last executing test programs: 9m59.477778931s ago: executing program 32 (id=1546): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000800)=[@in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0xff73) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x7}, 0x9c) 9m5.375930246s ago: executing program 33 (id=2178): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 8m57.215995472s ago: executing program 34 (id=2461): r0 = socket(0x400000000010, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x121, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@getqdisc={0x30, 0x26, 0x321, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x9, 0xfff1}, {0x4, 0xffff}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 7m9.81703615s ago: executing program 35 (id=3563): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) unshare(0x24060400) signalfd4(r0, &(0x7f00000001c0)={[0x5]}, 0x8, 0x0) 6m46.370922602s ago: executing program 36 (id=3751): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x161281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0xe, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x4, 0x3fd]}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 3m33.606275608s ago: executing program 8 (id=5539): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x5, @broadcast, 'gre0\x00'}}, 0x1e) 3m33.344950733s ago: executing program 8 (id=5542): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 3m33.216770356s ago: executing program 8 (id=5544): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x7a) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) write$nbd(r0, &(0x7f0000000680)=ANY=[], 0xf8) 3m32.978556435s ago: executing program 8 (id=5548): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x185093, 0x0) 3m32.726303994s ago: executing program 8 (id=5550): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x4004, 0x1, 'queue0\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x4370}) 3m31.748968077s ago: executing program 8 (id=5558): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m31.226702347s ago: executing program 37 (id=5558): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m25.866874599s ago: executing program 0 (id=5601): mkdir(&(0x7f0000008b40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000008bc0)='./config\x00', &(0x7f0000008c00)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000008c40)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000008f40)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000009000)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x20000, 0x0) 3m25.496679314s ago: executing program 0 (id=5602): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) 3m24.897954093s ago: executing program 0 (id=5605): unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) 3m22.751903993s ago: executing program 0 (id=5611): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x140) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0xc, &(0x7f0000000080)={[{@subsystem='devices'}]}) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) 3m22.527725506s ago: executing program 0 (id=5613): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x4}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x6, 0x7, 0x601, 0xffff, 0x2, '\x00\b\x00'}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x1a9140, 0x0) 3m22.002937409s ago: executing program 0 (id=5616): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000140)={0x103243, 0x131, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESHEX]) 3m21.49474846s ago: executing program 38 (id=5616): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000140)={0x103243, 0x131, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESHEX]) 2m23.017824919s ago: executing program 3 (id=5959): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020) 2m22.784974669s ago: executing program 3 (id=5962): bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000756c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd84, &(0x7f0000000c80)={@random="4fb43e0a8151", @broadcast, @void, {@mpls_mc={0x8848, {[], @ipv6=@esp={0x6, 0x6, "31c4e3", 0xd4e, 0x32, 0x1, @mcast2, @mcast1, {[@fragment={0x4, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x68}, @srh={0x3c, 0xa, 0x4, 0x5, 0xe, 0x20, 0x5, [@private1, @mcast1, @loopback, @private1, @private2]}, @srh={0x3a, 0x2, 0x4, 0x1, 0x80, 0x38, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x2f, 0x3, '\x00', [@calipso={0x7, 0x10, {0xd3592028300c2e34, 0x2, 0x7, 0x7, [0x7f]}}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}]}, @hopopts={0x2b, 0x17, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0xa, 0x1, [0x1000, 0x8319, 0xffff, 0x3bb06553]}}, @jumbo, @generic={0x20, 0x6c, "2c410ab976425fe726368db5b852685a12b5f6b87eb56152d0194d22d261e9ca65448ac9ca55e2074c186b2d8afbccf799dc7b5ec030e7081f350053450e782e7ccfee6fb16818948f9386a247b8a4a21f4400a035d22a88bfce667a6fbbeeaf0720dea01a3b62a7521daf52"}, @enc_lim={0x4, 0x1, 0x3}]}, @hopopts={0x62, 0x176, '\x00', [@generic={0x72, 0xbaf, "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"}]}, @srh={0x21, 0x2, 0x4, 0x1, 0xe8, 0x8, 0x0, [@empty]}], {0x4d5, 0x40, @basic={0x0, 0x0, 0x9}}}}}}}}, 0x0) 2m22.605117391s ago: executing program 3 (id=5965): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m19.328920524s ago: executing program 3 (id=5985): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m19.057663081s ago: executing program 3 (id=5989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000015000501"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.145010327s ago: executing program 3 (id=5992): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x15, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000003c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m17.730994453s ago: executing program 39 (id=5992): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x15, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000003c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m30.725702263s ago: executing program 4 (id=6257): io_submit(0x0, 0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000180)='on', 0x2) 1m30.466253951s ago: executing program 4 (id=6259): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000020000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) 1m30.215986973s ago: executing program 4 (id=6261): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae0210000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000b42104802800018008000100666962001c0002800800014000000015080002"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 1m29.991927153s ago: executing program 4 (id=6263): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m29.718000349s ago: executing program 4 (id=6265): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x808) inotify_rm_watch(r0, r1) 1m28.985152412s ago: executing program 4 (id=6269): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20044814, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='enable_event:sched:sched_process_fork\x00', 0x26) 1m28.088760222s ago: executing program 40 (id=6269): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20044814, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='enable_event:sched:sched_process_fork\x00', 0x26) 1m11.869086451s ago: executing program 7 (id=6350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1000000}, {0x40000001, 0x0, 0x0, 0x31237646, 0x0, 0x9}]}) 1m11.307556798s ago: executing program 7 (id=6351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xae}]}}]}, 0x38}}, 0x24000000) 1m10.591080658s ago: executing program 7 (id=6353): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="410404"], 0x7) 1m7.07752799s ago: executing program 7 (id=6369): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/vhci\x00', 0x8802, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1m6.77516878s ago: executing program 7 (id=6370): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1m6.433041571s ago: executing program 7 (id=6372): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) close(r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) 1m5.9941813s ago: executing program 41 (id=6372): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) close(r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) 5.448516959s ago: executing program 6 (id=6709): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x702, 0x72, 0x0, &(0x7f0000000040)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7c7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00') 4.670127723s ago: executing program 1 (id=6711): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r2, &(0x7f0000000200)="dce480", 0x3) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x4000000) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 4.419241818s ago: executing program 6 (id=6712): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) close(0x4) 4.309248633s ago: executing program 6 (id=6713): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001b00)={'syz1\x00', {0x401, 0x9, 0xf02, 0x5}, 0x4f, [0xff, 0x1, 0x7, 0x9, 0x7fff, 0xffffff80, 0x66f, 0x4, 0x6, 0xf, 0x1, 0x3, 0xa, 0x8, 0x0, 0x1, 0xc0, 0xd6, 0x67fffe, 0x5, 0x3, 0xfffff800, 0x10, 0x8, 0xffff, 0x5, 0x3, 0xf, 0x2, 0x3, 0x5, 0x3, 0x80, 0x4, 0xff, 0x0, 0x81, 0x0, 0x21, 0x7, 0x40, 0x9, 0x81, 0x5, 0x4, 0xffffff81, 0xffffffff, 0x554, 0x9, 0x6, 0xffffffff, 0x2, 0x6790, 0x0, 0xc63, 0xb92, 0x9, 0x6, 0x800000, 0x0, 0xffffffff, 0xfff, 0x2, 0x9], [0xffffff7b, 0x0, 0x3f, 0xc8, 0x9, 0x10, 0x3, 0xff, 0x9, 0x2, 0xffffff4d, 0x4, 0x16e0, 0x2, 0x9517, 0x2, 0x100, 0x800, 0x3, 0x5, 0x29, 0x4, 0x7, 0xb21, 0x8, 0x1, 0xaaa, 0x6, 0xfff, 0xb, 0x8001, 0x3cbd, 0x5, 0x4, 0x7, 0x2, 0x5, 0x0, 0xa, 0x1d, 0x7, 0x1, 0x10001, 0x5, 0x3, 0x7, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x81, 0x6, 0x35, 0x10000, 0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0x7fffffff, 0x3], [0x5, 0x20000, 0x6, 0xfffffffe, 0x6, 0x6, 0x9, 0x80, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x8, 0x5, 0x40, 0xf329, 0x9, 0xe, 0x8, 0x7, 0xfff, 0x1000, 0x4, 0x1, 0x6, 0x1, 0xfffffffd, 0xfffff001, 0x9, 0x6, 0xfffffb93, 0x10000, 0x7, 0x80000002, 0x1, 0x5, 0xd, 0x200000, 0x101, 0x75095896, 0x9d, 0x7, 0x2, 0x9, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0x0, 0x41a5, 0xe7, 0x12, 0x9a, 0x8e, 0xfffff7f1, 0x800, 0x4, 0x1f4e, 0xecb, 0x40, 0x1000, 0xaaf], [0x4, 0x7, 0x6, 0x4ee3ae5c, 0x7f, 0x0, 0xf2c, 0x6, 0x9, 0x0, 0x9, 0x7, 0x2, 0x7f00000, 0xffff, 0x2, 0x3, 0xeb, 0x4, 0xfffffff7, 0x3, 0xfffffff8, 0x5, 0x9, 0x0, 0xd, 0x3, 0x5, 0x1, 0x1, 0x3, 0xe2, 0x101, 0xf, 0xa, 0x1, 0x3d9, 0xef9, 0x9, 0x9, 0xfffffffe, 0x88a1, 0x9f, 0xb, 0x7, 0x800, 0x1, 0xff, 0x80000000, 0x1, 0x81, 0x9, 0xffffffff, 0xc8000000, 0x10000, 0x6, 0x4, 0x4, 0x1, 0x400, 0x7, 0x23e1, 0x3, 0x8]}, 0x45c) 4.007497068s ago: executing program 6 (id=6714): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) 3.956807831s ago: executing program 1 (id=6715): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) dup(r0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x2eb1, 0x26d6, 0x0, 0xfffffffffffff308, 0x1}, &(0x7f0000000000)={0x1f, 0x9, 0xfffffffffffffff8, 0x2, 0x200000000006, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 3.762366544s ago: executing program 1 (id=6716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="b2"]}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 3.724856314s ago: executing program 6 (id=6717): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e0000004d61501d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.546370663s ago: executing program 1 (id=6718): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x92dc49c57ecac473) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x18b) flock(r2, 0x1780f9c373410de4) 3.347556185s ago: executing program 1 (id=6720): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)={0x20, 0xa02da726a9b588c3, 0x1, 'N'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.576366476s ago: executing program 5 (id=6725): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x38328a2, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0, @ANYBLOB=',mode=00000000000000000400000,uid=', @ANYRESHEX=r0, @ANYBLOB=',uid=', @ANYRESHEX=r0, @ANYBLOB=',gid=', @ANYRESHEX=r1]) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) 2.212786036s ago: executing program 5 (id=6728): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) 2.064995676s ago: executing program 5 (id=6730): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 2.043857521s ago: executing program 9 (id=6731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.729929769s ago: executing program 5 (id=6733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0x5, 0x10}, {0x1, 0xb}, {0x8, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.726748343s ago: executing program 9 (id=6734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x11, 0x1000}}}}}}}, 0x0) 1.538003998s ago: executing program 9 (id=6735): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) 1.347587047s ago: executing program 5 (id=6737): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x183242) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4089, 0xff9}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.124106873s ago: executing program 2 (id=6738): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f000000ae80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 905.212413ms ago: executing program 2 (id=6739): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) 845.092283ms ago: executing program 9 (id=6740): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x5e5e, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) close(r0) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x215e, 0x4d74, 0x4, 0x0, 0x0) 725.350127ms ago: executing program 2 (id=6741): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x600) 608.328171ms ago: executing program 9 (id=6742): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 545.129737ms ago: executing program 6 (id=6743): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) 468.318415ms ago: executing program 2 (id=6744): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 342.534815ms ago: executing program 5 (id=6745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0090000180c201000300000000000086dd6029a2af501406"], 0x4e) 265.07636ms ago: executing program 2 (id=6746): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x50) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 226.130411ms ago: executing program 9 (id=6747): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 65.175579ms ago: executing program 1 (id=6748): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1424}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 0s ago: executing program 2 (id=6749): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000180)=0x3, 0x4) kernel console output (not intermixed with test programs): 2229] Tainted: [L]=SOFTLOCKUP [ 670.157669][T22229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 670.157677][T22229] Call Trace: [ 670.157681][T22229] [ 670.157686][T22229] dump_stack_lvl+0x100/0x190 [ 670.157708][T22229] should_fail_ex.cold+0x5/0xa [ 670.157726][T22229] should_failslab+0xc2/0x120 [ 670.157741][T22229] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 670.157753][T22229] ? lockdep_hardirqs_on+0x7d/0x110 [ 670.157768][T22229] ? __d_alloc+0x35/0xa50 [ 670.157786][T22229] __d_alloc+0x35/0xa50 [ 670.157812][T22229] ? inode_set_ctime_current+0x283/0x850 [ 670.157831][T22229] d_alloc+0x4a/0x1e0 [ 670.157847][T22229] d_alloc_name+0x83/0xb0 [ 670.157864][T22229] ? __pfx_d_alloc_name+0x10/0x10 [ 670.157879][T22229] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 670.157895][T22229] ? init_special_inode+0xef/0x2c0 [ 670.157909][T22229] ? simple_inode_init_ts+0x1f/0x120 [ 670.157922][T22229] binderfs_fill_super+0x9bb/0x13d0 [ 670.157940][T22229] ? __pfx_binderfs_fill_super+0x10/0x10 [ 670.157955][T22229] ? __init_swait_queue_head+0xca/0x150 [ 670.157982][T22229] ? rcu_is_watching+0x13/0xc0 [ 670.157998][T22229] ? cap_capable+0x107/0x430 [ 670.158016][T22229] ? __pfx_binderfs_fill_super+0x10/0x10 [ 670.158030][T22229] get_tree_nodev+0xdd/0x190 [ 670.158043][T22229] vfs_get_tree+0x92/0x320 [ 670.158060][T22229] path_mount+0x7d0/0x24c0 [ 670.158079][T22229] ? __pfx_path_mount+0x10/0x10 [ 670.158097][T22229] ? lockdep_hardirqs_on+0x7d/0x110 [ 670.158118][T22229] ? putname+0xb1/0x110 [ 670.158132][T22229] ? kmem_cache_free+0x127/0x6c0 [ 670.158156][T22229] ? __x64_sys_mount+0x293/0x310 [ 670.158171][T22229] __x64_sys_mount+0x293/0x310 [ 670.158187][T22229] ? __pfx___x64_sys_mount+0x10/0x10 [ 670.158208][T22229] do_syscall_64+0x123/0x790 [ 670.158224][T22229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.158236][T22229] RIP: 0033:0x7f3258d9e159 [ 670.158247][T22229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.158258][T22229] RSP: 002b:00007f3259cba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 670.158271][T22229] RAX: ffffffffffffffda RBX: 00007f3259025fa0 RCX: 00007f3258d9e159 [ 670.158280][T22229] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 670.158287][T22229] RBP: 00007f3258e3503b R08: 0000000000000000 R09: 0000000000000000 [ 670.158295][T22229] R10: 0000000002200892 R11: 0000000000000246 R12: 0000000000000000 [ 670.158303][T22229] R13: 00007f3259026038 R14: 00007f3259025fa0 R15: 00007fff1b2c22b8 [ 670.158321][T22229] [ 670.621640][T22232] loop8: detected capacity change from 0 to 16384 [ 671.156239][T22235] loop8: detected capacity change from 16384 to 16383 [ 671.459476][ T9] usb 3-1: USB disconnect, device number 33 [ 671.930039][T22235] loop8: unable to read partition table [ 671.941785][T22235] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 672.332054][T22262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6244'. [ 672.591459][T22273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6248'. [ 672.591483][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6248'. [ 672.591508][T22273] netlink: 'syz.1.6248': attribute type 15 has an invalid length. [ 672.662832][T22273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6248'. [ 672.662877][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6248'. [ 672.675732][T20766] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 672.686449][T22273] netlink: 'syz.1.6248': attribute type 15 has an invalid length. [ 672.695907][ T1207] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 672.706586][T20763] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 672.706897][T20763] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 673.060812][ T30] audit: type=1400 audit(1788976695.698:1426): avc: denied { mounton } for pid=22283 comm="syz.1.6252" path="/670/dev/mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 673.174945][ T5730] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 673.248506][ T30] audit: type=1400 audit(1788976695.888:1427): avc: denied { write } for pid=22255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.356215][ T5730] usb 3-1: Using ep0 maxpacket: 32 [ 673.361810][ T5730] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 673.381754][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.381782][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.381813][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.426646][T22285] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 673.426646][T22285] [ 673.658213][ T30] audit: type=1400 audit(1788976696.298:1428): avc: denied { write } for pid=22293 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.710590][ T30] audit: type=1400 audit(1788976696.348:1429): avc: denied { create } for pid=22294 comm="syz.4.6255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 673.888465][ T5269] veth1_vlan: left promiscuous mode [ 674.334421][T22313] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6259'. [ 674.561824][T22320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6261'. [ 674.835249][ T5730] page_pool_release_retry() stalled pool shutdown: id 183, 1 inflight 60 sec [ 675.013694][ T30] audit: type=1400 audit(1788976697.648:1430): avc: denied { unlink } for pid=21288 comm="syz-executor" name="ublkc9" dev="devtmpfs" ino=3984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 675.261281][ T30] audit: type=1400 audit(1788976697.898:1431): avc: denied { write } for pid=22312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.429500][ T30] audit: type=1400 audit(1788976698.068:1432): avc: denied { unlink } for pid=22335 comm="syz.7.6266" name="#55" dev="tmpfs" ino=3565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 675.480625][T22338] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 675.659700][ T30] audit: type=1400 audit(1788976698.298:1433): avc: denied { write } for pid=22339 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.787634][T22342] netlink: 'syz.1.6268': attribute type 39 has an invalid length. [ 676.010666][T13089] usb 3-1: USB disconnect, device number 34 [ 676.261388][ T9] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 676.329472][ T5608] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 676.457147][ T9] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 676.472635][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.472665][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.472694][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.757534][T22355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6274'. [ 676.970295][T20763] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.051074][ T4924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 677.063919][ T4924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 677.072946][ T4924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 677.097433][ T4924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 677.107028][ T4924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 677.211268][ T30] audit: type=1326 audit(1788976699.848:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22363 comm="syz.2.6277" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a2df9e159 code=0x0 [ 677.576343][T20763] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.707823][T20763] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.878299][T20763] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.940018][ T9] usb 8-1: USB disconnect, device number 52 [ 679.235286][ T5608] Bluetooth: hci4: command tx timeout [ 679.488291][T22399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.770969][T20763] bridge_slave_1: left allmulticast mode [ 679.770996][T20763] bridge_slave_1: left promiscuous mode [ 679.771120][T20763] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.802423][T20763] bridge_slave_0: left allmulticast mode [ 679.802451][T20763] bridge_slave_0: left promiscuous mode [ 679.802570][T20763] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.915940][T22405] netlink: 'syz.7.6287': attribute type 1 has an invalid length. [ 680.077724][ T1207] Bluetooth: (null): Invalid header checksum [ 680.357085][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.363464][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.649075][ T30] audit: type=1400 audit(1788976703.288:1435): avc: denied { write } for pid=22403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 680.690737][T20763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.714147][T20763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.728754][T20763] bond0 (unregistering): Released all slaves [ 680.789949][T22405] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 681.062056][ T30] audit: type=1400 audit(1788976703.698:1436): avc: denied { write } for pid=22430 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.315350][ T5608] Bluetooth: hci4: command tx timeout [ 681.435328][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6294'. [ 681.435352][T22438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6294'. [ 681.435459][T22438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6294'. [ 681.516696][T20763] hsr_slave_0: left promiscuous mode [ 681.550020][T20763] hsr_slave_1: left promiscuous mode [ 681.550522][T20763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.550547][T20763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.585877][T20763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.585900][T20763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.673846][T20763] veth1_macvtap: left promiscuous mode [ 681.681432][T20763] veth0_macvtap: left promiscuous mode [ 681.688210][T20763] veth0_vlan: left promiscuous mode [ 681.837106][T22446] netlink: 'syz.7.6298': attribute type 1 has an invalid length. [ 682.495074][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 682.543011][T20763] team0 (unregistering): Port device team_slave_1 removed [ 682.592711][T20763] team0 (unregistering): Port device team_slave_0 removed [ 682.648026][ T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 682.658870][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 682.667648][ T10] usb 2-1: string descriptor 0 read error: -22 [ 682.667722][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.022663][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 683.083714][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6294'. [ 683.094940][T20766] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.096080][ T1207] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.096117][ T1207] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.096137][ T1207] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.146779][T22446] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 683.147388][T22438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6294'. [ 683.147423][T22438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6294'. [ 683.395319][ T5608] Bluetooth: hci4: command tx timeout [ 684.159109][T22360] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.166730][T22360] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.175703][T22360] bridge_slave_0: entered allmulticast mode [ 684.189265][T22360] bridge_slave_0: entered promiscuous mode [ 684.228438][T22360] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.228501][T22360] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.228618][T22360] bridge_slave_1: entered allmulticast mode [ 684.261781][T22360] bridge_slave_1: entered promiscuous mode [ 684.691587][T22360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.718361][T22360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.760811][ T30] audit: type=1400 audit(1788976707.398:1437): avc: denied { write } for pid=22478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.863968][T22360] team0: Port device team_slave_0 added [ 684.883065][T22360] team0: Port device team_slave_1 added [ 685.052209][T22360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.059656][T22360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.059673][T22360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.110230][T22360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.110250][T22360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.110272][T22360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.176858][ T30] audit: type=1400 audit(1788976707.818:1438): avc: denied { write } for pid=22512 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.345653][ T10] usb 2-1: USB disconnect, device number 67 [ 685.390595][T22360] hsr_slave_0: entered promiscuous mode [ 685.401230][T22360] hsr_slave_1: entered promiscuous mode [ 685.407874][T22360] debugfs: 'hsr0' already exists in 'hsr' [ 685.407889][T22360] Cannot create hsr debugfs directory [ 685.480253][ T5608] Bluetooth: hci4: command tx timeout [ 685.521725][ T5715] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 685.537683][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 685.573967][ T5715] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 685.737832][ T5593] udevd[5593]: 'fido_id' [22525] terminated by signal 11 (Segmentation fault) [ 685.871783][ T30] audit: type=1326 audit(1788976708.508:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22528 comm="syz.7.6321" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836719e159 code=0x7ffc0000 [ 685.899881][ T30] audit: type=1326 audit(1788976708.538:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22528 comm="syz.7.6321" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836719e159 code=0x7ffc0000 [ 685.953752][ T30] audit: type=1326 audit(1788976708.588:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22528 comm="syz.7.6321" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f836719e159 code=0x7ffc0000 [ 685.953793][ T30] audit: type=1326 audit(1788976708.588:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22528 comm="syz.7.6321" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836719e159 code=0x7ffc0000 [ 685.953825][ T30] audit: type=1326 audit(1788976708.588:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22528 comm="syz.7.6321" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836719e159 code=0x7ffc0000 [ 686.049973][ T30] audit: type=1326 audit(1788976708.688:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22528 comm="syz.7.6321" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f836719e159 code=0x7ffc0000 [ 686.050023][ T30] audit: type=1326 audit(1788976708.688:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22528 comm="syz.7.6321" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836719e159 code=0x7ffc0000 [ 686.050056][ T30] audit: type=1326 audit(1788976708.688:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22528 comm="syz.7.6321" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836719e159 code=0x7ffc0000 [ 686.147395][ T30] audit: type=1326 audit(1788976708.788:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22528 comm="syz.7.6321" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f836719e159 code=0x7ffc0000 [ 686.147435][ T30] audit: type=1326 audit(1788976708.788:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22528 comm="syz.7.6321" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f836719e159 code=0x7ffc0000 [ 686.501366][T22537] input: syz0 as /devices/virtual/input/input47 [ 687.565304][T17904] Bluetooth: hci3: command 0x0406 tx timeout [ 687.644301][T22563] FAULT_INJECTION: forcing a failure. [ 687.644301][T22563] name failslab, interval 1, probability 0, space 0, times 0 [ 687.644335][T22563] CPU: 0 UID: 0 PID: 22563 Comm: syz.9.6329 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.644354][T22563] Tainted: [L]=SOFTLOCKUP [ 687.644359][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 687.644366][T22563] Call Trace: [ 687.644371][T22563] [ 687.644376][T22563] dump_stack_lvl+0x100/0x190 [ 687.644398][T22563] should_fail_ex.cold+0x5/0xa [ 687.644416][T22563] should_failslab+0xc2/0x120 [ 687.644430][T22563] __kmalloc_cache_noprof+0x91/0x6d0 [ 687.644448][T22563] ? __do_sys_fanotify_init+0x505/0xe30 [ 687.644466][T22563] __do_sys_fanotify_init+0x505/0xe30 [ 687.644483][T22563] do_syscall_64+0x123/0x790 [ 687.644499][T22563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.644511][T22563] RIP: 0033:0x7f3258d9e159 [ 687.644521][T22563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.644532][T22563] RSP: 002b:00007f3259cba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 687.644545][T22563] RAX: ffffffffffffffda RBX: 00007f3259025fa0 RCX: 00007f3258d9e159 [ 687.644553][T22563] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000008 [ 687.644560][T22563] RBP: 00007f3258e3503b R08: 0000000000000000 R09: 0000000000000000 [ 687.644567][T22563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.644574][T22563] R13: 00007f3259026038 R14: 00007f3259025fa0 R15: 00007fff1b2c22b8 [ 687.644590][T22563] [ 688.286764][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 688.498092][T22575] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 688.596729][ T5715] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 688.759074][ T5715] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 688.769177][ T5715] usb 10-1: config 65 has an invalid interface number: 3 but max is 0 [ 688.769200][ T5715] usb 10-1: config 65 has no interface number 0 [ 688.785466][ T5715] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.785488][ T5715] usb 10-1: Product: syz [ 688.785506][ T5715] usb 10-1: Manufacturer: syz [ 688.785516][ T5715] usb 10-1: SerialNumber: syz [ 689.235391][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 689.387732][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 689.394584][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 689.408179][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 689.421597][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.421619][ T10] usb 2-1: Product: syz [ 689.421635][ T10] usb 2-1: Manufacturer: syz [ 689.421646][ T10] usb 2-1: SerialNumber: syz [ 689.973361][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 690.312139][T22360] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 690.344181][T22360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 690.344669][T22360] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 690.377438][T22360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.389907][T22360] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 690.406816][T22360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.415466][T22360] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 690.444071][T22360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.694773][T22360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.751399][T22360] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.790158][T20763] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.790225][T20763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.815170][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.815233][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.942633][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 690.942661][ T30] audit: type=1400 audit(1788976713.578:1462): avc: denied { write } for pid=22598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.097464][T22622] FAULT_INJECTION: forcing a failure. [ 691.097464][T22622] name failslab, interval 1, probability 0, space 0, times 0 [ 691.097503][T22622] CPU: 0 UID: 0 PID: 22622 Comm: syz.2.6340 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.097522][T22622] Tainted: [L]=SOFTLOCKUP [ 691.097527][T22622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 691.097536][T22622] Call Trace: [ 691.097540][T22622] [ 691.097546][T22622] dump_stack_lvl+0x100/0x190 [ 691.097569][T22622] should_fail_ex.cold+0x5/0xa [ 691.097587][T22622] should_failslab+0xc2/0x120 [ 691.097602][T22622] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 691.097614][T22622] ? find_held_lock+0x2b/0x80 [ 691.097631][T22622] ? alloc_io_context+0x21/0x2f0 [ 691.097651][T22622] alloc_io_context+0x21/0x2f0 [ 691.097668][T22622] set_task_ioprio+0x49e/0x670 [ 691.097686][T22622] __do_sys_ioprio_set+0x55c/0xb40 [ 691.097702][T22622] ? __do_sys_ioprio_set+0x3de/0xb40 [ 691.097720][T22622] do_syscall_64+0x123/0x790 [ 691.097737][T22622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.097759][T22622] RIP: 0033:0x7f9a2df9e159 [ 691.097770][T22622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.097782][T22622] RSP: 002b:00007f9a2ee3d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 691.097796][T22622] RAX: ffffffffffffffda RBX: 00007f9a2e225fa0 RCX: 00007f9a2df9e159 [ 691.097804][T22622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 691.097811][T22622] RBP: 00007f9a2e03503b R08: 0000000000000000 R09: 0000000000000000 [ 691.097818][T22622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.097826][T22622] R13: 00007f9a2e226038 R14: 00007f9a2e225fa0 R15: 00007ffc11c3e3b8 [ 691.097843][T22622] [ 691.463391][ T5715] usb 10-1: USB disconnect, device number 38 [ 691.547861][ T30] audit: type=1400 audit(1788976714.188:1463): avc: denied { write } for pid=22624 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.082852][ T5715] usb 2-1: USB disconnect, device number 68 [ 692.625114][ T9] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 692.785054][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 692.798206][ T9] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 692.809767][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 692.822039][ T9] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 692.822062][ T9] usb 10-1: Product: syz [ 692.822078][ T9] usb 10-1: Manufacturer: syz [ 692.822088][ T9] usb 10-1: SerialNumber: syz [ 692.913764][ T30] audit: type=1400 audit(1788976715.548:1464): avc: denied { write } for pid=22632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.083439][T22360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.215202][ T30] audit: type=1400 audit(1788976715.848:1465): avc: denied { write } for pid=22670 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.380090][ T30] audit: type=1400 audit(1788976716.008:1466): avc: denied { remove_name } for pid=22654 comm="syz.1.6348" name="acm.0" dev="configfs" ino=93045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.460211][T22661] printk: legacy console [ttyGS0] disabled [ 693.468273][ T30] audit: type=1400 audit(1788976716.098:1467): avc: denied { rmdir } for pid=22654 comm="syz.1.6348" name="acm.0" dev="configfs" ino=93045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 694.265888][T22360] veth0_vlan: entered promiscuous mode [ 694.288602][T22360] veth1_vlan: entered promiscuous mode [ 694.376343][T22360] veth0_macvtap: entered promiscuous mode [ 694.393119][T22360] veth1_macvtap: entered promiscuous mode [ 694.462086][T22360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.495881][T22360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.510553][T20766] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.525786][T20765] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.526267][T20765] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.548049][T20765] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.971424][ T30] audit: type=1400 audit(1788976717.608:1468): avc: denied { write } for pid=22676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.269877][ T30] audit: type=1400 audit(1788976717.908:1469): avc: denied { write } for pid=22705 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.398990][ T9] usb 10-1: USB disconnect, device number 39 [ 695.567173][T22710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 695.801099][T22719] autofs: Bad value for 'fd' [ 695.995962][ T9] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 696.096819][ T30] audit: type=1400 audit(1788976718.738:1470): avc: denied { write } for pid=22708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.147205][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 696.147234][ T9] usb 10-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 696.172654][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.172678][ T9] usb 10-1: Product: syz [ 696.172694][ T9] usb 10-1: Manufacturer: syz [ 696.172704][ T9] usb 10-1: SerialNumber: syz [ 696.341012][ T30] audit: type=1400 audit(1788976718.978:1471): avc: denied { write } for pid=22729 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.157739][ T30] audit: type=1400 audit(1788976719.798:1472): avc: denied { write } for pid=22734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.272189][T22689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.347171][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 697.383361][ T30] audit: type=1400 audit(1788976720.018:1473): avc: denied { write } for pid=22759 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.446112][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.446135][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.541404][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 697.556089][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.556128][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 697.556146][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 697.556182][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.719841][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.719863][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.113865][T22772] jffs2: notice: (22772) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (8 unchecked, 0 orphan) and 9 of xref (0 dead, 0 orphan) found. [ 698.520702][ T30] audit: type=1400 audit(1788976721.158:1474): avc: denied { write } for pid=22765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.786466][ T30] audit: type=1400 audit(1788976721.428:1475): avc: denied { write } for pid=22784 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.811866][T13089] usb 10-1: USB disconnect, device number 40 [ 698.932946][T22790] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 698.966514][T22790] bond1: (slave lo): Enslaving as an active interface with an up link [ 698.996079][T22790] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 699.172574][T17904] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.190513][T17904] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.205013][T17904] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.214210][T17904] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.221540][T17904] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 700.131134][ T30] audit: type=1400 audit(1788976722.768:1476): avc: denied { write } for pid=22793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.234626][T13089] usb 2-1: USB disconnect, device number 69 [ 700.616922][ T30] audit: type=1400 audit(1788976723.248:1477): avc: denied { write } for pid=22829 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.912501][ T30] audit: type=1400 audit(1788976723.548:1478): avc: denied { read } for pid=22834 comm="syz.2.6383" path="socket:[93905]" dev="sockfs" ino=93905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 701.315052][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 701.322977][ T5608] Bluetooth: hci2: command tx timeout [ 701.476198][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 701.488619][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.488647][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.488669][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.569928][T22856] netlink: 'syz.1.6387': attribute type 15 has an invalid length. [ 701.610783][T22856] netlink: 'syz.1.6387': attribute type 15 has an invalid length. [ 701.619084][T20766] netdevsim netdevsim1 netdevsim3: set [0, 2] type 1 family 0 port 2816 - 0 [ 701.619112][T20766] netdevsim netdevsim1 netdevsim2: set [0, 2] type 1 family 0 port 2816 - 0 [ 701.619133][T20766] netdevsim netdevsim1 netdevsim1: set [0, 2] type 1 family 0 port 2816 - 0 [ 701.619153][T20766] netdevsim netdevsim1 netdevsim0: set [0, 2] type 1 family 0 port 2816 - 0 [ 701.669929][ T983] libceph: connect (1)[c::]:6789 error -101 [ 701.670114][ T983] libceph: mon0 (1)[c::]:6789 connect error [ 701.925257][ T9] libceph: connect (1)[c::]:6789 error -101 [ 701.925378][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 702.013375][T22794] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.025072][T22794] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.033631][T22794] bridge_slave_0: entered allmulticast mode [ 702.045767][T22794] bridge_slave_0: entered promiscuous mode [ 702.058565][T22794] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.067125][T22794] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.074288][T22794] bridge_slave_1: entered allmulticast mode [ 702.087608][T22794] bridge_slave_1: entered promiscuous mode [ 702.214107][T22794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.233598][T22794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.253434][T22849] ceph: No mds server is up or the cluster is laggy [ 702.271230][T22857] ceph: No mds server is up or the cluster is laggy [ 702.327355][ T30] audit: type=1400 audit(1788976724.958:1479): avc: denied { write } for pid=22844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.487791][T22794] team0: Port device team_slave_0 added [ 702.500774][T22794] team0: Port device team_slave_1 added [ 702.641826][T22839] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 702.668559][ T30] audit: type=1400 audit(1788976725.298:1480): avc: denied { write } for pid=22874 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.710711][T22839] device-mapper: ioctl: error adding target to table [ 702.732617][T22794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.740646][T22794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.775137][T22794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.797788][T22794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.804791][T22794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.833707][T22794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.040860][T22794] hsr_slave_0: entered promiscuous mode [ 703.053292][T22794] hsr_slave_1: entered promiscuous mode [ 703.053665][T22794] debugfs: 'hsr0' already exists in 'hsr' [ 703.053687][T22794] Cannot create hsr debugfs directory [ 703.402506][ T5608] Bluetooth: hci2: command tx timeout [ 703.439969][T22885] input: syz1 as /devices/virtual/input/input48 [ 703.892772][ T30] audit: type=1400 audit(1788976726.528:1481): avc: denied { map } for pid=22892 comm="syz.2.6393" path="socket:[94242]" dev="sockfs" ino=94242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 704.110823][ T30] audit: type=1400 audit(1788976726.748:1482): avc: denied { write } for pid=22880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.203474][ T983] usb 7-1: USB disconnect, device number 14 [ 704.292511][T22903] IPv4: Oversized IP packet from 127.202.26.0 [ 704.501657][ T30] audit: type=1400 audit(1788976727.118:1483): avc: denied { write } for pid=22909 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.622759][ T30] audit: type=1400 audit(1788976727.258:1484): avc: denied { read } for pid=22911 comm="syz.2.6399" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 704.622801][ T30] audit: type=1400 audit(1788976727.258:1485): avc: denied { open } for pid=22911 comm="syz.2.6399" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 705.475557][ T5608] Bluetooth: hci2: command tx timeout [ 705.572651][T22925] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[22926] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[22925] [ 705.910431][ T30] audit: type=1400 audit(1788976728.548:1486): avc: denied { write } for pid=22917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.296552][ T30] audit: type=1400 audit(1788976728.928:1487): avc: denied { write } for pid=22946 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.385908][T13089] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 706.427662][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 706.546805][T13089] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 706.558163][T13089] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 706.568054][T13089] usb 2-1: config 1 has no interface number 0 [ 706.574290][T13089] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 706.588025][T13089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.604380][T13089] usb 2-1: Product: syz [ 706.604405][T13089] usb 2-1: Manufacturer: syz [ 706.604416][T13089] usb 2-1: SerialNumber: syz [ 706.610586][ T9] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 706.620857][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.620883][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 706.620896][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 706.620910][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 706.620932][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.555484][ T5608] Bluetooth: hci2: command tx timeout [ 707.687374][T22967] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6411'. [ 707.700184][T22967] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6411'. [ 707.713599][ T30] audit: type=1400 audit(1788976730.348:1488): avc: denied { write } for pid=22953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.004626][ T30] audit: type=1400 audit(1788976730.638:1489): avc: denied { write } for pid=22970 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.640057][T22794] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 708.674513][T22794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.683526][T22794] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 708.720310][T22794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.729166][T22794] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 708.753848][T22794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.762709][T22794] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 708.791954][T22794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 708.927387][T22982] FAULT_INJECTION: forcing a failure. [ 708.927387][T22982] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 708.927421][T22982] CPU: 0 UID: 0 PID: 22982 Comm: syz.2.6413 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.927440][T22982] Tainted: [L]=SOFTLOCKUP [ 708.927445][T22982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 708.927453][T22982] Call Trace: [ 708.927458][T22982] [ 708.927464][T22982] dump_stack_lvl+0x100/0x190 [ 708.927486][T22982] should_fail_ex.cold+0x5/0xa [ 708.927502][T22982] ? prepare_alloc_pages+0x16d/0x5b0 [ 708.927518][T22982] should_fail_alloc_page+0xeb/0x140 [ 708.927534][T22982] prepare_alloc_pages+0x1f0/0x5b0 [ 708.927551][T22982] ? __memcg_slab_post_alloc_hook+0x78b/0x1270 [ 708.927571][T22982] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 708.927592][T22982] ? rcu_is_watching+0x13/0xc0 [ 708.927608][T22982] ? trace_kmem_cache_alloc+0x91/0x100 [ 708.927627][T22982] ? __lock_acquire+0x5c0/0x1f40 [ 708.927640][T22982] ? __css_rstat_updated+0x1ce/0x590 [ 708.927654][T22982] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 708.927678][T22982] ? rcu_is_watching+0x13/0xc0 [ 708.927692][T22982] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 708.927706][T22982] ? find_held_lock+0x2b/0x80 [ 708.927726][T22982] ? __lock_acquire+0x5c0/0x1f40 [ 708.927738][T22982] ? rcu_is_watching+0x13/0xc0 [ 708.927751][T22982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 708.927766][T22982] ? policy_nodemask+0xed/0x4f0 [ 708.927782][T22982] alloc_pages_mpol+0x201/0x550 [ 708.927797][T22982] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 708.927812][T22982] ? filemap_get_entry+0x22d/0x450 [ 708.927827][T22982] ? filemap_get_entry+0x22d/0x450 [ 708.927844][T22982] folio_alloc_noprof+0x22/0x250 [ 708.927861][T22982] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 708.927875][T22982] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 708.927895][T22982] ? rcu_is_watching+0x13/0xc0 [ 708.927909][T22982] ? trace_kmalloc+0xeb/0x110 [ 708.927925][T22982] __filemap_get_folio_mpol+0x653/0x1320 [ 708.927945][T22982] ioctx_alloc+0x7e1/0x21a0 [ 708.927968][T22982] ? __pfx_ioctx_alloc+0x10/0x10 [ 708.927988][T22982] __x64_sys_io_setup+0xc9/0x220 [ 708.928006][T22982] do_syscall_64+0x123/0x790 [ 708.928022][T22982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.928034][T22982] RIP: 0033:0x7f9a2df9e159 [ 708.928045][T22982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.928063][T22982] RSP: 002b:00007f9a2ee3d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 708.928076][T22982] RAX: ffffffffffffffda RBX: 00007f9a2e225fa0 RCX: 00007f9a2df9e159 [ 708.928084][T22982] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 00000000000005ff [ 708.928092][T22982] RBP: 00007f9a2e03503b R08: 0000000000000000 R09: 0000000000000000 [ 708.928100][T22982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.928108][T22982] R13: 00007f9a2e226038 R14: 00007f9a2e225fa0 R15: 00007ffc11c3e3b8 [ 708.928125][T22982] [ 709.371495][T13089] usb 7-1: USB disconnect, device number 15 [ 709.419720][ T983] usb 2-1: USB disconnect, device number 70 [ 709.530980][T22794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.614650][T22794] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.664634][T20759] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.664698][T20759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.713737][T20763] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.713806][T20763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.731599][ T30] audit: type=1400 audit(1788976732.368:1490): avc: denied { write } for pid=22972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.112630][ T30] audit: type=1400 audit(1788976732.748:1491): avc: denied { write } for pid=23002 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.690649][T20763] IPVS: starting estimator thread 0... [ 710.774980][T23019] IPVS: using max 64 ests per chain, 153600 per kthread [ 711.026069][ T983] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 711.193573][ T983] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 711.211024][ T983] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.211060][ T983] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 711.211084][ T983] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 711.211116][ T983] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.473509][ T30] audit: type=1400 audit(1788976734.108:1492): avc: denied { write } for pid=23013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.815356][ T30] audit: type=1400 audit(1788976734.448:1493): avc: denied { write } for pid=23041 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.921931][T22794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.739741][T23065] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6426'. [ 712.774616][T23065] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6426'. [ 712.809338][T23065] netlink: 'syz.1.6426': attribute type 32 has an invalid length. [ 712.809362][T23065] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6426'. [ 712.837790][T22794] veth0_vlan: entered promiscuous mode [ 712.872746][T22794] veth1_vlan: entered promiscuous mode [ 712.976039][T22794] veth0_macvtap: entered promiscuous mode [ 712.997459][T22794] veth1_macvtap: entered promiscuous mode [ 713.072882][T22794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.117343][T22794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.157142][ T30] audit: type=1400 audit(1788976735.798:1494): avc: denied { write } for pid=23050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.207999][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.208430][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.208463][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.227125][T20766] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.384197][T23072] FAULT_INJECTION: forcing a failure. [ 713.384197][T23072] name failslab, interval 1, probability 0, space 0, times 0 [ 713.384232][T23072] CPU: 0 UID: 0 PID: 23072 Comm: syz.1.6427 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.384252][T23072] Tainted: [L]=SOFTLOCKUP [ 713.384256][T23072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 713.384265][T23072] Call Trace: [ 713.384270][T23072] [ 713.384275][T23072] dump_stack_lvl+0x100/0x190 [ 713.384298][T23072] should_fail_ex.cold+0x5/0xa [ 713.384315][T23072] should_failslab+0xc2/0x120 [ 713.384330][T23072] __kvmalloc_node_noprof+0x113/0x9b0 [ 713.384343][T23072] ? bucket_table_alloc.isra.0+0x88/0x460 [ 713.384360][T23072] ? bucket_table_alloc.isra.0+0x88/0x460 [ 713.384378][T23072] bucket_table_alloc.isra.0+0x88/0x460 [ 713.384395][T23072] __rhashtable_init_noprof+0x43a/0x890 [ 713.384413][T23072] ipc_init_ids+0x99/0x280 [ 713.384425][T23072] copy_ipcs+0x5c0/0x7e0 [ 713.384445][T23072] create_new_namespaces+0x20a/0xac0 [ 713.384459][T23072] ? security_capable+0x80/0x260 [ 713.384476][T23072] unshare_nsproxy_namespaces+0xf2/0x220 [ 713.384491][T23072] ksys_unshare+0x4a2/0xa70 [ 713.384504][T23072] ? __pfx_ksys_unshare+0x10/0x10 [ 713.384523][T23072] __x64_sys_unshare+0x31/0x40 [ 713.384536][T23072] do_syscall_64+0x123/0x790 [ 713.384552][T23072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.384565][T23072] RIP: 0033:0x7fa976f9e159 [ 713.384575][T23072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.384587][T23072] RSP: 002b:00007fa977f21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 713.384609][T23072] RAX: ffffffffffffffda RBX: 00007fa977225fa0 RCX: 00007fa976f9e159 [ 713.384618][T23072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 713.384625][T23072] RBP: 00007fa97703503b R08: 0000000000000000 R09: 0000000000000000 [ 713.384633][T23072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.384641][T23072] R13: 00007fa977226038 R14: 00007fa977225fa0 R15: 00007ffe806b7bf8 [ 713.384658][T23072] [ 713.864600][ T30] audit: type=1400 audit(1788976736.498:1495): avc: denied { write } for pid=23073 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.891916][ T983] usb 10-1: USB disconnect, device number 41 [ 714.461350][T20763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.461371][T20763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.201622][T20766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.201646][T20766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.233222][ T30] audit: type=1400 audit(1788976737.868:1496): avc: denied { write } for pid=23080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.329747][ T30] audit: type=1400 audit(1788976737.968:1497): avc: denied { create } for pid=23093 comm="syz.6.6432" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 715.634304][ T30] audit: type=1400 audit(1788976738.268:1498): avc: denied { write } for pid=23099 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.932194][T23111] device-mapper: table: 248:1: zero-length target [ 715.932216][T23111] device-mapper: ioctl: error adding target to table [ 716.561830][T23127] netlink: 'syz.6.6441': attribute type 1 has an invalid length. [ 716.905376][ T5708] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 717.068761][ T5708] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 717.081945][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.123537][ T30] audit: type=1400 audit(1788976739.758:1499): avc: denied { write } for pid=23114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.466856][ T30] audit: type=1400 audit(1788976740.108:1500): avc: denied { write } for pid=23148 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.594698][ T30] audit: type=1400 audit(1788976741.228:1501): avc: denied { write } for pid=23153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.853927][ T30] audit: type=1400 audit(1788976741.488:1502): avc: denied { write } for pid=23175 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.495137][T23185] tipc: Started in network mode [ 719.495166][T23185] tipc: Node identity 7f000001, cluster identity 4711 [ 719.495670][T23185] tipc: Enabled bearer , priority 10 [ 719.527009][T23185] tipc: Disabling bearer [ 719.710808][ T9] usb 2-1: USB disconnect, device number 71 [ 720.055994][ T5708] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 720.119850][ T30] audit: type=1400 audit(1788976742.758:1503): avc: denied { write } for pid=23179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.239569][ T5708] usb 6-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 720.263692][ T5708] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.263723][ T5708] usb 6-1: config 0 interface 0 has no altsetting 0 [ 720.263750][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.583197][ T30] audit: type=1400 audit(1788976743.218:1504): avc: denied { write } for pid=23219 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.819923][ T30] audit: type=1400 audit(1788976744.458:1505): avc: denied { write } for pid=23230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.884790][T23248] overlayfs: failed to clone upperpath [ 722.186269][ T30] audit: type=1400 audit(1788976744.818:1506): avc: denied { write } for pid=23250 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.457314][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6469'. [ 722.470095][T23256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.470120][T23256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.819375][ T983] usb 6-1: USB disconnect, device number 14 [ 723.157161][T23266] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 723.263938][T23270] @0Ù: renamed from bond_slave_1 (while UP) [ 723.377296][T23221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 723.915333][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 723.935415][ T983] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 724.067178][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 724.080500][ T30] audit: type=1400 audit(1788976746.718:1507): avc: denied { write } for pid=23262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.104721][ T983] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 724.105311][ T9] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 724.105325][ T9] usb 3-1: Product: syz [ 724.105334][ T9] usb 3-1: SerialNumber: syz [ 724.137103][ T983] usb 10-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 724.137120][ T983] usb 10-1: Product: syz [ 724.137129][ T983] usb 10-1: Manufacturer: syz [ 724.137137][ T983] usb 10-1: SerialNumber: syz [ 724.460766][ T30] audit: type=1400 audit(1788976747.098:1508): avc: denied { write } for pid=23298 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.403948][ T30] audit: type=1400 audit(1788976748.038:1509): avc: denied { write } for pid=23304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.642264][ T30] audit: type=1400 audit(1788976748.278:1510): avc: denied { write } for pid=23332 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.698212][T23316] ceph: No mds server is up or the cluster is laggy [ 725.736093][T23310] ceph: No mds server is up or the cluster is laggy [ 726.435137][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 726.634597][ T5730] usb 3-1: USB disconnect, device number 35 [ 726.782665][ T9] usb 10-1: USB disconnect, device number 42 [ 726.825212][ T983] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 726.860106][ T30] audit: type=1400 audit(1788976749.498:1511): avc: denied { write } for pid=23336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.929725][T23361] tls_set_device_offload: netdev not found [ 726.958057][T23364] input: syz1 as /devices/virtual/input/input49 [ 726.988062][ T983] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 726.998663][ T983] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 726.998679][ T983] usb 6-1: config 127 has no interface number 0 [ 726.998701][ T983] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 727.029965][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.029981][ T983] usb 6-1: Product: syz [ 727.029990][ T983] usb 6-1: Manufacturer: syz [ 727.029998][ T983] usb 6-1: SerialNumber: syz [ 727.060474][ T5730] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 727.225933][ T5730] usb 3-1: Using ep0 maxpacket: 16 [ 727.231823][ T5730] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 727.243506][ T5730] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 727.243538][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.243560][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.243575][ T5730] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 727.243599][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.320018][ T30] audit: type=1400 audit(1788976749.958:1512): avc: denied { write } for pid=23365 comm="syz.6.6500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 727.383714][ T30] audit: type=1400 audit(1788976750.018:1513): avc: denied { write } for pid=23367 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.649713][T23376] input: syz1 as /devices/virtual/input/input50 [ 728.308227][ T30] audit: type=1400 audit(1788976750.948:1514): avc: denied { write } for pid=23377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.487631][ T30] audit: type=1400 audit(1788976751.128:1515): avc: denied { write } for pid=23403 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.803454][T23410] loop5: detected capacity change from 0 to 7 [ 728.811590][T23410] Dev loop5: unable to read RDB block 7 [ 728.811615][T23410] loop5: unable to read partition table [ 728.811725][T23410] loop5: partition table beyond EOD, truncated [ 728.811735][T23410] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 729.444375][ T30] audit: type=1400 audit(1788976752.078:1516): avc: denied { write } for pid=23407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.525795][T13089] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 729.604223][ T983] usb 6-1: USB disconnect, device number 15 [ 729.696229][T13089] usb 10-1: Using ep0 maxpacket: 16 [ 729.706294][T13089] usb 10-1: unable to get BOS descriptor or descriptor too short [ 729.706334][T13089] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 729.732974][T13089] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 729.750877][T13089] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.750902][T13089] usb 10-1: Product: syz [ 729.750918][T13089] usb 10-1: Manufacturer: syz [ 729.750930][T13089] usb 10-1: SerialNumber: syz [ 729.814921][ T5730] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 729.865773][ T30] audit: type=1400 audit(1788976752.498:1517): avc: denied { write } for pid=23434 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.894460][T13089] usb 3-1: USB disconnect, device number 36 [ 729.940486][T23438] loop4: detected capacity change from 0 to 2640 [ 729.940870][T23438] buffer_io_error: 25 callbacks suppressed [ 729.940890][T23438] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.940915][T23438] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.940934][T23438] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.940954][T23438] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.940974][T23438] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.941002][T23438] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.941036][T23438] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.941055][T23438] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.941067][T23438] ldm_validate_partition_table(): Disk read failed. [ 729.941085][T23438] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.941103][T23438] Buffer I/O error on dev loop4, logical block 0, async page read [ 729.941131][T23438] Dev loop4: unable to read RDB block 0 [ 729.941215][T23438] loop4: unable to read partition table [ 729.941328][T23438] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 729.985815][ T5730] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 730.100492][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 730.100517][ T5730] usb 2-1: Product: syz [ 730.138040][ T30] audit: type=1400 audit(1788976752.768:1518): avc: denied { map } for pid=23436 comm="syz.5.6519" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 730.138084][ T30] audit: type=1400 audit(1788976752.778:1519): avc: denied { execute } for pid=23436 comm="syz.5.6519" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 730.446538][ T30] audit: type=1807 audit(1788976753.088:1520): action=measure res=1 [ 730.456655][T23445] ima: policy update completed [ 730.461575][ T30] audit: type=1802 audit(1788976753.098:1521): pid=23445 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.5.6521" res=1 errno=0 [ 730.531220][T23448] af_packet: tpacket_rcv: packet too big, clamped from 262 to 4294967272. macoff=96 [ 730.651712][ T30] audit: type=1800 audit(1788976753.278:1522): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 730.763765][ T30] audit: type=1800 audit(1788976753.398:1523): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 730.803949][ T30] audit: type=1800 audit(1788976753.438:1524): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4784 res=0 errno=0 [ 730.891728][T23454] FAULT_INJECTION: forcing a failure. [ 730.891728][T23454] name failslab, interval 1, probability 0, space 0, times 0 [ 730.891763][T23454] CPU: 0 UID: 0 PID: 23454 Comm: syz.2.6524 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.891783][T23454] Tainted: [L]=SOFTLOCKUP [ 730.891788][T23454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 730.891795][T23454] Call Trace: [ 730.891800][T23454] [ 730.891805][T23454] dump_stack_lvl+0x100/0x190 [ 730.891826][T23454] should_fail_ex.cold+0x5/0xa [ 730.891845][T23454] should_failslab+0xc2/0x120 [ 730.891860][T23454] __kmalloc_node_noprof+0xff/0x880 [ 730.891872][T23454] ? __pfx___up_read+0x10/0x10 [ 730.891886][T23454] ? crypto_create_tfm_node+0x8d/0x3b0 [ 730.891911][T23454] crypto_create_tfm_node+0x8d/0x3b0 [ 730.891926][T23454] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 730.891941][T23454] crypto_spawn_tfm2+0x62/0xc0 [ 730.891954][T23454] rsassa_pkcs1_init_tfm+0x39/0xb0 [ 730.891968][T23454] crypto_sig_init_tfm+0xba/0xf0 [ 730.891986][T23454] crypto_create_tfm_node+0x171/0x3b0 [ 730.892002][T23454] crypto_alloc_tfm_node+0x102/0x260 [ 730.892019][T23454] public_key_verify_signature+0x21b/0x910 [ 730.892038][T23454] ? __pfx_public_key_verify_signature+0x10/0x10 [ 730.892062][T23454] ? asymmetric_key_generate_id+0x7e/0x180 [ 730.892081][T23454] x509_check_for_self_signed+0x325/0x510 [ 730.892100][T23454] x509_cert_parse+0x60c/0x910 [ 730.892119][T23454] x509_key_preparse+0x65/0x9c0 [ 730.892139][T23454] asymmetric_key_preparse+0xce/0x1d0 [ 730.892153][T23454] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 730.892169][T23454] __key_create_or_update+0x463/0xe30 [ 730.892185][T23454] ? __pfx___key_create_or_update+0x10/0x10 [ 730.892199][T23454] ? lookup_user_key+0x3f3/0x1300 [ 730.892225][T23454] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 730.892247][T23454] key_create_or_update+0x42/0x60 [ 730.892261][T23454] __do_sys_add_key+0x2e8/0x460 [ 730.892278][T23454] ? __pfx___do_sys_add_key+0x10/0x10 [ 730.892299][T23454] do_syscall_64+0x123/0x790 [ 730.892315][T23454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.892328][T23454] RIP: 0033:0x7f9a2df9e159 [ 730.892339][T23454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.892350][T23454] RSP: 002b:00007f9a2ee3d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 730.892362][T23454] RAX: ffffffffffffffda RBX: 00007f9a2e225fa0 RCX: 00007f9a2df9e159 [ 730.892370][T23454] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 730.892378][T23454] RBP: 00007f9a2e03503b R08: ffffffffffffffff R09: 0000000000000000 [ 730.892385][T23454] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 730.892393][T23454] R13: 00007f9a2e226038 R14: 00007f9a2e225fa0 R15: 00007ffc11c3e3b8 [ 730.892412][T23454] [ 731.473245][ T30] audit: type=1800 audit(1788976754.108:1525): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 731.677463][T23468] overlayfs: missing 'workdir' [ 732.329167][ T5730] usb 10-1: USB disconnect, device number 43 [ 732.638995][ T5730] usb 2-1: USB disconnect, device number 72 [ 732.687298][T23492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 732.705609][T23492] bridge0: port 3(bond2) entered blocking state [ 732.712018][T23492] bridge0: port 3(bond2) entered disabled state [ 732.712122][T23492] bond2: entered allmulticast mode [ 732.749350][T23492] bond2: entered promiscuous mode [ 732.749840][T23492] bridge0: port 3(bond2) entered blocking state [ 732.750068][T23492] bridge0: port 3(bond2) entered forwarding state [ 732.893941][T20767] bridge0: port 3(bond2) entered disabled state [ 733.826243][ T983] libceph: connect (1)[c::]:6789 error -101 [ 733.826362][ T983] libceph: mon0 (1)[c::]:6789 connect error [ 733.950657][T23536] ceph: No mds server is up or the cluster is laggy [ 734.563535][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 734.563570][ T30] audit: type=1800 audit(1788976757.198:1558): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 734.687715][ T30] audit: type=1800 audit(1788976757.328:1559): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31392 res=0 errno=0 [ 734.759734][ T30] audit: type=1400 audit(1788976757.398:1560): avc: denied { write } for pid=23528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.805423][ T30] audit: type=1800 audit(1788976757.448:1561): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31415 res=0 errno=0 [ 734.873361][ T30] audit: type=1800 audit(1788976757.508:1562): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 734.926241][T13089] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 734.993238][ T30] audit: type=1800 audit(1788976757.628:1563): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 735.095224][T13089] usb 6-1: Using ep0 maxpacket: 8 [ 735.103608][T13089] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 735.115118][T13089] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 735.115153][T13089] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 735.115174][T13089] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 735.115190][T13089] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 735.115205][T13089] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.115230][T13089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.190814][ T30] audit: type=1800 audit(1788976757.828:1564): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=276621 res=0 errno=0 [ 735.258210][ T30] audit: type=1800 audit(1788976757.898:1565): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=276650 res=0 errno=0 [ 735.258252][ T30] audit: type=1800 audit(1788976757.898:1566): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=276628 res=0 errno=0 [ 735.258285][ T30] audit: type=1800 audit(1788976757.898:1567): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=276629 res=0 errno=0 [ 735.454947][T13089] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 735.605381][T13089] usb 2-1: Using ep0 maxpacket: 8 [ 735.610827][T13089] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 735.620647][T13089] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 735.620682][T13089] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 735.620704][T13089] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 735.620720][T13089] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 735.620736][T13089] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 735.620752][T13089] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.620789][T13089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.290119][T23595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6559'. [ 736.290144][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6559'. [ 736.483701][T23601] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6561'. [ 736.675079][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 737.385296][ T5730] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 737.547600][ T5730] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 737.559516][ T5730] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.559551][ T5730] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 737.559569][ T5730] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 737.559595][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.637256][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 737.738093][ T5730] usb 6-1: USB disconnect, device number 16 [ 737.795196][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 737.801448][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 737.820212][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.934134][T23628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6569'. [ 737.993842][T23628] team1: entered promiscuous mode [ 737.999690][T23628] team1: entered allmulticast mode [ 737.999935][T23628] 8021q: adding VLAN 0 to HW filter on device team1 [ 738.149262][ T5730] usb 2-1: USB disconnect, device number 73 [ 738.506481][T23634] Process accounting resumed [ 738.727311][T23642] FAULT_INJECTION: forcing a failure. [ 738.727311][T23642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 738.727344][T23642] CPU: 0 UID: 0 PID: 23642 Comm: syz.5.6573 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.727363][T23642] Tainted: [L]=SOFTLOCKUP [ 738.727367][T23642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 738.727375][T23642] Call Trace: [ 738.727380][T23642] [ 738.727385][T23642] dump_stack_lvl+0x100/0x190 [ 738.727408][T23642] should_fail_ex.cold+0x5/0xa [ 738.727425][T23642] ? prepare_alloc_pages+0x16d/0x5b0 [ 738.727443][T23642] should_fail_alloc_page+0xeb/0x140 [ 738.727459][T23642] prepare_alloc_pages+0x1f0/0x5b0 [ 738.727474][T23642] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 738.727493][T23642] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 738.727512][T23642] ? unwind_get_return_address+0x59/0xa0 [ 738.727528][T23642] ? arch_stack_walk+0xa6/0xf0 [ 738.727550][T23642] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 738.727567][T23642] ? __pfx_stack_trace_save+0x10/0x10 [ 738.727584][T23642] ? stack_depot_save_flags+0x27/0x9f0 [ 738.727599][T23642] ? rcu_is_watching+0x13/0xc0 [ 738.727616][T23642] ? kasan_save_stack+0x3f/0x50 [ 738.727628][T23642] ? kasan_save_stack+0x30/0x50 [ 738.727639][T23642] ? kasan_save_track+0x14/0x30 [ 738.727652][T23642] ? __kasan_slab_alloc+0x89/0x90 [ 738.727665][T23642] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 738.727677][T23642] ? __pmd_alloc+0xbf/0x950 [ 738.727690][T23642] ? __handle_mm_fault+0xa9d/0x2f60 [ 738.727704][T23642] ? handle_mm_fault+0x363/0xa20 [ 738.727718][T23642] ? do_user_addr_fault+0x745/0x12f0 [ 738.727732][T23642] ? exc_page_fault+0x6f/0xd0 [ 738.727745][T23642] ? asm_exc_page_fault+0x26/0x30 [ 738.727756][T23642] ? strncpy_from_user+0xfd/0x2d0 [ 738.727773][T23642] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 738.727788][T23642] ? policy_nodemask+0xed/0x4f0 [ 738.727806][T23642] alloc_pages_mpol+0x201/0x550 [ 738.727821][T23642] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 738.727840][T23642] alloc_pages_noprof+0x1a/0x160 [ 738.727856][T23642] pte_alloc_one+0x1c/0x3d0 [ 738.727872][T23642] do_fault+0x960/0x1830 [ 738.727886][T23642] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 738.727903][T23642] ? __pfx_do_fault+0x10/0x10 [ 738.727917][T23642] ? _raw_spin_unlock+0x28/0x50 [ 738.727929][T23642] ? __pmd_alloc+0x3fb/0x950 [ 738.727943][T23642] __handle_mm_fault+0x150b/0x2f60 [ 738.727963][T23642] ? __pfx___handle_mm_fault+0x10/0x10 [ 738.727978][T23642] ? __pfx_mt_find+0x10/0x10 [ 738.728001][T23642] ? find_vma+0xbf/0x140 [ 738.728013][T23642] ? __pfx_find_vma+0x10/0x10 [ 738.728027][T23642] handle_mm_fault+0x363/0xa20 [ 738.728046][T23642] do_user_addr_fault+0x745/0x12f0 [ 738.728065][T23642] exc_page_fault+0x6f/0xd0 [ 738.728079][T23642] asm_exc_page_fault+0x26/0x30 [ 738.728090][T23642] RIP: 0010:strncpy_from_user+0xfd/0x2d0 [ 738.728103][T23642] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 b2 86 ac fc 48 83 fd 07 0f 86 bb 00 00 00 e8 03 8c ac fc <4d> 8b 24 1e e8 fa 8b ac fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff [ 738.728114][T23642] RSP: 0018:ffffc900060ffe68 EFLAGS: 00050283 [ 738.728125][T23642] RAX: 0000000000000020 RBX: 0000000000000000 RCX: ffffc9000e4c9000 [ 738.728132][T23642] RDX: 0000000000080000 RSI: ffffffff855f850d RDI: ffff88803320cb00 [ 738.728140][T23642] RBP: 00000000000000a8 R08: 0000000000000007 R09: 0000000000000007 [ 738.728147][T23642] R10: 00000000000000a8 R11: 0000000000000000 R12: 0000000000000000 [ 738.728154][T23642] R13: ffff88802c893f18 R14: 0000000000000000 R15: 00000000000000a8 [ 738.728166][T23642] ? strncpy_from_user+0xfd/0x2d0 [ 738.728188][T23642] ? strncpy_from_user+0xfd/0x2d0 [ 738.728202][T23642] do_getname+0x78/0x390 [ 738.728223][T23642] __x64_sys_mkdirat+0x78/0xc0 [ 738.728239][T23642] do_syscall_64+0x123/0x790 [ 738.728255][T23642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.728266][T23642] RIP: 0033:0x7f27f779e159 [ 738.728276][T23642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.728287][T23642] RSP: 002b:00007f27f8685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 738.728298][T23642] RAX: ffffffffffffffda RBX: 00007f27f7a25fa0 RCX: 00007f27f779e159 [ 738.728306][T23642] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffffffffffffff [ 738.728313][T23642] RBP: 00007f27f783503b R08: 0000000000000000 R09: 0000000000000000 [ 738.728320][T23642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.728328][T23642] R13: 00007f27f7a26038 R14: 00007f27f7a25fa0 R15: 00007ffd9f071328 [ 738.728345][T23642] [ 739.479464][T23653] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6576'. [ 739.647268][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 739.647293][ T30] audit: type=1800 audit(1788976762.288:1610): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 739.811323][ T30] audit: type=1800 audit(1788976762.448:1611): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 740.007213][ T30] audit: type=1800 audit(1788976762.638:1612): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 740.188636][ T983] usb 3-1: USB disconnect, device number 37 [ 740.309210][ T30] audit: type=1800 audit(1788976762.948:1613): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 740.382987][T23663] device-mapper: ioctl: Unable to rename non-existent device, to uuid j [ 740.427947][ T983] usb 7-1: USB disconnect, device number 16 [ 740.464629][T23665] ucma_write: process 73 (syz.5.6582) changed security contexts after opening file descriptor, this is not allowed. [ 740.503581][ T30] audit: type=1800 audit(1788976763.138:1614): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15619 res=0 errno=0 [ 740.578383][ T30] audit: type=1800 audit(1788976763.218:1615): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 740.861932][ T30] audit: type=1800 audit(1788976763.498:1616): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 740.934553][ T30] audit: type=1800 audit(1788976763.568:1617): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=23864 res=0 errno=0 [ 741.045598][ T30] audit: type=1400 audit(1788976763.688:1618): avc: denied { write } for pid=23676 comm="syz.2.6587" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 741.077396][ T30] audit: type=1800 audit(1788976763.718:1619): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15619 res=0 errno=0 [ 741.525896][ T983] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 741.685037][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 741.691797][ T983] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 741.702094][ T983] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.702119][ T983] usb 3-1: config 0 interface 0 has no altsetting 0 [ 741.702143][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.797382][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 743.150315][T23723] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.6606'. [ 743.384269][T23728] netlink: 'syz.9.6609': attribute type 4 has an invalid length. [ 743.436754][T23728] netlink: 'syz.9.6609': attribute type 4 has an invalid length. [ 743.994911][ T983] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 744.147054][ T983] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 744.158148][ T983] usb 2-1: config 1 has an invalid interface number: 27 but max is 1 [ 744.158172][ T983] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.158192][ T983] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 744.158206][ T983] usb 2-1: config 1 has no interface number 2 [ 744.158232][ T983] usb 2-1: config 1 interface 1 has no altsetting 0 [ 744.205672][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.205697][ T983] usb 2-1: Product: syz [ 744.205714][ T983] usb 2-1: Manufacturer: syz [ 744.205725][ T983] usb 2-1: SerialNumber: syz [ 744.349473][ T9] usb 3-1: USB disconnect, device number 38 [ 744.377385][ T5730] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 744.535252][ T5730] usb 10-1: Using ep0 maxpacket: 16 [ 744.542363][ T5730] usb 10-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 744.554929][ T5730] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.554956][ T5730] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.554977][ T5730] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 744.555001][ T5730] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.658790][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 744.658817][ T30] audit: type=1400 audit(1788976767.298:1674): avc: denied { map } for pid=23758 comm="syz.6.6621" path="/63/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 744.736042][ T30] audit: type=1800 audit(1788976767.378:1675): pid=23759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6620" name="enabled" dev="sysfs" ino=63778 res=0 errno=0 [ 744.803895][ T30] audit: type=1800 audit(1788976767.438:1676): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15619 res=0 errno=0 [ 744.900099][ T30] audit: type=1800 audit(1788976767.538:1677): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 745.034103][ T30] audit: type=1800 audit(1788976767.668:1678): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15619 res=0 errno=0 [ 745.135800][ T30] audit: type=1800 audit(1788976767.778:1679): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 745.239996][ T30] audit: type=1800 audit(1788976767.878:1680): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 745.335295][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 745.344303][ T30] audit: type=1800 audit(1788976767.978:1681): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15496 res=0 errno=0 [ 745.395299][ T5730] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 745.412619][T23776] FAULT_INJECTION: forcing a failure. [ 745.412619][T23776] name failslab, interval 1, probability 0, space 0, times 0 [ 745.428665][T23776] CPU: 0 UID: 0 PID: 23776 Comm: syz.5.6629 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.428687][T23776] Tainted: [L]=SOFTLOCKUP [ 745.428692][T23776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 745.428700][T23776] Call Trace: [ 745.428705][T23776] [ 745.428711][T23776] dump_stack_lvl+0x100/0x190 [ 745.428736][T23776] should_fail_ex.cold+0x5/0xa [ 745.428753][T23776] should_failslab+0xc2/0x120 [ 745.428768][T23776] kmem_cache_alloc_noprof+0x92/0x6a0 [ 745.428780][T23776] ? d_instantiate+0x8a/0xb0 [ 745.428796][T23776] ? alloc_empty_file+0x5b/0x1c0 [ 745.428814][T23776] alloc_empty_file+0x5b/0x1c0 [ 745.428829][T23776] alloc_file_pseudo+0x183/0x290 [ 745.428845][T23776] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 745.428859][T23776] ? alloc_fd+0x471/0x7a0 [ 745.428874][T23776] ? do_raw_spin_unlock+0x145/0x1e0 [ 745.428891][T23776] __anon_inode_getfile+0xe8/0x280 [ 745.428905][T23776] anon_inode_getfile_fmode+0x37/0xa0 [ 745.428918][T23776] do_signalfd4+0x1ed/0x480 [ 745.428931][T23776] __x64_sys_signalfd+0x120/0x1a0 [ 745.428943][T23776] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 745.428960][T23776] do_syscall_64+0x123/0x790 [ 745.428976][T23776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.428988][T23776] RIP: 0033:0x7f27f779e159 [ 745.428999][T23776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.429010][T23776] RSP: 002b:00007f27f8685028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 745.429023][T23776] RAX: ffffffffffffffda RBX: 00007f27f7a25fa0 RCX: 00007f27f779e159 [ 745.429031][T23776] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: ffffffffffffffff [ 745.429038][T23776] RBP: 00007f27f783503b R08: 0000000000000000 R09: 0000000000000000 [ 745.429046][T23776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.429053][T23776] R13: 00007f27f7a26038 R14: 00007f27f7a25fa0 R15: 00007ffd9f071328 [ 745.429069][T23776] [ 745.490789][ T9] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 745.501671][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 745.501689][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 745.564545][ T5730] usb 7-1: Using ep0 maxpacket: 16 [ 745.589960][ T5730] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 745.599566][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.599582][ T9] usb 3-1: Product: syz [ 745.599591][ T9] usb 3-1: Manufacturer: syz [ 745.599600][ T9] usb 3-1: SerialNumber: syz [ 745.725922][ T30] audit: type=1800 audit(1788976768.368:1682): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277674 res=0 errno=0 [ 745.747560][ T5730] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.747582][ T5730] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 745.769537][ T5730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 745.769561][ T5730] usb 7-1: SerialNumber: syz [ 745.790024][ T30] audit: type=1800 audit(1788976768.428:1683): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=277706 res=0 errno=0 [ 746.730688][ T9] usb 2-1: USB disconnect, device number 74 [ 747.209262][ T9] usb 10-1: USB disconnect, device number 44 [ 747.916567][T13089] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 747.935514][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 748.075298][T13089] usb 10-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 748.085096][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 748.085723][ T9] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 748.086452][T13089] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.086470][T13089] usb 10-1: config 0 interface 0 has no altsetting 0 [ 748.086487][T13089] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.145961][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.145987][ T9] usb 6-1: Product: syz [ 748.146004][ T9] usb 6-1: Manufacturer: syz [ 748.146015][ T9] usb 6-1: SerialNumber: syz [ 748.225997][T13089] usb 3-1: USB disconnect, device number 39 [ 748.251577][ T9] usb 7-1: USB disconnect, device number 17 [ 748.635542][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 748.786095][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 748.793441][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 748.806643][ T9] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 748.816604][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 748.816630][ T9] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 748.816648][ T9] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 748.816662][ T9] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 748.816677][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 748.881929][ T9] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 748.881956][ T9] usb 7-1: Product: syz [ 748.881973][ T9] usb 7-1: Manufacturer: syz [ 748.881984][ T9] usb 7-1: SerialNumber: syz [ 749.601482][T23847] FAULT_INJECTION: forcing a failure. [ 749.601482][T23847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 749.601514][T23847] CPU: 0 UID: 0 PID: 23847 Comm: syz.1.6648 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.601531][T23847] Tainted: [L]=SOFTLOCKUP [ 749.601536][T23847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 749.601543][T23847] Call Trace: [ 749.601548][T23847] [ 749.601553][T23847] dump_stack_lvl+0x100/0x190 [ 749.601575][T23847] should_fail_ex.cold+0x5/0xa [ 749.601592][T23847] ? prepare_alloc_pages+0x16d/0x5b0 [ 749.601607][T23847] should_fail_alloc_page+0xeb/0x140 [ 749.601624][T23847] prepare_alloc_pages+0x1f0/0x5b0 [ 749.601641][T23847] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 749.601659][T23847] ? __pfx_get_page_from_freelist+0x10/0x10 [ 749.601677][T23847] ? prepare_alloc_pages+0x1f0/0x5b0 [ 749.601692][T23847] ? rcu_is_watching+0x13/0xc0 [ 749.601708][T23847] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 749.601727][T23847] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 749.601745][T23847] ? find_held_lock+0x2b/0x80 [ 749.601760][T23847] ? is_bpf_text_address+0x8a/0x1a0 [ 749.601775][T23847] ? is_bpf_text_address+0x8a/0x1a0 [ 749.601789][T23847] ? bpf_ksym_find+0x128/0x1c0 [ 749.601805][T23847] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 749.601823][T23847] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 749.601840][T23847] ? is_bpf_text_address+0x94/0x1a0 [ 749.601855][T23847] ? __kernel_text_address+0xd/0x30 [ 749.601882][T23847] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 749.601904][T23847] ? policy_nodemask+0xed/0x4f0 [ 749.601919][T23847] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 749.601945][T23847] __kasan_populate_vmalloc+0xf0/0x210 [ 749.601961][T23847] alloc_vmap_area+0x95d/0x2bb0 [ 749.601978][T23847] ? kasan_save_track+0x14/0x30 [ 749.601991][T23847] ? __kasan_kmalloc+0xaa/0xb0 [ 749.602003][T23847] ? __pfx_alloc_vmap_area+0x10/0x10 [ 749.602017][T23847] ? __get_vm_area_node+0x124/0x350 [ 749.602032][T23847] __get_vm_area_node+0x1ed/0x350 [ 749.602049][T23847] __vmalloc_node_range_noprof+0x268/0x1420 [ 749.602064][T23847] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 749.602078][T23847] ? __pfx_stack_trace_save+0x10/0x10 [ 749.602095][T23847] ? stack_depot_save_flags+0x27/0x9f0 [ 749.602111][T23847] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 749.602133][T23847] ? __kasan_kmalloc+0xaa/0xb0 [ 749.602146][T23847] ? do_syscall_64+0x123/0x790 [ 749.602163][T23847] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 749.602185][T23847] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 749.602198][T23847] __vmalloc_node_noprof+0xad/0xf0 [ 749.602213][T23847] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 749.602229][T23847] __vmalloc_noprof+0xa3/0x120 [ 749.602244][T23847] ? __pfx___vmalloc_noprof+0x10/0x10 [ 749.602264][T23847] bpf_prog_alloc_no_stats+0x59/0x690 [ 749.602280][T23847] bpf_prog_alloc+0x3b/0x200 [ 749.602294][T23847] bpf_prog_create_from_user+0xb4/0x2e0 [ 749.602309][T23847] ? __pfx_seccomp_check_filter+0x10/0x10 [ 749.602326][T23847] do_seccomp+0x870/0x27c0 [ 749.602342][T23847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 749.602360][T23847] ? __pfx_do_seccomp+0x10/0x10 [ 749.602377][T23847] ? xfd_validate_state+0x129/0x190 [ 749.602396][T23847] do_syscall_64+0x123/0x790 [ 749.602411][T23847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.602424][T23847] RIP: 0033:0x7fa976f9e159 [ 749.602435][T23847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.602447][T23847] RSP: 002b:00007fa977f21028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 749.602459][T23847] RAX: ffffffffffffffda RBX: 00007fa977225fa0 RCX: 00007fa976f9e159 [ 749.602467][T23847] RDX: 00002000000006c0 RSI: 000000000000000a RDI: 0000000000000001 [ 749.602475][T23847] RBP: 00007fa97703503b R08: 0000000000000000 R09: 0000000000000000 [ 749.602483][T23847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.602491][T23847] R13: 00007fa977226038 R14: 00007fa977225fa0 R15: 00007ffe806b7bf8 [ 749.602507][T23847] [ 749.627387][T23847] syz.1.6648: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 749.627438][T23847] CPU: 0 UID: 0 PID: 23847 Comm: syz.1.6648 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.627456][T23847] Tainted: [L]=SOFTLOCKUP [ 749.627460][T23847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 749.627468][T23847] Call Trace: [ 749.627473][T23847] [ 749.627478][T23847] dump_stack_lvl+0x100/0x190 [ 749.627501][T23847] warn_alloc.cold+0x9e/0xb2 [ 749.627516][T23847] ? __pfx_warn_alloc+0x10/0x10 [ 749.627533][T23847] ? lockdep_hardirqs_on+0x7d/0x110 [ 749.627550][T23847] ? __get_vm_area_node+0x2f0/0x350 [ 749.627569][T23847] ? __get_vm_area_node+0x22b/0x350 [ 749.627585][T23847] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 749.627600][T23847] ? __pfx_stack_trace_save+0x10/0x10 [ 749.627619][T23847] ? stack_depot_save_flags+0x27/0x9f0 [ 749.627636][T23847] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 749.627650][T23847] ? __kasan_kmalloc+0xaa/0xb0 [ 749.627663][T23847] ? do_syscall_64+0x123/0x790 [ 749.627679][T23847] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 749.627700][T23847] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 749.627715][T23847] __vmalloc_node_noprof+0xad/0xf0 [ 749.627729][T23847] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 749.627745][T23847] __vmalloc_noprof+0xa3/0x120 [ 749.627758][T23847] ? __pfx___vmalloc_noprof+0x10/0x10 [ 749.627778][T23847] bpf_prog_alloc_no_stats+0x59/0x690 [ 749.627794][T23847] bpf_prog_alloc+0x3b/0x200 [ 749.627809][T23847] bpf_prog_create_from_user+0xb4/0x2e0 [ 749.627824][T23847] ? __pfx_seccomp_check_filter+0x10/0x10 [ 749.627841][T23847] do_seccomp+0x870/0x27c0 [ 749.627857][T23847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 749.627876][T23847] ? __pfx_do_seccomp+0x10/0x10 [ 749.627893][T23847] ? xfd_validate_state+0x129/0x190 [ 749.627911][T23847] do_syscall_64+0x123/0x790 [ 749.627926][T23847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.627938][T23847] RIP: 0033:0x7fa976f9e159 [ 749.627949][T23847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.627960][T23847] RSP: 002b:00007fa977f21028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 749.627971][T23847] RAX: ffffffffffffffda RBX: 00007fa977225fa0 RCX: 00007fa976f9e159 [ 749.627980][T23847] RDX: 00002000000006c0 RSI: 000000000000000a RDI: 0000000000000001 [ 749.627987][T23847] RBP: 00007fa97703503b R08: 0000000000000000 R09: 0000000000000000 [ 749.627995][T23847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.628002][T23847] R13: 00007fa977226038 R14: 00007fa977225fa0 R15: 00007ffe806b7bf8 [ 749.628019][T23847] [ 749.965574][T23847] Mem-Info: [ 749.965596][T23847] active_anon:17498 inactive_anon:109 isolated_anon:0 [ 749.965596][T23847] active_file:3069 inactive_file:49583 isolated_file:0 [ 749.965596][T23847] unevictable:0 dirty:494 writeback:0 [ 749.965596][T23847] slab_reclaimable:8218 slab_unreclaimable:114371 [ 749.965596][T23847] mapped:31456 shmem:2842 pagetables:6404 [ 749.965596][T23847] sec_pagetables:0 bounce:0 [ 749.965596][T23847] kernel_misc_reclaimable:0 [ 749.965596][T23847] free:976567 free_pcp:9845 free_cma:0 [ 749.965629][T23847] Node 0 active_anon:69992kB inactive_anon:436kB active_file:12276kB inactive_file:197968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117468kB dirty:1976kB writeback:0kB shmem:11368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14784kB pagetables:24516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 749.965662][T23847] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8356kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:1100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 749.965692][T23847] Node 0 DMA free:10508kB boost:0kB min:212kB low:264kB high:316kB reserved_highatomic:0kB free_highatomic:0kB active_anon:744kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 749.965723][T23847] lowmem_reserve[]: 0 2342 2342 2342 2342 [ 749.965742][T23847] Node 0 DMA32 free:1020052kB boost:0kB min:33128kB low:41408kB high:49688kB reserved_highatomic:0kB free_highatomic:0kB active_anon:69248kB inactive_anon:436kB active_file:12276kB inactive_file:197968kB unevictable:0kB writepending:1976kB zspages:504kB present:2998260kB managed:2399124kB mlocked:0kB bounce:0kB free_pcp:39380kB local_pcp:39380kB free_cma:0kB [ 749.965774][T23847] lowmem_reserve[]: 0 0 0 0 0 [ 749.965792][T23847] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 749.965821][T23847] lowmem_reserve[]: 0 0 0 0 0 [ 749.965838][T23847] Node 1 Normal free:2875708kB boost:0kB min:56768kB low:70960kB high:85152kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:364kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 749.965869][T23847] lowmem_reserve[]: 0 0 0 0 0 [ 749.965887][T23847] Node 0 DMA: 5*4kB (UM) 11*8kB (UM) 12*16kB (UM) 7*32kB (UM) 8*64kB (UM) 4*128kB (UM) 3*256kB (U) 4*512kB (UM) 4*1024kB (U) 1*2048kB (U) 0*4096kB = 10508kB [ 749.965969][T23847] Node 0 DMA32: 3975*4kB (UME) 3395*8kB (UME) 948*16kB (UME) 419*32kB (UME) 1187*64kB (UME) 992*128kB (UME) 798*256kB (UME) 499*512kB (UM) 279*1024kB (UM) 0*2048kB 0*4096kB = 1020052kB [ 749.966049][T23847] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 749.966111][T23847] Node 1 Normal: 39*4kB (UME) 32*8kB (UME) 26*16kB (UME) 34*32kB (UME) 21*64kB (UM) 19*128kB (UE) 15*256kB (UME) 12*512kB (UME) 9*1024kB (UME) 4*2048kB (UME) 694*4096kB (UM) = 2875708kB [ 749.966205][T23847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 749.966214][T23847] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 749.966223][T23847] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 749.966231][T23847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 749.966239][T23847] 55493 total pagecache pages [ 749.966244][T23847] 3 pages in swap cache [ 749.966248][T23847] Free swap = 124700kB [ 749.966252][T23847] Total swap = 124996kB [ 749.966256][T23847] 2064283 pages RAM [ 749.966260][T23847] 0 pages HighMem/MovableOnly [ 749.966264][T23847] 432868 pages reserved [ 749.966267][T23847] 0 pages cma reserved [ 750.773292][ T9] usb 6-1: USB disconnect, device number 17 [ 750.913429][T13089] usb 10-1: USB disconnect, device number 45 [ 751.034530][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 751.034556][ T30] audit: type=1800 audit(1788976773.668:1739): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 751.134124][ T30] audit: type=1800 audit(1788976773.758:1740): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 751.217725][T23852] FAULT_INJECTION: forcing a failure. [ 751.217725][T23852] name failslab, interval 1, probability 0, space 0, times 0 [ 751.217758][T23852] CPU: 0 UID: 0 PID: 23852 Comm: syz.2.6650 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.217778][T23852] Tainted: [L]=SOFTLOCKUP [ 751.217782][T23852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 751.217790][T23852] Call Trace: [ 751.217795][T23852] [ 751.217800][T23852] dump_stack_lvl+0x100/0x190 [ 751.217823][T23852] should_fail_ex.cold+0x5/0xa [ 751.217841][T23852] should_failslab+0xc2/0x120 [ 751.217855][T23852] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 751.217868][T23852] ? find_held_lock+0x2b/0x80 [ 751.217883][T23852] ? shmem_alloc_inode+0x25/0x50 [ 751.217896][T23852] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 751.217909][T23852] shmem_alloc_inode+0x25/0x50 [ 751.217922][T23852] alloc_inode+0x68/0x250 [ 751.217933][T23852] new_inode+0x22/0x1c0 [ 751.217945][T23852] shmem_get_inode+0x1e3/0xf70 [ 751.217967][T23852] ? __pfx_shmem_get_inode+0x10/0x10 [ 751.217987][T23852] __shmem_file_setup+0x382/0x460 [ 751.218001][T23852] ? __pfx___shmem_file_setup+0x10/0x10 [ 751.218018][T23852] ? vm_area_alloc+0x1f/0x160 [ 751.218037][T23852] shmem_zero_setup+0x96/0x1b0 [ 751.218057][T23852] __mmap_region+0x2692/0x32c0 [ 751.218077][T23852] ? __pfx___mmap_region+0x10/0x10 [ 751.218098][T23852] ? __lock_acquire+0x5c0/0x1f40 [ 751.218115][T23852] ? __lock_acquire+0x5c0/0x1f40 [ 751.218128][T23852] ? debug_objects_fill_pool+0x18e/0x590 [ 751.218141][T23852] ? find_held_lock+0x2b/0x80 [ 751.218155][T23852] ? debug_objects_fill_pool+0x49b/0x590 [ 751.218167][T23852] ? debug_objects_fill_pool+0x49b/0x590 [ 751.218184][T23852] ? __lock_acquire+0x5c0/0x1f40 [ 751.218204][T23852] ? clockevents_program_event+0x23e/0x820 [ 751.218220][T23852] ? clockevents_program_event+0x23e/0x820 [ 751.218259][T23852] ? __pfx_mt_find+0x10/0x10 [ 751.218279][T23852] mmap_region+0x3db/0x6d0 [ 751.218297][T23852] ? __pfx_mmap_region+0x10/0x10 [ 751.218315][T23852] ? find_vma_intersection+0xc0/0x140 [ 751.218328][T23852] ? __pfx_find_vma_intersection+0x10/0x10 [ 751.218343][T23852] ? security_mmap_addr+0x71/0x1e0 [ 751.218356][T23852] ? __get_unmapped_area+0x255/0x3e0 [ 751.218372][T23852] do_mmap+0x12c7/0x1c30 [ 751.218388][T23852] ? lock_acquire+0x1d1/0x380 [ 751.218400][T23852] ? __pfx_do_mmap+0x10/0x10 [ 751.218414][T23852] ? selinux_mmap_file+0x154/0x1c0 [ 751.218432][T23852] ? __pfx_down_write_killable+0x10/0x10 [ 751.218451][T23852] vm_mmap_pgoff+0x28d/0x470 [ 751.218466][T23852] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 751.218481][T23852] ? __pfx_do_futex+0x10/0x10 [ 751.218496][T23852] ? do_raw_spin_lock+0x128/0x260 [ 751.218514][T23852] ksys_mmap_pgoff+0xe4/0x610 [ 751.218527][T23852] ? __x64_sys_futex+0x358/0x4d0 [ 751.218542][T23852] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 751.218555][T23852] ? xfd_validate_state+0x129/0x190 [ 751.218572][T23852] __x64_sys_mmap+0x125/0x190 [ 751.218588][T23852] do_syscall_64+0x123/0x790 [ 751.218604][T23852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.218617][T23852] RIP: 0033:0x7f9a2df9e159 [ 751.218627][T23852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.218639][T23852] RSP: 002b:00007f9a2ee3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 751.218651][T23852] RAX: ffffffffffffffda RBX: 00007f9a2e225fa0 RCX: 00007f9a2df9e159 [ 751.218659][T23852] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000000000000 [ 751.218667][T23852] RBP: 00007f9a2e03503b R08: ffffffffffffffff R09: 0000000010000000 [ 751.218674][T23852] R10: 0000000000109031 R11: 0000000000000246 R12: 0000000000000000 [ 751.218682][T23852] R13: 00007f9a2e226038 R14: 00007f9a2e225fa0 R15: 00007ffc11c3e3b8 [ 751.218699][T23852] [ 751.810294][ T9] usb 7-1: USB disconnect, device number 18 [ 751.901109][ T30] audit: type=1800 audit(1788976774.538:1741): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 752.024381][ T30] audit: type=1800 audit(1788976774.658:1742): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15619 res=0 errno=0 [ 752.087618][ T30] audit: type=1400 audit(1788976774.728:1743): avc: denied { write } for pid=23842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.131814][ T30] audit: type=1800 audit(1788976774.768:1744): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 752.292439][T23873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6655'. [ 752.338918][ T30] audit: type=1400 audit(1788976774.978:1745): avc: denied { create } for pid=23867 comm="syz.6.6655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 752.365213][ T30] audit: type=1400 audit(1788976775.008:1746): avc: denied { ioctl } for pid=23867 comm="syz.6.6655" path="socket:[98259]" dev="sockfs" ino=98259 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 752.411555][ T30] audit: type=1400 audit(1788976775.048:1747): avc: denied { write } for pid=23867 comm="syz.6.6655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 752.554302][ T30] audit: type=1800 audit(1788976775.188:1748): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15619 res=0 errno=0 [ 752.895091][T13089] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 752.904978][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 753.045364][T13089] usb 3-1: Using ep0 maxpacket: 8 [ 753.050849][T13089] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 753.061455][ T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 753.065331][ T5708] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 753.075912][T13089] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 753.075953][T13089] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 753.075981][T13089] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 753.075995][T13089] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 753.076010][T13089] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 753.076023][T13089] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.076046][T13089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.131619][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.131636][ T9] usb 7-1: Product: syz [ 753.131645][ T9] usb 7-1: Manufacturer: syz [ 753.131654][ T9] usb 7-1: SerialNumber: syz [ 753.295453][ T5708] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 753.306649][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.306676][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.306696][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 753.306722][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.579661][T13089] usb 3-1: USB disconnect, device number 40 [ 755.700705][ T983] usb 7-1: USB disconnect, device number 19 [ 755.876756][T13089] usb 2-1: USB disconnect, device number 75 [ 756.051696][T23957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6678'. [ 756.083316][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 756.083342][ T30] audit: type=1800 audit(1788976778.718:1803): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15619 res=0 errno=0 [ 756.191965][ T30] audit: type=1800 audit(1788976778.828:1804): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 756.265079][ T30] audit: type=1800 audit(1788976778.898:1805): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 756.389041][ T30] audit: type=1800 audit(1788976779.028:1806): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15619 res=0 errno=0 [ 756.497082][ T30] audit: type=1800 audit(1788976779.138:1807): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 756.657122][ T30] audit: type=1800 audit(1788976779.298:1808): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15619 res=0 errno=0 [ 756.836103][ T30] audit: type=1800 audit(1788976779.478:1809): pid=23986 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.6689" name="attach" dev="sysfs" ino=32888 res=0 errno=0 [ 756.880629][T23986] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 757.202781][ T30] audit: type=1800 audit(1788976779.838:1810): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 757.415858][ T30] audit: type=1800 audit(1788976780.048:1811): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 757.530419][T23996] raw_sendmsg: syz.2.6692 forgot to set AF_INET. Fix it! [ 757.657864][ T30] audit: type=1800 audit(1788976780.298:1812): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 757.821638][T24000] gadgetfs: bound to dummy_udc driver [ 758.596966][ T983] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 758.665047][T13089] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 758.761199][ T983] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 758.771198][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.815824][T13089] usb 10-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 758.826583][T13089] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.826619][T13089] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.412540][T24051] input: syz0 as /devices/virtual/input/input51 [ 761.110869][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 761.110898][ T30] audit: type=1800 audit(1788976783.748:1855): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 761.197300][T24064] syz.1.6718(24064): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 761.224904][ T983] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 761.248175][T24066] bridge0: port 1(syz_tun) entered blocking state [ 761.248238][T24066] bridge0: port 1(syz_tun) entered disabled state [ 761.248348][T24066] syz_tun: entered allmulticast mode [ 761.249216][T24066] syz_tun: entered promiscuous mode [ 761.297368][T24066] bridge0: port 1(syz_tun) entered blocking state [ 761.297432][T24066] bridge0: port 1(syz_tun) entered forwarding state [ 761.319957][ T30] audit: type=1800 audit(1788976783.958:1856): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 761.373681][ T5708] usb 6-1: USB disconnect, device number 18 [ 761.383484][ T983] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 761.399393][ T983] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.399427][ T983] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 761.399443][ T983] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 761.399458][ T983] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 761.399482][ T983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.473829][ T30] audit: type=1800 audit(1788976784.108:1857): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279479 res=0 errno=0 [ 761.504678][ T30] audit: type=1800 audit(1788976784.138:1858): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=279508 res=0 errno=0 [ 761.527111][ T30] audit: type=1800 audit(1788976784.168:1859): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=279486 res=0 errno=0 [ 761.556246][ T30] audit: type=1800 audit(1788976784.198:1860): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=279487 res=0 errno=0 [ 761.580969][ T30] audit: type=1800 audit(1788976784.218:1861): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=279488 res=0 errno=0 [ 761.627557][ T983] usb 10-1: USB disconnect, device number 46 [ 761.722656][ T30] audit: type=1800 audit(1788976784.348:1862): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 761.792539][ T30] audit: type=1804 audit(1788976784.428:1863): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.6721" name="/newroot/66/file0" dev="tmpfs" ino=365 res=1 errno=0 [ 761.889430][ T5708] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 761.944110][ T30] audit: type=1800 audit(1788976784.578:1864): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15988 res=0 errno=0 [ 762.054993][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 762.062265][ T5708] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 762.075960][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 762.075987][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 762.076009][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 762.076025][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 762.076041][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 762.135276][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.135293][ T5708] usb 2-1: Product: syz [ 762.135302][ T5708] usb 2-1: Manufacturer: syz [ 762.135310][ T5708] usb 2-1: SerialNumber: syz [ 762.628482][T24087] af_packet: packet size is too long (4096 > 2016) [ 762.769248][T24097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6732'. [ 762.779415][T24097] syz_tun: left allmulticast mode [ 762.786946][T24097] syz_tun: left promiscuous mode [ 762.787091][T24097] bridge0: port 1(syz_tun) entered disabled state [ 762.809124][T24097] bridge_slave_1: left allmulticast mode [ 762.820883][T24097] bridge_slave_1: left promiscuous mode [ 762.827450][T24097] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.839815][ T5608] Bluetooth: hci0: command 0x0c1a tx timeout [ 762.847648][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 762.847669][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 763.032963][T24102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6733'. [ 763.097406][T24102] team0 (unregistering): Port device team_slave_0 removed [ 763.114192][T24102] team0 (unregistering): Port device team_slave_1 removed [ 763.339818][T24107] comedi comedi4: commands at RT priority not supported in this driver [ 764.043108][ T5715] usb 7-1: USB disconnect, device number 20 [ 764.527473][T24129] syzkaller1: entered promiscuous mode [ 764.527500][T24129] syzkaller1: entered allmulticast mode [ 764.547115][ T5730] usb 2-1: USB disconnect, device number 76 [ 764.757297][ T5715] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 764.806016][T24135] ------------[ cut here ]------------ [ 764.806198][T24135] err == -EMSGSIZE [ 764.806370][T24135] WARNING: net/core/rtnetlink.c:4594 at rtmsg_ifinfo_build_skb+0x1c1/0x260, CPU#0: syz.1.6748/24135 [ 764.826851][T24135] Modules linked in: [ 764.831558][T24135] CPU: 0 UID: 0 PID: 24135 Comm: syz.1.6748 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.843559][T24135] Tainted: [L]=SOFTLOCKUP [ 764.848077][T24135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 764.858376][T24135] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 764.864717][T24135] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 60 51 65 f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 c8 7a f0 [ 764.884381][T24135] RSP: 0018:ffffc9000385eda8 EFLAGS: 00010287 [ 764.890513][T24135] RAX: 000000000000c466 RBX: 00000000ffffffa6 RCX: ffffc900047a1000 [ 764.898496][T24135] RDX: 0000000000080000 RSI: ffffffff89a6bfb0 RDI: ffff888029092580 [ 764.906697][T24135] RBP: ffff8880765e2a00 R08: 0000000000000005 R09: 0000000000000000 [ 764.914653][T24135] R10: 00000000ffffffa6 R11: 0000000000000001 R12: 0000000000000002 [ 764.922675][T24135] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807dc00108 [ 764.930652][T24135] FS: 00007fa977f216c0(0000) GS:ffff888123b5d000(0000) knlGS:0000000000000000 [ 764.940316][T24135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 764.947294][T24135] CR2: 00007fa976feb840 CR3: 000000008cfdd000 CR4: 00000000003526f0 [ 764.955285][T24135] DR0: 0000000000000000 DR1: 0000000000800000 DR2: 0000000000000000 [ 764.963231][T24135] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 764.971232][T24135] Call Trace: [ 764.974487][T24135] [ 764.977539][T24135] rtnetlink_event+0x137/0x1f0 [ 764.982284][T24135] notifier_call_chain+0x99/0x3f0 [ 764.987337][T24135] call_netdevice_notifiers_info+0xbe/0x110 [ 764.993210][T24135] netif_disable_lro+0x3e9/0x660 [ 764.998409][T24135] ? __pfx_netif_disable_lro+0x10/0x10 [ 765.003844][T24135] ? lockdep_hardirqs_on+0x7d/0x110 [ 765.009126][T24135] ? __local_bh_enable_ip+0xa5/0x120 [ 765.014390][T24135] ? neigh_parms_alloc+0x45f/0x5e0 [ 765.021669][T24135] ipv6_add_dev+0xde0/0x1520 [ 765.026297][T24135] addrconf_notify+0x5db/0x1ba0 [ 765.031130][T24135] ? __pfx_tls_dev_event+0x10/0x10 [ 765.036967][T24135] ? __pfx_addrconf_notify+0x10/0x10 [ 765.042234][T24135] ? ip6mr_device_event+0x1c4/0x230 [ 765.047856][T24135] notifier_call_chain+0x99/0x3f0 [ 765.052866][T24135] call_netdevice_notifiers_info+0xbe/0x110 [ 765.058814][T24135] register_netdevice+0x1998/0x25a0 [ 765.063996][T24135] ? __pfx_register_netdevice+0x10/0x10 [ 765.069545][T24135] ? __pfx_macsec_newlink+0x10/0x10 [ 765.074724][T24135] macsec_newlink+0x4fb/0x1c50 [ 765.079834][T24135] ? __pfx_macsec_newlink+0x10/0x10 [ 765.085046][T24135] ? __kasan_kmalloc+0xaa/0xb0 [ 765.089788][T24135] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 765.095336][T24135] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 765.100423][T24135] ? validate_linkmsg+0x57c/0xba0 [ 765.105450][T24135] ? __pfx_validate_linkmsg+0x10/0x10 [ 765.110796][T24135] ? alloc_netdev_mqs+0x120a/0x15c0 [ 765.116011][T24135] ? rtnl_create_link+0xa4b/0xf80 [ 765.121011][T24135] ? __pfx_macsec_newlink+0x10/0x10 [ 765.126253][T24135] rtnl_newlink+0x1697/0x2620 [ 765.130912][T24135] ? __pfx_rtnl_newlink+0x10/0x10 [ 765.135927][T24135] ? avc_has_perm_noaudit+0x56/0x3b0 [ 765.141901][T24135] ? find_held_lock+0x2b/0x80 [ 765.146980][T24135] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 765.152334][T24135] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 765.157795][T24135] ? lock_acquire+0x1d1/0x380 [ 765.162449][T24135] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 765.167565][T24135] ? find_held_lock+0x2b/0x80 [ 765.172220][T24135] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 765.177338][T24135] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 765.182426][T24135] ? __pfx_rtnl_newlink+0x10/0x10 [ 765.187461][T24135] rtnetlink_rcv_msg+0x95e/0xe90 [ 765.192375][T24135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 765.197887][T24135] ? ref_tracker_free+0x37e/0x6c0 [ 765.202908][T24135] netlink_rcv_skb+0x159/0x420 [ 765.207734][T24135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 765.213178][T24135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 765.218490][T24135] ? netlink_deliver_tap+0x1ae/0xcc0 [ 765.223757][T24135] netlink_unicast+0x585/0x850 [ 765.228529][T24135] ? __pfx_netlink_unicast+0x10/0x10 [ 765.233796][T24135] netlink_sendmsg+0x8b0/0xda0 [ 765.238642][T24135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.244626][T24135] ? selinux_socket_sendmsg+0x198/0x2f0 [ 765.250654][T24135] ____sys_sendmsg+0xa4d/0xbe0 [ 765.255445][T24135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.260707][T24135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 765.266007][T24135] ___sys_sendmsg+0x190/0x1e0 [ 765.270665][T24135] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.275911][T24135] ? futex_wait+0x11e/0x370 [ 765.280405][T24135] ? find_held_lock+0x2b/0x80 [ 765.285096][T24135] __sys_sendmsg+0x160/0x210 [ 765.289664][T24135] ? __pfx___sys_sendmsg+0x10/0x10 [ 765.294758][T24135] do_syscall_64+0x123/0x790 [ 765.299394][T24135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.305329][T24135] RIP: 0033:0x7fa976f9e159 [ 765.309727][T24135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.329780][T24135] RSP: 002b:00007fa977f21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.338282][T24135] RAX: ffffffffffffffda RBX: 00007fa977225fa0 RCX: 00007fa976f9e159 [ 765.346988][T24135] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 765.355421][T24135] RBP: 00007fa97703503b R08: 0000000000000000 R09: 0000000000000000 [ 765.363383][T24135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.371408][T24135] R13: 00007fa977226038 R14: 00007fa977225fa0 R15: 00007ffe806b7bf8 [ 765.379408][T24135] [ 765.382407][T24135] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 765.389664][T24135] CPU: 0 UID: 0 PID: 24135 Comm: syz.1.6748 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.400573][T24135] Tainted: [L]=SOFTLOCKUP [ 765.404879][T24135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 765.414919][T24135] Call Trace: [ 765.418189][T24135] [ 765.421098][T24135] dump_stack_lvl+0x100/0x190 [ 765.425759][T24135] vpanic+0x553/0x970 [ 765.429714][T24135] ? __pfx_vpanic+0x10/0x10 [ 765.434192][T24135] panic+0xd1/0xe0 [ 765.437887][T24135] ? __pfx_panic+0x10/0x10 [ 765.442279][T24135] check_panic_on_warn.cold+0x19/0x34 [ 765.447625][T24135] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 765.453143][T24135] __warn.cold+0x191/0x318 [ 765.457532][T24135] __report_bug+0x30f/0x440 [ 765.462007][T24135] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 765.467528][T24135] ? __pfx___report_bug+0x10/0x10 [ 765.472527][T24135] ? __pfx_rtnl_fill_ifinfo.isra.0+0x10/0x10 [ 765.478496][T24135] ? rcu_is_watching+0x13/0xc0 [ 765.483235][T24135] ? __pfx_memblock_mark_mirror+0x10/0x10 [ 765.488927][T24135] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 765.495488][T24135] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 765.501006][T24135] report_bug+0xb3/0x220 [ 765.505221][T24135] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 765.510745][T24135] handle_bug+0x16a/0x2a0 [ 765.515049][T24135] exc_invalid_op+0x17/0x50 [ 765.519526][T24135] asm_exc_invalid_op+0x1a/0x20 [ 765.524346][T24135] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 765.530472][T24135] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 60 51 65 f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 c8 7a f0 [ 765.550049][T24135] RSP: 0018:ffffc9000385eda8 EFLAGS: 00010287 [ 765.556085][T24135] RAX: 000000000000c466 RBX: 00000000ffffffa6 RCX: ffffc900047a1000 [ 765.564027][T24135] RDX: 0000000000080000 RSI: ffffffff89a6bfb0 RDI: ffff888029092580 [ 765.571968][T24135] RBP: ffff8880765e2a00 R08: 0000000000000005 R09: 0000000000000000 [ 765.579911][T24135] R10: 00000000ffffffa6 R11: 0000000000000001 R12: 0000000000000002 [ 765.587854][T24135] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807dc00108 [ 765.595804][T24135] ? rtmsg_ifinfo_build_skb+0x1c0/0x260 [ 765.601327][T24135] ? rtmsg_ifinfo_build_skb+0x1c0/0x260 [ 765.606849][T24135] rtnetlink_event+0x137/0x1f0 [ 765.611588][T24135] notifier_call_chain+0x99/0x3f0 [ 765.616591][T24135] call_netdevice_notifiers_info+0xbe/0x110 [ 765.622460][T24135] netif_disable_lro+0x3e9/0x660 [ 765.627372][T24135] ? __pfx_netif_disable_lro+0x10/0x10 [ 765.632801][T24135] ? lockdep_hardirqs_on+0x7d/0x110 [ 765.637971][T24135] ? __local_bh_enable_ip+0xa5/0x120 [ 765.643228][T24135] ? neigh_parms_alloc+0x45f/0x5e0 [ 765.648313][T24135] ipv6_add_dev+0xde0/0x1520 [ 765.652881][T24135] addrconf_notify+0x5db/0x1ba0 [ 765.657705][T24135] ? __pfx_tls_dev_event+0x10/0x10 [ 765.662794][T24135] ? __pfx_addrconf_notify+0x10/0x10 [ 765.668050][T24135] ? ip6mr_device_event+0x1c4/0x230 [ 765.673225][T24135] notifier_call_chain+0x99/0x3f0 [ 765.678226][T24135] call_netdevice_notifiers_info+0xbe/0x110 [ 765.684093][T24135] register_netdevice+0x1998/0x25a0 [ 765.689268][T24135] ? __pfx_register_netdevice+0x10/0x10 [ 765.694789][T24135] ? __pfx_macsec_newlink+0x10/0x10 [ 765.699964][T24135] macsec_newlink+0x4fb/0x1c50 [ 765.704708][T24135] ? __pfx_macsec_newlink+0x10/0x10 [ 765.709880][T24135] ? __kasan_kmalloc+0xaa/0xb0 [ 765.714621][T24135] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 765.720138][T24135] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 765.725246][T24135] ? validate_linkmsg+0x57c/0xba0 [ 765.730245][T24135] ? __pfx_validate_linkmsg+0x10/0x10 [ 765.735590][T24135] ? alloc_netdev_mqs+0x120a/0x15c0 [ 765.740764][T24135] ? rtnl_create_link+0xa4b/0xf80 [ 765.745761][T24135] ? __pfx_macsec_newlink+0x10/0x10 [ 765.750934][T24135] rtnl_newlink+0x1697/0x2620 [ 765.755592][T24135] ? __pfx_rtnl_newlink+0x10/0x10 [ 765.760591][T24135] ? avc_has_perm_noaudit+0x56/0x3b0 [ 765.765850][T24135] ? find_held_lock+0x2b/0x80 [ 765.770502][T24135] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 765.775847][T24135] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 765.781206][T24135] ? lock_acquire+0x1d1/0x380 [ 765.785855][T24135] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 765.790940][T24135] ? find_held_lock+0x2b/0x80 [ 765.795591][T24135] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 765.800673][T24135] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 765.805759][T24135] ? __pfx_rtnl_newlink+0x10/0x10 [ 765.810760][T24135] rtnetlink_rcv_msg+0x95e/0xe90 [ 765.815670][T24135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 765.821103][T24135] ? ref_tracker_free+0x37e/0x6c0 [ 765.826105][T24135] netlink_rcv_skb+0x159/0x420 [ 765.830842][T24135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 765.836273][T24135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 765.841534][T24135] ? netlink_deliver_tap+0x1ae/0xcc0 [ 765.846801][T24135] netlink_unicast+0x585/0x850 [ 765.851538][T24135] ? __pfx_netlink_unicast+0x10/0x10 [ 765.856801][T24135] netlink_sendmsg+0x8b0/0xda0 [ 765.861544][T24135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.866801][T24135] ? selinux_socket_sendmsg+0x198/0x2f0 [ 765.872327][T24135] ____sys_sendmsg+0xa4d/0xbe0 [ 765.877063][T24135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.882318][T24135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 765.887585][T24135] ___sys_sendmsg+0x190/0x1e0 [ 765.892238][T24135] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.897409][T24135] ? futex_wait+0x11e/0x370 [ 765.901894][T24135] ? find_held_lock+0x2b/0x80 [ 765.906556][T24135] __sys_sendmsg+0x160/0x210 [ 765.911119][T24135] ? __pfx___sys_sendmsg+0x10/0x10 [ 765.916208][T24135] do_syscall_64+0x123/0x790 [ 765.920774][T24135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.926639][T24135] RIP: 0033:0x7fa976f9e159 [ 765.931028][T24135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.950605][T24135] RSP: 002b:00007fa977f21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.958986][T24135] RAX: ffffffffffffffda RBX: 00007fa977225fa0 RCX: 00007fa976f9e159 [ 765.966927][T24135] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 765.974869][T24135] RBP: 00007fa97703503b R08: 0000000000000000 R09: 0000000000000000 [ 765.982809][T24135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.990749][T24135] R13: 00007fa977226038 R14: 00007fa977225fa0 R15: 00007ffe806b7bf8 [ 765.998701][T24135] [ 766.001743][T24135] Kernel Offset: disabled [ 766.006041][T24135] Rebooting in 86400 seconds..