last executing test programs: 4m2.360024051s ago: executing program 2 (id=4517): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff7, 0x40, &(0x7f0000000000)={0x40, 0x1, 0x3ff, 0x2}, 0x8, 0x203ffffd, 0x300, 0x0, 0x3, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='10', 0x2) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x22004002}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) 4m2.308622961s ago: executing program 2 (id=4518): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) 3m58.637429331s ago: executing program 2 (id=4528): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0xffff}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x5, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3m55.242116141s ago: executing program 2 (id=4541): syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x82, 0x48) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x800, 0x8204, 0xff, 0x6, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e20, 0x200, @local, 0x44}}, 0x81, 0x1}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(0x0, 0x8000, 0xd02) rseq(0x0, 0x0, 0x0, 0x0) sync() mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ubifs\x00', 0x208400, 0x0) 3m53.375415698s ago: executing program 2 (id=4543): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @private1, 0x101}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) 3m52.258663179s ago: executing program 2 (id=4546): sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x2ac, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x80}}}}, [@NL80211_ATTR_TESTDATA={0x95, 0x45, "ccc04ce91ef49be7d1fd2e277b1144fdf84b89301019375614a457e7292acd777b819b3456d50b66085ac5d731c5e3dec417e27febfae98f001c1bd615420b182479fcde18c7d76608fedbec402e58541560f0a2600da0f341a2e23b190a84875d0606584ee951466bb5fe5ba94a19896351c54866788a17c14c0b02648a596c1fe3f86d43d456f366c979b1347f2ce9d5"}, @NL80211_ATTR_TESTDATA={0x51, 0x45, "402897fa2ba64138383acb365973beb4c85a984d16df98849d0715f17a4ca5a7b8497df6fd7e708e9cd622569994a46c92183e1fb45c8eeb7c23301e8313e6fcb909f71df4b38920f16075e60c"}, @NL80211_ATTR_TESTDATA={0xed, 0x45, "710d08a4fe069dfc7cb630818127fa6062771dee25f062cae7201cf0c7926db2e0badfa87835a17fa0874e800e26ff21b50bb0cc69ff6068f68038447fa552ac18e59a45eb51c9afc36e9c775f7baf5e4efcc7614b87925c764b6991ee876b66f281b717bcd56909a5504e83427dba9827beaaa2358267abaee0fd69330d71ac7936fffcfe3403b6698350ced29c0d06f13179ee3e6b10d326442ef33254ba9b55754ffdf5859141db650b93257251b16370350b8b3e99050f0619f1e21c2438a6c979ac5439a70c515092c9b19af11df77bdfc2427a8f5eef5661b9f6021d207b541e74f3a6f5d62f"}, @NL80211_ATTR_TESTDATA={0x2d, 0x45, "205eaa37847bbadc41a3388848900b1a9a1d0748b85b17bfc52a67b44db487086702f90652999cfed9"}, @NL80211_ATTR_TESTDATA={0x78, 0x45, "991d970b5bf21981b1a938f710a9dbae215c5f60138918da0f8d3922c6910da8795f0cd11d9a0c844d7863a6f35da48d214cb269f9ccdd25b6f52c659281e205f5a1c11a369c7af0b28197338ad9c2cf8baa93a9cdd3e9cff690d1be570bbcb5444b0e0869fda76d9ac9f9d49e5918416d0a6e11"}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x5ea, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3m51.458968814s ago: executing program 32 (id=4546): sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x2ac, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x80}}}}, [@NL80211_ATTR_TESTDATA={0x95, 0x45, "ccc04ce91ef49be7d1fd2e277b1144fdf84b89301019375614a457e7292acd777b819b3456d50b66085ac5d731c5e3dec417e27febfae98f001c1bd615420b182479fcde18c7d76608fedbec402e58541560f0a2600da0f341a2e23b190a84875d0606584ee951466bb5fe5ba94a19896351c54866788a17c14c0b02648a596c1fe3f86d43d456f366c979b1347f2ce9d5"}, @NL80211_ATTR_TESTDATA={0x51, 0x45, "402897fa2ba64138383acb365973beb4c85a984d16df98849d0715f17a4ca5a7b8497df6fd7e708e9cd622569994a46c92183e1fb45c8eeb7c23301e8313e6fcb909f71df4b38920f16075e60c"}, @NL80211_ATTR_TESTDATA={0xed, 0x45, "710d08a4fe069dfc7cb630818127fa6062771dee25f062cae7201cf0c7926db2e0badfa87835a17fa0874e800e26ff21b50bb0cc69ff6068f68038447fa552ac18e59a45eb51c9afc36e9c775f7baf5e4efcc7614b87925c764b6991ee876b66f281b717bcd56909a5504e83427dba9827beaaa2358267abaee0fd69330d71ac7936fffcfe3403b6698350ced29c0d06f13179ee3e6b10d326442ef33254ba9b55754ffdf5859141db650b93257251b16370350b8b3e99050f0619f1e21c2438a6c979ac5439a70c515092c9b19af11df77bdfc2427a8f5eef5661b9f6021d207b541e74f3a6f5d62f"}, @NL80211_ATTR_TESTDATA={0x2d, 0x45, "205eaa37847bbadc41a3388848900b1a9a1d0748b85b17bfc52a67b44db487086702f90652999cfed9"}, @NL80211_ATTR_TESTDATA={0x78, 0x45, "991d970b5bf21981b1a938f710a9dbae215c5f60138918da0f8d3922c6910da8795f0cd11d9a0c844d7863a6f35da48d214cb269f9ccdd25b6f52c659281e205f5a1c11a369c7af0b28197338ad9c2cf8baa93a9cdd3e9cff690d1be570bbcb5444b0e0869fda76d9ac9f9d49e5918416d0a6e11"}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x5ea, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 26.49120075s ago: executing program 3 (id=5480): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 26.103707808s ago: executing program 3 (id=5484): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x7, 0x106) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfa", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x8) 23.171657376s ago: executing program 3 (id=5488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500"], 0xc0}}, 0x0) 22.138657438s ago: executing program 3 (id=5490): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0xfe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1) 21.027004859s ago: executing program 3 (id=5495): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 16.324863341s ago: executing program 3 (id=5504): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0x4, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x7fff, 0x7, 0xffffffff, 0x1ff, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x5, 0xffffffff, 0xfffffffa, 0x4, 0x6, 0xa2d8, 0x5, 0x1000, 0x8, 0x471, 0x7, 0x384, 0x8001, 0x4]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4c, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYRESHEX, @ANYBLOB=',noxattr,ac', @ANYBLOB=',mensure']) 11.896822439s ago: executing program 5 (id=5521): prlimit64(0x0, 0x3, &(0x7f0000000140)={0x5, 0x80000100408b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r1, 0x6000809) sendfile(r0, r1, 0x0, 0x7ffff004) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x0, 0x0) 10.821429621s ago: executing program 5 (id=5523): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x3, 0xa}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x156, 0x0) r3 = dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 7.824187852s ago: executing program 5 (id=5535): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r1, 0x0, 0xea, 0x2) 5.560609405s ago: executing program 4 (id=5544): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/85, 0x55}, 0x2}], 0x1, 0x2122, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000000)={0x0, 0x0, 0x0}) unshare(0x2c020400) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000100), 0x1000000, 0x2000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0xc0405627, &(0x7f0000000180)={0x3, 0x980900, 0x1}) setsockopt$inet6_udp_int(r7, 0x11, 0x66, 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x8}, {r2, 0x2cfc08c20dafc34e}, {r7, 0xa8}, {r0, 0xf102}], 0x4, 0x8000007) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) 4.416490598s ago: executing program 5 (id=5547): prlimit64(0x0, 0x3, &(0x7f0000000140)={0x5, 0x80000100408b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r1, 0x6000809) sendfile(r0, r1, 0x0, 0x7ffff004) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x0, 0x0) 4.365128223s ago: executing program 1 (id=5548): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000480)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r1, 0x5437, 0x0) 3.568590569s ago: executing program 5 (id=5549): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="2f045ee5fe9249ed05b0ec37a721ec81ab367c04eced1ffc7fbe3af84e19dbc6046b923619a06e0b6ae2ebf0ab657d32cff916f0e3da24e4f26306f1c4527a44d729802f3e43485391176c630b0880ed637f5d351048b4203d62b3d96114252d70b4dd8bad5a321aa399", 0x6a}, {&(0x7f00000001c0)="2cf70e049d7ca10c2baa62463c54f8109cb8795a3d7b326bb81c6bc290875437b4a5a3bcbd199c2cbdd4a149005a94946713c9081c76822a626d60fcfac2830c3f1d48ca7bdc14c329b2602e5bb1e920ceeb1a", 0x53}, {&(0x7f0000000380)="31d72a6285c9f0fd", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="eb8a7649f11eee0c8a704e458b76ad37e1361c43b4078ae926cbf9f823f27bdb489f6255019cad0e6f95137d3fcf", 0x2e}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef3416e47adfd7347bbe95903fa873fd7fee7e7e8c22d8b2ff575a", 0xcb}, {&(0x7f0000000880)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b2a9c3003a5b2dc3dd324d843512a5791747534054eb682e05b38c2d19db77d13ec6bbee3da919aa8147271b5612c545cf95483beb486531e1289271e9570708af6a5f7263238f654704ccd4235ee47f8511e5e3fe7c89d3bf43af863590301f1ef78", 0x7f}, {0x0}, {&(0x7f0000000a40)="8a0e0f88ac", 0x5}, {&(0x7f0000000a80)="0e5f5a2ebf89", 0x6}], 0x7}}, {{&(0x7f0000000b40)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}], 0x1, &(0x7f0000000c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdd}}], 0x48}}, {{&(0x7f0000000cc0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464c9f5d825e803f7ff71", 0x18}], 0x2, &(0x7f0000000ec0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6b5d62dc43b74cf", 0xd8}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b16437f374d3cd3b6f7718fcf2aeed196dde83e668def7840db0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6c353b02ff314dbed4b08fd40d65c1364a08ed9ca28ce3bdaa88c77945aec718de9e6f793256366da40bd3949ed0a162c747f979f5ad6bdaf8d9230a6a294dbf3330b81f715b1ef502a434a85", 0xb4}, {&(0x7f00000011c0)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63c6cf8db41f42a2d02b09e37c75fbdb3f50108e5d5d135440a4cde064d28c9c30b8c59ebfcf1b3804b16606a289938e5d310359fb8ca279e501d6edc0c7b4cc2419f0bf92a5aea2e8b60b95ffd2c82d9932a22d7a8eb2346247776a523a5d0066bd5f7869e4d24bf30e366fb39c5c3091e615339a415b3efcf073205576f86fdc7e98a12fff979ba11c76a43e889e9bd44ae74e058b5e8e2d8028521a084e135600b4c3e6770b8ff8e26dbd3a010ed5e3bb894cdbfd1b53f85f80", 0xd8}, {&(0x7f00000012c0)="99b8979ec0fd5f721da667032cfc1f89a347faf9add0ff5faf7646e11e7526e29ac69c528df4de7e7bf50f40936336f6ab62d3b3e3", 0x35}, {&(0x7f0000001300)="88c28a2a8af39ce81f3b350e8d029b409bacf181a71c0d4559cb976dff2a1a381136daa1f0d4151e9203490eb924a37eb0c0501b733da3f2fed08209d65894a599168cb9e265b8cad73cac6480b00997024978d84171219077b3bd", 0x5b}, {&(0x7f0000001380)="19a8e41759f18c32758fc71f3c2d66a728219818f0ffe3e8601b4deb0e905eacc062d86a8cb2790444792b482646bd43f7d5b62bad22a5e981f01fafa9d5d5dd164970fe66bd83ef7c79a8cc8a7a2761acf1985d9318f84e8deddc763e737033da7dd91e7afbb686a0e8c2828747f37cc0aeca57c26f787cdb0023b2267521a6663e6aa1b317d646c4eb7e2f254bf8c04e1d4314fda26cf01f52bc5cc77b3850478fae6e0aea2ede6b343681bfe61884d63326b190c6043280147c7928a79c77e892d4c110585b", 0xc7}, {&(0x7f0000001480)="8e47d5ad9a73a9b1d76b0d98507e6646c535982501ec2f2475c6723f6c9d81ed7780965ae4d82e89f5f53b13a72f181d3617eaaad5b755ec785a", 0x3a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000016c0)="7e8e8941827e99d258271d4d2b0e7660010d61882519e06baa1a850606a2a3942c504b347aa23e34b74b8020c507441738596c2678ad71f8f1996adbe1b3e3f20085944878b7fed8f89226553337ea273b74b41528705e42b6fcc6f430fc833ababd", 0x62}], 0x1}}], 0x6, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.355767829s ago: executing program 1 (id=5550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001c00)={0x2c, 0x5, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x800) 3.260425358s ago: executing program 0 (id=5551): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0xfe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1) 3.254262138s ago: executing program 1 (id=5552): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 3.087766039s ago: executing program 1 (id=5553): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) pipe(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xa) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 2.884658064s ago: executing program 0 (id=5554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x40, 0x117, 0x2, 0x28, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x58, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8a}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.650411581s ago: executing program 4 (id=5555): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x3, 0xa}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x156, 0x0) r3 = dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 2.432088595s ago: executing program 0 (id=5556): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x14, 0x2, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x208}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x8400}}, 0x44) 2.239757853s ago: executing program 5 (id=5557): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r1, 0x0, 0xea, 0x2) 2.20461552s ago: executing program 1 (id=5558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x5, 0x0, 0x0, 0x4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 1.754664766s ago: executing program 0 (id=5559): prlimit64(0x0, 0x3, &(0x7f0000000140)={0x5, 0x80000100408b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r1, 0x6000809) sendfile(r0, r1, 0x0, 0x7ffff004) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x0, 0x0) 1.623248603s ago: executing program 4 (id=5560): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 1.206957201s ago: executing program 1 (id=5561): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'wlan1\x00', {}, 0x26}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000500)={0x2, @raw_data="177df10503033d16f4cb837f0e40acf1d91a7d3e3f72e9daa3cc63ab963a33dbab4ba9e6d4d14b661c5e5fc03fba082eb5bff0fe9a96762396c811ddc9c8e85b080129d996a8c60aa878a8c8f967e29abe64c4184dcd4d7981714aac7c12cd3fd74daa37627f348c7c79044c5d2d3577f39be5c22258ed8ccf109c3f07a0de3952174f7b06fef27e332d6776d9aa57ffa7aa3de0e0c46cf0395883f565330d0d65f515e2ef20d41426dcb59aea192500427de510cb0d8f3aaa8a6c0f7ddadad1550aeab7cbe3d10a"}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r5) 571.982762ms ago: executing program 4 (id=5562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0x40, 0x117, 0x2, 0x26, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x58, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 481.949371ms ago: executing program 0 (id=5563): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) write(r0, &(0x7f0000000440), 0x0) 179.654947ms ago: executing program 0 (id=5564): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0xfe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1) 153.193076ms ago: executing program 4 (id=5565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001c00)={0x28, 0x5, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x800) 0s ago: executing program 4 (id=5566): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="02002cbd7000fedbdf2500000000087fa4d2a0000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='(^\xbb-\x00', 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xffeffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000002, 0x800, 0x0, 0x0, 0x2, 0x0, 0x20000]}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getsockopt$inet_mreqsrc(r10, 0x0, 0x26, &(0x7f0000000040)={@rand_addr, @loopback, @empty}, &(0x7f0000000280)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7400000010000104000009000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) kernel console output (not intermixed with test programs): 00000000000008 R08: 00007fcedd610000 R09: 00007fcedd612000 [ 1535.126669][ C0] R10: 000000008aee2673 R11: 000000000000000c R12: 00007fcedd626128 [ 1535.126680][ C0] R13: 0000000000033eeb R14: ffffffff8aee226f R15: 00007fcede155720 [ 1535.126691][ C0] ? vlan_device_event+0x12ef/0x18e0 [ 1535.126714][ C0] ? register_vlan_dev+0x341/0x910 [ 1535.126737][ C0] ? vlan_device_event+0x16ef/0x18e0 [ 1535.126762][ C0] ? vlan_device_event+0x12ef/0x18e0 [ 1535.126781][ C0] ? register_vlan_dev+0x341/0x910 [ 1535.126806][ C0] [ 1535.128372][T18591] CPU: 0 UID: 0 PID: 18591 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1535.128395][T18591] Tainted: [L]=SOFTLOCKUP [ 1535.128401][T18591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1535.128409][T18591] Call Trace: [ 1535.128415][T18591] [ 1535.128421][T18591] dump_stack_lvl+0x100/0x190 [ 1535.128443][T18591] should_fail_ex.cold+0x5/0xa [ 1535.128464][T18591] should_failslab+0xc2/0x120 [ 1535.128485][T18591] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1535.128504][T18591] ? anon_vma_fork+0x8d/0x6b0 [ 1535.128532][T18591] anon_vma_fork+0x8d/0x6b0 [ 1535.128556][T18591] ? vm_area_dup+0x59d/0x8e0 [ 1535.128581][T18591] dup_mmap+0x143e/0x21b0 [ 1535.128612][T18591] ? __pfx_dup_mmap+0x10/0x10 [ 1535.128633][T18591] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1535.128654][T18591] ? __lock_acquire+0x49f/0x1a40 [ 1535.128674][T18591] ? find_held_lock+0x2b/0x80 [ 1535.128698][T18591] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1535.128736][T18591] copy_process+0x4588/0x8030 [ 1535.128776][T18591] ? __pfx_copy_process+0x10/0x10 [ 1535.128797][T18591] ? do_raw_spin_lock+0x128/0x260 [ 1535.128828][T18591] kernel_clone+0x176/0x9d0 [ 1535.128851][T18591] ? __pfx_kernel_clone+0x10/0x10 [ 1535.128880][T18591] ? find_held_lock+0x2b/0x80 [ 1535.128903][T18591] ? __might_fault+0xc5/0x140 [ 1535.128922][T18591] __do_sys_clone+0xd9/0x120 [ 1535.128943][T18591] ? __pfx___do_sys_clone+0x10/0x10 [ 1535.128984][T18591] do_syscall_64+0x115/0x870 [ 1535.129001][T18591] ? clear_bhb_loop+0x40/0x90 [ 1535.129020][T18591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.129036][T18591] RIP: 0033:0x7f32f55c6912 [ 1535.129050][T18591] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1535.129064][T18591] RSP: 002b:00007ffcac52f590 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1535.129079][T18591] RAX: ffffffffffffffda RBX: 00007ffcac52f590 RCX: 00007f32f55c6912 [ 1535.129089][T18591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1535.129099][T18591] RBP: 00007ffcac52f71c R08: 0000000000000000 R09: 0000000000000001 [ 1535.129108][T18591] R10: 00005555786757d0 R11: 0000000000000246 R12: 0000000000000001 [ 1535.129118][T18591] R13: 00000000000927c0 R14: 0000000000176c2f R15: 00007ffcac52f770 [ 1535.129140][T18591] [ 1535.171310][T19107] FAULT_INJECTION: forcing a failure. [ 1535.171310][T19107] name failslab, interval 1, probability 1, space 0, times 6 [ 1535.175270][T25573] CPU: 1 UID: 0 PID: 25573 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1535.175294][T25573] Tainted: [L]=SOFTLOCKUP [ 1535.175300][T25573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1535.175310][T25573] Call Trace: [ 1535.175316][T25573] [ 1535.175322][T25573] dump_stack_lvl+0x100/0x190 [ 1535.175347][T25573] should_fail_ex.cold+0x5/0xa [ 1535.175368][T25573] should_failslab+0xc2/0x120 [ 1535.175389][T25573] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1535.175410][T25573] ? kernel_text_address+0x8d/0x100 [ 1535.175429][T25573] ? kstrdup_const+0x63/0x80 [ 1535.175450][T25573] kstrdup+0x51/0xe0 [ 1535.175468][T25573] kstrdup_const+0x63/0x80 [ 1535.175484][T25573] __kernfs_new_node+0x9b/0xa10 [ 1535.175504][T25573] ? stack_trace_save+0x8e/0xc0 [ 1535.175520][T25573] ? __pfx_stack_trace_save+0x10/0x10 [ 1535.175537][T25573] ? __pfx___kernfs_new_node+0x10/0x10 [ 1535.175560][T25573] ? find_held_lock+0x2b/0x80 [ 1535.175584][T25573] ? kernfs_root+0xee/0x2a0 [ 1535.175599][T25573] ? kernfs_root+0xee/0x2a0 [ 1535.175619][T25573] kernfs_create_dir_ns+0xa6/0x2b0 [ 1535.175642][T25573] sysfs_create_dir_ns+0x13a/0x2b0 [ 1535.175668][T25573] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1535.175692][T25573] ? find_held_lock+0x2b/0x80 [ 1535.175715][T25573] ? kobject_add_internal+0x25f/0x930 [ 1535.175738][T25573] ? kobject_add_internal+0x25f/0x930 [ 1535.175761][T25573] ? net_namespace+0x12/0x50 [ 1535.175784][T25573] ? device_namespace+0x76/0xa0 [ 1535.175808][T25573] kobject_add_internal+0x2c8/0x930 [ 1535.175834][T25573] kobject_add+0x16a/0x1e0 [ 1535.175856][T25573] ? __pfx_kobject_add+0x10/0x10 [ 1535.175879][T25573] ? get_device_parent+0x1b3/0x4c0 [ 1535.175900][T25573] ? kobject_put+0xb9/0x640 [ 1535.175923][T25573] ? device_add+0xc4d/0x1970 [ 1535.175947][T25573] device_add+0x294/0x1970 [ 1535.175969][T25573] ? __pfx_dev_set_name+0x10/0x10 [ 1535.175992][T25573] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1535.176011][T25573] ? __pfx_device_add+0x10/0x10 [ 1535.176033][T25573] ? lockdep_init_map_type+0x5c/0x250 [ 1535.176053][T25573] ? __init_waitqueue_head+0xca/0x150 [ 1535.176079][T25573] netdev_register_kobject+0x1a9/0x3d0 [ 1535.176107][T25573] register_netdevice+0x15b6/0x25a0 [ 1535.176133][T25573] ? __pfx_register_netdevice+0x10/0x10 [ 1535.176156][T25573] ? timer_init_key+0x150/0x310 [ 1535.176177][T25573] hsr_dev_finalize+0x6e4/0xd00 [ 1535.176206][T25573] hsr_newlink+0x459/0xb00 [ 1535.176229][T25573] ? __pfx_hsr_newlink+0x10/0x10 [ 1535.176258][T25573] ? rtnl_create_link+0xa4b/0xf80 [ 1535.176281][T25573] ? __pfx_hsr_newlink+0x10/0x10 [ 1535.176303][T25573] rtnl_newlink+0x1499/0x2380 [ 1535.176331][T25573] ? __pfx_rtnl_newlink+0x10/0x10 [ 1535.176355][T25573] ? find_held_lock+0x2b/0x80 [ 1535.176378][T25573] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1535.176396][T25573] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1535.176418][T25573] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1535.176457][T25573] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1535.176477][T25573] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1535.176499][T25573] ? __pfx_rtnl_newlink+0x10/0x10 [ 1535.176520][T25573] rtnetlink_rcv_msg+0x95e/0xe90 [ 1535.176543][T25573] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1535.176568][T25573] ? __lock_acquire+0x49f/0x1a40 [ 1535.176591][T25573] netlink_rcv_skb+0x159/0x420 [ 1535.176608][T25573] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1535.176631][T25573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1535.176655][T25573] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1535.176684][T25573] netlink_unicast+0x585/0x850 [ 1535.176703][T25573] ? __pfx_netlink_unicast+0x10/0x10 [ 1535.176719][T25573] ? __pfx_sock_has_perm+0x10/0x10 [ 1535.176745][T25573] netlink_sendmsg+0x8b0/0xda0 [ 1535.176764][T25573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1535.176782][T25573] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1535.176809][T25573] __sys_sendto+0x48b/0x4e0 [ 1535.176826][T25573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1535.176842][T25573] ? __pfx___sys_sendto+0x10/0x10 [ 1535.176877][T25573] ? __pfx_fput_close_sync+0x10/0x10 [ 1535.176902][T25573] __x64_sys_sendto+0xe0/0x1c0 [ 1535.176919][T25573] ? do_syscall_64+0x90/0x870 [ 1535.176936][T25573] ? lockdep_hardirqs_on+0x78/0x100 [ 1535.176953][T25573] do_syscall_64+0x115/0x870 [ 1535.176970][T25573] ? clear_bhb_loop+0x40/0x90 [ 1535.176989][T25573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.177005][T25573] RIP: 0033:0x7f777595e6ce [ 1535.177020][T25573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1535.177035][T25573] RSP: 002b:00007ffc47540b88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1535.177051][T25573] RAX: ffffffffffffffda RBX: 0000555573a69500 RCX: 00007f777595e6ce [ 1535.177061][T25573] RDX: 0000000000000058 RSI: 00007f7776754670 RDI: 0000000000000003 [ 1535.177071][T25573] RBP: 0000000000000001 R08: 00007ffc47540c04 R09: 000000000000000c [ 1535.177081][T25573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1535.177090][T25573] R13: 0000000000000000 R14: 00007f7776754670 R15: 0000000000000000 [ 1535.177111][T25573] [ 1535.177134][T25573] kobject: kobject_add_internal failed for hsr0 (error: -12 parent: net) [ 1535.185804][T19107] CPU: 0 UID: 0 PID: 19107 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1535.185829][T19107] Tainted: [L]=SOFTLOCKUP [ 1535.185835][T19107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1535.185844][T19107] Call Trace: [ 1535.185849][T19107] [ 1535.185856][T19107] dump_stack_lvl+0x100/0x190 [ 1535.185879][T19107] should_fail_ex.cold+0x5/0xa [ 1535.185899][T19107] should_failslab+0xc2/0x120 [ 1535.185921][T19107] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 1535.185941][T19107] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1535.185960][T19107] ? __get_vm_area_node+0x101/0x330 [ 1535.185984][T19107] __get_vm_area_node+0x101/0x330 [ 1535.186008][T19107] __vmalloc_node_range_noprof+0x228/0x1630 [ 1535.186031][T19107] ? xt_counters_alloc+0x4c/0x70 [ 1535.186050][T19107] ? xt_check_target+0x13d/0x1c0 [ 1535.186072][T19107] ? xt_counters_alloc+0x4c/0x70 [ 1535.186091][T19107] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 1535.186115][T19107] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1535.186147][T19107] ? xt_counters_alloc+0x4c/0x70 [ 1535.186163][T19107] __vmalloc_node_noprof+0xad/0xf0 [ 1535.186185][T19107] ? xt_counters_alloc+0x4c/0x70 [ 1535.186204][T19107] xt_counters_alloc+0x4c/0x70 [ 1535.186221][T19107] __do_replace+0x97/0x990 [ 1535.186243][T19107] ? __pfx___do_replace+0x10/0x10 [ 1535.186266][T19107] do_ip6t_set_ctl+0xa5f/0xd00 [ 1535.186283][T19107] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1535.186302][T19107] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1535.186323][T19107] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1535.186340][T19107] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1535.186361][T19107] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1535.186388][T19107] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1535.186409][T19107] nf_setsockopt+0x8d/0xf0 [ 1535.186428][T19107] ipv6_setsockopt+0x135/0x170 [ 1535.186449][T19107] tcp_setsockopt+0xa7/0x100 [ 1535.186472][T19107] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1535.186497][T19107] do_sock_setsockopt+0xf3/0x1d0 [ 1535.186522][T19107] __sys_setsockopt+0x195/0x220 [ 1535.186545][T19107] __x64_sys_setsockopt+0xbd/0x160 [ 1535.186563][T19107] ? do_syscall_64+0x90/0x870 [ 1535.186580][T19107] ? lockdep_hardirqs_on+0x78/0x100 [ 1535.186597][T19107] do_syscall_64+0x115/0x870 [ 1535.186613][T19107] ? clear_bhb_loop+0x40/0x90 [ 1535.186632][T19107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.186649][T19107] RIP: 0033:0x7fcedd39f6da [ 1535.186662][T19107] Code: 48 83 ec 10 48 63 c9 48 63 ff 45 89 c9 6a 2c e8 6c 99 fb ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 1535.186677][T19107] RSP: 002b:00007ffc77b81288 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 1535.186693][T19107] RAX: ffffffffffffffda RBX: 00007ffc77b81310 RCX: 00007fcedd39f6da [ 1535.186703][T19107] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1535.186712][T19107] RBP: 0000000000000003 R08: 0000000000000558 R09: 0000000000000000 [ 1535.186722][T19107] R10: 00007fcedd5ecbe0 R11: 0000000000000202 R12: 00007fcedd5ecb80 [ 1535.186731][T19107] R13: 00007ffc77b812ac R14: 0000000000000000 R15: 00007fcedd5edfc0 [ 1535.186758][T19107] [ 1535.187881][T19107] syz-executor: vmalloc error: size 96, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1535.192009][T25573] FAULT_INJECTION: forcing a failure. [ 1535.192009][T25573] name failslab, interval 1, probability 1, space 0, times 4 [ 1535.204490][T19107] ,cpuset= [ 1535.211188][T25573] CPU: 1 UID: 0 PID: 25573 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1535.211214][T25573] Tainted: [L]=SOFTLOCKUP [ 1535.211220][T25573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1535.211230][T25573] Call Trace: [ 1535.211236][T25573] [ 1535.211247][T25573] dump_stack_lvl+0x100/0x190 [ 1535.211271][T25573] should_fail_ex.cold+0x5/0xa [ 1535.211291][T25573] should_failslab+0xc2/0x120 [ 1535.211313][T25573] __kmalloc_node_noprof+0x101/0x830 [ 1535.211330][T25573] ? do_syscall_64+0x115/0x870 [ 1535.211347][T25573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.211364][T25573] ? qdisc_alloc+0xbb/0xb30 [ 1535.211389][T25573] qdisc_alloc+0xbb/0xb30 [ 1535.211414][T25573] qdisc_create_dflt+0x93/0x490 [ 1535.211437][T25573] dev_activate+0x64f/0xce0 [ 1535.211462][T25573] ? __pfx_dev_activate+0x10/0x10 [ 1535.211486][T25573] ? __local_bh_enable_ip+0x9e/0x120 [ 1535.211510][T25573] __dev_open+0x490/0x8f0 [ 1535.211532][T25573] ? __pfx___dev_open+0x10/0x10 [ 1535.211556][T25573] ? __local_bh_enable_ip+0x9e/0x120 [ 1535.211579][T25573] __dev_change_flags+0x596/0x850 [ 1535.211599][T25573] ? __pfx___dev_change_flags+0x10/0x10 [ 1535.211617][T25573] ? validate_linkmsg+0x57c/0xba0 [ 1535.211636][T25573] ? kernel_text_address+0x8d/0x100 [ 1535.211653][T25573] ? is_bpf_text_address+0x94/0x1a0 [ 1535.211676][T25573] ? __pfx_validate_linkmsg+0x10/0x10 [ 1535.211698][T25573] netif_change_flags+0x8d/0x160 [ 1535.211719][T25573] do_setlink.isra.0+0x1ac4/0x3e60 [ 1535.211741][T25573] ? stack_trace_save+0x8e/0xc0 [ 1535.211761][T25573] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 1535.211785][T25573] ? __lock_acquire+0x49f/0x1a40 [ 1535.211812][T25573] ? lock_acquire+0x1b9/0x370 [ 1535.211835][T25573] ? rcu_is_watching+0x12/0xc0 [ 1535.211858][T25573] ? trace_contention_end+0x126/0x160 [ 1535.211879][T25573] ? __mutex_lock+0x26d/0x1bd0 [ 1535.211897][T25573] ? rtnl_newlink+0x8bb/0x2380 [ 1535.211921][T25573] ? __pfx___mutex_lock+0x10/0x10 [ 1535.211939][T25573] ? rcu_is_watching+0x12/0xc0 [ 1535.211961][T25573] ? cap_capable+0x107/0x430 [ 1535.211994][T25573] rtnl_newlink+0x11c2/0x2380 [ 1535.212021][T25573] ? __pfx_rtnl_newlink+0x10/0x10 [ 1535.212040][T25573] ? find_held_lock+0x2b/0x80 [ 1535.212063][T25573] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1535.212082][T25573] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1535.212104][T25573] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1535.212128][T25573] ? __lock_acquire+0x49f/0x1a40 [ 1535.212158][T25573] ? find_held_lock+0x2b/0x80 [ 1535.212180][T25573] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1535.212200][T25573] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1535.212222][T25573] ? __pfx_rtnl_newlink+0x10/0x10 [ 1535.212248][T25573] rtnetlink_rcv_msg+0x95e/0xe90 [ 1535.212271][T25573] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1535.212296][T25573] ? __lock_acquire+0x49f/0x1a40 [ 1535.212319][T25573] netlink_rcv_skb+0x159/0x420 [ 1535.212336][T25573] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1535.212358][T25573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1535.212382][T25573] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1535.212410][T25573] netlink_unicast+0x585/0x850 [ 1535.212429][T25573] ? __pfx_netlink_unicast+0x10/0x10 [ 1535.212445][T25573] ? __pfx_sock_has_perm+0x10/0x10 [ 1535.212470][T25573] netlink_sendmsg+0x8b0/0xda0 [ 1535.212490][T25573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1535.212508][T25573] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1535.212535][T25573] __sys_sendto+0x48b/0x4e0 [ 1535.212551][T25573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1535.212568][T25573] ? __pfx___sys_sendto+0x10/0x10 [ 1535.212602][T25573] ? __pfx_fput_close_sync+0x10/0x10 [ 1535.212631][T25573] __x64_sys_sendto+0xe0/0x1c0 [ 1535.212648][T25573] ? do_syscall_64+0x90/0x870 [ 1535.212665][T25573] ? lockdep_hardirqs_on+0x78/0x100 [ 1535.212682][T25573] do_syscall_64+0x115/0x870 [ 1535.212698][T25573] ? clear_bhb_loop+0x40/0x90 [ 1535.212718][T25573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.212734][T25573] RIP: 0033:0x7f777595e6ce [ 1535.212748][T25573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1535.212763][T25573] RSP: 002b:00007ffc47540b08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1535.212779][T25573] RAX: ffffffffffffffda RBX: 0000555573a69500 RCX: 00007f777595e6ce [ 1535.212790][T25573] RDX: 0000000000000020 RSI: 00007f7776754670 RDI: 0000000000000003 [ 1535.212800][T25573] RBP: 0000000000000001 R08: 00007ffc47540b84 R09: 000000000000000c [ 1535.212809][T25573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1535.212819][T25573] R13: 0000000000000000 R14: 00007f7776754670 R15: 0000000000000000 [ 1535.212840][T25573] [ 1535.314287][ T5629] Bluetooth: hci3: command tx timeout [ 1535.323240][ T36] FAULT_INJECTION: forcing a failure. [ 1535.323240][ T36] name failslab, interval 1, probability 1, space 0, times 1 [ 1535.324534][T19107] / [ 1535.328901][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1535.328926][ T36] Tainted: [L]=SOFTLOCKUP [ 1535.328931][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1535.328942][ T36] Workqueue: events_unbound nsim_dev_trap_report_work [ 1535.328967][ T36] Call Trace: [ 1535.328973][ T36] [ 1535.328979][ T36] dump_stack_lvl+0x100/0x190 [ 1535.329000][ T36] should_fail_ex.cold+0x5/0xa [ 1535.329021][ T36] should_failslab+0xc2/0x120 [ 1535.329042][ T36] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1535.329068][ T36] ? __alloc_skb+0x140/0x710 [ 1535.329091][ T36] __alloc_skb+0x140/0x710 [ 1535.329108][ T36] ? __alloc_skb+0x5b7/0x710 [ 1535.329125][ T36] ? __pfx___alloc_skb+0x10/0x10 [ 1535.329145][ T36] ? kfree_skbmem+0x19f/0x210 [ 1535.329171][ T36] nsim_dev_trap_report_work+0x2af/0xd20 [ 1535.329203][ T36] process_one_work+0xa23/0x1940 [ 1535.329230][ T36] ? __pfx_process_one_work+0x10/0x10 [ 1535.329254][ T36] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1535.329276][ T36] worker_thread+0x5ef/0xe50 [ 1535.329301][ T36] ? kthread+0x13a/0x450 [ 1535.329315][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1535.329331][ T36] kthread+0x370/0x450 [ 1535.329345][ T36] ? __pfx_kthread+0x10/0x10 [ 1535.329362][ T36] ret_from_fork+0x72b/0xd50 [ 1535.329386][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 1535.329409][ T36] ? __switch_to+0x800/0x10f0 [ 1535.329426][ T36] ? __pfx_kthread+0x10/0x10 [ 1535.329442][ T36] ret_from_fork_asm+0x1a/0x30 [ 1535.329476][ T36] [ 1537.128799][T16447] Bluetooth: hci2: command tx timeout [ 1537.156426][T19107] ,mems_allowed=0-1 [ 1537.164034][T19107] CPU: 1 UID: 0 PID: 19107 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1537.164065][T19107] Tainted: [L]=SOFTLOCKUP [ 1537.164072][T19107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1537.164083][T19107] Call Trace: [ 1537.164089][T19107] [ 1537.164096][T19107] dump_stack_lvl+0x100/0x190 [ 1537.164124][T19107] warn_alloc.cold+0x94/0xa8 [ 1537.164145][T19107] ? __pfx_warn_alloc+0x10/0x10 [ 1537.164162][T19107] ? __kasan_kmalloc+0x8a/0xb0 [ 1537.164186][T19107] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1537.164214][T19107] ? __get_vm_area_node+0x208/0x330 [ 1537.164250][T19107] __vmalloc_node_range_noprof+0xccd/0x1630 [ 1537.164278][T19107] ? xt_check_target+0x13d/0x1c0 [ 1537.164304][T19107] ? xt_counters_alloc+0x4c/0x70 [ 1537.164326][T19107] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 1537.164350][T19107] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1537.164387][T19107] ? xt_counters_alloc+0x4c/0x70 [ 1537.164406][T19107] __vmalloc_node_noprof+0xad/0xf0 [ 1537.164431][T19107] ? xt_counters_alloc+0x4c/0x70 [ 1537.164453][T19107] xt_counters_alloc+0x4c/0x70 [ 1537.164471][T19107] __do_replace+0x97/0x990 [ 1537.164497][T19107] ? __pfx___do_replace+0x10/0x10 [ 1537.164523][T19107] do_ip6t_set_ctl+0xa5f/0xd00 [ 1537.164543][T19107] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1537.164564][T19107] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1537.164588][T19107] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1537.164608][T19107] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1537.164633][T19107] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1537.164663][T19107] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1537.164687][T19107] nf_setsockopt+0x8d/0xf0 [ 1537.164710][T19107] ipv6_setsockopt+0x135/0x170 [ 1537.164734][T19107] tcp_setsockopt+0xa7/0x100 [ 1537.164760][T19107] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1537.164789][T19107] do_sock_setsockopt+0xf3/0x1d0 [ 1537.164817][T19107] __sys_setsockopt+0x195/0x220 [ 1537.164843][T19107] __x64_sys_setsockopt+0xbd/0x160 [ 1537.164863][T19107] ? do_syscall_64+0x90/0x870 [ 1537.164883][T19107] ? lockdep_hardirqs_on+0x78/0x100 [ 1537.164902][T19107] do_syscall_64+0x115/0x870 [ 1537.164921][T19107] ? clear_bhb_loop+0x40/0x90 [ 1537.164943][T19107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.164962][T19107] RIP: 0033:0x7fcedd39f6da [ 1537.164979][T19107] Code: 48 83 ec 10 48 63 c9 48 63 ff 45 89 c9 6a 2c e8 6c 99 fb ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 1537.164996][T19107] RSP: 002b:00007ffc77b81288 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 1537.165014][T19107] RAX: ffffffffffffffda RBX: 00007ffc77b81310 RCX: 00007fcedd39f6da [ 1537.165025][T19107] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1537.165036][T19107] RBP: 0000000000000003 R08: 0000000000000558 R09: 0000000000000000 [ 1537.165047][T19107] R10: 00007fcedd5ecbe0 R11: 0000000000000202 R12: 00007fcedd5ecb80 [ 1537.165058][T19107] R13: 00007ffc77b812ac R14: 0000000000000000 R15: 00007fcedd5edfc0 [ 1537.165081][T19107] [ 1537.459548][T19107] Mem-Info: [ 1537.462690][T19107] active_anon:11263 inactive_anon:0 isolated_anon:0 [ 1537.462690][T19107] active_file:17 inactive_file:63025 isolated_file:0 [ 1537.462690][T19107] unevictable:768 dirty:199 writeback:0 [ 1537.462690][T19107] slab_reclaimable:15663 slab_unreclaimable:129978 [ 1537.462690][T19107] mapped:30381 shmem:1369 pagetables:1263 [ 1537.462690][T19107] sec_pagetables:0 bounce:0 [ 1537.462690][T19107] kernel_misc_reclaimable:0 [ 1537.462690][T19107] free:1232833 free_pcp:26491 free_cma:0 [ 1537.510340][T19107] Node 0 active_anon:45052kB inactive_anon:0kB active_file:68kB inactive_file:251680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121480kB dirty:796kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:23308kB pagetables:4916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1537.545796][T19107] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1537.579289][T19107] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1537.609219][T19107] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 1537.615134][T19107] Node 0 DMA32 free:976500kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45152kB inactive_anon:0kB active_file:68kB inactive_file:251680kB unevictable:1536kB writepending:796kB zspages:0kB present:3129332kB managed:2532168kB mlocked:0kB bounce:0kB free_pcp:105876kB local_pcp:66728kB free_cma:0kB [ 1537.648303][T19107] lowmem_reserve[]: 0 0 0 0 0 [ 1537.653322][T19107] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1537.683797][T19107] lowmem_reserve[]: 0 0 0 0 0 [ 1537.685843][T18591] bridge0: port 3(syz_tun) entered disabled state [ 1537.688571][T19107] Node 1 Normal free:3939472kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:420kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1537.726694][T19107] lowmem_reserve[]: 0 0 0 0 0 [ 1537.731422][T19107] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1537.744159][T19107] Node 0 DMA32: 1033*4kB (UME) 747*8kB (UME) 54*16kB (UME) 535*32kB (UME) 893*64kB (ME) 567*128kB (UME) 274*256kB (UME) 92*512kB (ME) 27*1024kB (UM) 3*2048kB (M) 163*4096kB (M) = 976508kB [ 1537.763277][T19107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1537.768419][T18591] syz_tun (unregistering): left promiscuous mode [ 1537.775510][T19107] Node 1 Normal: 4*4kB (M) 6*8kB (UM) 9*16kB (UM) 8*32kB (UM) 17*64kB (UM) 9*128kB (UM) 8*256kB (UM) 7*512kB (UM) 5*1024kB (UM) 1*2048kB (M) 958*4096kB (UM) = 3939472kB [ 1537.781982][T18591] bridge0: port 3(syz_tun) entered disabled state [ 1537.798336][T19107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1537.814117][T19107] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1537.823477][T19107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1537.833105][T19107] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1537.842572][T19107] 64407 total pagecache pages [ 1537.847317][T19107] 0 pages in swap cache [ 1537.851468][T19107] Free swap = 124996kB [ 1537.855668][T19107] Total swap = 124996kB [ 1537.859810][T19107] 2097051 pages RAM [ 1537.863605][T19107] 0 pages HighMem/MovableOnly [ 1537.869036][T19107] 432300 pages reserved [ 1537.873185][T19107] 0 pages cma reserved [ 1538.141561][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.134585][T25621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1539.147419][ T5629] Bluetooth: hci3: command tx timeout [ 1539.164909][T25621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1539.174591][T25621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1539.193082][T25621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1539.202433][T25621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1539.382477][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.506808][T25534] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1539.535505][T25534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1539.556150][T25534] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1539.565370][T25621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1539.587963][T25621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1539.597339][T25621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1539.606776][T25621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1539.615478][T25621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1539.652259][T25534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1539.683129][T25534] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1539.709902][T25534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1539.735332][T25534] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1539.759211][T25534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1539.862810][T25573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.929663][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.192836][T25573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.320630][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.349225][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.425818][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1540.467404][T25573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.741445][T25573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.189305][ T36] bridge_slave_1: left allmulticast mode [ 1541.205416][ T36] bridge_slave_1: left promiscuous mode [ 1541.212354][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.243116][ T36] bridge_slave_0: left allmulticast mode [ 1541.266785][ T36] bridge_slave_0: left promiscuous mode [ 1541.297118][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.306173][T25621] Bluetooth: hci0: command tx timeout [ 1541.432673][ T30] audit: type=1400 audit(1785230963.443:1168): avc: denied { write } for pid=25724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1541.622525][ T30] audit: type=1400 audit(1785230963.633:1169): avc: denied { write } for pid=25745 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1541.704263][T25621] Bluetooth: hci4: command tx timeout [ 1541.778704][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.789861][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.801687][ T36] bond0 (unregistering): Released all slaves [ 1541.833197][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1541.910491][T25534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.002612][ T36] tipc: Disabling bearer [ 1542.009474][ T36] tipc: Left network mode [ 1542.115586][T25573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1542.131833][T25573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1542.150812][T25573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1542.161228][T25573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1542.182417][T25573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1542.204399][T25573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1542.213616][T25686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.221587][T25686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.229001][T25686] bridge_slave_0: entered allmulticast mode [ 1542.237123][T25686] bridge_slave_0: entered promiscuous mode [ 1542.280743][T25573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1542.299735][T25573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1542.302144][ T30] audit: type=1400 audit(1785230964.313:1170): avc: denied { write } for pid=25761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1542.354832][T25686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.362094][T25686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.369714][T25686] bridge_slave_1: entered allmulticast mode [ 1542.379992][T25686] bridge_slave_1: entered promiscuous mode [ 1542.409324][ T30] audit: type=1400 audit(1785230964.423:1171): avc: denied { write } for pid=25774 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1542.446830][T25534] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.506220][ T36] hsr_slave_0: left promiscuous mode [ 1542.512172][ T36] hsr_slave_1: left promiscuous mode [ 1542.520358][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1542.527789][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1542.535663][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1542.543025][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1542.557422][ T36] veth1_macvtap: left promiscuous mode [ 1542.562896][ T36] veth0_macvtap: left promiscuous mode [ 1542.568451][ T36] veth1_vlan: left promiscuous mode [ 1542.573661][ T36] veth0_vlan: left promiscuous mode [ 1542.798268][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1542.820313][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1542.953658][T25686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.966808][T25686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.006174][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1543.071769][T25686] team0: Port device team_slave_0 added [ 1543.079542][T25686] team0: Port device team_slave_1 added [ 1543.085393][T25693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.093034][T25693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.100451][T25693] bridge_slave_0: entered allmulticast mode [ 1543.108895][T25693] bridge_slave_0: entered promiscuous mode [ 1543.116948][T25693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.124076][T25693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.131441][T25693] bridge_slave_1: entered allmulticast mode [ 1543.138891][T25693] bridge_slave_1: entered promiscuous mode [ 1543.151566][T11725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.158710][T11725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.004016][T25621] Bluetooth: hci0: command tx timeout [ 1544.010993][T16447] Bluetooth: hci4: command tx timeout [ 1544.088671][T11725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.095762][T11725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.148247][T25686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.164620][T25686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1544.214432][T25686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1544.252899][T25686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1544.260461][T25686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1544.287014][T25686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.335105][T25693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1544.359290][T25693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1544.478356][T25686] hsr_slave_0: entered promiscuous mode [ 1544.495205][T25686] hsr_slave_1: entered promiscuous mode [ 1544.505107][T25686] debugfs: 'hsr0' already exists in 'hsr' [ 1544.516920][T25686] Cannot create hsr debugfs directory [ 1544.551194][T25693] team0: Port device team_slave_0 added [ 1544.572609][T25693] team0: Port device team_slave_1 added [ 1544.609207][ T30] audit: type=1400 audit(1785230966.623:1172): avc: denied { bind } for pid=25796 comm="syz.5.5139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1544.659918][ T36] IPVS: stop unused estimator thread 0... [ 1544.934702][T25693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.944933][ T30] audit: type=1400 audit(1785230966.953:1173): avc: denied { write } for pid=25792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1544.969810][T25693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1544.997964][T25693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.101710][ T30] audit: type=1400 audit(1785230967.113:1174): avc: denied { write } for pid=25809 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1545.104105][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.168558][T25693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.176499][T25693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.202904][T25693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.301378][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.433086][T25693] hsr_slave_0: entered promiscuous mode [ 1545.439774][T25693] hsr_slave_1: entered promiscuous mode [ 1545.446550][T25693] debugfs: 'hsr0' already exists in 'hsr' [ 1545.452282][T25693] Cannot create hsr debugfs directory [ 1545.490597][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.691551][T25573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.753234][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.773730][ T30] audit: type=1400 audit(1785230967.783:1175): avc: denied { write } for pid=25816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1545.905271][ T30] audit: type=1400 audit(1785230967.913:1176): avc: denied { write } for pid=25833 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1546.019331][T25573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.035510][T25621] Bluetooth: hci4: command tx timeout [ 1546.092585][T20740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.099706][T20740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.107208][T25621] Bluetooth: hci0: command tx timeout [ 1546.169004][T20740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.176186][T20740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.559201][ T30] audit: type=1400 audit(1785230968.573:1177): avc: denied { write } for pid=25837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1546.642605][ T30] audit: type=1400 audit(1785230968.653:1178): avc: denied { write } for pid=25853 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1546.743975][T25534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1546.893940][ T36] bridge_slave_1: left allmulticast mode [ 1546.915478][ T36] bridge_slave_1: left promiscuous mode [ 1546.930985][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.958380][ T36] bridge_slave_0: left allmulticast mode [ 1546.971145][ T36] bridge_slave_0: left promiscuous mode [ 1546.984446][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.009219][ T36] erspan0: left allmulticast mode [ 1547.029869][ T36] erspan0: left promiscuous mode [ 1547.041471][ T36] bridge1: port 1(erspan0) entered disabled state [ 1547.120918][ T30] audit: type=1400 audit(1785230969.133:1179): avc: denied { write } for pid=25857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.239708][ T30] audit: type=1400 audit(1785230969.253:1180): avc: denied { write } for pid=25870 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.565208][ T30] audit: type=1400 audit(1785230969.583:1181): avc: denied { write } for pid=25872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.620287][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1547.638362][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1547.668016][ T36] bond0 (unregistering): Released all slaves [ 1547.670260][ T30] audit: type=1400 audit(1785230969.683:1182): avc: denied { write } for pid=25887 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.921832][ T36] tipc: Left network mode [ 1548.900748][T25686] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1548.915728][T25621] Bluetooth: hci4: command tx timeout [ 1548.915768][T16447] Bluetooth: hci0: command tx timeout [ 1548.962176][T25686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1548.971774][ T36] IPVS: stopping master sync thread 24176 ... [ 1548.993677][T25686] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1549.021766][T25686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1549.038380][T25686] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1549.049926][T25686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1549.236793][T25686] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1549.272194][T25686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1549.640041][ T36] hsr_slave_0: left promiscuous mode [ 1549.658507][ T36] hsr_slave_1: left promiscuous mode [ 1549.793576][ T30] audit: type=1400 audit(1785230971.803:1183): avc: denied { write } for pid=25911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1549.819101][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1549.826747][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1549.835750][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1549.843616][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1549.861217][ T36] veth1_macvtap: left promiscuous mode [ 1549.867942][ T36] veth0_macvtap: left promiscuous mode [ 1549.873522][ T36] veth1_vlan: left promiscuous mode [ 1549.879051][ T36] veth0_vlan: left promiscuous mode [ 1550.086852][ T30] audit: type=1400 audit(1785230972.083:1184): avc: denied { write } for pid=25930 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1550.528390][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1550.544704][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1550.720865][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1550.838180][T25534] veth0_vlan: entered promiscuous mode [ 1551.073662][T25573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.082341][T25534] veth1_vlan: entered promiscuous mode [ 1551.324040][T25686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.356867][T25534] veth0_macvtap: entered promiscuous mode [ 1551.391416][ T36] IPVS: stop unused estimator thread 0... [ 1551.396990][T25534] veth1_macvtap: entered promiscuous mode [ 1551.476961][T25573] veth0_vlan: entered promiscuous mode [ 1551.499674][ T30] audit: type=1400 audit(1785230973.513:1185): avc: denied { write } for pid=25940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1551.556932][T25686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.578168][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.585327][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.646201][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.653346][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.662292][ T30] audit: type=1400 audit(1785230973.663:1186): avc: denied { write } for pid=25951 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1551.689029][T25534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.717526][T25573] veth1_vlan: entered promiscuous mode [ 1551.752669][T25534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.757483][T25956] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5150'. [ 1551.780130][T25693] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1551.781776][T25956] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5150'. [ 1551.800237][T25693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1551.814059][T24819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.829921][T24819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.861516][T25693] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1551.872978][T25693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1551.886600][T24819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.909028][T24819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.930150][T25693] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1551.966219][T25693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1551.975365][ T30] audit: type=1400 audit(1785230973.983:1187): avc: denied { nlmsg_read } for pid=25961 comm="syz.5.5153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1552.002530][T25693] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1552.013159][T25693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1552.233426][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.261336][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.283106][T25573] veth0_macvtap: entered promiscuous mode [ 1552.364163][T25573] veth1_macvtap: entered promiscuous mode [ 1552.401099][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.420698][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.495586][T25573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1552.551760][T25573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.540291][ T9876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.563766][ T9876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.618533][ T9876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.676654][ T9876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.694917][T25693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.914700][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.934217][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.969551][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.978007][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.199214][T25693] 8021q: adding VLAN 0 to HW filter on device team0 [ 1554.228938][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.236124][ T3367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.239410][ T30] audit: type=1400 audit(1785230976.253:1188): avc: denied { append } for pid=25999 comm="syz.5.5160" name="trace_marker" dev="tracefs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1554.270655][T24819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.277808][T24819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.300033][T25686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.474095][T25686] veth0_vlan: entered promiscuous mode [ 1554.541497][T25686] veth1_vlan: entered promiscuous mode [ 1554.580316][T22989] libceph: connect (1)[c::]:6789 error -101 [ 1554.589248][T22989] libceph: mon0 (1)[c::]:6789 connect error [ 1554.657448][T22989] libceph: connect (1)[c::]:6789 error -101 [ 1554.664596][T22989] libceph: mon0 (1)[c::]:6789 connect error [ 1554.686719][T26003] ceph: No mds server is up or the cluster is laggy [ 1554.706919][T25686] veth0_macvtap: entered promiscuous mode [ 1554.742833][T25686] veth1_macvtap: entered promiscuous mode [ 1554.845117][T25686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.889097][T25686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.932089][T20740] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.999493][T20740] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.016379][T20740] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.038395][T20740] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.244066][ T9876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.270977][ T9876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.363720][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.383248][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.987559][T25693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1557.088667][T25693] veth0_vlan: entered promiscuous mode [ 1557.132594][T25693] veth1_vlan: entered promiscuous mode [ 1557.247864][T25693] veth0_macvtap: entered promiscuous mode [ 1557.279644][T25693] veth1_macvtap: entered promiscuous mode [ 1557.298282][T25693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1557.337958][T25693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1557.360356][ T9876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.378205][ T9876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.425639][ T9876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.460754][ T9876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.370842][T24819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.381180][ T3367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.466931][ T3367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.475630][T24819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.701550][ T30] audit: type=1400 audit(1785230981.713:1189): avc: denied { mount } for pid=26090 comm="syz.1.5187" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1559.732012][ T30] audit: type=1400 audit(1785230981.743:1190): avc: denied { unmount } for pid=25686 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1561.043771][ T12] bridge_slave_1: left promiscuous mode [ 1561.073170][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.110194][ T12] bridge_slave_0: left allmulticast mode [ 1561.127162][ T12] bridge_slave_0: left promiscuous mode [ 1561.142137][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.197098][T26118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1561.447609][ T30] audit: type=1800 audit(1785230983.463:1191): pid=26128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5202" name="max_speed" dev="configfs" ino=125787 res=0 errno=0 [ 1561.636813][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1562.334802][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.549667][ T12] bond0 (unregistering): Released all slaves [ 1562.839305][ T12] tipc: Left network mode [ 1563.136472][ T30] audit: type=1400 audit(1785230985.143:1192): avc: denied { connect } for pid=26150 comm="syz.3.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1564.986636][ T12] hsr_slave_0: left promiscuous mode [ 1565.010895][ T12] hsr_slave_1: left promiscuous mode [ 1565.038051][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1565.073698][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1565.242273][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.293031][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.488012][ T12] veth1_macvtap: left promiscuous mode [ 1565.499814][ T12] veth0_macvtap: left promiscuous mode [ 1565.513268][ T12] veth1_vlan: left promiscuous mode [ 1565.524962][ T12] veth0_vlan: left promiscuous mode [ 1567.857721][ T30] audit: type=1400 audit(1785230989.803:1193): avc: denied { write } for pid=26189 comm="syz.5.5224" name="mcfilter6" dev="proc" ino=4026535500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1568.255267][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1568.291333][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1571.256982][ T12] IPVS: stop unused estimator thread 0... [ 1571.597690][T26233] sock: sock_timestamping_bind_phc: sock not bind to device [ 1571.737165][T26233] zram0: detected capacity change from 0 to 8 [ 1572.672100][T26251] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5246'. [ 1573.060637][T26264] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1573.447937][T12676] IPVS: starting estimator thread 0... [ 1573.544595][T26266] IPVS: using max 76 ests per chain, 182400 per kthread [ 1574.163131][ T30] audit: type=1800 audit(1785230996.173:1194): pid=26283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5256" name="max_speed" dev="configfs" ino=127194 res=0 errno=0 [ 1575.079662][T26311] tipc: Enabling of bearer rejected, failed to enable media [ 1577.508534][ T30] audit: type=1400 audit(1785230999.523:1195): avc: denied { mount } for pid=26382 comm="syz.1.5289" name="/" dev="rpc_pipefs" ino=128178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1577.646646][ T30] audit: type=1800 audit(1785230999.663:1196): pid=26393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.5290" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1577.717471][ T30] audit: type=1400 audit(1785230999.703:1197): avc: denied { unmount } for pid=25686 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1578.973942][T26411] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1581.758163][T26448] tipc: Started in network mode [ 1581.768675][T26448] tipc: Node identity fa3f6144c5d4, cluster identity 4711 [ 1581.783529][T26448] tipc: Enabled bearer , priority 0 [ 1581.833393][T26447] tipc: Disabling bearer [ 1584.642640][T26492] tipc: Started in network mode [ 1584.650472][T26492] tipc: Node identity d2f3cdc1161d, cluster identity 4711 [ 1584.662646][T26492] tipc: Enabled bearer , priority 0 [ 1584.739359][T26491] tipc: Disabling bearer [ 1584.935429][T26502] FAULT_INJECTION: forcing a failure. [ 1584.935429][T26502] name fail_page_alloc, interval 1, probability 100, space 0, times 1 [ 1584.935564][T26505] FAULT_INJECTION: forcing a failure. [ 1584.935564][T26505] name fail_page_alloc, interval 1, probability 100, space 0, times 1 [ 1584.949445][T26502] CPU: 1 UID: 0 PID: 26502 Comm: syz.5.5339 Tainted: G L syzkaller #0 PREEMPT(full) [ 1584.949475][T26502] Tainted: [L]=SOFTLOCKUP [ 1584.949481][T26502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1584.949491][T26502] Call Trace: [ 1584.949498][T26502] [ 1584.949505][T26502] dump_stack_lvl+0x100/0x190 [ 1584.949533][T26502] should_fail_ex.cold+0x5/0xa [ 1584.949549][T26502] ? prepare_alloc_pages+0x16d/0x5f0 [ 1584.949573][T26502] should_fail_alloc_page+0xeb/0x140 [ 1584.949597][T26502] prepare_alloc_pages+0x1f0/0x5f0 [ 1584.949623][T26502] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1584.949645][T26502] ? __asan_memset+0x23/0x50 [ 1584.949661][T26502] ? folios_put_refs+0x58a/0xaa0 [ 1584.949689][T26502] ? __lock_acquire+0x49f/0x1a40 [ 1584.949711][T26502] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1584.949730][T26502] ? __css_rstat_updated+0x1ce/0x5a0 [ 1584.949756][T26502] ? do_raw_spin_lock+0x128/0x260 [ 1584.949780][T26502] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1584.949803][T26502] ? find_held_lock+0x2b/0x80 [ 1584.949835][T26502] ? __lock_acquire+0x49f/0x1a40 [ 1584.949854][T26502] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1584.949875][T26502] ? policy_nodemask+0xed/0x4f0 [ 1584.949899][T26502] alloc_pages_mpol+0x1fb/0x540 [ 1584.949929][T26502] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1584.949952][T26502] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1584.949981][T26502] folio_alloc_mpol_noprof+0x36/0x260 [ 1584.950007][T26502] shmem_alloc_folio+0x135/0x160 [ 1584.950033][T26502] shmem_alloc_and_add_folio+0x371/0xd40 [ 1584.950055][T26502] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1584.950074][T26502] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1584.950097][T26502] shmem_get_folio_gfp+0x6ad/0x1910 [ 1584.950117][T26502] ? filemap_map_pages+0x112d/0x1fe0 [ 1584.950142][T26502] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1584.950160][T26502] ? filemap_map_pages+0x1137/0x1fe0 [ 1584.950187][T26502] shmem_fault+0x1f9/0xa20 [ 1584.950205][T26502] ? __pfx_shmem_fault+0x10/0x10 [ 1584.950225][T26502] ? __pfx_filemap_map_pages+0x10/0x10 [ 1584.950252][T26502] ? find_held_lock+0x2b/0x80 [ 1584.950278][T26502] __do_fault+0x10b/0x440 [ 1584.950299][T26502] do_fault+0xa99/0x1750 [ 1584.950324][T26502] __handle_mm_fault+0x187d/0x2a00 [ 1584.950351][T26502] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1584.950377][T26502] ? __pfx___handle_mm_fault+0x10/0x10 [ 1584.950403][T26502] ? pte_offset_map_lock+0x174/0x320 [ 1584.950423][T26502] ? find_held_lock+0x2b/0x80 [ 1584.950454][T26502] ? follow_page_pte+0x4d0/0x13f0 [ 1584.950480][T26502] handle_mm_fault+0x37b/0xa30 [ 1584.950510][T26502] __get_user_pages+0x1178/0x32a0 [ 1584.950540][T26502] ? __pfx___get_user_pages+0x10/0x10 [ 1584.950568][T26502] populate_vma_page_range+0x267/0x3f0 [ 1584.950592][T26502] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1584.950614][T26502] ? __pfx_find_vma_intersection+0x10/0x10 [ 1584.950636][T26502] ? do_mmap+0x93f/0x12f0 [ 1584.950660][T26502] __mm_populate+0x107/0x3a0 [ 1584.950684][T26502] ? __pfx___mm_populate+0x10/0x10 [ 1584.950708][T26502] ? up_write+0x2e5/0x5c0 [ 1584.950731][T26502] vm_mmap_pgoff+0x37f/0x470 [ 1584.950755][T26502] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1584.950779][T26502] ? __pfx_do_futex+0x10/0x10 [ 1584.950807][T26502] ksys_mmap_pgoff+0xe4/0x610 [ 1584.950829][T26502] ? __x64_sys_futex+0x358/0x4d0 [ 1584.950852][T26502] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1584.950873][T26502] ? xfd_validate_state+0x129/0x190 [ 1584.950900][T26502] __x64_sys_mmap+0x125/0x190 [ 1584.950930][T26502] do_syscall_64+0x115/0x870 [ 1584.950948][T26502] ? clear_bhb_loop+0x40/0x90 [ 1584.950968][T26502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.950985][T26502] RIP: 0033:0x7f7273b9de99 [ 1584.951000][T26502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.951016][T26502] RSP: 002b:00007f7274ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1584.951032][T26502] RAX: ffffffffffffffda RBX: 00007f7273e25fa0 RCX: 00007f7273b9de99 [ 1584.951043][T26502] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1584.951053][T26502] RBP: 00007f7273c33eaf R08: ffffffffffffffff R09: 0000000000000000 [ 1584.951063][T26502] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1584.951073][T26502] R13: 00007f7273e26038 R14: 00007f7273e25fa0 R15: 00007fff42b48a48 [ 1584.951095][T26502] [ 1585.413940][T26505] CPU: 0 UID: 0 PID: 26505 Comm: syz.0.5341 Tainted: G L syzkaller #0 PREEMPT(full) [ 1585.413972][T26505] Tainted: [L]=SOFTLOCKUP [ 1585.413979][T26505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1585.413990][T26505] Call Trace: [ 1585.413996][T26505] [ 1585.414004][T26505] dump_stack_lvl+0x100/0x190 [ 1585.414034][T26505] should_fail_ex.cold+0x5/0xa [ 1585.414054][T26505] ? prepare_alloc_pages+0x16d/0x5f0 [ 1585.414081][T26505] should_fail_alloc_page+0xeb/0x140 [ 1585.414107][T26505] prepare_alloc_pages+0x1f0/0x5f0 [ 1585.414130][T26505] ? lockdep_hardirqs_on+0x78/0x100 [ 1585.414151][T26505] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1585.414173][T26505] ? __schedule+0x126e/0x6730 [ 1585.414190][T26505] ? find_held_lock+0x2b/0x80 [ 1585.414222][T26505] ? page_table_check_set+0x4f7/0x930 [ 1585.414244][T26505] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1585.414268][T26505] ? __pfx___schedule+0x10/0x10 [ 1585.414287][T26505] ? xas_find+0x32c/0x8e0 [ 1585.414310][T26505] ? preempt_schedule_thunk+0x16/0x40 [ 1585.414333][T26505] ? __lock_acquire+0x49f/0x1a40 [ 1585.414360][T26505] ? filemap_map_pages+0x1137/0x1fe0 [ 1585.414388][T26505] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1585.414411][T26505] ? policy_nodemask+0xed/0x4f0 [ 1585.414439][T26505] alloc_pages_mpol+0x1fb/0x540 [ 1585.414465][T26505] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1585.414487][T26505] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1585.414506][T26505] ? lockdep_hardirqs_on+0x78/0x100 [ 1585.414530][T26505] ? __pfx_filemap_map_pages+0x10/0x10 [ 1585.414557][T26505] alloc_pages_noprof+0x1a/0x160 [ 1585.414584][T26505] pte_alloc_one+0x1c/0x3d0 [ 1585.414605][T26505] __do_fault+0x26c/0x440 [ 1585.414628][T26505] do_fault+0x2db/0x1750 [ 1585.414657][T26505] __handle_mm_fault+0x187d/0x2a00 [ 1585.414691][T26505] ? reacquire_held_locks+0xce/0x1e0 [ 1585.414714][T26505] ? __pfx___handle_mm_fault+0x10/0x10 [ 1585.414747][T26505] ? lock_vma_under_rcu+0x17c/0x590 [ 1585.414796][T26505] handle_mm_fault+0x37b/0xa30 [ 1585.414830][T26505] do_user_addr_fault+0x5a3/0x12f0 [ 1585.414865][T26505] exc_page_fault+0x6f/0xd0 [ 1585.414885][T26505] asm_exc_page_fault+0x26/0x30 [ 1585.414902][T26505] RIP: 0033:0x7f7775872640 [ 1585.414920][T26505] Code: 89 dc 41 83 e4 03 0f 85 ca 01 00 00 4c 89 ff be 04 00 00 00 e8 21 93 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 1585.414937][T26505] RSP: 002b:00007ffc47540f90 EFLAGS: 00010202 [ 1585.414952][T26505] RAX: 0000001b32724000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 1585.414964][T26505] RDX: 0000001b32723ffc RSI: 00000000003ffde8 RDI: 00007f7776755700 [ 1585.414975][T26505] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f7775c12000 [ 1585.414985][T26505] R10: 00007f7776755700 R11: 0000000000000000 R12: 0000000000000000 [ 1585.414996][T26505] R13: 0000000000000499 R14: ffffffff81ae5ae0 R15: 00007f7776755720 [ 1585.415008][T26505] ? fpregs_assert_state_consistent+0xb0/0x150 [ 1585.415041][T26505] [ 1586.766640][ T30] audit: type=1400 audit(1785231008.653:1198): avc: denied { watch } for pid=26515 comm="syz.4.5344" path="pipe:[127573]" dev="pipefs" ino=127573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1587.463145][T26505] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1590.962906][T26588] CIFS: Attempting to mount //127.0.0.1/share [ 1590.995469][T26588] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1591.007996][T26588] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1593.318405][T26652] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1596.140452][T26679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5405'. [ 1597.276007][T26683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1597.318920][T26696] CIFS: Attempting to mount //127.0.0.1/share [ 1597.339717][T26696] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1597.369016][T26696] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1597.369280][T26698] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1597.574870][T26704] could not allocate digest TFM handle xxhash64 [ 1597.644373][T18825] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1597.814516][T18825] usb 6-1: Using ep0 maxpacket: 16 [ 1597.832281][T18825] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1597.869205][T18825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.902549][T18825] usb 6-1: Product: syz [ 1597.916458][T18825] usb 6-1: Manufacturer: syz [ 1597.930381][T18825] usb 6-1: SerialNumber: syz [ 1598.851174][T18825] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1598.895351][T18825] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1598.924485][T18825] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1598.948706][T18825] usb 6-1: media controller created [ 1598.988674][T18825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1599.184219][T12676] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1599.254587][T18825] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1599.356427][T12676] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.361985][T18825] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1599.403794][T12676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1599.409018][T18825] usb 6-1: USB disconnect, device number 5 [ 1599.514480][T12676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1599.558117][T12676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1599.630516][T26730] dummy_hcd dummy_hcd.0: remove, state 1 [ 1599.636354][T26730] usb usb1: USB disconnect, device number 1 [ 1599.642308][T26730] usb 1-1: USB disconnect, device number 2 [ 1600.036004][T12676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1600.093715][T12676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 1600.109313][T26730] dummy_hcd dummy_hcd.0: stopped [ 1600.114285][T26730] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1600.169256][T12676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1600.202357][T12676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 1600.233272][T26734] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5429'. [ 1600.235683][T12676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1600.242375][T26734] tipc: Invalid UDP bearer configuration [ 1600.252134][T26734] tipc: Enabling of bearer rejected, failed to enable media [ 1600.310404][T12676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1600.362190][T12676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1600.391117][T12676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 1600.413308][T12676] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1600.443316][T12676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1600.462764][T12676] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 1600.501596][T12676] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1601.391379][ T30] audit: type=1400 audit(1785231023.403:1199): avc: denied { create } for pid=26746 comm="syz.1.5435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1601.411030][ T30] audit: type=1400 audit(1785231023.403:1200): avc: denied { bind } for pid=26746 comm="syz.1.5435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1601.446188][T12676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.474269][T12676] usb 4-1: Product: syz [ 1601.485465][T12676] usb 4-1: Manufacturer: syz [ 1601.491399][T12676] usb 4-1: SerialNumber: syz [ 1601.511226][T26726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1601.520738][T26753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5438'. [ 1601.531780][T26726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1601.545144][T26726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1601.562241][T26726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1601.584488][T26726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1601.611719][T26726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1601.620242][T26726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1601.635658][T26726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1601.654719][T26726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1601.662006][T26726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1601.674580][T26726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1601.683991][T12676] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 1601.692870][T12676] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 1601.706081][T12676] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1601.755487][T12676] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 1601.794468][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1601.801028][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1601.823007][T12676] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1601.840319][T11724] bridge_slave_1: left allmulticast mode [ 1601.848234][T11724] bridge_slave_1: left promiscuous mode [ 1601.866673][T11724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.888412][T11724] bridge_slave_0: left allmulticast mode [ 1601.903313][T11724] bridge_slave_0: left promiscuous mode [ 1601.912931][T12676] usb 4-1: USB disconnect, device number 43 [ 1601.926735][T11724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.010527][T12676] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1602.082669][T12676] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1602.110180][T12676] keyspan 4-1:1.0: device disconnected [ 1602.638343][T11724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1602.684221][T11724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1602.713920][T11724] bond0 (unregistering): Released all slaves [ 1602.810653][T11724] tipc: Left network mode [ 1604.126244][ T30] audit: type=1326 audit(1785231026.083:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26793 comm="syz.1.5452" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32839de99 code=0x7ffc0000 [ 1604.203355][ T30] audit: type=1326 audit(1785231026.083:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26793 comm="syz.1.5452" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32839de99 code=0x7ffc0000 [ 1605.067672][ T30] audit: type=1326 audit(1785231026.083:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26793 comm="syz.1.5452" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32839de99 code=0x7ffc0000 [ 1605.149681][ T30] audit: type=1326 audit(1785231026.083:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26793 comm="syz.1.5452" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32839de99 code=0x7ffc0000 [ 1605.181784][ T30] audit: type=1326 audit(1785231026.083:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26793 comm="syz.1.5452" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32839de99 code=0x7ffc0000 [ 1605.208625][ T30] audit: type=1326 audit(1785231026.083:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26793 comm="syz.1.5452" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa32839de99 code=0x7ffc0000 [ 1605.235788][ T30] audit: type=1326 audit(1785231026.083:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26793 comm="syz.1.5452" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32839de99 code=0x7ffc0000 [ 1605.362857][ T30] audit: type=1326 audit(1785231026.083:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26793 comm="syz.1.5452" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32839de99 code=0x7ffc0000 [ 1605.424874][T11724] hsr_slave_0: left promiscuous mode [ 1605.436261][T11724] hsr_slave_1: left promiscuous mode [ 1605.463018][T11724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1605.501414][T11724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.533165][T11724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1605.563704][T11724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1605.699036][T11724] veth1_macvtap: left promiscuous mode [ 1605.779844][T11724] veth0_macvtap: left promiscuous mode [ 1605.826214][T11724] veth1_vlan: left promiscuous mode [ 1605.859949][T11724] veth0_vlan: left promiscuous mode [ 1605.979357][T26785] syz.0.5448 (26785): drop_caches: 2 [ 1609.662724][T11724] team0 (unregistering): Port device team_slave_1 removed [ 1609.900610][T11724] team0 (unregistering): Port device team_slave_0 removed [ 1609.965293][T16447] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1609.965347][T25621] Bluetooth: hci5: command 0xfc11 tx timeout [ 1615.414297][T11724] IPVS: stop unused estimator thread 0... [ 1615.444197][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1615.444215][ T30] audit: type=1400 audit(1785231037.433:1214): avc: denied { write } for pid=26898 comm="syz.5.5485" name="functions" dev="configfs" ino=82059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1615.606938][ T30] audit: type=1400 audit(1785231037.503:1215): avc: denied { write } for pid=26898 comm="syz.5.5485" name="c.1" dev="configfs" ino=82111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1616.745919][ T30] audit: type=1400 audit(1785231038.743:1216): avc: denied { write } for pid=26915 comm="syz.1.5491" name="cluster" dev="configfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1617.722656][T26924] FAULT_INJECTION: forcing a failure. [ 1617.722656][T26924] name failslab, interval 1, probability 1, space 0, times 10 [ 1617.736686][T25693] FAULT_INJECTION: forcing a failure. [ 1617.736686][T25693] name failslab, interval 1, probability 1, space 0, times 10 [ 1617.749555][ C1] FAULT_INJECTION: forcing a failure. [ 1617.749555][ C1] name failslab, interval 1, probability 1, space 0, times 10 [ 1617.749581][ C1] CPU: 1 UID: 0 PID: 25693 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1617.749597][ C1] Tainted: [L]=SOFTLOCKUP [ 1617.749601][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1617.749608][ C1] Call Trace: [ 1617.749612][ C1] [ 1617.749617][ C1] dump_stack_lvl+0x100/0x190 [ 1617.749635][ C1] should_fail_ex.cold+0x5/0xa [ 1617.749649][ C1] should_failslab+0xc2/0x120 [ 1617.749665][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1617.749680][ C1] ? __alloc_skb+0x140/0x710 [ 1617.749700][ C1] __alloc_skb+0x140/0x710 [ 1617.749712][ C1] ? __alloc_skb+0x5b7/0x710 [ 1617.749724][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1617.749738][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1617.749754][ C1] __netdev_alloc_skb+0x7a/0x960 [ 1617.749767][ C1] ? enqueue_task+0x1dc/0x4f0 [ 1617.749784][ C1] __ieee80211_beacon_get_ap+0x391/0x10d0 [ 1617.749804][ C1] __ieee80211_beacon_get+0x14fa/0x1ee0 [ 1617.749820][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1617.749836][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 1617.749851][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1617.749869][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 1617.749889][ C1] __iterate_interfaces+0x2e6/0x650 [ 1617.749902][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1617.749918][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1617.749933][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1617.749949][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 1617.749967][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1617.749985][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1617.750007][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 1617.750025][ C1] handle_softirqs+0x1ea/0x9b0 [ 1617.750042][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1617.750057][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1617.750074][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1617.750087][ C1] __irq_exit_rcu+0x162/0x210 [ 1617.750102][ C1] irq_exit_rcu+0x9/0x30 [ 1617.750115][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1617.750127][ C1] [ 1617.750131][ C1] [ 1617.750135][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1617.750148][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 1617.750167][ C1] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 1617.750178][ C1] RSP: 0018:ffffc90005197350 EFLAGS: 00000293 [ 1617.750188][ C1] RAX: ffffffff8f9acb98 RBX: ffffffff8f9acb40 RCX: ffffffff81e88a01 [ 1617.750196][ C1] RDX: ffff88802d6a8000 RSI: ffffffff81e88a0f RDI: ffff88802d6a8000 [ 1617.750203][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1617.750209][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000002e35 [ 1617.750216][ C1] R13: ffffffff8f9acb98 R14: ffffc900051973d0 R15: dffffc0000000000 [ 1617.750227][ C1] ? console_flush_one_record+0xab1/0xe50 [ 1617.750243][ C1] ? console_flush_one_record+0xabf/0xe50 [ 1617.750264][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1617.750285][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1617.750299][ C1] console_unlock+0x103/0x260 [ 1617.750315][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1617.750335][ C1] ? _printk+0xcf/0x110 [ 1617.750348][ C1] vprintk_emit+0x407/0x6b0 [ 1617.750365][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1617.750385][ C1] _printk+0xcf/0x110 [ 1617.750396][ C1] ? __pfx__printk+0x10/0x10 [ 1617.750409][ C1] ? __pfx____ratelimit+0x10/0x10 [ 1617.750424][ C1] should_fail_ex+0x4e4/0x640 [ 1617.750441][ C1] should_failslab+0xc2/0x120 [ 1617.750456][ C1] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1617.750469][ C1] ? anon_vma_clone+0x2ba/0xcd0 [ 1617.750487][ C1] anon_vma_clone+0x2ba/0xcd0 [ 1617.750502][ C1] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 1617.750518][ C1] anon_vma_fork+0x1bb/0x6b0 [ 1617.750536][ C1] dup_mmap+0x143e/0x21b0 [ 1617.750556][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1617.750571][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1617.750585][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1617.750599][ C1] ? find_held_lock+0x2b/0x80 [ 1617.750616][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1617.750639][ C1] copy_process+0x4588/0x8030 [ 1617.750662][ C1] ? __pfx_copy_process+0x10/0x10 [ 1617.750677][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1617.750702][ C1] kernel_clone+0x176/0x9d0 [ 1617.750718][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1617.750737][ C1] ? find_held_lock+0x2b/0x80 [ 1617.750753][ C1] ? __might_fault+0xc5/0x140 [ 1617.750766][ C1] __do_sys_clone+0xd9/0x120 [ 1617.750782][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1617.750807][ C1] do_syscall_64+0x115/0x870 [ 1617.750819][ C1] ? clear_bhb_loop+0x40/0x90 [ 1617.750833][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.750844][ C1] RIP: 0033:0x7f2f727c6912 [ 1617.750854][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1617.750865][ C1] RSP: 002b:00007ffe33aa9e60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1617.750875][ C1] RAX: ffffffffffffffda RBX: 00007ffe33aa9e60 RCX: 00007f2f727c6912 [ 1617.750882][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1617.750888][ C1] RBP: 00007ffe33aa9fec R08: 0000000000000000 R09: 0000000000000001 [ 1617.750895][ C1] R10: 00005555712337d0 R11: 0000000000000246 R12: 0000000000000001 [ 1617.750902][ C1] R13: 00000000000927c0 R14: 000000000018ac81 R15: 00007ffe33aaa040 [ 1617.750915][ C1] [ 1617.785172][T26924] CPU: 0 UID: 0 PID: 26924 Comm: syz.0.5493 Tainted: G L syzkaller #0 PREEMPT(full) [ 1617.785208][T26924] Tainted: [L]=SOFTLOCKUP [ 1617.785215][T26924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1617.785226][T26924] Call Trace: [ 1617.785232][T26924] [ 1617.785239][T26924] dump_stack_lvl+0x100/0x190 [ 1617.785265][T26924] should_fail_ex.cold+0x5/0xa [ 1617.785288][T26924] should_failslab+0xc2/0x120 [ 1617.785311][T26924] __kmalloc_noprof+0xfc/0x820 [ 1617.785331][T26924] ? __register_sysctl_table+0xac/0x1650 [ 1617.785355][T26924] __register_sysctl_table+0xac/0x1650 [ 1617.785375][T26924] ? __kasan_kmalloc+0xaa/0xb0 [ 1617.785397][T26924] ? __pfx___register_sysctl_table+0x10/0x10 [ 1617.785416][T26924] ? register_pidns_sysctls+0x48/0x1c0 [ 1617.785436][T26924] ? __asan_memcpy+0x3c/0x60 [ 1617.785454][T26924] register_pidns_sysctls+0x11d/0x1c0 [ 1617.785471][T26924] ? __ns_common_init+0x299/0x4b0 [ 1617.785496][T26924] copy_pid_ns+0x680/0x10a0 [ 1617.785519][T26924] ? __pfx_copy_pid_ns+0x10/0x10 [ 1617.785542][T26924] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1617.785563][T26924] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 1617.785583][T26924] ? create_new_namespaces+0x30/0xac0 [ 1617.785608][T26924] create_new_namespaces+0x2aa/0xac0 [ 1617.785634][T26924] unshare_nsproxy_namespaces+0xf2/0x220 [ 1617.785659][T26924] ksys_unshare+0x438/0xab0 [ 1617.785683][T26924] ? __pfx_ksys_unshare+0x10/0x10 [ 1617.785714][T26924] __x64_sys_unshare+0x31/0x40 [ 1617.785737][T26924] do_syscall_64+0x115/0x870 [ 1617.785754][T26924] ? clear_bhb_loop+0x40/0x90 [ 1617.785774][T26924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.785791][T26924] RIP: 0033:0x7f777599de99 [ 1617.785807][T26924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.785824][T26924] RSP: 002b:00007f7773bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1617.785841][T26924] RAX: ffffffffffffffda RBX: 00007f7775c25fa0 RCX: 00007f777599de99 [ 1617.785854][T26924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 1617.785864][T26924] RBP: 00007f7775a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1617.785874][T26924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.785884][T26924] R13: 00007f7775c26038 R14: 00007f7775c25fa0 R15: 00007ffc47540f48 [ 1617.785906][T26924] [ 1617.847016][T20740] FAULT_INJECTION: forcing a failure. [ 1617.847016][T20740] name failslab, interval 1, probability 1, space 0, times 8 [ 1617.847048][T20740] CPU: 0 UID: 0 PID: 20740 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1617.847071][T20740] Tainted: [L]=SOFTLOCKUP [ 1617.847077][T20740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1617.847088][T20740] Workqueue: events_unbound nsim_dev_trap_report_work [ 1617.847115][T20740] Call Trace: [ 1617.847121][T20740] [ 1617.847128][T20740] dump_stack_lvl+0x100/0x190 [ 1617.847149][T20740] should_fail_ex.cold+0x5/0xa [ 1617.847173][T20740] should_failslab+0xc2/0x120 [ 1617.847200][T20740] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1617.847222][T20740] ? __alloc_skb+0x140/0x710 [ 1617.847244][T20740] __alloc_skb+0x140/0x710 [ 1617.847261][T20740] ? __alloc_skb+0x5b7/0x710 [ 1617.847278][T20740] ? __pfx___alloc_skb+0x10/0x10 [ 1617.847299][T20740] ? kfree_skbmem+0x19f/0x210 [ 1617.847325][T20740] nsim_dev_trap_report_work+0x2af/0xd20 [ 1617.847355][T20740] process_one_work+0xa23/0x1940 [ 1617.847381][T20740] ? __pfx_process_one_work+0x10/0x10 [ 1617.847406][T20740] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1617.847427][T20740] worker_thread+0x5ef/0xe50 [ 1617.847451][T20740] ? __pfx_worker_thread+0x10/0x10 [ 1617.847469][T20740] ? kthread+0x13a/0x450 [ 1617.847483][T20740] ? __pfx_worker_thread+0x10/0x10 [ 1617.847499][T20740] kthread+0x370/0x450 [ 1617.847514][T20740] ? __pfx_kthread+0x10/0x10 [ 1617.847531][T20740] ret_from_fork+0x72b/0xd50 [ 1617.847554][T20740] ? __pfx_ret_from_fork+0x10/0x10 [ 1617.847577][T20740] ? __switch_to+0x800/0x10f0 [ 1617.847593][T20740] ? __pfx_kthread+0x10/0x10 [ 1617.847610][T20740] ret_from_fork_asm+0x1a/0x30 [ 1617.847643][T20740] [ 1617.848076][T20740] FAULT_INJECTION: forcing a failure. [ 1617.848076][T20740] name failslab, interval 1, probability 1, space 0, times 7 [ 1617.876804][T26925] FAULT_INJECTION: forcing a failure. [ 1617.876804][T26925] name failslab, interval 1, probability 1, space 0, times 7 [ 1617.881665][T20740] CPU: 0 UID: 0 PID: 20740 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1617.881689][T20740] Tainted: [L]=SOFTLOCKUP [ 1617.881694][T20740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1617.881704][T20740] Workqueue: events_unbound nsim_dev_trap_report_work [ 1617.881728][T20740] Call Trace: [ 1617.881733][T20740] [ 1617.881739][T20740] dump_stack_lvl+0x100/0x190 [ 1617.881760][T20740] should_fail_ex.cold+0x5/0xa [ 1617.881780][T20740] should_failslab+0xc2/0x120 [ 1617.881800][T20740] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1617.881820][T20740] ? __alloc_skb+0x140/0x710 [ 1617.881842][T20740] __alloc_skb+0x140/0x710 [ 1617.881858][T20740] ? __alloc_skb+0x5b7/0x710 [ 1617.881875][T20740] ? __pfx___alloc_skb+0x10/0x10 [ 1617.881895][T20740] ? kfree_skbmem+0x19f/0x210 [ 1617.881919][T20740] nsim_dev_trap_report_work+0x2af/0xd20 [ 1617.881948][T20740] process_one_work+0xa23/0x1940 [ 1617.881974][T20740] ? __pfx_process_one_work+0x10/0x10 [ 1617.881997][T20740] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1617.882018][T20740] worker_thread+0x5ef/0xe50 [ 1617.882040][T20740] ? __pfx_worker_thread+0x10/0x10 [ 1617.882057][T20740] ? kthread+0x13a/0x450 [ 1617.882071][T20740] ? __pfx_worker_thread+0x10/0x10 [ 1617.882087][T20740] kthread+0x370/0x450 [ 1617.882102][T20740] ? __pfx_kthread+0x10/0x10 [ 1617.882119][T20740] ret_from_fork+0x72b/0xd50 [ 1617.882143][T20740] ? __pfx_ret_from_fork+0x10/0x10 [ 1617.882165][T20740] ? __switch_to+0x800/0x10f0 [ 1617.882182][T20740] ? __pfx_kthread+0x10/0x10 [ 1617.882205][T20740] ret_from_fork_asm+0x1a/0x30 [ 1617.882239][T20740] [ 1618.001025][T24819] FAULT_INJECTION: forcing a failure. [ 1618.001025][T24819] name failslab, interval 1, probability 1, space 0, times 6 [ 1618.015053][T26925] CPU: 1 UID: 0 PID: 26925 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1618.015078][T26925] Tainted: [L]=SOFTLOCKUP [ 1618.015085][T26925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1618.015100][T26925] Call Trace: [ 1618.015107][T26925] [ 1618.015114][T26925] dump_stack_lvl+0x100/0x190 [ 1618.015138][T26925] should_fail_ex.cold+0x5/0xa [ 1618.015159][T26925] should_failslab+0xc2/0x120 [ 1618.015181][T26925] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1618.015203][T26925] ? proc_alloc_inode+0x25/0x200 [ 1618.015221][T26925] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1618.015239][T26925] proc_alloc_inode+0x25/0x200 [ 1618.015256][T26925] alloc_inode+0x68/0x250 [ 1618.015278][T26925] new_inode+0x22/0x1c0 [ 1618.015302][T26925] proc_pid_make_inode+0x22/0x160 [ 1618.015319][T26925] proc_pident_instantiate+0x85/0x310 [ 1618.015339][T26925] proc_pident_lookup+0x1e3/0x270 [ 1618.015359][T26925] ? __pfx_proc_tgid_base_lookup+0x10/0x10 [ 1618.015378][T26925] path_openat+0x241f/0x4280 [ 1618.015406][T26925] ? __pfx_path_openat+0x10/0x10 [ 1618.015421][T26925] ? register_lock_class+0x40/0x560 [ 1618.015447][T26925] do_file_open+0x20e/0x430 [ 1618.015466][T26925] ? __pfx_do_file_open+0x10/0x10 [ 1618.015491][T26925] ? __pfx_kfree_link+0x10/0x10 [ 1618.015521][T26925] ? alloc_fd+0x471/0x7a0 [ 1618.015540][T26925] ? do_getname+0x191/0x390 [ 1618.015562][T26925] do_sys_openat2+0x10f/0x1e0 [ 1618.015583][T26925] ? __pfx_do_sys_openat2+0x10/0x10 [ 1618.015611][T26925] __x64_sys_openat+0x12d/0x210 [ 1618.015632][T26925] ? __pfx___x64_sys_openat+0x10/0x10 [ 1618.015660][T26925] do_syscall_64+0x115/0x870 [ 1618.015678][T26925] ? clear_bhb_loop+0x40/0x90 [ 1618.015697][T26925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.015714][T26925] RIP: 0033:0x7fa32835e6ce [ 1618.015729][T26925] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1618.015745][T26925] RSP: 002b:00007ffdc94ecd88 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1618.015761][T26925] RAX: ffffffffffffffda RBX: 0000555565e56500 RCX: 00007fa32835e6ce [ 1618.015772][T26925] RDX: 0000000000080001 RSI: 00007fa328434e44 RDI: ffffffffffffff9c [ 1618.015782][T26925] RBP: 00007fa328434e44 R08: 0000000000000000 R09: 0000000000000000 [ 1618.015792][T26925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1618.015801][T26925] R13: 00007ffdc94ece60 R14: 000000000018acc1 R15: 00007ffdc94ed3d0 [ 1618.015823][T26925] [ 1618.020462][ C1] FAULT_INJECTION: forcing a failure. [ 1618.020462][ C1] name failslab, interval 1, probability 1, space 0, times 5 [ 1618.252246][ C0] FAULT_INJECTION: forcing a failure. [ 1618.252246][ C0] name failslab, interval 1, probability 1, space 0, times 5 [ 1618.261434][ C1] CPU: 1 UID: 0 PID: 26926 Comm: syz.1.5494 Tainted: G L syzkaller #0 PREEMPT(full) [ 1618.261459][ C1] Tainted: [L]=SOFTLOCKUP [ 1618.261465][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1618.261475][ C1] Call Trace: [ 1618.261481][ C1] [ 1618.261488][ C1] dump_stack_lvl+0x100/0x190 [ 1618.261513][ C1] should_fail_ex.cold+0x5/0xa [ 1618.261534][ C1] should_failslab+0xc2/0x120 [ 1618.261556][ C1] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1618.261581][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1618.261600][ C1] ? skb_clone+0x190/0x400 [ 1618.261623][ C1] skb_clone+0x190/0x400 [ 1618.261642][ C1] ? __pfx_j1939_tp_txtimer+0x10/0x10 [ 1618.261665][ C1] j1939_tp_txtimer+0x5e2/0x26e0 [ 1618.261686][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1618.261710][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1618.261727][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1618.261752][ C1] ? __pfx_j1939_tp_txtimer+0x10/0x10 [ 1618.261776][ C1] ? mark_held_locks+0x40/0x70 [ 1618.261795][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1618.261813][ C1] ? __pfx_j1939_tp_txtimer+0x10/0x10 [ 1618.261834][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1618.261866][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 1618.261893][ C1] handle_softirqs+0x1ea/0x9b0 [ 1618.261917][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1618.261938][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1618.261962][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1618.261981][ C1] __irq_exit_rcu+0x162/0x210 [ 1618.262002][ C1] irq_exit_rcu+0x9/0x30 [ 1618.262021][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1618.262039][ C1] [ 1618.262045][ C1] [ 1618.262052][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1618.262070][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1618.262088][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 ee 27 f6 48 89 df e8 3e 3e 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 4e 17 f6 65 8b 05 4e 37 a6 08 85 c0 74 16 5b [ 1618.262102][ C1] RSP: 0018:ffffc90008007890 EFLAGS: 00000246 [ 1618.262116][ C1] RAX: 0000000000000002 RBX: ffff8880b8528400 RCX: 0000000000000040 [ 1618.262127][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 1618.262137][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 1618.262147][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888064077cc8 [ 1618.262157][ C1] R13: ffff888075286698 R14: ffff888075286000 R15: dffffc0000000000 [ 1618.262179][ C1] j1939_sk_sendmsg+0xcd9/0x1440 [ 1618.262209][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 1618.262229][ C1] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1618.262255][ C1] ____sys_sendmsg+0xa4d/0xbe0 [ 1618.262278][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 1618.262308][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1618.262335][ C1] ? rcu_is_watching+0x12/0xc0 [ 1618.262358][ C1] ? ___sys_sendmsg+0x19d/0x1e0 [ 1618.262381][ C1] ? kfree+0x1e5/0x6c0 [ 1618.262402][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1618.262426][ C1] ___sys_sendmsg+0x190/0x1e0 [ 1618.262452][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1618.262475][ C1] ? do_user_addr_fault+0x7de/0x12f0 [ 1618.262508][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1618.262534][ C1] ? __pfx___might_resched+0x10/0x10 [ 1618.262558][ C1] __sys_sendmmsg+0x20c/0x440 [ 1618.262585][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1618.262604][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 1618.262630][ C1] ? __pfx_do_futex+0x10/0x10 [ 1618.262664][ C1] ? xfd_validate_state+0x129/0x190 [ 1618.262690][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 1618.262710][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1618.262727][ C1] do_syscall_64+0x115/0x870 [ 1618.262745][ C1] ? clear_bhb_loop+0x40/0x90 [ 1618.262765][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.262781][ C1] RIP: 0033:0x7fa32839de99 [ 1618.262796][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.262810][ C1] RSP: 002b:00007fa32933d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1618.262824][ C1] RAX: ffffffffffffffda RBX: 00007fa328625fa0 RCX: 00007fa32839de99 [ 1618.262835][ C1] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000003 [ 1618.262845][ C1] RBP: 00007fa328433eaf R08: 0000000000000000 R09: 0000000000000000 [ 1618.262855][ C1] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000000 [ 1618.262864][ C1] R13: 00007fa328626038 R14: 00007fa328625fa0 R15: 00007ffdc94ecfd8 [ 1618.262886][ C1] [ 1618.262896][ C1] vxcan1: j1939_tp_txtimer: 0xffff888064077c00: tx aborted with unknown reason: -12 [ 1618.269855][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1618.269877][ C0] Tainted: [L]=SOFTLOCKUP [ 1618.269883][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1618.269891][ C0] Call Trace: [ 1618.269897][ C0] [ 1618.269902][ C0] dump_stack_lvl+0x100/0x190 [ 1618.269923][ C0] should_fail_ex.cold+0x5/0xa [ 1618.269942][ C0] should_failslab+0xc2/0x120 [ 1618.269963][ C0] __kmalloc_noprof+0xfc/0x820 [ 1618.269979][ C0] ? cfg80211_inform_single_bss_data+0x959/0x1dc0 [ 1618.270001][ C0] ? cfg80211_inform_single_bss_data+0x959/0x1dc0 [ 1618.270022][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 1618.270048][ C0] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 1618.270081][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1618.270116][ C0] ? mark_held_locks+0x40/0x70 [ 1618.270134][ C0] ? find_held_lock+0x2b/0x80 [ 1618.270157][ C0] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 1618.270181][ C0] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 1618.270204][ C0] ? rcu_is_watching+0x12/0xc0 [ 1618.270230][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 1618.270250][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 1618.270277][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1618.270298][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 1618.270322][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1618.270343][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1618.270371][ C0] ? find_held_lock+0x2b/0x80 [ 1618.270393][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1618.270409][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1618.270437][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1618.270467][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 1618.270495][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 1618.270520][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1618.270551][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 1618.270571][ C0] ieee80211_scan_rx+0x4e6/0xb60 [ 1618.270594][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1618.270616][ C0] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 1618.270644][ C0] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 1618.270669][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1618.270697][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1618.270716][ C0] ? ieee80211_clean_skb+0x1a7/0x740 [ 1618.270740][ C0] ieee80211_rx_list+0xf19/0x2160 [ 1618.270770][ C0] ? lock_acquire+0x1b9/0x370 [ 1618.270790][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1618.270820][ C0] ieee80211_rx_napi+0xdc/0x400 [ 1618.270844][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1618.270868][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1618.270886][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1618.270905][ C0] ieee80211_handle_queued_frames+0xc8/0x120 [ 1618.270929][ C0] tasklet_action_common+0x2de/0x3d0 [ 1618.270956][ C0] handle_softirqs+0x1ea/0x9b0 [ 1618.270979][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1618.271000][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1618.271023][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1618.271042][ C0] __irq_exit_rcu+0x162/0x210 [ 1618.271062][ C0] irq_exit_rcu+0x9/0x30 [ 1618.271085][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1618.271102][ C0] [ 1618.271108][ C0] [ 1618.271114][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1618.271132][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1618.271149][ C0] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1618.271163][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242 [ 1618.271175][ C0] RAX: 00000000076541f7 RBX: ffffffff8e891480 RCX: ffffffff8bbb22d5 [ 1618.271186][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 1618.271196][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 1618.271206][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 1618.271216][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 1618.271232][ C0] ? ct_kernel_exit+0x125/0x180 [ 1618.271254][ C0] default_idle+0x9/0x10 [ 1618.271272][ C0] default_idle_call+0x6c/0xb0 [ 1618.271291][ C0] do_idle+0x3a7/0x5b0 [ 1618.271313][ C0] ? __pfx_do_idle+0x10/0x10 [ 1618.271341][ C0] cpu_startup_entry+0x4f/0x60 [ 1618.271364][ C0] rest_init+0x251/0x260 [ 1618.271383][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1618.271407][ C0] start_kernel+0x48e/0x490 [ 1618.271428][ C0] x86_64_start_reservations+0x24/0x30 [ 1618.271449][ C0] x86_64_start_kernel+0x12b/0x130 [ 1618.271470][ C0] common_startup_64+0x13e/0x158 [ 1618.271505][ C0] [ 1618.968567][ C0] FAULT_INJECTION: forcing a failure. [ 1618.968567][ C0] name failslab, interval 1, probability 1, space 0, times 1 [ 1620.090270][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1620.090289][ C0] Tainted: [L]=SOFTLOCKUP [ 1620.090294][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1620.090301][ C0] Call Trace: [ 1620.090308][ C0] [ 1620.090313][ C0] dump_stack_lvl+0x100/0x190 [ 1620.090332][ C0] should_fail_ex.cold+0x5/0xa [ 1620.090347][ C0] should_failslab+0xc2/0x120 [ 1620.090363][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1620.090378][ C0] ? __alloc_skb+0x140/0x710 [ 1620.090394][ C0] __alloc_skb+0x140/0x710 [ 1620.090406][ C0] ? __alloc_skb+0x5b7/0x710 [ 1620.090418][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1620.090431][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1620.090450][ C0] skb_copy+0x1ca/0x3a0 [ 1620.090463][ C0] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 1620.090484][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 1620.090498][ C0] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 1620.090514][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1620.090530][ C0] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 1620.090546][ C0] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 1620.090562][ C0] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 1620.090587][ C0] __iterate_interfaces+0x2e6/0x650 [ 1620.090600][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1620.090616][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1620.090630][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1620.090646][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 1620.090665][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1620.090682][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1620.090705][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 1620.090723][ C0] handle_softirqs+0x1ea/0x9b0 [ 1620.090739][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1620.090754][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1620.090771][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1620.090784][ C0] __irq_exit_rcu+0x162/0x210 [ 1620.090798][ C0] irq_exit_rcu+0x9/0x30 [ 1620.090812][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1620.090825][ C0] [ 1620.090829][ C0] [ 1620.090833][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1620.090847][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1620.090859][ C0] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1620.090870][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242 [ 1620.090880][ C0] RAX: 00000000076566a7 RBX: ffffffff8e891480 RCX: ffffffff8bbb22d5 [ 1620.090887][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 1620.090894][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 1620.090901][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 1620.090907][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 1620.090918][ C0] ? ct_kernel_exit+0x125/0x180 [ 1620.090933][ C0] default_idle+0x9/0x10 [ 1620.090946][ C0] default_idle_call+0x6c/0xb0 [ 1620.090959][ C0] do_idle+0x3a7/0x5b0 [ 1620.090976][ C0] ? __pfx_do_idle+0x10/0x10 [ 1620.090995][ C0] cpu_startup_entry+0x4f/0x60 [ 1620.091011][ C0] rest_init+0x251/0x260 [ 1620.091025][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1620.091042][ C0] start_kernel+0x48e/0x490 [ 1620.091057][ C0] x86_64_start_reservations+0x24/0x30 [ 1620.091072][ C0] x86_64_start_kernel+0x12b/0x130 [ 1620.091087][ C0] common_startup_64+0x13e/0x158 [ 1620.091111][ C0] [ 1620.434834][T24819] CPU: 1 UID: 0 PID: 24819 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1620.434863][T24819] Tainted: [L]=SOFTLOCKUP [ 1620.434870][T24819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1620.434882][T24819] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1620.434910][T24819] Call Trace: [ 1620.434916][T24819] [ 1620.434924][T24819] dump_stack_lvl+0x100/0x190 [ 1620.434949][T24819] should_fail_ex.cold+0x5/0xa [ 1620.434972][T24819] should_failslab+0xc2/0x120 [ 1620.434994][T24819] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1620.435013][T24819] ? do_raw_spin_unlock+0x145/0x1e0 [ 1620.435038][T24819] ? skb_clone+0x190/0x400 [ 1620.435063][T24819] skb_clone+0x190/0x400 [ 1620.435089][T24819] batadv_iv_send_outstanding_bat_ogm_packet+0x650/0x800 [ 1620.435117][T24819] process_one_work+0xa23/0x1940 [ 1620.435143][T24819] ? __pfx_process_one_work+0x10/0x10 [ 1620.435168][T24819] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 1620.435194][T24819] worker_thread+0x5ef/0xe50 [ 1620.435221][T24819] ? __pfx_worker_thread+0x10/0x10 [ 1620.435242][T24819] ? kthread+0x13a/0x450 [ 1620.435258][T24819] ? __pfx_worker_thread+0x10/0x10 [ 1620.435277][T24819] kthread+0x370/0x450 [ 1620.435294][T24819] ? __pfx_kthread+0x10/0x10 [ 1620.435313][T24819] ret_from_fork+0x72b/0xd50 [ 1620.435339][T24819] ? __pfx_ret_from_fork+0x10/0x10 [ 1620.435366][T24819] ? __switch_to+0x800/0x10f0 [ 1620.435385][T24819] ? __pfx_kthread+0x10/0x10 [ 1620.435404][T24819] ret_from_fork_asm+0x1a/0x30 [ 1620.435443][T24819] [ 1620.787228][T25693] CPU: 1 UID: 0 PID: 25693 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1620.787249][T25693] Tainted: [L]=SOFTLOCKUP [ 1620.787253][T25693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1620.787260][T25693] Call Trace: [ 1620.787264][T25693] [ 1620.787268][T25693] dump_stack_lvl+0x100/0x190 [ 1620.787286][T25693] should_fail_ex.cold+0x5/0xa [ 1620.787301][T25693] should_failslab+0xc2/0x120 [ 1620.787316][T25693] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1620.787331][T25693] ? anon_vma_clone+0x2ba/0xcd0 [ 1620.787351][T25693] anon_vma_clone+0x2ba/0xcd0 [ 1620.787366][T25693] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 1620.787384][T25693] anon_vma_fork+0x1bb/0x6b0 [ 1620.787404][T25693] dup_mmap+0x143e/0x21b0 [ 1620.787426][T25693] ? __pfx_dup_mmap+0x10/0x10 [ 1620.787442][T25693] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1620.787457][T25693] ? __lock_acquire+0x49f/0x1a40 [ 1620.787473][T25693] ? find_held_lock+0x2b/0x80 [ 1620.787490][T25693] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1620.787516][T25693] copy_process+0x4588/0x8030 [ 1620.787540][T25693] ? __pfx_copy_process+0x10/0x10 [ 1620.787556][T25693] ? do_raw_spin_lock+0x128/0x260 [ 1620.787579][T25693] kernel_clone+0x176/0x9d0 [ 1620.787596][T25693] ? __pfx_kernel_clone+0x10/0x10 [ 1620.787616][T25693] ? find_held_lock+0x2b/0x80 [ 1620.787633][T25693] ? __might_fault+0xc5/0x140 [ 1620.787647][T25693] __do_sys_clone+0xd9/0x120 [ 1620.787663][T25693] ? __pfx___do_sys_clone+0x10/0x10 [ 1620.787691][T25693] do_syscall_64+0x115/0x870 [ 1620.787704][T25693] ? clear_bhb_loop+0x40/0x90 [ 1620.787717][T25693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.787729][T25693] RIP: 0033:0x7f2f727c6912 [ 1620.787740][T25693] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1620.787751][T25693] RSP: 002b:00007ffe33aa9e60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1620.787771][T25693] RAX: ffffffffffffffda RBX: 00007ffe33aa9e60 RCX: 00007f2f727c6912 [ 1620.787779][T25693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1620.787786][T25693] RBP: 00007ffe33aa9fec R08: 0000000000000000 R09: 0000000000000001 [ 1620.787792][T25693] R10: 00005555712337d0 R11: 0000000000000246 R12: 0000000000000001 [ 1620.787799][T25693] R13: 00000000000927c0 R14: 000000000018ac81 R15: 00007ffe33aaa040 [ 1620.787813][T25693] [ 1623.061322][ T9876] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.141857][T26961] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5505'. [ 1623.212418][T25621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1623.223615][T25621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1623.234292][T25621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1623.262581][T25621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1623.272290][T25621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1623.573411][ T9876] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.631666][T26986] overlayfs: missing 'lowerdir' [ 1625.054351][ T9876] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.255190][ T9876] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.338143][ T5808] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1625.384240][T25621] Bluetooth: hci4: command tx timeout [ 1625.520643][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1625.567015][ T5808] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1625.579252][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1625.590152][ T5808] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1625.644008][ T5808] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1625.677887][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.842205][ T5808] usb 5-1: config 0 descriptor?? [ 1626.502342][ T5808] hdpvr 5-1:0.0: firmware version 0xd9 dated Ú [ 1626.513736][ T5808] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 1626.634992][ T9876] bridge_slave_1: left allmulticast mode [ 1626.654266][ T9876] bridge_slave_1: left promiscuous mode [ 1626.667980][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.726416][ T9876] bridge_slave_0: left allmulticast mode [ 1626.762466][ T9876] bridge_slave_0: left promiscuous mode [ 1626.781021][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.014539][ T5808] hdpvr 5-1:0.0: Could not setup controls [ 1627.037869][ T5808] hdpvr 5-1:0.0: registering videodev failed [ 1627.122771][ T5808] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 1627.167550][ T5808] usb 5-1: USB disconnect, device number 42 [ 1627.828362][T25621] Bluetooth: hci4: command tx timeout [ 1628.003430][ T30] audit: type=1400 audit(1785231050.013:1217): avc: denied { write } for pid=27018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1628.041435][ T9876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1628.072842][ T9876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1628.156499][ T9876] bond0 (unregistering): Released all slaves [ 1628.200147][ T30] audit: type=1400 audit(1785231050.213:1218): avc: denied { write } for pid=27043 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1628.362481][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1628.444379][ T9876] tipc: Left network mode [ 1628.677060][ T9876] IPVS: stopping master sync thread 26264 ... [ 1628.720652][ T30] audit: type=1800 audit(1785231050.733:1219): pid=27060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5529" name="max_speed" dev="configfs" ino=129570 res=0 errno=0 [ 1628.756493][T24192] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1628.945160][T24192] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.058158][T24192] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1629.272937][T24192] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 1629.371711][T24192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.461363][T24192] usb 2-1: Product: syz [ 1629.608956][T24192] usb 2-1: Manufacturer: syz [ 1629.662724][T24192] usb 2-1: SerialNumber: syz [ 1629.766664][T27068] tipc: Started in network mode [ 1629.771608][T27068] tipc: Node identity , cluster identity 4711 [ 1629.777839][T27068] tipc: Failed to obtain node identity [ 1629.783372][T27068] tipc: Enabling of bearer rejected, failed to enable media [ 1629.864276][T16447] Bluetooth: hci4: command tx timeout [ 1630.004970][T24192] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1630.029922][T27078] evm: overlay not supported [ 1630.062835][T24192] usb 2-1: USB disconnect, device number 49 [ 1630.463942][T26963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.485896][ T30] audit: type=1400 audit(1785231052.483:1220): avc: denied { write } for pid=27059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1630.523684][T26963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.535964][T26963] bridge_slave_0: entered allmulticast mode [ 1630.586768][T26963] bridge_slave_0: entered promiscuous mode [ 1630.683497][ T9876] hsr_slave_0: left promiscuous mode [ 1630.701058][ T9876] hsr_slave_1: left promiscuous mode [ 1630.709126][ T9876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1630.724048][ T9876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.740197][ T9876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1630.748383][ T9876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1630.787266][ T30] audit: type=1400 audit(1785231052.803:1221): avc: denied { write } for pid=27089 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1630.843292][ T9876] veth1_macvtap: left promiscuous mode [ 1630.858998][ T9876] veth0_macvtap: left promiscuous mode [ 1630.884365][ T9876] veth1_vlan: left promiscuous mode [ 1630.906840][ T9876] veth0_vlan: left promiscuous mode [ 1631.015230][T22989] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1631.656517][T22989] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.684676][ T188] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1631.689520][T22989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1631.752437][T22989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1631.773369][T22989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1631.785513][T22989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1631.795677][T22989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 1631.817671][T22989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1631.827561][T22989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 1631.839211][T22989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1631.844330][ T188] usb 6-1: device descriptor read/64, error -71 [ 1631.851276][T22989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1631.865462][T22989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1631.896287][T22989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 1631.939642][T22989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1631.952233][T16447] Bluetooth: hci4: command tx timeout [ 1631.969708][T22989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1631.980129][T22989] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 1632.001962][T22989] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1632.011674][T22989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.019906][T22989] usb 5-1: Product: syz [ 1632.030814][T22989] usb 5-1: Manufacturer: syz [ 1632.032786][ T9876] team0 (unregistering): Port device team_slave_1 removed [ 1632.035525][T22989] usb 5-1: SerialNumber: syz [ 1632.063725][T27093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1632.074836][T27093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1632.083490][T27093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1632.092180][T27093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1632.094437][ T9876] team0 (unregistering): Port device team_slave_0 removed [ 1632.099581][T27093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1632.115559][T27093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1632.122908][T27093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1632.132977][T27093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1632.143032][T27093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1632.147871][ T188] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1632.150874][T27093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1632.165678][T27093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1632.191685][T22989] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 1632.215777][T22989] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 1632.249283][T22989] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1632.284788][T22989] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 1632.310211][T22989] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1632.314212][ T188] usb 6-1: device descriptor read/64, error -71 [ 1632.456652][ T188] usb usb6-port1: attempt power cycle [ 1632.538546][T26963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.548092][T18825] usb 5-1: USB disconnect, device number 43 [ 1632.555068][T26963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.568233][T26963] bridge_slave_1: entered allmulticast mode [ 1632.571209][T18825] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1632.578072][T26963] bridge_slave_1: entered promiscuous mode [ 1632.598431][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1632.635444][T18825] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1632.676183][T18825] keyspan 5-1:1.0: device disconnected [ 1632.712953][T26963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1632.737916][T26963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.818286][ T188] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1632.831769][ T30] audit: type=1800 audit(1785231054.843:1222): pid=27111 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5540" name="max_speed" dev="configfs" ino=129636 res=0 errno=0 [ 1632.854856][ T188] usb 6-1: device descriptor read/8, error -71 [ 1632.862798][T26963] team0: Port device team_slave_0 added [ 1632.874338][T26963] team0: Port device team_slave_1 added [ 1632.929097][T18825] IPVS: starting estimator thread 0... [ 1632.951376][T26963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1632.981100][T26963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.025721][T26963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1633.036573][T27116] IPVS: using max 43 ests per chain, 103200 per kthread [ 1633.055944][T26963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.105625][T26963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.124218][ T188] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1633.147654][T26963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1633.177231][ T188] usb 6-1: device descriptor read/8, error -71 [ 1633.248366][ T30] audit: type=1400 audit(1785231055.263:1223): avc: denied { write } for pid=27113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1633.286607][T26963] hsr_slave_0: entered promiscuous mode [ 1633.294644][ T188] usb usb6-port1: unable to enumerate USB device [ 1633.295072][T26963] hsr_slave_1: entered promiscuous mode [ 1633.319320][T26963] debugfs: 'hsr0' already exists in 'hsr' [ 1633.331164][T26963] Cannot create hsr debugfs directory [ 1633.425940][ T30] audit: type=1400 audit(1785231055.443:1224): avc: denied { write } for pid=27134 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.507695][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1635.412402][T27138] syz.0.5545 (27138): drop_caches: 2 [ 1635.570424][ T30] audit: type=1800 audit(1785231057.583:1225): pid=27162 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5552" name="max_speed" dev="configfs" ino=129740 res=0 errno=0 [ 1635.991738][ T30] audit: type=1400 audit(1785231058.003:1226): avc: denied { write } for pid=27153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1636.218635][ T30] audit: type=1400 audit(1785231058.233:1227): avc: denied { write } for pid=27182 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1636.397261][ T188] IPVS: starting estimator thread 0... [ 1636.508286][T27187] IPVS: using max 48 ests per chain, 115200 per kthread [ 1636.794266][ T188] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1637.004287][ T188] usb 6-1: device descriptor read/64, error -71 [ 1637.035217][T26963] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1637.059386][T26963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1637.074704][T26963] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1637.099989][T26963] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1637.283622][T26963] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1637.315886][ T188] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1637.563390][T26963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1637.659769][T26963] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1637.790653][ T188] usb 6-1: device descriptor read/64, error -71 [ 1637.969757][ T30] audit: type=1400 audit(1785231059.983:1228): avc: denied { write } for pid=27196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1638.083082][T26963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1638.204513][ T188] usb usb6-port1: attempt power cycle [ 1638.272582][ T30] audit: type=1400 audit(1785231060.283:1229): avc: denied { write } for pid=27224 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1638.336291][T26963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.377607][T12676] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1638.392762][T26963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1638.418308][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.425467][ T3367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.463479][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.470577][ T3367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.503486][ T30] audit: type=1800 audit(1785231060.513:1230): pid=27230 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5563" name="max_speed" dev="configfs" ino=130685 res=0 errno=0 [ 1638.569919][T12676] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.594212][ T188] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1638.598316][T12676] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1638.647314][ T188] usb 6-1: device descriptor read/8, error -71 [ 1638.653113][T12676] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1638.700771][T12676] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1638.728764][T12676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.767285][T12676] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1638.785711][T12676] usb 2-1: invalid MIDI out EP 0 [ 1638.977237][ T188] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1639.167780][T27251] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5566'. [ 1639.331461][T27252] overlayfs: missing 'lowerdir' [ 1639.572082][T22936] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 1639.584149][T22936] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 1639.592630][T22936] CPU: 1 UID: 0 PID: 22936 Comm: kworker/1:2H Tainted: G L syzkaller #0 PREEMPT(full) [ 1639.603720][T22936] Tainted: [L]=SOFTLOCKUP [ 1639.608028][T22936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1639.618072][T22936] Workqueue: events_highpri f_midi_in_work [ 1639.623865][T22936] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 1639.629048][T22936] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 6b 30 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 1639.648642][T22936] RSP: 0018:ffffc9000784fa28 EFLAGS: 00010006 [ 1639.654711][T22936] RAX: dffffc0000000000 RBX: ffff888045374710 RCX: ffffffff87d12f5f [ 1639.662661][T22936] RDX: 000000000000000c RSI: ffffffff87d12fd5 RDI: 0000000000000060 [ 1639.670611][T22936] RBP: ffff88802b1640e0 R08: 0000000000000005 R09: 0000000000000005 [ 1639.678558][T22936] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802b164c00 [ 1639.686510][T22936] R13: ffff888045374700 R14: ffff88802b1640d8 R15: 0000000000000000 [ 1639.694471][T22936] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 1639.703385][T22936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1639.709960][T22936] CR2: 0000001b322fdff8 CR3: 0000000029d76000 CR4: 00000000003526f0 [ 1639.717923][T22936] Call Trace: [ 1639.721192][T22936] [ 1639.724116][T22936] ? do_raw_spin_unlock+0x145/0x1e0 [ 1639.729324][T22936] usb_ep_queue+0xfa/0x3c0 [ 1639.733729][T22936] f_midi_in_work+0x9b0/0x1580 [ 1639.738482][T22936] ? __pfx_f_midi_in_work+0x10/0x10 [ 1639.743664][T22936] ? rcu_is_watching+0x12/0xc0 [ 1639.748415][T22936] process_one_work+0xa23/0x1940 [ 1639.753348][T22936] ? __pfx_process_one_work+0x10/0x10 [ 1639.758701][T22936] ? __pfx_f_midi_in_work+0x10/0x10 [ 1639.763887][T22936] worker_thread+0x5ef/0xe50 [ 1639.768460][T22936] ? __pfx_worker_thread+0x10/0x10 [ 1639.773549][T22936] ? kthread+0x13a/0x450 [ 1639.777777][T22936] ? __pfx_worker_thread+0x10/0x10 [ 1639.782866][T22936] kthread+0x370/0x450 [ 1639.786913][T22936] ? __pfx_kthread+0x10/0x10 [ 1639.791485][T22936] ret_from_fork+0x72b/0xd50 [ 1639.796060][T22936] ? __pfx_ret_from_fork+0x10/0x10 [ 1639.801162][T22936] ? __switch_to+0x800/0x10f0 [ 1639.805827][T22936] ? __pfx_kthread+0x10/0x10 [ 1639.810402][T22936] ret_from_fork_asm+0x1a/0x30 [ 1639.815157][T22936] [ 1639.818163][T22936] Modules linked in: [ 1639.822036][T22936] ---[ end trace 0000000000000000 ]--- [ 1639.827468][T22936] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 1639.832666][T22936] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 6b 30 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 1639.852251][T22936] RSP: 0018:ffffc9000784fa28 EFLAGS: 00010006 [ 1639.858293][T22936] RAX: dffffc0000000000 RBX: ffff888045374710 RCX: ffffffff87d12f5f [ 1639.866255][T22936] RDX: 000000000000000c RSI: ffffffff87d12fd5 RDI: 0000000000000060 [ 1639.874204][T22936] RBP: ffff88802b1640e0 R08: 0000000000000005 R09: 0000000000000005 [ 1639.882152][T22936] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802b164c00 [ 1639.890108][T22936] R13: ffff888045374700 R14: ffff88802b1640d8 R15: 0000000000000000 [ 1639.898056][T22936] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 1639.906964][T22936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1639.913527][T22936] CR2: 0000001b322fdff8 CR3: 0000000029d76000 CR4: 00000000003526f0 [ 1639.921482][T22936] Kernel panic - not syncing: Fatal exception [ 1639.927721][T22936] Kernel Offset: disabled [ 1639.932024][T22936] Rebooting in 86400 seconds..