber: syz [ 241.000125][ T30] audit: type=1400 audit(1794005491.879:548): avc: denied { name_bind } for pid=10444 comm="syz.3.1671" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 241.017339][ T30] audit: type=1400 audit(1794005491.879:549): avc: denied { write } for pid=10444 comm="syz.3.1671" name="sg0" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.017391][ T30] audit: type=1400 audit(1794005491.879:550): avc: denied { open } for pid=10444 comm="syz.3.1671" path="/dev/sg0" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.020560][ T30] audit: type=1400 audit(1794005491.879:551): avc: denied { ioctl } for pid=10444 comm="syz.3.1671" path="/dev/sg0" dev="devtmpfs" ino=983 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.179470][ T5749] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 241.191936][ T5749] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 241.191961][ T5749] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 241.191979][ T5749] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 241.192070][ T5749] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 241.192087][ T5749] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 241.192102][ T5749] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 241.202737][ T5749] usb 4-1: failed to enable PITCH for EP 0x82 [ 241.609150][ T53] Bluetooth: hci5: command 0x0405 tx timeout [ 241.611546][ T30] audit: type=1400 audit(1794005491.475:552): avc: denied { rename } for pid=10472 comm="syz.0.1680" name="file0" dev="tmpfs" ino=1917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 242.157257][ T5749] usb 4-1: USB disconnect, device number 5 [ 242.603725][T10484] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1682'. [ 243.420808][ T32] INFO: task syz.1.240:6575 blocked for more than 144 seconds. [ 243.723599][ T32] Not tainted syzkaller #0 [ 243.723610][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.723615][ T32] task:syz.1.240 state:D stack:28488 pid:6575 tgid:6574 ppid:5620 task_flags:0x400140 flags:0x00080003 [ 243.723652][ T32] Call Trace: [ 243.723656][ T32] [ 243.723662][ T32] __schedule+0x125e/0x6990 [ 243.723680][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 243.723700][ T32] ? do_raw_spin_lock+0x128/0x260 [ 243.723716][ T32] ? __pfx___schedule+0x10/0x10 [ 243.723727][ T32] ? find_held_lock+0x2b/0x80 [ 243.723740][ T32] ? schedule+0x225/0x2c0 [ 243.723754][ T32] schedule+0xdd/0x2c0 [ 243.723766][ T32] schedule_preempt_disabled+0x13/0x30 [ 243.723778][ T32] __mutex_lock+0xcca/0x1c10 [ 243.723793][ T32] ? bdev_release+0x15a/0x6e0 [ 243.723808][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 243.723823][ T32] ? lock_acquire+0x1d1/0x380 [ 243.723840][ T32] ? find_held_lock+0x2b/0x80 [ 243.723859][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 243.723874][ T32] ? bdev_release+0x15a/0x6e0 [ 243.723885][ T32] bdev_release+0x15a/0x6e0 [ 243.723899][ T32] ? __pfx_blkdev_release+0x10/0x10 [ 243.723911][ T32] blkdev_release+0x15/0x20 [ 243.723923][ T32] __fput+0x3fb/0xb50 [ 243.723944][ T32] task_work_run+0x150/0x240 [ 243.723961][ T32] ? __pfx_task_work_run+0x10/0x10 [ 243.723989][ T32] get_signal+0x1c5/0x22e0 [ 243.724024][ T32] ? __pfx_get_signal+0x10/0x10 [ 243.724043][ T32] ? task_work_add+0x201/0x3b0 [ 243.724058][ T32] arch_do_signal_or_restart+0x91/0x7e0 [ 243.724073][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 243.724094][ T32] exit_to_user_mode_loop+0x139/0x700 [ 243.724107][ T32] ? rcu_is_watching+0x13/0xc0 [ 243.724122][ T32] do_syscall_64+0x661/0x790 [ 243.724137][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.724150][ T32] RIP: 0033:0x7f80af99fb19 [ 243.724160][ T32] RSP: 002b:00007f80b086b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.724171][ T32] RAX: 0000000000000000 RBX: 00007f80afc25fa0 RCX: 00007f80af99fb19 [ 243.724179][ T32] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 243.724186][ T32] RBP: 00007f80afa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 243.724193][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.724200][ T32] R13: 00007f80afc26038 R14: 00007f80afc25fa0 R15: 00007ffd545ece78 [ 243.724215][ T32] [ 243.724234][ T32] [ 243.724234][ T32] Showing all locks held in the system: [ 243.724242][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 243.724251][ T32] #0: ffffffff8ffeaf60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 243.724289][ T32] locks held by kworker/u8:3/50: 1, last CPU#1: [ 243.724297][ T32] #0: ffffffff8ffeaf60 (rcu_read_lock){....}-{1:3}, at: process_one_work+0x880/0x1b10 [ 243.724329][ T32] locks held by kworker/u8:5/143: 1, last CPU#1: [ 243.724337][ T32] #0: ffffffff8ffeaf60 (rcu_read_lock){....}-{1:3}, at: process_one_work+0x880/0x1b10 [ 243.724367][ T32] locks held by kworker/u8:6/731: 5, last CPU#1: [ 243.724375][ T32] #0: ffff88813ff74148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 243.724404][ T32] #1: ffffc9000466fd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 243.724433][ T32] #2: ffffffff8fe7a370 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 243.724462][ T32] #3: ffffffff9014d0c0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x110/0x1c0 [ 243.724492][ T32] #4: ffffffff8fe9af00 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_queue+0x73/0x120 [ 243.724522][ T32] locks held by kworker/1:2/987: 2, last CPU#1: [ 243.724530][ T32] #0: ffff88813ff35d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 243.724559][ T32] #1: ffffc90004ff7d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 243.724589][ T32] locks held by kworker/u8:9/1175: 4, last CPU#1: [ 243.724597][ T32] #0: ffff88813ff74148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 243.724625][ T32] #1: ffffc90005837d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 243.724654][ T32] #2: ffff888054590800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 243.724682][ T32] #3: ffffffff8ffeaf60 (rcu_read_lock){....}-{1:3}, at: ieee80211_update_sta_info.isra.0+0x2a8/0x1220 [ 243.724713][ T32] locks held by kworker/u8:10/1446: 1, last CPU#1: [ 243.724722][ T32] #0: ffffffff8ffeaf60 (rcu_read_lock){....}-{1:3}, at: process_one_work+0x880/0x1b10 [ 243.724763][ T32] locks held by getty/5383: 2, on CPU#0: [ 243.724771][ T32] #0: ffff8880351860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 243.741417][ T32] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 243.741478][ T32] locks held by syz-executor/5622: 1, on CPU#1: [ 243.741491][ T32] #0: ffffffff8fff7468 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 243.741545][ T32] locks held by kworker/1:7/5749: 5, last CPU#1: [ 243.741557][ T32] #0: ffff88802568dd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 243.741600][ T32] #1: ffffc900050e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 243.741640][ T32] #2: ffff88802bbac1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 243.741682][ T32] #3: ffff8880227561d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 243.741724][ T32] #4: ffffffff8ffeaf60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 243.741764][ T32] locks held by kworker/0:5/5797: 4, last CPU#0: [ 243.741775][ T32] #0: ffff88813ff36d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 243.741815][ T32] #1: ffffc900052b7d08 (((io_key_has_sqarray).work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 243.741861][ T32] #2: ffffffff8fe7a370 (cpu_hotplug_lock){++++}-{0:0}, at: jump_label_update_timeout+0x17/0x50 [ 243.741903][ T32] #3: ffffffff9014d0c0 (jump_label_mutex){+.+.}-{4:4}, at: __static_key_slow_dec_cpuslocked.part.0+0x18/0xf0 [ 243.741946][ T32] locks held by kworker/u8:16/6053: 2, on CPU#1: [ 243.741957][ T32] #0: ffff88813ff74148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 243.741997][ T32] #1: ffffc90005b8fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 243.742039][ T32] locks held by udevd/6227: 1, on CPU#1: [ 243.742050][ T32] #0: ffff888022f71350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x426/0xe50 [ 243.742088][ T32] locks held by syz.1.240/6575: 1, on CPU#1: [ 243.742100][ T32] #0: ffff888022f71350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6e0 [ 243.742137][ T32] locks held by udevd/6594: 4, on CPU#0: [ 243.742148][ T32] #0: ffff888079b542d8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 243.742189][ T32] #1: ffff88803531dc80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 243.742234][ T32] #2: ffff888076361b48 (kn->active#33){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 243.742278][ T32] #3: ffff8880227561d8 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 243.742316][ T32] locks held by syz-executor/7115: 4, last CPU#1: [ 243.742328][ T32] #0: ffff88803601e478 (sb_writers#6){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x610 [ 243.742376][ T32] #1: ffff88802ecb0288 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x610 [ 243.742427][ T32] #2: ffffffff90b305d8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 243.742474][ T32] #3: ffffffff8ffeaf60 (rcu_read_lock){....}-{1:3}, at: prepend_path+0xab/0x1060 [ 243.742517][ T32] locks held by syz.4.1682/10484: 2, last CPU#1: [ 243.742528][ T32] #0: ffff888036a14490 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: pfkey_sendmsg+0x41a/0x840 [ 243.742571][ T32] #1: ffffffff92159760 (pfkey_mutex){+.+.}-{4:4}, at: pfkey_register+0xf4/0x950 [ 243.742615][ T32] locks held by syz.2.1683/10488: 1, last CPU#0: [ 243.742627][ T32] #0: ffff88807deef180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa40 [ 243.742664][ T32] locks held by modprobe/10487: 1, last CPU#1: [ 243.742676][ T32] #0: ffff88807dee9bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa40 [ 243.742713][ T32] locks held by syz.3.1685/10491: 2, on CPU#1: [ 243.742724][ T32] #0: ffffffff91e15380 (register_mutex#4){+.+.}-{4:4}, at: odev_release+0x44/0x70 [ 243.742765][ T32] #1: ffffffff8fff7468 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 243.742809][ T32] locks held by syz.3.1685/10495: 1, last CPU#0: [ 243.742820][ T32] #0: ffff88805570f478 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x298/0xd40 [ 243.742889][ T32] [ 243.742893][ T32] ============================================= [ 243.742893][ T32] [ 243.742900][ T32] NMI backtrace for cpu 1 [ 243.742913][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 243.742932][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 243.742941][ T32] Call Trace: [ 243.742947][ T32] [ 243.742953][ T32] dump_stack_lvl+0x100/0x190 [ 243.742981][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 243.743000][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 243.743024][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 243.743043][ T32] sys_info+0x141/0x190 [ 243.743065][ T32] watchdog+0xd0f/0x10c0 [ 243.743088][ T32] ? __pfx_watchdog+0x10/0x10 [ 243.743105][ T32] ? __kthread_parkme+0x18f/0x230 [ 243.743132][ T32] ? kthread+0x13a/0x450 [ 243.743147][ T32] ? __pfx_watchdog+0x10/0x10 [ 243.743162][ T32] kthread+0x373/0x450 [ 243.743178][ T32] ? __pfx_kthread+0x10/0x10 [ 243.743195][ T32] ret_from_fork+0x730/0xd60 [ 243.743218][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 243.743241][ T32] ? __switch_to+0x800/0x10e0 [ 243.743257][ T32] ? __pfx_kthread+0x10/0x10 [ 243.743275][ T32] ret_from_fork_asm+0x1a/0x30 [ 243.743306][ T32] [ 243.743323][ T32] Sending NMI from CPU 1 to CPUs 0: [ 243.743342][ C0] NMI backtrace for cpu 0 [ 243.743353][ C0] CPU: 0 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 243.743374][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 243.743382][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 243.743398][ C0] Code: 51 4b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 c8 ba c5 fc eb a2 e8 51 bb [ 243.743411][ C0] RSP: 0018:ffffc90000a77950 EFLAGS: 00000002 [ 243.743423][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 243.743433][ C0] RDX: 00000000000003fd RSI: ffffffff85c32750 RDI: ffffffff9cf53000 [ 243.743442][ C0] RBP: ffffffff9cf52fc0 R08: 000000000000001f R09: 0000000000000000 [ 243.743451][ C0] R10: 0000000000000003 R11: 205d323354202020 R12: 0000000000000000 [ 243.743460][ C0] R13: 0000000000000020 R14: fffffbfff39ea655 R15: dffffc0000000000 [ 243.743469][ C0] FS: 0000000000000000(0000) GS:ffff888122475000(0000) knlGS:0000000000000000 [ 243.743484][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.743494][ C0] CR2: 000000110c4967e6 CR3: 000000005a0c7000 CR4: 00000000003526f0 [ 243.743503][ C0] Call Trace: [ 243.743508][ C0] [ 243.743514][ C0] wait_for_lsr+0x13a/0x210 [ 243.743531][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 243.743548][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 243.743564][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 243.743578][ C0] serial8250_console_write+0x1108/0x14f0 [ 243.743599][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 243.743618][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 243.743637][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 243.743659][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 243.743680][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 243.743698][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 243.743715][ C0] ? do_raw_spin_lock+0x30/0x260 [ 243.743732][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 243.743746][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 243.743761][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 243.743778][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 243.743798][ C0] nbcon_kthread_func+0x5ef/0x7f0 [ 243.743818][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 243.743839][ C0] ? __kthread_parkme+0x18f/0x230 [ 243.743859][ C0] ? kthread+0x13a/0x450 [ 243.743872][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 243.743889][ C0] kthread+0x373/0x450 [ 243.743902][ C0] ? __pfx_kthread+0x10/0x10 [ 243.743916][ C0] ret_from_fork+0x730/0xd60 [ 243.743934][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 243.743953][ C0] ? __switch_to+0x800/0x10e0 [ 243.743966][ C0] ? __pfx_kthread+0x10/0x10 [ 243.743980][ C0] ret_from_fork_asm+0x1a/0x30 [ 243.744002][ C0] [ 243.755335][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 244.980996][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 244.990092][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 245.000133][ T32] Call Trace: [ 245.003408][ T32] [ 245.006343][ T32] dump_stack_lvl+0x100/0x190 [ 245.011025][ T32] vpanic+0x2dc/0x6f8 [ 245.014996][ T32] panic+0xd1/0xe0 [ 245.018700][ T32] ? __pfx_panic+0x10/0x10 [ 245.023100][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 245.029235][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 245.035368][ T32] ? watchdog.cold+0x20/0x26d [ 245.040029][ T32] watchdog.cold+0x31/0x26d [ 245.044521][ T32] ? __pfx_watchdog+0x10/0x10 [ 245.049179][ T32] ? __kthread_parkme+0x18f/0x230 [ 245.054193][ T32] ? kthread+0x13a/0x450 [ 245.058438][ T32] ? __pfx_watchdog+0x10/0x10 [ 245.063104][ T32] kthread+0x373/0x450 [ 245.067170][ T32] ? __pfx_kthread+0x10/0x10 [ 245.071759][ T32] ret_from_fork+0x730/0xd60 [ 245.076353][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 245.081469][ T32] ? __switch_to+0x800/0x10e0 [ 245.086131][ T32] ? __pfx_kthread+0x10/0x10 [ 245.090707][ T32] ret_from_fork_asm+0x1a/0x30 [ 245.095482][ T32] [ 245.098696][ T32] Kernel Offset: disabled [ 245.102994][ T32] Rebooting in 86400 seconds..