last executing test programs: 13m54.024411769s ago: executing program 32 (id=1664): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 5m44.496134346s ago: executing program 1 (id=8486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x24000851}, 0x24044010) 5m44.410679309s ago: executing program 1 (id=8490): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ppoll(&(0x7f0000000340)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 5m43.481610592s ago: executing program 1 (id=8507): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x604000000000000) 5m43.432445492s ago: executing program 1 (id=8509): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) close(0x3) 5m43.220563189s ago: executing program 1 (id=8513): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m43.178882157s ago: executing program 1 (id=8515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60040880}, 0x20000000) 5m27.734534675s ago: executing program 33 (id=8515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60040880}, 0x20000000) 4m27.391176198s ago: executing program 3 (id=9430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000100)="630500020000000adf3da7b33389", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 4m27.028260344s ago: executing program 3 (id=9435): mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./trace\x00', 0x10) mount(0x0, &(0x7f0000000980)='./trace\x00', &(0x7f00000009c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./trace/events/clk/clk_rate_request_start/format\x00', 0x0, 0x140) read(r0, &(0x7f0000000180)=""/185, 0xb9) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 4m26.9818212s ago: executing program 3 (id=9438): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000014) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m26.891144354s ago: executing program 3 (id=9439): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 4m26.664524612s ago: executing program 3 (id=9445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m26.5337348s ago: executing program 6 (id=9447): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x7, 0xca900) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xe, 0xc, "fee8a2ab78fc174547f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff12001000", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000004000000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xde, 0x8000]}}) 4m26.49843604s ago: executing program 3 (id=9448): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='3', 0x1) 4m26.169797181s ago: executing program 6 (id=9452): r0 = open(&(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x400, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x20000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x40000039}) 4m25.902846414s ago: executing program 6 (id=9456): syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f00000021c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x82, 0x2, "d5c9"}, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read$alg(r0, &(0x7f0000000000)=""/46, 0x2e) 4m25.351184388s ago: executing program 6 (id=9460): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) open(&(0x7f0000000100)='./file0\x00', 0x1419c2, 0x1cf) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 4m25.311936528s ago: executing program 6 (id=9462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 4m24.73137923s ago: executing program 6 (id=9468): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rxrpc/bundles\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) read(r0, &(0x7f00000001c0)=""/4096, 0x1000) 4m24.505769028s ago: executing program 34 (id=9468): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rxrpc/bundles\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) read(r0, &(0x7f00000001c0)=""/4096, 0x1000) 4m11.410220165s ago: executing program 35 (id=9448): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='3', 0x1) 2m30.543285926s ago: executing program 8 (id=10355): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0xffffffff, 0x2, 0x3, [0x2], [0x80ffff], [0x0, 0x0, 0x0, 0x4000], [0x400000000000000]}) 2m27.259085295s ago: executing program 8 (id=10382): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 2m26.754076231s ago: executing program 8 (id=10389): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/bdi/1:0/strict_limit\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') sendfile(r0, r0, 0x0, 0x1) 2m26.302630353s ago: executing program 8 (id=10395): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="080006"], 0x24}}, 0x4) 2m26.030552622s ago: executing program 8 (id=10399): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd\x00', 0x15b) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000740)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r0, 0x0, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000800)="101784", 0x3}], 0x1) 2m25.701095661s ago: executing program 8 (id=10403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, 0x0) 2m10.404562036s ago: executing program 36 (id=10403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, 0x0) 1m15.418983529s ago: executing program 0 (id=10992): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, 0x0}, 0x20) 1m15.231251824s ago: executing program 0 (id=10993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)) 1m14.924139664s ago: executing program 0 (id=10994): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000040)=0x7fff) 1m13.82585512s ago: executing program 0 (id=11006): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 1m13.614545168s ago: executing program 0 (id=11008): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8000, 0x0, 0x0, 0x2) 1m12.735076284s ago: executing program 0 (id=11017): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 1m12.337468341s ago: executing program 37 (id=11017): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 28.108722447s ago: executing program 7 (id=11303): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x10002, 0xf, 0x3, 0x0, 0x1, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 28.009026802s ago: executing program 7 (id=11304): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x4, 0xd2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010102e8efe5ff8d102ee9010203010902c0000202073007090436c800ff44b1090904160602ff067b0709210400530122950709050310100208050a0905070910000803078a0c12f0c63f477bcacf71e4c890a136fd48a49b3a4de2b5b2c0848f4e3c6d10e2095060b5c9f1461b3c5cd5ae21bf2b826fdd1cf2396a4d98f220f611a5bd6e6ab8470eeb0a1f8d7a792e5808080dba84d29f224e73ae681c111112c2c0c9d9d158ad5a1a0955acb71cd6bb761f79cf336c783fd6b763ca0ada635460a3d4d4082b01b7aee9279d9f0c00"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x404400, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 24.795153096s ago: executing program 7 (id=11340): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) tkill(r0, 0xf) ptrace(0x4206, r0) ptrace(0x4207, r0) 23.579436798s ago: executing program 7 (id=11348): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000340)={0x3, 0xffffffff, 0x0, 0xfffff803, 0x21185045}) 20.390480344s ago: executing program 7 (id=11368): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3b94, &(0x7f0000000180)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 20.346912469s ago: executing program 7 (id=11369): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000003c0)=""/4101) 6.57430246s ago: executing program 4 (id=11434): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xa8) 6.279052768s ago: executing program 4 (id=11436): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.244763889s ago: executing program 38 (id=11369): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f00000003c0)=""/4101) 3.572844401s ago: executing program 5 (id=11458): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x98) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000140)='6', 0x1) fsopen(&(0x7f0000000180)='qnx6\x00', 0x0) 3.05907578s ago: executing program 5 (id=11459): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.928672741s ago: executing program 4 (id=11460): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, 0x0}) 2.911027201s ago: executing program 2 (id=11461): openat(0xffffffffffffff9c, &(0x7f0000001c40)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001c80)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000001cc0)='./tracing\x00', &(0x7f0000001d00)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001d40)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000002fc0)='r:s/p ./file0:0\f\\', 0x11) 2.583639429s ago: executing program 2 (id=11462): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x835b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e23, 0x4, @empty, 0x7}}, 0xffffc39b, 0x0, 0x7, 0x80000000, 0x80, 0xe35, 0x80}, &(0x7f00000002c0)=0x9c) 2.478597969s ago: executing program 4 (id=11464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000002}) epoll_pwait2(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x800001f}) 2.346306578s ago: executing program 5 (id=11465): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1a7) mount(&(0x7f0000000240)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x8410, 0x0) setxattr$incfs_metadata(&(0x7f0000000300)='./mnt\x00', &(0x7f0000000340), &(0x7f0000000380)="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", 0x1de, 0x0) 2.310434457s ago: executing program 2 (id=11466): r0 = fsopen(&(0x7f0000000440)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='source\x00', &(0x7f00000004c0)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) 2.146980198s ago: executing program 9 (id=11467): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.073164083s ago: executing program 5 (id=11468): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 2.025762134s ago: executing program 4 (id=11469): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000c00)="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", 0x114}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000740)="92dba7cc4e4fe50a93d5de1baaf50bbbf2eabd1d9a34aa9072af6fee1096e10f7d3457909b2d05533e04734c882101a130479f1f2fb09b39bb384f5d03b064388215c1f38cd1e8e12bdb765610e6cc54c60abc2b594784cd1396f265db0c564b01632a5f91d13ca786bc41ebeb64461f36154e392b7b547aef90734844c0eb73e91db70d5158d7ab57c27453b5130b2f7caa21eab57fe93fb63082b47498c60df4b211e48bd1904131fa5f42b3d3761ab6b995fb8890373aad2b8c06f5005771e07d98f76ab21fab6295ccc658883a0f2a3fef32b93c16d4dcaceeb4fb4d6f39ba860e3c157018ad6efb0b3628c8", 0xee}, {&(0x7f0000000940)="6cb9b5ed91ee06b8c1f742714fe71e004f3574425077e31b329aaaa4a64f8fa6270166d3bc30904b759c88abab7238eaa063fa30bb668dce79bcf9fb8acf55e27667a4ff5ad320fe390e13505bae1de7881f4104e5decd17d3f114552b2a6d3f4517296b8aa17bb5e26a0fe8046927833805834292581179f616d92dbefb90d76f9f7fea0391b305c1cb1ee06648ef3830ed26ddc63439afef93447e99e2d747cf37513deac72718a3d3d8087578a3dae42244248a398db533031d31127500000000000000b7c3e4e86de74c2b1d7de58d6722e6fa2263d79f9ba6bb4a742a5676164e6c1c256983ee", 0xe9}], 0x2}}], 0x2, 0xc8c0) 1.883820837s ago: executing program 9 (id=11470): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)={r2, 0x10, "fbf31f19191f5ef3471f8195e5709dd5"}, &(0x7f0000000640)=0x18) 1.618868474s ago: executing program 2 (id=11471): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x801, 0x24, 0x4, 0x179d, 0x0, 0x4}, {0x801, 0x7f, 0x7fffffff, 0x38f, 0xffffffffffffffff, 0x48bb}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000240)) 1.604331547s ago: executing program 9 (id=11472): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000200)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) 1.368024438s ago: executing program 9 (id=11473): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000200)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f00000017c0)={{@local, 0x2}, 0xf5, 0x9, 0xffffffff, 0x40}) 1.367826328s ago: executing program 5 (id=11474): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x94, &(0x7f0000000040)={0x1, 0x10000, 0x1}}) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, 0x0) ioctl$BLKPG(r0, 0xc00c4d04, 0x0) 1.1677218s ago: executing program 2 (id=11475): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x693d, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0x4, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x8007f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x4, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x102, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x2, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x0, 0x0, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x200008, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x10000003, 0x0, 0x0, 0xffff1e04, 0x3], [0xfffffffd, 0x3, 0x6, 0x6, 0x0, 0x2, 0x3, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x4, 0x400000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x2, 0x40002, 0xffffffff, 0x1c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x0, 0xb78b, 0xfa, 0x0, 0x0, 0x3, 0x3, 0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5cecd0d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10005, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x2008000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 1.120409292s ago: executing program 9 (id=11476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) set_mempolicy(0x3, &(0x7f0000002340)=0x4002000ff9, 0xf) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.006716932s ago: executing program 4 (id=11477): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000380), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) 857.116911ms ago: executing program 2 (id=11478): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000019500)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000019540)={0x24, &(0x7f00000195c0)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 589.407045ms ago: executing program 9 (id=11479): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) dup(0xffffffffffffffff) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0xe) 0s ago: executing program 5 (id=11480): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='res', 0x3) kernel console output (not intermixed with test programs): .918402][ T2261] usb 3-1: Using ep0 maxpacket: 32 [ 895.939762][ T2261] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 896.051788][ T2261] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 896.051819][ T2261] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 896.051832][ T2261] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.051853][ T2261] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 896.051889][ T2261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.681247][ T2261] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 896.845646][ T2261] usb 8-1: Using ep0 maxpacket: 32 [ 896.848234][ T2261] usb 8-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 896.848271][ T2261] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 896.849130][ T2261] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 896.849155][ T2261] usb 8-1: config 0 has no interface number 0 [ 896.849188][ T2261] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 896.849201][ T2261] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 896.867610][ T2261] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 896.867639][ T2261] usb 8-1: config 0 has no interface number 0 [ 896.867679][ T2261] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 896.867703][ T2261] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 896.961653][ T2261] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 896.961681][ T2261] usb 8-1: config 0 has no interface number 0 [ 896.961714][ T2261] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 896.961727][ T2261] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 896.963122][ T2261] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 896.963140][ T2261] usb 8-1: config 0 has no interface number 0 [ 896.963172][ T2261] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 896.963195][ T2261] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 896.967354][ T2261] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 896.967382][ T2261] usb 8-1: config 0 has no interface number 0 [ 896.967419][ T2261] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 896.967432][ T2261] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 896.969164][ T2261] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 896.969190][ T2261] usb 8-1: config 0 has no interface number 0 [ 896.969222][ T2261] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 896.969235][ T2261] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 897.027756][ T2261] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 897.027785][ T2261] usb 8-1: config 0 has no interface number 0 [ 897.027822][ T2261] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.027847][ T2261] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 897.090821][ T2261] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 897.090840][ T2261] usb 8-1: config 0 has no interface number 0 [ 897.090873][ T2261] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.090895][ T2261] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 897.248344][ T2261] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.248362][ T2261] usb 8-1: Product: syz [ 897.248381][ T2261] usb 8-1: Manufacturer: syz [ 897.248390][ T2261] usb 8-1: SerialNumber: syz [ 897.323612][ T2261] usb 10-1: USB disconnect, device number 2 [ 897.652922][T31089] netlink: 'syz.5.10706': attribute type 5 has an invalid length. [ 897.652948][T31089] netlink: 'syz.5.10706': attribute type 9 has an invalid length. [ 897.652957][T31089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10706'. [ 897.810136][ T2261] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 897.962545][ T2261] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 897.963629][ T2261] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.963657][ T2261] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.963670][ T2261] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 897.963704][ T2261] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.463298][ T2261] usb 3-1: USB disconnect, device number 62 [ 898.761926][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 898.853538][T31100] bridge_slave_1 (unregistering): left allmulticast mode [ 898.853569][T31100] bridge_slave_1 (unregistering): left promiscuous mode [ 898.853644][T31100] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.461186][ T5706] usb 8-1: USB disconnect, device number 15 [ 900.639365][ T5822] usb 10-1: USB disconnect, device number 3 [ 901.891713][ T5706] kernel read not supported for file /trace_pipe (pid: 5706 comm: kworker/0:4) [ 902.066857][T31183] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10750'. [ 902.066893][T31183] netlink: 'syz.9.10750': attribute type 5 has an invalid length. [ 902.066902][T31183] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10750'. [ 902.123135][T31185] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10750'. [ 902.123169][T31185] netlink: 'syz.9.10750': attribute type 5 has an invalid length. [ 902.123187][T31185] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10750'. [ 902.170033][ T85] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.181366][ T85] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.181405][ T85] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.181436][ T85] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.281340][ T2261] page_pool_release_retry() stalled pool shutdown: id 201, 1 inflight 60 sec [ 902.300675][ T5706] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 902.463690][ T5706] usb 3-1: not running at top speed; connect to a high speed hub [ 902.463728][ T5706] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 902.464584][ T5706] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.464629][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.030700][ T5706] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 903.183145][ T5706] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 903.184477][ T5706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.184497][ T5706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.184520][ T5706] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 903.184552][ T5706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.997416][ T85] IPVS: starting estimator thread 0... [ 904.079739][T31209] IPVS: using max 64 ests per chain, 153600 per kthread [ 904.353205][T31219] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10765'. [ 904.666053][T31225] FAULT_INJECTION: forcing a failure. [ 904.666053][T31225] name failslab, interval 1, probability 0, space 0, times 0 [ 904.666179][T31225] CPU: 0 UID: 0 PID: 31225 Comm: syz.7.10767 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.666199][T31225] Tainted: [L]=SOFTLOCKUP [ 904.666203][T31225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 904.666212][T31225] Call Trace: [ 904.666217][T31225] [ 904.666222][T31225] dump_stack_lvl+0x100/0x190 [ 904.666247][T31225] should_fail_ex.cold+0x5/0xa [ 904.666267][T31225] should_failslab+0xc2/0x120 [ 904.666284][T31225] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 904.666300][T31225] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 904.666318][T31225] ? __d_alloc+0x35/0xa50 [ 904.666332][T31225] __d_alloc+0x35/0xa50 [ 904.666345][T31225] d_alloc_pseudo+0x1c/0xc0 [ 904.666359][T31225] alloc_file_pseudo+0x118/0x290 [ 904.666372][T31225] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 904.666389][T31225] create_pipe_files+0x360/0x970 [ 904.666408][T31225] do_pipe2+0xbd/0x1e0 [ 904.666427][T31225] ? __pfx_do_pipe2+0x10/0x10 [ 904.666450][T31225] __x64_sys_pipe+0x33/0x50 [ 904.666467][T31225] do_syscall_64+0x123/0x790 [ 904.666486][T31225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.666499][T31225] RIP: 0033:0x7ff37e99e559 [ 904.666511][T31225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.666523][T31225] RSP: 002b:00007ff37f801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 904.666535][T31225] RAX: ffffffffffffffda RBX: 00007ff37ec25fa0 RCX: 00007ff37e99e559 [ 904.666543][T31225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 904.666550][T31225] RBP: 00007ff37ea358b0 R08: 0000000000000000 R09: 0000000000000000 [ 904.666557][T31225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.666564][T31225] R13: 00007ff37ec26038 R14: 00007ff37ec25fa0 R15: 00007ffdbe0ab578 [ 904.666581][T31225] [ 905.086341][ T190] usb 3-1: USB disconnect, device number 63 [ 905.255988][ T2261] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 905.420937][ T2261] usb 10-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 905.422242][ T2261] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.422271][ T2261] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 905.422287][ T2261] usb 10-1: config 0 interface 0 has no altsetting 0 [ 905.422315][ T2261] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.621387][ T190] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 905.771402][ T190] usb 3-1: not running at top speed; connect to a high speed hub [ 905.771434][ T190] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 905.772735][ T190] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 905.772773][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.887465][ T190] usb 6-1: USB disconnect, device number 69 [ 906.210566][ T52] Bluetooth: hci2: Invalid handle: 0x3800 > 0x0eff [ 906.866086][T31264] FAULT_INJECTION: forcing a failure. [ 906.866086][T31264] name failslab, interval 1, probability 0, space 0, times 0 [ 906.866121][T31264] CPU: 0 UID: 0 PID: 31264 Comm: syz.5.10784 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.866141][T31264] Tainted: [L]=SOFTLOCKUP [ 906.866146][T31264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 906.866157][T31264] Call Trace: [ 906.866162][T31264] [ 906.866167][T31264] dump_stack_lvl+0x100/0x190 [ 906.866190][T31264] should_fail_ex.cold+0x5/0xa [ 906.866209][T31264] should_failslab+0xc2/0x120 [ 906.866227][T31264] __kmalloc_cache_noprof+0x91/0x6d0 [ 906.866239][T31264] ? kasan_save_track+0x14/0x30 [ 906.866254][T31264] ? ovl_init_fs_context+0x52/0x630 [ 906.866274][T31264] ovl_init_fs_context+0x52/0x630 [ 906.866298][T31264] alloc_fs_context+0x60c/0xf40 [ 906.866317][T31264] __x64_sys_fsopen+0xed/0x220 [ 906.866333][T31264] do_syscall_64+0x123/0x790 [ 906.866351][T31264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.866364][T31264] RIP: 0033:0x7fb178f9e559 [ 906.866374][T31264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.866386][T31264] RSP: 002b:00007fb179ee5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 906.866399][T31264] RAX: ffffffffffffffda RBX: 00007fb179225fa0 RCX: 00007fb178f9e559 [ 906.866407][T31264] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0 [ 906.866414][T31264] RBP: 00007fb1790358b0 R08: 0000000000000000 R09: 0000000000000000 [ 906.866421][T31264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.866428][T31264] R13: 00007fb179226038 R14: 00007fb179225fa0 R15: 00007ffc34d1de08 [ 906.866445][T31264] [ 907.103541][T31266] i2c i2c-0: delete_device: Can't parse I2C address [ 907.282643][T31274] rxe_eth0 speed is unknown, defaulting to 1000 [ 907.362149][ T31] audit: type=1326 audit(1792066629.324:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31273 comm="syz.0.10790" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f860b99e559 code=0x0 [ 907.783528][T31281] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 908.040697][ T2261] usb 10-1: USB disconnect, device number 4 [ 908.282066][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 908.425652][T31291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10793'. [ 908.571814][ T190] usb 3-1: USB disconnect, device number 64 [ 909.422645][T31314] smc: net device lo applied user defined pnetid SYZ2 [ 909.442971][T31314] smc: net device lo erased user defined pnetid SYZ2 [ 909.712915][T31321] FAULT_INJECTION: forcing a failure. [ 909.712915][T31321] name failslab, interval 1, probability 0, space 0, times 0 [ 909.712953][T31321] CPU: 0 UID: 0 PID: 31321 Comm: syz.5.10807 Tainted: G L syzkaller #0 PREEMPT(full) [ 909.712973][T31321] Tainted: [L]=SOFTLOCKUP [ 909.712978][T31321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 909.712986][T31321] Call Trace: [ 909.712991][T31321] [ 909.712997][T31321] dump_stack_lvl+0x100/0x190 [ 909.713020][T31321] should_fail_ex.cold+0x5/0xa [ 909.713040][T31321] should_failslab+0xc2/0x120 [ 909.713057][T31321] __kmalloc_cache_noprof+0x91/0x6d0 [ 909.713078][T31321] ? syslog_print+0xf8/0x620 [ 909.713101][T31321] syslog_print+0xf8/0x620 [ 909.713116][T31321] ? avc_has_perm_noaudit+0x11e/0x470 [ 909.713130][T31321] ? __pfx_syslog_print+0x10/0x10 [ 909.713145][T31321] ? avc_has_perm_noaudit+0x145/0x470 [ 909.713160][T31321] ? avc_has_perm+0x135/0x1e0 [ 909.713183][T31321] do_syslog+0x5bd/0x6d0 [ 909.713200][T31321] ? __pfx_do_syslog+0x10/0x10 [ 909.713226][T31321] __x64_sys_syslog+0x74/0xb0 [ 909.713241][T31321] ? lockdep_hardirqs_on+0x7d/0x110 [ 909.713257][T31321] do_syscall_64+0x123/0x790 [ 909.713276][T31321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.713289][T31321] RIP: 0033:0x7fb178f9e559 [ 909.713300][T31321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.713312][T31321] RSP: 002b:00007fb179ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 909.713324][T31321] RAX: ffffffffffffffda RBX: 00007fb179225fa0 RCX: 00007fb178f9e559 [ 909.713331][T31321] RDX: 0000000000000013 RSI: 0000200000000180 RDI: 0000000000000002 [ 909.713339][T31321] RBP: 00007fb1790358b0 R08: 0000000000000000 R09: 0000000000000000 [ 909.713346][T31321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.713353][T31321] R13: 00007fb179226038 R14: 00007fb179225fa0 R15: 00007ffc34d1de08 [ 909.713370][T31321] [ 910.053172][T31323] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input124 [ 910.187706][T31330] FAULT_INJECTION: forcing a failure. [ 910.187706][T31330] name failslab, interval 1, probability 0, space 0, times 0 [ 910.187742][T31330] CPU: 0 UID: 0 PID: 31330 Comm: syz.7.10810 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.187760][T31330] Tainted: [L]=SOFTLOCKUP [ 910.187765][T31330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 910.187773][T31330] Call Trace: [ 910.187777][T31330] [ 910.187782][T31330] dump_stack_lvl+0x100/0x190 [ 910.187806][T31330] should_fail_ex.cold+0x5/0xa [ 910.187824][T31330] should_failslab+0xc2/0x120 [ 910.187843][T31330] __kmalloc_noprof+0xfc/0x840 [ 910.187858][T31330] ? trace_kmalloc+0xeb/0x110 [ 910.187875][T31330] ? lsm_blob_alloc+0x68/0x90 [ 910.187891][T31330] lsm_blob_alloc+0x68/0x90 [ 910.187904][T31330] security_sk_alloc+0x2d/0x290 [ 910.187919][T31330] sk_prot_alloc+0x12a/0x2a0 [ 910.187936][T31330] sk_alloc+0x36/0xe80 [ 910.187954][T31330] packet_create+0x127/0x8e0 [ 910.187969][T31330] __sock_create+0x339/0x860 [ 910.187988][T31330] __sys_socket+0x14d/0x260 [ 910.188003][T31330] ? __pfx___sys_socket+0x10/0x10 [ 910.188025][T31330] __x64_sys_socket+0x72/0xb0 [ 910.188041][T31330] ? lockdep_hardirqs_on+0x7d/0x110 [ 910.188058][T31330] do_syscall_64+0x123/0x790 [ 910.188076][T31330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.188088][T31330] RIP: 0033:0x7ff37e99e559 [ 910.188099][T31330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.188110][T31330] RSP: 002b:00007ff37f801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 910.188122][T31330] RAX: ffffffffffffffda RBX: 00007ff37ec25fa0 RCX: 00007ff37e99e559 [ 910.188130][T31330] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 910.188137][T31330] RBP: 00007ff37ea358b0 R08: 0000000000000000 R09: 0000000000000000 [ 910.188145][T31330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.188151][T31330] R13: 00007ff37ec26038 R14: 00007ff37ec25fa0 R15: 00007ffdbe0ab578 [ 910.188168][T31330] [ 910.332380][ T2261] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 910.534118][ T2261] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 910.538430][ T2261] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.538471][ T2261] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.538494][ T2261] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 910.538509][ T2261] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 910.605974][ T2261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.606003][ T2261] usb 3-1: Product: syz [ 910.606012][ T2261] usb 3-1: Manufacturer: syz [ 910.606030][ T2261] usb 3-1: SerialNumber: syz [ 911.048035][T31341] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10815'. [ 911.137171][T31344] FAULT_INJECTION: forcing a failure. [ 911.137171][T31344] name failslab, interval 1, probability 0, space 0, times 0 [ 911.137209][T31344] CPU: 0 UID: 0 PID: 31344 Comm: syz.5.10816 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.137227][T31344] Tainted: [L]=SOFTLOCKUP [ 911.137239][T31344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 911.137247][T31344] Call Trace: [ 911.137252][T31344] [ 911.137257][T31344] dump_stack_lvl+0x100/0x190 [ 911.137281][T31344] should_fail_ex.cold+0x5/0xa [ 911.137300][T31344] should_failslab+0xc2/0x120 [ 911.137318][T31344] __kmalloc_cache_noprof+0x91/0x6d0 [ 911.137332][T31344] ? copy_cgroup_ns+0x1ff/0x970 [ 911.137352][T31344] copy_cgroup_ns+0x1ff/0x970 [ 911.137370][T31344] create_new_namespaces+0x34a/0xac0 [ 911.137392][T31344] unshare_nsproxy_namespaces+0xf2/0x220 [ 911.137408][T31344] ksys_unshare+0x4a2/0xb30 [ 911.137423][T31344] ? __pfx_ksys_unshare+0x10/0x10 [ 911.137444][T31344] __x64_sys_unshare+0x31/0x40 [ 911.137458][T31344] do_syscall_64+0x123/0x790 [ 911.137476][T31344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.137489][T31344] RIP: 0033:0x7fb178f9e559 [ 911.137499][T31344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.137512][T31344] RSP: 002b:00007fb179ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 911.137524][T31344] RAX: ffffffffffffffda RBX: 00007fb179225fa0 RCX: 00007fb178f9e559 [ 911.137532][T31344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002040400 [ 911.137539][T31344] RBP: 00007fb1790358b0 R08: 0000000000000000 R09: 0000000000000000 [ 911.137545][T31344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.137552][T31344] R13: 00007fb179226038 R14: 00007fb179225fa0 R15: 00007ffc34d1de08 [ 911.137569][T31344] [ 911.530384][T31348] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 911.535933][ T43] IPVS: starting estimator thread 0... [ 911.620775][T31356] IPVS: using max 64 ests per chain, 153600 per kthread [ 912.058439][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 912.246951][T31376] mac80211_hwsim hwsim13 syzkaller1: entered promiscuous mode [ 912.246980][T31376] mac80211_hwsim hwsim13 syzkaller1: entered allmulticast mode [ 912.532036][T31384] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 912.532064][T31384] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 912.567434][T31384] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 912.785535][T31389] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 913.037011][ T2261] usb 3-1: USB disconnect, device number 65 [ 913.842837][T31415] Invalid argument reading file caps for ./file0 [ 914.080385][T31418] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 914.540486][ T2261] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 914.721241][ T2261] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 914.722119][ T2261] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.191550][T31441] FAULT_INJECTION: forcing a failure. [ 916.191550][T31441] name failslab, interval 1, probability 0, space 0, times 0 [ 916.191587][T31441] CPU: 0 UID: 0 PID: 31441 Comm: syz.0.10863 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.191607][T31441] Tainted: [L]=SOFTLOCKUP [ 916.191611][T31441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 916.191619][T31441] Call Trace: [ 916.191624][T31441] [ 916.191630][T31441] dump_stack_lvl+0x100/0x190 [ 916.191654][T31441] should_fail_ex.cold+0x5/0xa [ 916.191681][T31441] should_failslab+0xc2/0x120 [ 916.191700][T31441] __kmalloc_noprof+0xfc/0x840 [ 916.191717][T31441] ? udpv6_init_sock+0x24e/0x450 [ 916.191737][T31441] udpv6_init_sock+0x24e/0x450 [ 916.191752][T31441] ? __pfx_udpv6_init_sock+0x10/0x10 [ 916.191768][T31441] inet6_create+0xb1a/0x12b0 [ 916.191789][T31441] ? inet6_create+0x7f/0x12b0 [ 916.191809][T31441] __sock_create+0x339/0x860 [ 916.191828][T31441] __sys_socket+0x14d/0x260 [ 916.191843][T31441] ? __pfx___sys_socket+0x10/0x10 [ 916.191863][T31441] __x64_sys_socket+0x72/0xb0 [ 916.191878][T31441] ? lockdep_hardirqs_on+0x7d/0x110 [ 916.191896][T31441] do_syscall_64+0x123/0x790 [ 916.191915][T31441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.191927][T31441] RIP: 0033:0x7f860b99e559 [ 916.191938][T31441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.191950][T31441] RSP: 002b:00007f860c94f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 916.191961][T31441] RAX: ffffffffffffffda RBX: 00007f860bc25fa0 RCX: 00007f860b99e559 [ 916.191969][T31441] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 916.191976][T31441] RBP: 00007f860ba358b0 R08: 0000000000000000 R09: 0000000000000000 [ 916.191983][T31441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.191990][T31441] R13: 00007f860bc26038 R14: 00007f860bc25fa0 R15: 00007ffce8561548 [ 916.192007][T31441] [ 917.341449][ T190] usb 10-1: USB disconnect, device number 5 [ 918.583891][T31491] loop5: detected capacity change from 0 to 7 [ 918.585624][T31491] Dev loop5: unable to read RDB block 7 [ 918.585660][T31491] loop5: unable to read partition table [ 918.585820][T31491] loop5: partition table beyond EOD, truncated [ 918.588313][T31491] loop_reread_partitions: partition scan of loop5 (þ被xü“ŸÑà– ) failed (rc=-5) [ 918.696863][T31493] FAULT_INJECTION: forcing a failure. [ 918.696863][T31493] name failslab, interval 1, probability 0, space 0, times 0 [ 918.696898][T31493] CPU: 0 UID: 0 PID: 31493 Comm: syz.2.10877 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.696918][T31493] Tainted: [L]=SOFTLOCKUP [ 918.696923][T31493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 918.696931][T31493] Call Trace: [ 918.696936][T31493] [ 918.696942][T31493] dump_stack_lvl+0x100/0x190 [ 918.696965][T31493] should_fail_ex.cold+0x5/0xa [ 918.696985][T31493] should_failslab+0xc2/0x120 [ 918.697002][T31493] __kmalloc_noprof+0xfc/0x840 [ 918.697018][T31493] ? lsm_blob_alloc+0x68/0x90 [ 918.697035][T31493] lsm_blob_alloc+0x68/0x90 [ 918.697047][T31493] security_sk_alloc+0x2d/0x290 [ 918.697063][T31493] sk_prot_alloc+0x1d1/0x2a0 [ 918.697079][T31493] sk_alloc+0x36/0xe80 [ 918.697097][T31493] tipc_sk_create+0xfc/0x2400 [ 918.697112][T31493] ? selinux_inode_alloc_security+0x109/0x290 [ 918.697129][T31493] ? lock_acquire+0x1d1/0x380 [ 918.697144][T31493] ? __sock_create+0x163/0x860 [ 918.697159][T31493] ? __sock_create+0x2f3/0x860 [ 918.697173][T31493] ? __sock_create+0x2f3/0x860 [ 918.697190][T31493] __sock_create+0x339/0x860 [ 918.697208][T31493] __sys_socketpair+0x261/0x5b0 [ 918.697224][T31493] ? __pfx___sys_socketpair+0x10/0x10 [ 918.697241][T31493] ? xfd_validate_state+0x129/0x190 [ 918.697259][T31493] __x64_sys_socketpair+0x96/0x100 [ 918.697274][T31493] ? lockdep_hardirqs_on+0x7d/0x110 [ 918.697291][T31493] do_syscall_64+0x123/0x790 [ 918.697309][T31493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.697322][T31493] RIP: 0033:0x7f377d79e559 [ 918.697333][T31493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.697343][T31493] RSP: 002b:00007f377b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 918.697355][T31493] RAX: ffffffffffffffda RBX: 00007f377da25fa0 RCX: 00007f377d79e559 [ 918.697363][T31493] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 918.697370][T31493] RBP: 00007f377d8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 918.697377][T31493] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000000 [ 918.697384][T31493] R13: 00007f377da26038 R14: 00007f377da25fa0 R15: 00007ffcc8c45598 [ 918.697401][T31493] [ 918.817579][ T52] block nbd9: Receive control failed (result -32) [ 919.024984][T31477] block nbd9: shutting down sockets [ 919.202631][T31498] ima: signed policy file (specified as an absolute pathname) required [ 919.202817][ T31] audit: type=1802 audit(1792066641.164:1380): pid=31498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=signed policy required comm="syz.0.10879" res=0 errno=0 [ 919.247459][T31498] ima: policy update failed [ 919.247685][ T31] audit: type=1802 audit(1792066641.204:1381): pid=31498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.10879" res=0 errno=0 [ 919.760954][T31507] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.764905][T31507] team_slave_0: entered promiscuous mode [ 919.767499][T31507] team_slave_1: entered promiscuous mode [ 920.399502][T31507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 920.524067][T31507] 8021q: adding VLAN 0 to HW filter on device b [ 920.544122][T31507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 920.549583][T31507] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 920.595311][T31507] A link change request failed with some changes committed already. Interface syzkaller1 may have been left with an inconsistent configuration, please check. [ 920.963865][T31533] ip_tables: iptables: counters copy to user failed while replacing table [ 921.025378][T31531] ceph: No mds server is up or the cluster is laggy [ 921.753957][ T190] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 921.921938][ T190] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 921.922849][ T190] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 921.922875][ T190] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 921.922886][ T190] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 921.922907][ T190] usb 8-1: config 220 has no interface number 2 [ 921.922947][ T190] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 921.922971][ T190] usb 8-1: config 220 interface 0 has no altsetting 0 [ 921.922981][ T190] usb 8-1: config 220 interface 76 has no altsetting 0 [ 921.923000][ T190] usb 8-1: config 220 interface 1 has no altsetting 0 [ 921.925328][ T190] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.925345][ T190] usb 8-1: Product: syz [ 921.925363][ T190] usb 8-1: Manufacturer: syz [ 921.925373][ T190] usb 8-1: SerialNumber: syz [ 922.415141][ T190] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 922.571267][ T190] usb 3-1: Using ep0 maxpacket: 16 [ 922.571889][ T190] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 922.574352][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.574367][ T190] usb 3-1: Product: syz [ 922.574387][ T190] usb 3-1: Manufacturer: syz [ 922.574396][ T190] usb 3-1: SerialNumber: syz [ 923.315159][T31590] rxe_eth0 speed is unknown, defaulting to 1000 [ 923.732355][T31602] FAULT_INJECTION: forcing a failure. [ 923.732355][T31602] name failslab, interval 1, probability 0, space 0, times 0 [ 923.732389][T31602] CPU: 0 UID: 0 PID: 31602 Comm: syz.0.10922 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.732409][T31602] Tainted: [L]=SOFTLOCKUP [ 923.732414][T31602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 923.732422][T31602] Call Trace: [ 923.732427][T31602] [ 923.732433][T31602] dump_stack_lvl+0x100/0x190 [ 923.732456][T31602] should_fail_ex.cold+0x5/0xa [ 923.732474][T31602] should_failslab+0xc2/0x120 [ 923.732493][T31602] __kmalloc_noprof+0xfc/0x840 [ 923.732507][T31602] ? kasan_save_track+0x14/0x30 [ 923.732523][T31602] ? realloc_user_queue+0xe9/0x300 [ 923.732541][T31602] realloc_user_queue+0xe9/0x300 [ 923.732556][T31602] ? __pfx_snd_timer_user_open+0x10/0x10 [ 923.732570][T31602] snd_timer_user_open+0xe4/0x160 [ 923.732583][T31602] snd_open+0x201/0x450 [ 923.732596][T31602] ? __pfx_snd_open+0x10/0x10 [ 923.732608][T31602] chrdev_open+0x234/0x6a0 [ 923.732626][T31602] ? __pfx_chrdev_open+0x10/0x10 [ 923.732642][T31602] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 923.732659][T31602] do_dentry_open+0x6ab/0x14d0 [ 923.732673][T31602] ? __pfx_chrdev_open+0x10/0x10 [ 923.732693][T31602] vfs_open+0x82/0x3f0 [ 923.732712][T31602] path_openat+0x19fa/0x2440 [ 923.732731][T31602] ? __pfx_path_openat+0x10/0x10 [ 923.732753][T31602] do_file_open+0x20e/0x430 [ 923.732771][T31602] ? __pfx_do_file_open+0x10/0x10 [ 923.732799][T31602] ? _raw_spin_unlock+0x28/0x50 [ 923.732814][T31602] ? alloc_fd+0x471/0x7a0 [ 923.732835][T31602] do_sys_openat2+0x10f/0x1e0 [ 923.732847][T31602] ? __pfx_do_sys_openat2+0x10/0x10 [ 923.732864][T31602] __x64_sys_openat+0x12d/0x210 [ 923.732876][T31602] ? __pfx___x64_sys_openat+0x10/0x10 [ 923.732894][T31602] do_syscall_64+0x123/0x790 [ 923.732912][T31602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.732924][T31602] RIP: 0033:0x7f860b99e559 [ 923.732935][T31602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.732946][T31602] RSP: 002b:00007f860c94f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 923.732958][T31602] RAX: ffffffffffffffda RBX: 00007f860bc25fa0 RCX: 00007f860b99e559 [ 923.732973][T31602] RDX: 0000000000008080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 923.732981][T31602] RBP: 00007f860ba358b0 R08: 0000000000000000 R09: 0000000000000000 [ 923.732989][T31602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.732997][T31602] R13: 00007f860bc26038 R14: 00007f860bc25fa0 R15: 00007ffce8561548 [ 923.733016][T31602] [ 924.478885][ T2261] usb 8-1: USB disconnect, device number 16 [ 924.640432][T31615] ip_tables: iptables: counters copy to user failed while replacing table [ 924.651525][T31615] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 924.923756][T31594] netlink: 'syz.5.10917': attribute type 12 has an invalid length. [ 925.100164][ T2261] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 925.200723][ T9912] usb 3-1: USB disconnect, device number 66 [ 925.261751][ T2261] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 925.262602][ T2261] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.264326][ T2261] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.264353][ T2261] usb 10-1: Product: syz [ 925.264363][ T2261] usb 10-1: Manufacturer: syz [ 925.264371][ T2261] usb 10-1: SerialNumber: syz [ 925.321808][ T190] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 925.505982][ T190] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 925.519774][ T190] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.519827][ T190] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.386017][T31644] x_tables: ip6_tables: CT target: only valid in raw table, not  [ 926.599065][T31652] FAULT_INJECTION: forcing a failure. [ 926.599065][T31652] name fail_futex, interval 1, probability 0, space 0, times 1 [ 926.599094][T31652] CPU: 0 UID: 0 PID: 31652 Comm: syz.2.10944 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.599112][T31652] Tainted: [L]=SOFTLOCKUP [ 926.599116][T31652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 926.599125][T31652] Call Trace: [ 926.599130][T31652] [ 926.599136][T31652] dump_stack_lvl+0x100/0x190 [ 926.599160][T31652] should_fail_ex.cold+0x5/0xa [ 926.599176][T31652] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 926.599196][T31652] should_fail_futex+0x4c/0x60 [ 926.599214][T31652] __x64_sys_futex+0x1f0/0x4d0 [ 926.599234][T31652] ? __pfx___x64_sys_futex+0x10/0x10 [ 926.599258][T31652] do_syscall_64+0x123/0x790 [ 926.599276][T31652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.599288][T31652] RIP: 0033:0x7f377d79e559 [ 926.599299][T31652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.599310][T31652] RSP: 002b:00007f377b9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 926.599322][T31652] RAX: ffffffffffffffda RBX: 00007f377da25fa0 RCX: 00007f377d79e559 [ 926.599331][T31652] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000000000 [ 926.599339][T31652] RBP: 00007f377d8358b0 R08: 0000000000000000 R09: 0000000000000002 [ 926.599347][T31652] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000000 [ 926.599355][T31652] R13: 00007f377da26038 R14: 00007f377da25fa0 R15: 00007ffcc8c45598 [ 926.599372][T31652] [ 926.957349][ T31] audit: type=1400 audit(1792066648.914:1382): avc: denied { mounton } for pid=31657 comm="syz.5.10947" path="/1721/proc_mnt/sys/net/ipv4/conf/lo/forwarding" dev="proc" ino=132605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 927.143761][T31664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10950'. [ 927.147029][T31663] loop9: detected capacity change from 0 to 1 [ 927.176961][T31663] Dev loop9: unable to read RDB block 1 [ 927.177000][T31663] loop9: unable to read partition table [ 927.177151][T31663] loop9: partition table beyond EOD, truncated [ 927.177163][T31663] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 927.215669][T31664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10950'. [ 927.393731][ T31] audit: type=1400 audit(1792066649.344:1383): avc: denied { write } for pid=31665 comm="syz.5.10952" name="functions" dev="configfs" ino=94421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 927.545159][T31671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10953'. [ 927.545443][T31671] 8021q: VLANs not supported on lo [ 927.704986][T31677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 927.913012][ T9912] usb 10-1: USB disconnect, device number 6 [ 928.135653][ T2261] usb 8-1: USB disconnect, device number 17 [ 928.542172][T31699] FAULT_INJECTION: forcing a failure. [ 928.542172][T31699] name failslab, interval 1, probability 0, space 0, times 0 [ 928.542206][T31699] CPU: 0 UID: 0 PID: 31699 Comm: syz.9.10965 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.542227][T31699] Tainted: [L]=SOFTLOCKUP [ 928.542232][T31699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 928.542240][T31699] Call Trace: [ 928.542245][T31699] [ 928.542250][T31699] dump_stack_lvl+0x100/0x190 [ 928.542274][T31699] should_fail_ex.cold+0x5/0xa [ 928.542294][T31699] should_failslab+0xc2/0x120 [ 928.542312][T31699] __kmalloc_cache_noprof+0x91/0x6d0 [ 928.542332][T31699] ? lockdep_hardirqs_on+0x7d/0x110 [ 928.542350][T31699] ? snd_seq_create_port+0xcd/0x4f0 [ 928.542367][T31699] snd_seq_create_port+0xcd/0x4f0 [ 928.542380][T31699] snd_seq_ioctl_create_port+0x250/0x9e0 [ 928.542401][T31699] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 928.542422][T31699] ? lock_release+0x19e/0x310 [ 928.542439][T31699] call_seq_client_ctl+0xa3/0x130 [ 928.542459][T31699] snd_seq_kernel_client_ctl+0x35/0x50 [ 928.542473][T31699] create_port+0x19b/0x270 [ 928.542485][T31699] ? __pfx_create_port+0x10/0x10 [ 928.542503][T31699] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 928.542517][T31699] ? __pfx_free_devinfo+0x10/0x10 [ 928.542541][T31699] ? find_held_lock+0x2b/0x80 [ 928.542560][T31699] ? mark_held_locks+0x40/0x70 [ 928.542575][T31699] snd_seq_oss_open+0x292/0xa10 [ 928.542592][T31699] odev_open+0x6f/0x90 [ 928.542602][T31699] ? __pfx_odev_open+0x10/0x10 [ 928.542613][T31699] soundcore_open+0x2e3/0x5a0 [ 928.542627][T31699] ? __pfx_soundcore_open+0x10/0x10 [ 928.542639][T31699] chrdev_open+0x234/0x6a0 [ 928.542657][T31699] ? __pfx_chrdev_open+0x10/0x10 [ 928.542674][T31699] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 928.542691][T31699] do_dentry_open+0x6ab/0x14d0 [ 928.542705][T31699] ? __pfx_chrdev_open+0x10/0x10 [ 928.542725][T31699] vfs_open+0x82/0x3f0 [ 928.542745][T31699] path_openat+0x19fa/0x2440 [ 928.542765][T31699] ? __pfx_path_openat+0x10/0x10 [ 928.542786][T31699] do_file_open+0x20e/0x430 [ 928.542805][T31699] ? __pfx_do_file_open+0x10/0x10 [ 928.542834][T31699] ? _raw_spin_unlock+0x28/0x50 [ 928.542848][T31699] ? alloc_fd+0x471/0x7a0 [ 928.542870][T31699] do_sys_openat2+0x10f/0x1e0 [ 928.542881][T31699] ? __pfx_do_sys_openat2+0x10/0x10 [ 928.542893][T31699] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 928.542915][T31699] __x64_sys_openat+0x12d/0x210 [ 928.542927][T31699] ? __pfx___x64_sys_openat+0x10/0x10 [ 928.542945][T31699] do_syscall_64+0x123/0x790 [ 928.542963][T31699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.542976][T31699] RIP: 0033:0x7f29b139e559 [ 928.542988][T31699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.542999][T31699] RSP: 002b:00007f29b232c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 928.543012][T31699] RAX: ffffffffffffffda RBX: 00007f29b1625fa0 RCX: 00007f29b139e559 [ 928.543020][T31699] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 928.543028][T31699] RBP: 00007f29b14358b0 R08: 0000000000000000 R09: 0000000000000000 [ 928.543036][T31699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.543044][T31699] R13: 00007f29b1626038 R14: 00007f29b1625fa0 R15: 00007fff8fbc1168 [ 928.543063][T31699] [ 928.547818][T31699] ALSA: seq_oss: can't create port [ 931.402409][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.402455][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.496502][ T52] Bluetooth: hci0: unexpected subevent 0x10 length: 5 > 2 [ 931.588112][ T2261] kernel write not supported for file /uinput (pid: 2261 comm: kworker/0:3) [ 931.672708][T31776] FAULT_INJECTION: forcing a failure. [ 931.672708][T31776] name failslab, interval 1, probability 0, space 0, times 0 [ 931.672745][T31776] CPU: 0 UID: 0 PID: 31776 Comm: syz.5.10999 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.672764][T31776] Tainted: [L]=SOFTLOCKUP [ 931.672769][T31776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 931.672778][T31776] Call Trace: [ 931.672783][T31776] [ 931.672788][T31776] dump_stack_lvl+0x100/0x190 [ 931.672812][T31776] should_fail_ex.cold+0x5/0xa [ 931.672831][T31776] should_failslab+0xc2/0x120 [ 931.672849][T31776] __kmalloc_cache_noprof+0x91/0x6d0 [ 931.672863][T31776] ? befs_init_fs_context+0x43/0x140 [ 931.672884][T31776] befs_init_fs_context+0x43/0x140 [ 931.672900][T31776] alloc_fs_context+0x60c/0xf40 [ 931.672917][T31776] __x64_sys_fsopen+0xed/0x220 [ 931.672932][T31776] do_syscall_64+0x123/0x790 [ 931.672951][T31776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.672963][T31776] RIP: 0033:0x7fb178f9e559 [ 931.672974][T31776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.672986][T31776] RSP: 002b:00007fb179ee5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 931.672999][T31776] RAX: ffffffffffffffda RBX: 00007fb179225fa0 RCX: 00007fb178f9e559 [ 931.673007][T31776] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 931.673014][T31776] RBP: 00007fb1790358b0 R08: 0000000000000000 R09: 0000000000000000 [ 931.673021][T31776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.673028][T31776] R13: 00007fb179226038 R14: 00007fb179225fa0 R15: 00007ffc34d1de08 [ 931.673045][T31776] [ 931.993683][T31778] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 932.082876][T31780] netlink: 6 bytes leftover after parsing attributes in process `syz.9.11001'. [ 932.116428][T31780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 932.778882][ T31] audit: type=1400 audit(1792066654.734:1384): avc: denied { read } for pid=31802 comm="syz.7.11021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 933.134809][T22745] syz_tun (unregistering): left allmulticast mode [ 933.134828][T22745] syz_tun (unregistering): left promiscuous mode [ 933.137453][T22745] bridge0: port 3(syz_tun) entered disabled state [ 933.465881][T31816] syzkaller1: entered promiscuous mode [ 933.465908][T31816] syzkaller1: entered allmulticast mode [ 934.185303][ T4921] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 934.210258][ T4921] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 934.215304][ T4921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 934.219561][ T4921] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 934.264817][ T4921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 934.439091][T31829] rxe_eth0 speed is unknown, defaulting to 1000 [ 935.461937][ T31] audit: type=1326 audit(1792066657.424:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31847 comm="syz.5.11027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb178f9e559 code=0x7ffc0000 [ 935.461983][ T31] audit: type=1326 audit(1792066657.424:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31847 comm="syz.5.11027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb178f9e559 code=0x7ffc0000 [ 935.546592][ T31] audit: type=1326 audit(1792066657.504:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31847 comm="syz.5.11027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb178f9e559 code=0x7ffc0000 [ 935.546659][ T31] audit: type=1326 audit(1792066657.504:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31847 comm="syz.5.11027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb178f9e559 code=0x7ffc0000 [ 935.546705][ T31] audit: type=1326 audit(1792066657.504:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31847 comm="syz.5.11027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb178f9e559 code=0x7ffc0000 [ 935.664099][ T31] audit: type=1326 audit(1792066657.624:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31847 comm="syz.5.11027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fb178f9e559 code=0x7ffc0000 [ 935.664151][ T31] audit: type=1326 audit(1792066657.624:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31847 comm="syz.5.11027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb178f9e559 code=0x7ffc0000 [ 935.664188][ T31] audit: type=1326 audit(1792066657.624:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31847 comm="syz.5.11027" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb178f9e559 code=0x7ffc0000 [ 936.322195][T31832] IPVS: Error connecting to the multicast addr [ 936.331043][T31839] rxe_eth0 speed is unknown, defaulting to 1000 [ 936.371596][ T4921] Bluetooth: hci3: command tx timeout [ 937.434010][T31889] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11042'. [ 938.123710][T31900] bridge0: port 2(erspan0) entered blocking state [ 938.123958][T31900] bridge0: port 2(erspan0) entered disabled state [ 938.124442][T31900] erspan0: entered allmulticast mode [ 938.282849][T31900] erspan0: entered promiscuous mode [ 938.440837][ T4921] Bluetooth: hci3: command tx timeout [ 938.716004][T31903] erspan0: left allmulticast mode [ 938.716035][T31903] erspan0: left promiscuous mode [ 938.723951][T31903] bridge0: port 2(erspan0) entered disabled state [ 939.136237][T31929] FAULT_INJECTION: forcing a failure. [ 939.136237][T31929] name failslab, interval 1, probability 0, space 0, times 0 [ 939.136275][T31929] CPU: 0 UID: 0 PID: 31929 Comm: syz.7.11055 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.136294][T31929] Tainted: [L]=SOFTLOCKUP [ 939.136299][T31929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 939.136308][T31929] Call Trace: [ 939.136312][T31929] [ 939.136318][T31929] dump_stack_lvl+0x100/0x190 [ 939.136343][T31929] should_fail_ex.cold+0x5/0xa [ 939.136362][T31929] should_failslab+0xc2/0x120 [ 939.136380][T31929] __kmalloc_cache_noprof+0x91/0x6d0 [ 939.136394][T31929] ? refill_pi_state_cache+0x91/0x260 [ 939.136410][T31929] refill_pi_state_cache+0x91/0x260 [ 939.136422][T31929] futex_lock_pi+0x17d/0x7e0 [ 939.136438][T31929] ? __pfx_futex_lock_pi+0x10/0x10 [ 939.136451][T31929] ? __pfx___futex_wait+0x10/0x10 [ 939.136462][T31929] ? __pfx_try_to_wake_up+0x10/0x10 [ 939.136491][T31929] ? __pfx_futex_wake_mark+0x10/0x10 [ 939.136508][T31929] ? rcu_read_lock_any_held+0x6a/0x90 [ 939.136526][T31929] ? find_held_lock+0x2b/0x80 [ 939.136543][T31929] ? ksys_write+0x190/0x250 [ 939.136560][T31929] do_futex+0x371/0x440 [ 939.136577][T31929] ? __pfx_do_futex+0x10/0x10 [ 939.136599][T31929] __x64_sys_futex+0x34f/0x4d0 [ 939.136618][T31929] ? __pfx___x64_sys_futex+0x10/0x10 [ 939.136641][T31929] do_syscall_64+0x123/0x790 [ 939.136659][T31929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.136672][T31929] RIP: 0033:0x7ff37e99e559 [ 939.136684][T31929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.136696][T31929] RSP: 002b:00007ff37f801028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 939.136708][T31929] RAX: ffffffffffffffda RBX: 00007ff37ec25fa0 RCX: 00007ff37e99e559 [ 939.136716][T31929] RDX: 0000000000000080 RSI: 0000000000000006 RDI: 0000000000000000 [ 939.136723][T31929] RBP: 00007ff37ea358b0 R08: 0000000000000000 R09: 00000000ffffffec [ 939.136730][T31929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.136736][T31929] R13: 00007ff37ec26038 R14: 00007ff37ec25fa0 R15: 00007ffdbe0ab578 [ 939.136754][T31929] [ 939.361225][ T2261] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 939.510558][T31839] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.510640][T31839] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.510788][T31839] bridge_slave_0: entered allmulticast mode [ 939.515257][T31839] bridge_slave_0: entered promiscuous mode [ 939.548231][ T2261] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 939.564617][ T2261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.568375][T31839] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.568445][T31839] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.568573][T31839] bridge_slave_1: entered allmulticast mode [ 939.611877][T31839] bridge_slave_1: entered promiscuous mode [ 939.728882][T31839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.731510][T31839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.767761][ T2261] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 939.823588][T31839] team0: Port device team_slave_0 added [ 939.826321][T31839] team0: Port device team_slave_1 added [ 939.882733][T31839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.882746][T31839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.882770][T31839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.887131][T31839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.887154][T31839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.887169][T31839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.980586][ T2261] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 940.006418][ T2261] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 940.006824][ T2261] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 940.006840][ T2261] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30768, setting to 1024 [ 940.006865][ T2261] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 940.006879][ T2261] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 940.006912][ T2261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.196298][T31839] hsr_slave_0: entered promiscuous mode [ 940.199018][T31839] hsr_slave_1: entered promiscuous mode [ 940.213700][T31839] debugfs: 'hsr0' already exists in 'hsr' [ 940.213716][T31839] Cannot create hsr debugfs directory [ 940.523471][ T4921] Bluetooth: hci3: command tx timeout [ 941.578771][ T31] audit: type=1400 audit(1792066663.534:1393): avc: denied { write } for pid=31953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.792279][ T31] audit: type=1400 audit(1792066663.754:1394): avc: denied { write } for pid=31970 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.848967][T31839] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.115739][ T2261] usb 6-1: USB disconnect, device number 70 [ 942.544439][ T9912] usb 3-1: USB disconnect, device number 67 [ 942.600219][ T4921] Bluetooth: hci3: command tx timeout [ 942.621512][T31839] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.102556][T31839] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.460039][ T5822] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 943.602289][ T31] audit: type=1400 audit(1792066665.564:1395): avc: denied { write } for pid=31972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 943.659864][ T5822] usb 10-1: Using ep0 maxpacket: 16 [ 943.662447][ T5822] usb 10-1: unable to get BOS descriptor or descriptor too short [ 943.662485][ T5822] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 943.664957][ T5822] usb 10-1: config 9 has an invalid interface number: 57 but max is 0 [ 943.664973][ T5822] usb 10-1: config 9 has no interface number 0 [ 943.664999][ T5822] usb 10-1: config 9 interface 57 has no altsetting 0 [ 943.669317][ T5822] usb 10-1: string descriptor 0 read error: -22 [ 943.669419][ T5822] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.799225][T31839] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.122610][ T31] audit: type=1400 audit(1792066666.084:1396): avc: denied { write } for pid=32013 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.136641][T32006] rxe_eth0 speed is unknown, defaulting to 1000 [ 944.313965][T28256] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 945.165504][ T31] audit: type=1400 audit(1792066667.124:1397): avc: denied { open } for pid=32031 comm="syz.7.11082" path="/dev/ptyr2" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 945.231484][ T31] audit: type=1400 audit(1792066667.194:1398): avc: denied { ioctl } for pid=32031 comm="syz.7.11082" path="/dev/ptyr2" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 945.487253][T32038] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 945.547088][T32039] ip_tables: iptables: counters copy to user failed while replacing table [ 945.679998][ T31] audit: type=1400 audit(1792066667.644:1399): avc: denied { write } for pid=32017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.906110][T32045] netlink: 'syz.5.11085': attribute type 8 has an invalid length. [ 945.906136][T32045] netlink: 212 bytes leftover after parsing attributes in process `syz.5.11085'. [ 945.906148][T32045] NCSI netlink: No device for ifindex 2097153 [ 945.919084][T31839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 945.974725][T31839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 945.988719][T31839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 946.020689][T31839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 946.025619][T31839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 946.063822][T31839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 946.067076][T31839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 946.110789][T31839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 946.205713][ T5822] usb 10-1: USB disconnect, device number 7 [ 946.248640][ T31] audit: type=1400 audit(1792066668.204:1400): avc: denied { write } for pid=32047 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.588185][T32060] vcan0: tx drop: invalid sa for name 0x0000000000000005 [ 947.855161][T31839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.934183][T31839] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.974996][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.975071][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.023577][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.023662][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.031672][ T31] audit: type=1400 audit(1792066669.994:1401): avc: denied { write } for pid=32067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.353858][ T5822] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 948.497844][ T31] audit: type=1400 audit(1792066670.454:1402): avc: denied { write } for pid=32097 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.528633][ T5822] usb 8-1: Using ep0 maxpacket: 16 [ 948.538371][ T5822] usb 8-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 948.558176][ T5822] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.558226][ T5822] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.558251][ T5822] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.558265][ T5822] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 948.558290][ T5822] usb 8-1: config 0 interface 0 has no altsetting 0 [ 948.558318][ T5822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.409764][ T2261] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 949.562277][ T2261] usb 10-1: Using ep0 maxpacket: 8 [ 949.565918][ T2261] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 949.567014][ T2261] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 949.567052][ T2261] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.116291][ T31] audit: type=1400 audit(1792066672.074:1403): avc: denied { write } for pid=32108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.278202][T31839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.442477][ T31] audit: type=1400 audit(1792066928.412:1404): avc: denied { write } for pid=32145 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.551741][ T9912] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 950.704202][ T9912] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 950.707619][ T9912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 950.707651][ T9912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.707675][ T9912] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 950.707708][ T9912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.068174][ T9912] usb 8-1: USB disconnect, device number 18 [ 951.207643][T31839] veth0_vlan: entered promiscuous mode [ 951.258554][T31839] veth1_vlan: entered promiscuous mode [ 951.384820][T31839] veth0_macvtap: entered promiscuous mode [ 951.422992][T31839] veth1_macvtap: entered promiscuous mode [ 951.499538][T31839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 951.536374][T31839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 951.634168][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.634489][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.634523][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.634553][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.694907][ T2261] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 951.792652][ T31] audit: type=1400 audit(1792066929.762:1405): avc: denied { write } for pid=32152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 951.877408][ T2261] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 951.908371][ T2261] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.908428][ T2261] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 951.945125][ T2261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.945146][ T2261] usb 3-1: Product: syz [ 951.945165][ T2261] usb 3-1: Manufacturer: syz [ 951.945174][ T2261] usb 3-1: SerialNumber: syz [ 952.144916][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.144933][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.293998][ T2261] usb 10-1: USB disconnect, device number 8 [ 952.390232][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.390257][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.509032][ T31] audit: type=1400 audit(1792066930.472:1406): avc: denied { write } for pid=32178 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.318552][T32200] binder: 32199:32200 ioctl c0306201 200000000340 returned -22 [ 953.340901][ T5706] usb 6-1: USB disconnect, device number 71 [ 953.429990][ T5822] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 953.583921][ T5822] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 953.586436][ T5822] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 953.586476][ T5822] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 953.586500][ T5822] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 953.586523][ T5822] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 953.586556][ T5822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.791888][ T5822] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 953.857412][T32214] netlink: 76 bytes leftover after parsing attributes in process `syz.9.11124'. [ 953.950539][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 953.951194][ T5822] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 953.955720][ T5822] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 953.955749][ T5822] usb 6-1: config 0 has no interface number 0 [ 953.957966][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.957994][ T5822] usb 6-1: Product: syz [ 953.958003][ T5822] usb 6-1: Manufacturer: syz [ 953.958014][ T5822] usb 6-1: SerialNumber: syz [ 954.061990][ T31] audit: type=1400 audit(1792066932.032:1407): avc: denied { write } for pid=32188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.313505][ T31] audit: type=1400 audit(1792066932.282:1408): avc: denied { write } for pid=32223 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.426442][ T5706] usb 3-1: USB disconnect, device number 68 [ 954.626680][T32230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11129'. [ 955.193383][ T31] audit: type=1400 audit(1792066933.162:1409): avc: denied { write } for pid=32231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.373927][ T31] audit: type=1400 audit(1792066933.342:1410): avc: denied { write } for pid=32252 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.238135][ T10] usb 8-1: USB disconnect, device number 19 [ 956.377328][ T31] audit: type=1400 audit(1792066934.342:1411): avc: denied { write } for pid=32258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.625633][ T5822] usb 6-1: USB disconnect, device number 72 [ 956.797967][ T31] audit: type=1400 audit(1792066934.762:1412): avc: denied { write } for pid=32284 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.116581][ T4921] Bluetooth: hci2: Invalid handle: 0x70bc > 0x0eff [ 957.222290][T32293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 957.236381][T32293] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 957.236504][T32293] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 957.236609][T32293] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 957.236728][T32293] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 957.236772][T32293] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 957.276488][T32293] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 957.311528][T32300] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 957.315473][T32300] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 957.359065][T32293] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 957.359150][T32293] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 957.387499][T32293] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 957.642165][ T5822] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 957.790071][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 957.790866][ T5822] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 957.794592][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.237895][ T31] audit: type=1400 audit(1792066936.202:1413): avc: denied { write } for pid=32295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.379335][T32326] rxe_eth0 speed is unknown, defaulting to 1000 [ 958.585975][ T31] audit: type=1400 audit(1792066936.552:1414): avc: denied { write } for pid=32334 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.239871][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 959.239908][ T52] Bluetooth: hci0: command 0x0405 tx timeout [ 959.239935][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 959.239998][ T4921] Bluetooth: hci5: command 0x0c1a tx timeout [ 959.400084][T25546] Bluetooth: hci6: command 0x0c1a tx timeout [ 959.400203][ T4921] Bluetooth: hci3: command 0x0c1a tx timeout [ 959.719486][T32362] Invalid argument reading file caps for ./file0 [ 959.855271][ T31] audit: type=1400 audit(1792066937.822:1415): avc: denied { write } for pid=32342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.168513][ T31] audit: type=1400 audit(1792066938.132:1416): avc: denied { write } for pid=32369 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.346123][ T9912] usb 3-1: USB disconnect, device number 69 [ 960.925147][T32383] jffs2: notice: (32383) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 1 orphan) and 11 of xref (0 dead, 4 orphan) found. [ 961.021414][T32379] rxe_eth0 speed is unknown, defaulting to 1000 [ 961.481771][ T4921] Bluetooth: hci3: command 0x0c1a tx timeout [ 961.481819][ T4921] Bluetooth: hci6: command 0x0c1a tx timeout [ 962.008336][ T31] audit: type=1400 audit(1792066939.972:1417): avc: denied { write } for pid=32376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.041814][ T31] audit: type=1400 audit(1792066940.012:1418): avc: denied { read } for pid=32413 comm="syz.2.11182" name="nullb" dev="configfs" ino=3525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 962.041858][ T31] audit: type=1400 audit(1792066940.012:1419): avc: denied { read open } for pid=32413 comm="syz.2.11182" path="/452/my_configfs/nullb" dev="configfs" ino=3525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 962.114209][ T31] audit: type=1400 audit(1792066940.082:1420): avc: denied { write } for pid=32413 comm="syz.2.11182" name="nullb" dev="configfs" ino=3525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 962.558003][ T31] audit: type=1400 audit(1792066940.522:1421): avc: denied { write } for pid=32423 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.558618][T32425] batman_adv: batadv0: Adding interface: syz_tun [ 962.558627][T32425] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.558654][T32425] batman_adv: batadv0: Interface activated: syz_tun [ 962.638455][ T31] audit: type=1400 audit(1792066940.602:1422): avc: denied { write } for pid=32413 comm="syz.2.11182" name="nullb" dev="configfs" ino=3525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 963.097636][T32380] IPVS: Error connecting to the multicast addr [ 963.111629][ T190] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 963.263062][ T190] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 963.264205][ T190] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.264232][ T190] usb 8-1: config 0 has no interfaces? [ 963.269342][ T190] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 963.269369][ T190] usb 8-1: Product: syz [ 963.269378][ T190] usb 8-1: Manufacturer: syz [ 963.269397][ T190] usb 8-1: SerialNumber: syz [ 963.563084][ T4921] Bluetooth: hci6: command 0x0c1a tx timeout [ 963.563122][ T4921] Bluetooth: hci3: command 0x0c1a tx timeout [ 963.594414][T32437] block nbd2: shutting down sockets [ 963.658268][T32444] FAULT_INJECTION: forcing a failure. [ 963.658268][T32444] name failslab, interval 1, probability 0, space 0, times 0 [ 963.658296][T32444] CPU: 0 UID: 0 PID: 32444 Comm: syz.9.11189 Tainted: G L syzkaller #0 PREEMPT(full) [ 963.658315][T32444] Tainted: [L]=SOFTLOCKUP [ 963.658320][T32444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 963.658328][T32444] Call Trace: [ 963.658332][T32444] [ 963.658337][T32444] dump_stack_lvl+0x100/0x190 [ 963.658361][T32444] should_fail_ex.cold+0x5/0xa [ 963.658388][T32444] should_failslab+0xc2/0x120 [ 963.658408][T32444] __kmalloc_noprof+0xfc/0x840 [ 963.658425][T32444] ? lsm_blob_alloc+0x68/0x90 [ 963.658442][T32444] lsm_blob_alloc+0x68/0x90 [ 963.658454][T32444] security_task_alloc+0x2a/0x260 [ 963.658472][T32444] copy_process+0x2c11/0x8380 [ 963.658496][T32444] ? __pfx_copy_process+0x10/0x10 [ 963.658510][T32444] ? futex_wake+0x4ea/0x5e0 [ 963.658529][T32444] kernel_clone+0x176/0x9d0 [ 963.658544][T32444] ? __pfx_kernel_clone+0x10/0x10 [ 963.658562][T32444] ? ksys_write+0x190/0x250 [ 963.658581][T32444] __do_sys_clone+0xd9/0x120 [ 963.658595][T32444] ? __pfx___do_sys_clone+0x10/0x10 [ 963.658607][T32444] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 963.658639][T32444] do_syscall_64+0x123/0x790 [ 963.658657][T32444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.658670][T32444] RIP: 0033:0x7f29b139e559 [ 963.658681][T32444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.658692][T32444] RSP: 002b:00007f29b232bfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 963.658705][T32444] RAX: ffffffffffffffda RBX: 00007f29b1625fa0 RCX: 00007f29b139e559 [ 963.658713][T32444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 963.658720][T32444] RBP: 00007f29b14358b0 R08: 0000000000000000 R09: 0000000000000000 [ 963.658727][T32444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.658734][T32444] R13: 00007f29b1626038 R14: 00007f29b1625fa0 R15: 00007fff8fbc1168 [ 963.658751][T32444] [ 964.320086][ T31] audit: type=1400 audit(1792066942.282:1423): avc: denied { write } for pid=32431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 964.716417][ T31] audit: type=1400 audit(1792066942.682:1424): avc: denied { write } for pid=32464 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.015536][ T5706] usb 8-1: USB disconnect, device number 20 [ 965.276597][T32477] FAULT_INJECTION: forcing a failure. [ 965.276597][T32477] name failslab, interval 1, probability 0, space 0, times 0 [ 965.276633][T32477] CPU: 0 UID: 0 PID: 32477 Comm: syz.7.11200 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.276654][T32477] Tainted: [L]=SOFTLOCKUP [ 965.276659][T32477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 965.276667][T32477] Call Trace: [ 965.276672][T32477] [ 965.276677][T32477] dump_stack_lvl+0x100/0x190 [ 965.276699][T32477] should_fail_ex.cold+0x5/0xa [ 965.276719][T32477] should_failslab+0xc2/0x120 [ 965.276737][T32477] __kmalloc_cache_noprof+0x91/0x6d0 [ 965.276751][T32477] ? proc_thread_self_get_link+0x1a6/0x210 [ 965.276768][T32477] proc_thread_self_get_link+0x1a6/0x210 [ 965.276782][T32477] pick_link+0xac2/0x13c0 [ 965.276795][T32477] ? selinux_inode_permission+0x14a/0x1130 [ 965.276809][T32477] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 965.276824][T32477] step_into_slowpath+0x9b3/0x1150 [ 965.276842][T32477] ? __pfx_step_into_slowpath+0x10/0x10 [ 965.276860][T32477] ? lookup_fast+0x2da/0x600 [ 965.276874][T32477] ? inode_permission+0x374/0x620 [ 965.276890][T32477] link_path_walk+0xf28/0x1cc0 [ 965.276913][T32477] path_openat+0x1ac/0x2440 [ 965.276933][T32477] ? __pfx_path_openat+0x10/0x10 [ 965.276955][T32477] do_file_open+0x20e/0x430 [ 965.276973][T32477] ? __pfx_do_file_open+0x10/0x10 [ 965.277002][T32477] ? _raw_spin_unlock+0x28/0x50 [ 965.277017][T32477] ? alloc_fd+0x471/0x7a0 [ 965.277039][T32477] do_sys_openat2+0x10f/0x1e0 [ 965.277051][T32477] ? __pfx_do_sys_openat2+0x10/0x10 [ 965.277064][T32477] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 965.277087][T32477] __x64_sys_openat+0x12d/0x210 [ 965.277099][T32477] ? __pfx___x64_sys_openat+0x10/0x10 [ 965.277117][T32477] do_syscall_64+0x123/0x790 [ 965.277136][T32477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.277148][T32477] RIP: 0033:0x7ff37e95ed8e [ 965.277159][T32477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 965.277171][T32477] RSP: 002b:00007ff37f800ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 965.277182][T32477] RAX: ffffffffffffffda RBX: 00007ff37f8016c0 RCX: 00007ff37e95ed8e [ 965.277190][T32477] RDX: 0000000000000002 RSI: 00007ff37f800f90 RDI: ffffffffffffff9c [ 965.277197][T32477] RBP: 00007ff37ea358b0 R08: 0000000000000000 R09: 0000000000000000 [ 965.277204][T32477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.277211][T32477] R13: 00007ff37ec26038 R14: 00007ff37ec25fa0 R15: 00007ffdbe0ab578 [ 965.277228][T32477] [ 965.849075][T32480] netlink: 40 bytes leftover after parsing attributes in process `syz.9.11201'. [ 965.892400][ T31] audit: type=1326 audit(1792066943.862:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32484 comm="syz.4.11203" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf079e559 code=0x7ffc0000 [ 965.892444][ T31] audit: type=1326 audit(1792066943.862:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32484 comm="syz.4.11203" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf079e559 code=0x7ffc0000 [ 965.898340][ T31] audit: type=1326 audit(1792066943.862:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32484 comm="syz.4.11203" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf079e559 code=0x7ffc0000 [ 965.898393][ T31] audit: type=1326 audit(1792066943.862:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32484 comm="syz.4.11203" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf079e559 code=0x7ffc0000 [ 966.057012][ T31] audit: type=1326 audit(1792066944.022:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32484 comm="syz.4.11203" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf079e559 code=0x7ffc0000 [ 966.057067][ T31] audit: type=1326 audit(1792066944.022:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32484 comm="syz.4.11203" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbbf079e2c2 code=0x7ffc0000 [ 966.057101][ T31] audit: type=1326 audit(1792066944.022:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32484 comm="syz.4.11203" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbbf079e357 code=0x7ffc0000 [ 966.057136][ T31] audit: type=1326 audit(1792066944.022:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32484 comm="syz.4.11203" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbbf075b251 code=0x7ffc0000 [ 966.057175][ T31] audit: type=1326 audit(1792066944.022:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32484 comm="syz.4.11203" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbbf079f349 code=0x7ffc0000 [ 966.057208][ T31] audit: type=1326 audit(1792066944.022:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32484 comm="syz.4.11203" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbbf075b2bb code=0x7ffc0000 [ 967.008421][T32507] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11213'. [ 967.015068][T32510] FAULT_INJECTION: forcing a failure. [ 967.015068][T32510] name failslab, interval 1, probability 0, space 0, times 0 [ 967.015104][T32510] CPU: 0 UID: 0 PID: 32510 Comm: syz.4.11215 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.015125][T32510] Tainted: [L]=SOFTLOCKUP [ 967.015130][T32510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 967.015139][T32510] Call Trace: [ 967.015144][T32510] [ 967.015149][T32510] dump_stack_lvl+0x100/0x190 [ 967.015172][T32510] should_fail_ex.cold+0x5/0xa [ 967.015191][T32510] should_failslab+0xc2/0x120 [ 967.015209][T32510] kmem_cache_alloc_noprof+0x92/0x6a0 [ 967.015225][T32510] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 967.015245][T32510] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 967.015263][T32510] radix_tree_extend+0x1a2/0x4d0 [ 967.015282][T32510] idr_get_free+0x5ec/0xa00 [ 967.015305][T32510] idr_alloc_u32+0x1ac/0x320 [ 967.015324][T32510] ? __pfx_idr_alloc_u32+0x10/0x10 [ 967.015342][T32510] ? lock_acquire+0x1d1/0x380 [ 967.015356][T32510] ? __radix_tree_preload+0x7c/0x820 [ 967.015373][T32510] idr_alloc_cyclic+0x10b/0x230 [ 967.015390][T32510] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 967.015406][T32510] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 967.015426][T32510] map_create+0x1698/0x30d0 [ 967.015437][T32510] ? find_held_lock+0x2b/0x80 [ 967.015454][T32510] ? avc_has_perm_noaudit+0x11e/0x470 [ 967.015467][T32510] ? avc_has_perm_noaudit+0x11e/0x470 [ 967.015485][T32510] ? __pfx_map_create+0x10/0x10 [ 967.015496][T32510] ? avc_has_perm+0x135/0x1e0 [ 967.015508][T32510] ? __pfx_avc_has_perm+0x10/0x10 [ 967.015519][T32510] ? __might_fault+0xc5/0x140 [ 967.015533][T32510] ? __might_fault+0xc5/0x140 [ 967.015548][T32510] ? selinux_bpf+0xfb/0x150 [ 967.015564][T32510] __sys_bpf+0x12a0/0x4a30 [ 967.015581][T32510] ? __pfx___sys_bpf+0x10/0x10 [ 967.015593][T32510] ? find_held_lock+0x2b/0x80 [ 967.015609][T32510] ? futex_wake+0x4ea/0x5e0 [ 967.015634][T32510] ? rcu_read_lock_any_held+0x6a/0x90 [ 967.015652][T32510] ? find_held_lock+0x2b/0x80 [ 967.015668][T32510] ? ksys_write+0x190/0x250 [ 967.015682][T32510] ? ksys_write+0x190/0x250 [ 967.015706][T32510] ? __x64_sys_futex+0x34f/0x4d0 [ 967.015723][T32510] ? __x64_sys_futex+0x358/0x4d0 [ 967.015741][T32510] ? xfd_validate_state+0x129/0x190 [ 967.015757][T32510] ? __x64_sys_bpf+0xce/0x140 [ 967.015770][T32510] __x64_sys_bpf+0xce/0x140 [ 967.015783][T32510] ? do_syscall_64+0xae/0x790 [ 967.015800][T32510] do_syscall_64+0x123/0x790 [ 967.015818][T32510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.015831][T32510] RIP: 0033:0x7fbbf079e559 [ 967.015842][T32510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.015853][T32510] RSP: 002b:00007fbbee9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 967.015865][T32510] RAX: ffffffffffffffda RBX: 00007fbbf0a25fa0 RCX: 00007fbbf079e559 [ 967.015874][T32510] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 967.015882][T32510] RBP: 00007fbbf08358b0 R08: 0000000000000000 R09: 0000000000000000 [ 967.015890][T32510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.015897][T32510] R13: 00007fbbf0a26038 R14: 00007fbbf0a25fa0 R15: 00007ffd627269e8 [ 967.015916][T32510] [ 967.130747][ T9912] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 967.407149][ T9912] usb 3-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 967.447786][ T9912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 967.447837][ T9912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.535955][T32507] bond0: entered promiscuous mode [ 967.553598][T32507] gretap0: entered promiscuous mode [ 967.571819][T32507] debugfs: 'hsr0' already exists in 'hsr' [ 967.573343][T32507] Cannot create hsr debugfs directory [ 967.622288][T32507] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 967.622316][T32507] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 967.749006][T32507] hsr0: entered promiscuous mode [ 968.910941][ T9912] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 969.075050][ T9912] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 969.079406][ T9912] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.079438][ T9912] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.116341][ T9912] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 969.116369][ T9912] usb 10-1: Manufacturer: syz [ 969.234176][T32562] netlink: 'syz.4.11235': attribute type 3 has an invalid length. [ 969.234207][T32562] netlink: 'syz.4.11235': attribute type 3 has an invalid length. [ 969.511346][ T9912] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 969.660891][ T9912] usb 6-1: Using ep0 maxpacket: 16 [ 969.666168][ T9912] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 969.667944][ T9912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.667974][ T9912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.667988][ T9912] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 969.668021][ T9912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.874527][ T9912] usb 3-1: USB disconnect, device number 70 [ 970.691808][ T5822] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 970.763915][T32610] netlink: 'syz.4.11251': attribute type 16 has an invalid length. [ 970.763943][T32610] netlink: 'syz.4.11251': attribute type 17 has an invalid length. [ 970.840581][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 970.844878][ T5822] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 970.846963][ T5822] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 970.847004][ T5822] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 970.847020][ T5822] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 970.847043][ T5822] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 970.847067][ T5822] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 970.847100][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.221948][ T31] kauditd_printk_skb: 71 callbacks suppressed [ 971.221972][ T31] audit: type=1400 audit(1792066949.192:1506): avc: denied { write } for pid=32617 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.514391][T32614] rxe_eth0 speed is unknown, defaulting to 1000 [ 971.695765][ T9912] usb 10-1: USB disconnect, device number 9 [ 971.947433][T25546] Bluetooth: hci3: unexpected subevent 0x03 length: 10 > 9 [ 972.299514][ T9912] usb 6-1: USB disconnect, device number 73 [ 972.681228][T32638] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 973.495666][ T190] usb 3-1: USB disconnect, device number 71 [ 973.963709][T25546] Bluetooth: hci3: command 0x0c1a tx timeout [ 974.023435][ T190] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 974.042109][ T190] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 974.403697][ T190] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 974.489800][T32679] misc userio: Begin command sent, but we're already running [ 974.661098][T32681] netlink: 'syz.9.11278': attribute type 4 has an invalid length. [ 974.803808][ T190] hid-generic 0000:0000:0000.004A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 975.128871][T32685] fido_id[32685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 975.158958][T32689] sctp: [Deprecated]: syz.5.11280 (pid 32689) Use of int in maxseg socket option. [ 975.158958][T32689] Use struct sctp_assoc_value instead [ 975.888096][T32706] FAULT_INJECTION: forcing a failure. [ 975.888096][T32706] name failslab, interval 1, probability 0, space 0, times 0 [ 975.888134][T32706] CPU: 0 UID: 0 PID: 32706 Comm: syz.7.11289 Tainted: G L syzkaller #0 PREEMPT(full) [ 975.888155][T32706] Tainted: [L]=SOFTLOCKUP [ 975.888160][T32706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 975.888169][T32706] Call Trace: [ 975.888174][T32706] [ 975.888180][T32706] dump_stack_lvl+0x100/0x190 [ 975.888206][T32706] should_fail_ex.cold+0x5/0xa [ 975.888226][T32706] should_failslab+0xc2/0x120 [ 975.888243][T32706] __kmalloc_noprof+0xfc/0x840 [ 975.888260][T32706] ? __d_alloc+0x650/0xa50 [ 975.888276][T32706] __d_alloc+0x650/0xa50 [ 975.888290][T32706] d_alloc+0x4a/0x1e0 [ 975.888302][T32706] lookup_one_qstr_excl+0x171/0x250 [ 975.888315][T32706] ? mnt_want_write+0x164/0x420 [ 975.888332][T32706] filename_rmdir+0x26b/0x5c0 [ 975.888351][T32706] ? __pfx_filename_rmdir+0x10/0x10 [ 975.888368][T32706] ? strncpy_from_user+0xfd/0x2d0 [ 975.888387][T32706] ? __sanitizer_cov_trace_pc+0x6b/0x70 [ 975.888407][T32706] ? do_getname+0x191/0x390 [ 975.888421][T32706] __x64_sys_unlinkat+0xf5/0x130 [ 975.888440][T32706] do_syscall_64+0x123/0x790 [ 975.888459][T32706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.888472][T32706] RIP: 0033:0x7ff37e99e559 [ 975.888483][T32706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.888494][T32706] RSP: 002b:00007ff37f801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 975.888515][T32706] RAX: ffffffffffffffda RBX: 00007ff37ec25fa0 RCX: 00007ff37e99e559 [ 975.888523][T32706] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 975.888532][T32706] RBP: 00007ff37ea358b0 R08: 0000000000000000 R09: 0000000000000000 [ 975.888540][T32706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.888548][T32706] R13: 00007ff37ec26038 R14: 00007ff37ec25fa0 R15: 00007ffdbe0ab578 [ 975.888566][T32706] [ 975.935303][ T10] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 976.046921][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 976.203832][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 976.208333][ T10] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 976.208364][ T10] usb 6-1: config 0 has no interface number 0 [ 976.208399][ T10] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 976.278995][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.279023][ T10] usb 6-1: Product: syz [ 976.279033][ T10] usb 6-1: Manufacturer: syz [ 976.279052][ T10] usb 6-1: SerialNumber: syz [ 976.570329][ T151] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 977.530930][ T10] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 977.657570][T32733] jffs2: notice: (32733) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 1 orphan) and 11 of xref (0 dead, 4 orphan) found. [ 977.686884][ T31] audit: type=1400 audit(1792066955.652:1507): avc: denied { write } for pid=32732 comm="syz.7.11300" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 977.714286][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 977.716459][ T10] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 977.739762][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 977.739801][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.328922][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 978.421924][T32750] forcing mempool usage for swap_add_folio+0x464/0xfe0 [ 978.491197][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 978.491923][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 978.492795][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.492838][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 978.492864][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 978.492887][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 978.492901][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 978.493875][ T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 978.493890][ T10] usb 8-1: Manufacturer: syz [ 978.667316][ T10] usb 6-1: USB disconnect, device number 74 [ 978.681948][ T52] Bluetooth: hci7: command 0x1003 tx timeout [ 978.682049][T25546] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 978.745250][T32754] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 979.309702][ T303] loop6: detected capacity change from 0 to 2640 [ 979.502507][ T306] mac80211_hwsim hwsim13 syzkaller1: left promiscuous mode [ 979.502535][ T306] mac80211_hwsim hwsim13 syzkaller1: left allmulticast mode [ 980.342673][ T190] usb 10-1: USB disconnect, device number 10 [ 980.418139][ T324] loop3: detected capacity change from 0 to 7 [ 980.432952][ T324] loop3: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 980.432983][ T324] loop3: partition table partially beyond EOD, truncated [ 980.433155][ T324] loop3: p1 size 2688367996 extends beyond EOD, truncated [ 980.485246][ T324] loop3: p2 start 631984668 is beyond EOD, truncated [ 980.626816][ T31] audit: type=1400 audit(1792066958.592:1508): avc: denied { create } for pid=326 comm="syz.9.11329" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 980.688770][T29081] udevd[29081]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 980.987661][ T339] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11334'. [ 981.013761][ T339] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11334'. [ 981.181959][ T9912] usb 8-1: USB disconnect, device number 21 [ 981.245650][ T344] kvm: apic: phys broadcast and lowest prio [ 981.351111][ T348] FAULT_INJECTION: forcing a failure. [ 981.351111][ T348] name failslab, interval 1, probability 0, space 0, times 0 [ 981.351148][ T348] CPU: 0 UID: 0 PID: 348 Comm: syz.5.11339 Tainted: G L syzkaller #0 PREEMPT(full) [ 981.351168][ T348] Tainted: [L]=SOFTLOCKUP [ 981.351173][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 981.351182][ T348] Call Trace: [ 981.351187][ T348] [ 981.351192][ T348] dump_stack_lvl+0x100/0x190 [ 981.351215][ T348] should_fail_ex.cold+0x5/0xa [ 981.351234][ T348] should_failslab+0xc2/0x120 [ 981.351253][ T348] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 981.351270][ T348] ? lock_acquire+0x1d1/0x380 [ 981.351283][ T348] ? kstrdup_const+0x63/0x80 [ 981.351299][ T348] kstrdup+0x51/0xe0 [ 981.351313][ T348] kstrdup_const+0x63/0x80 [ 981.351325][ T348] alloc_vfsmnt+0x19e/0x840 [ 981.351342][ T348] clone_mnt+0x4b/0x9c0 [ 981.351355][ T348] ? copy_tree+0x259/0xbf0 [ 981.351367][ T348] copy_tree+0x329/0xbf0 [ 981.351382][ T348] copy_mnt_ns+0x3fa/0x1180 [ 981.351398][ T348] ? __pfx_copy_mnt_ns+0x10/0x10 [ 981.351413][ T348] ? create_new_namespaces+0x30/0xac0 [ 981.351430][ T348] create_new_namespaces+0xd3/0xac0 [ 981.351444][ T348] ? bpf_lsm_capable+0x9/0x10 [ 981.351455][ T348] ? security_capable+0x80/0x260 [ 981.351479][ T348] unshare_nsproxy_namespaces+0xf2/0x220 [ 981.351495][ T348] ksys_unshare+0x4a2/0xb30 [ 981.351512][ T348] ? __pfx_ksys_unshare+0x10/0x10 [ 981.351534][ T348] __x64_sys_unshare+0x31/0x40 [ 981.351548][ T348] do_syscall_64+0x123/0x790 [ 981.351568][ T348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.351581][ T348] RIP: 0033:0x7fb178f9e559 [ 981.351593][ T348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.351604][ T348] RSP: 002b:00007fb179ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 981.351616][ T348] RAX: ffffffffffffffda RBX: 00007fb179225fa0 RCX: 00007fb178f9e559 [ 981.351624][ T348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 981.351632][ T348] RBP: 00007fb1790358b0 R08: 0000000000000000 R09: 0000000000000000 [ 981.351640][ T348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.351647][ T348] R13: 00007fb179226038 R14: 00007fb179225fa0 R15: 00007ffc34d1de08 [ 981.351666][ T348] [ 981.762280][ T31] audit: type=1400 audit(1792066959.732:1509): avc: denied { append } for pid=351 comm="syz.4.11341" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 981.829502][ T190] kernel read not supported for file /comedi4 (pid: 190 comm: kworker/0:2) [ 981.999768][ T9912] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 982.001011][ T361] FAULT_INJECTION: forcing a failure. [ 982.001011][ T361] name failslab, interval 1, probability 0, space 0, times 0 [ 982.001045][ T361] CPU: 0 UID: 0 PID: 361 Comm: syz.5.11344 Tainted: G L syzkaller #0 PREEMPT(full) [ 982.001065][ T361] Tainted: [L]=SOFTLOCKUP [ 982.001070][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 982.001079][ T361] Call Trace: [ 982.001083][ T361] [ 982.001089][ T361] dump_stack_lvl+0x100/0x190 [ 982.001112][ T361] should_fail_ex.cold+0x5/0xa [ 982.001133][ T361] should_failslab+0xc2/0x120 [ 982.001151][ T361] kmem_cache_alloc_noprof+0x92/0x6a0 [ 982.001167][ T361] ? do_fcntl_add_lease+0x9d/0x550 [ 982.001185][ T361] do_fcntl_add_lease+0x9d/0x550 [ 982.001199][ T361] ? __pfx_do_fcntl_add_lease+0x10/0x10 [ 982.001219][ T361] fcntl_setlease+0xfc/0x180 [ 982.001233][ T361] ? __pfx_fcntl_setlease+0x10/0x10 [ 982.001251][ T361] do_fcntl+0xfb8/0x16d0 [ 982.001265][ T361] ? __pfx_do_fcntl+0x10/0x10 [ 982.001276][ T361] ? __fget_files+0x215/0x3d0 [ 982.001297][ T361] ? selinux_file_fcntl+0xea/0x170 [ 982.001317][ T361] __x64_sys_fcntl+0x163/0x200 [ 982.001331][ T361] do_syscall_64+0x123/0x790 [ 982.001351][ T361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.001371][ T361] RIP: 0033:0x7fb178f9e559 [ 982.001383][ T361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.001395][ T361] RSP: 002b:00007fb179ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 982.001408][ T361] RAX: ffffffffffffffda RBX: 00007fb179225fa0 RCX: 00007fb178f9e559 [ 982.001416][ T361] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 982.001423][ T361] RBP: 00007fb1790358b0 R08: 0000000000000000 R09: 0000000000000000 [ 982.001430][ T361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.001437][ T361] R13: 00007fb179226038 R14: 00007fb179225fa0 R15: 00007ffc34d1de08 [ 982.001454][ T361] [ 982.205862][ T9912] usb 3-1: Using ep0 maxpacket: 8 [ 982.247366][ T9912] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 982.295117][ T9912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 982.295172][ T9912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.810501][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 982.963435][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 982.964737][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.964757][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.964781][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 982.964815][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.084133][ T31] audit: type=1400 audit(1792066961.052:1510): avc: denied { write } for pid=352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 983.379477][ T31] audit: type=1400 audit(1792066961.342:1511): avc: denied { write } for pid=387 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.487657][ T190] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 984.533241][ T377] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.574003][ T409] ip_vti0: Master is either lo or non-ether device [ 984.630892][ T190] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 984.631934][ T190] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.631998][ T190] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 984.632012][ T190] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 984.632035][ T190] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 984.632067][ T190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.764297][ T190] usb 3-1: USB disconnect, device number 72 [ 985.115122][ T377] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.238829][ T420] device-mapper: ioctl: Unable to rename non-existent device, to • [ 985.269883][ T190] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 985.354566][ T377] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.424555][ T190] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 985.427210][ T190] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.431787][ T190] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 985.431805][ T190] usb 10-1: Product: syz [ 985.431824][ T190] usb 10-1: Manufacturer: syz [ 985.431833][ T190] usb 10-1: SerialNumber: syz [ 985.564350][ T10] usb 8-1: USB disconnect, device number 22 [ 985.614214][ T377] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.759853][ T190] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 985.914346][ T190] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 985.915258][ T190] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.915279][ T190] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.915302][ T190] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.915327][ T190] usb 3-1: config 0 interface 0 has no altsetting 0 [ 985.915346][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.012243][ T85] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.012301][ T85] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.120181][ T276] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.138678][T28260] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.191274][ T31] audit: type=1400 audit(1792066964.162:1512): avc: denied { getopt } for pid=431 comm="syz.4.11370" lport=60989 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 987.234982][ T190] usb 6-1: USB disconnect, device number 75 [ 987.600013][ T190] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 987.761987][ T190] usb 6-1: unable to get BOS descriptor or descriptor too short [ 987.762029][ T190] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 987.767233][ T190] usb 6-1: config 129 has an invalid interface number: 80 but max is 0 [ 987.767262][ T190] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 987.767275][ T190] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 987.767298][ T190] usb 6-1: config 129 has no interface number 0 [ 987.767308][ T190] usb 6-1: config 129 has no interface number 1 [ 987.767345][ T190] usb 6-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 987.767371][ T190] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 987.767400][ T190] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 987.767416][ T190] usb 6-1: config 129 interface 80 has no altsetting 0 [ 987.767436][ T190] usb 6-1: config 129 interface 5 has no altsetting 0 [ 987.817123][ T190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.817152][ T190] usb 6-1: Product: syz [ 987.817170][ T190] usb 6-1: Manufacturer: syz [ 987.817179][ T190] usb 6-1: SerialNumber: syz [ 987.984241][T28260] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.984275][T28260] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 55021 - 0 [ 987.984301][T28260] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 988.063645][ T190] usb 10-1: USB disconnect, device number 11 [ 988.374163][T28260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.374197][T28260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.374223][T28260] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 55021 - 0 [ 988.553601][ T190] usb 3-1: USB disconnect, device number 73 [ 988.669316][T28260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.669360][T28260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.669377][T28260] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55021 - 0 [ 988.930907][T28260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.940563][T28260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.940595][T28260] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55021 - 0 [ 989.381019][T28260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 989.381052][T28260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.381146][T28260] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 55021 - 0 [ 989.489773][ T10] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 989.643782][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 989.644213][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 989.644241][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 989.645072][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.645096][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 989.702146][ T10] usb 3-1: string descriptor 0 read error: -22 [ 989.702250][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.112621][ T151] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.281344][ T276] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.422732][ T276] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.456074][ T5822] usb 6-1: USB disconnect, device number 76 [ 990.616635][ T1301] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.667089][T28260] veth0: left allmulticast mode [ 990.667109][T28260] veth0: left promiscuous mode [ 990.667292][T28260] bridge0: port 1(veth0) entered disabled state [ 990.719237][T28260] bridge_slave_1: left promiscuous mode [ 990.719463][T28260] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.130812][T28260] pimreg: left allmulticast mode [ 991.463294][ T31] audit: type=1400 audit(1792066969.432:1513): avc: denied { write } for pid=474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.902619][ T31] audit: type=1400 audit(1792066969.822:1514): avc: denied { write } for pid=496 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 992.346603][ T10] usb 3-1: USB disconnect, device number 74 [ 992.845740][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.845785][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.106808][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 993.206230][T28260] tipc: Disabling bearer [ 993.206342][T28260] tipc: Left network mode [ 994.390925][T32186] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 994.497600][ T31] audit: type=1400 audit(1792066972.462:1515): avc: denied { write } for pid=526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.563825][T32186] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 994.565291][T32186] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 994.565323][T32186] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 994.565355][T32186] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.685190][T25546] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 994.918227][ T31] audit: type=1400 audit(1792066972.882:1516): avc: denied { write } for pid=544 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 995.274218][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 995.561305][ T5822] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 995.639280][T28260] hsr_slave_0: left promiscuous mode [ 995.647588][T28260] hsr_slave_1: left promiscuous mode [ 995.743716][ T5822] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 995.746795][ T5822] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 995.746839][ T5822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.746851][ T5822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 995.746886][ T5822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.785476][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 995.785494][ T5822] usb 3-1: Product: syz [ 995.785513][ T5822] usb 3-1: Manufacturer: syz [ 995.860566][T28260] veth1_vlan: left promiscuous mode [ 995.860660][T28260] veth0_vlan: left promiscuous mode [ 996.487691][ T31] audit: type=1400 audit(1792066974.452:1517): avc: denied { write } for pid=555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 996.658331][ T570] 9pnet: p9_errstr2errno: server reported unknown error [ 996.896646][ T31] audit: type=1400 audit(1792066974.862:1518): avc: denied { write } for pid=574 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 997.243972][T32186] usb 10-1: USB disconnect, device number 12 [ 997.521051][T28260] team0 (unregistering): Port device team_slave_1 removed [ 997.579362][T28260] team0 (unregistering): Port device team_slave_0 removed [ 997.991493][ T599] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 998.259241][ T5822] usb 3-1: USB disconnect, device number 75 [ 998.347556][ T5266] 8021q: adding VLAN 0 to HW filter on device eth3 [ 998.973612][T28260] IPVS: stop unused estimator thread 0... [ 1000.086643][ T31] audit: type=1400 audit(1792066978.052:1519): avc: denied { write } for pid=614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1000.124514][ T31] audit: type=1400 audit(1792066978.092:1520): avc: denied { watch_mount } for pid=637 comm="syz.2.11438" path="/492/file1" dev="tmpfs" ino=2581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1000.300435][ T643] netlink: 'syz.5.11439': attribute type 4 has an invalid length. [ 1000.308726][ T643] netlink: 'syz.5.11439': attribute type 4 has an invalid length. [ 1000.489541][ T31] audit: type=1400 audit(1792066978.452:1521): avc: denied { write } for pid=647 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1000.747240][ T5266] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1000.796323][ T655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11444'. [ 1000.796361][ T655] netlink: 'syz.2.11444': attribute type 30 has an invalid length. [ 1000.858482][ T661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11444'. [ 1000.858515][ T661] netlink: 'syz.2.11444': attribute type 30 has an invalid length. [ 1000.883745][ T655] vxlan0: entered promiscuous mode [ 1000.883772][ T655] vxlan0: entered allmulticast mode [ 1000.888659][ T276] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.888840][ T276] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.901307][T28260] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.902528][ T276] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.999318][ T661] vxlan1: entered promiscuous mode [ 1001.019171][ T661] vxlan1: entered allmulticast mode [ 1001.473325][ T671] tun0: tun_chr_ioctl cmd 1074025675 [ 1001.473351][ T671] tun0: persist enabled [ 1001.473878][ T671] tun0: tun_chr_ioctl cmd 1074025675 [ 1001.473889][ T671] tun0: persist enabled [ 1001.548504][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1001.570581][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1001.576154][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1001.577244][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1001.579513][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1001.972274][ T684] ip6gretap1: entered allmulticast mode [ 1002.023550][ T684] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1002.023562][ T684] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.023590][ T684] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1002.561874][ T700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11457'. [ 1002.561911][ T700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11457'. [ 1002.608326][ T700] geneve2: entered promiscuous mode [ 1002.608352][ T700] geneve2: entered allmulticast mode [ 1002.633491][ T701] FAULT_INJECTION: forcing a failure. [ 1002.633491][ T701] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.633529][ T701] CPU: 0 UID: 0 PID: 701 Comm: syz.5.11458 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.633547][ T701] Tainted: [L]=SOFTLOCKUP [ 1002.633553][ T701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1002.633561][ T701] Call Trace: [ 1002.633566][ T701] [ 1002.633572][ T701] dump_stack_lvl+0x100/0x190 [ 1002.633596][ T701] should_fail_ex.cold+0x5/0xa [ 1002.633615][ T701] should_failslab+0xc2/0x120 [ 1002.633634][ T701] __kmalloc_cache_noprof+0x91/0x6d0 [ 1002.633648][ T701] ? qnx6_init_fs_context+0x3f/0xd0 [ 1002.633669][ T701] qnx6_init_fs_context+0x3f/0xd0 [ 1002.633687][ T701] alloc_fs_context+0x60c/0xf40 [ 1002.633703][ T701] __x64_sys_fsopen+0xed/0x220 [ 1002.633718][ T701] do_syscall_64+0x123/0x790 [ 1002.633737][ T701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.633750][ T701] RIP: 0033:0x7fb178f9e559 [ 1002.633761][ T701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.633772][ T701] RSP: 002b:00007fb179ee5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1002.633784][ T701] RAX: ffffffffffffffda RBX: 00007fb179225fa0 RCX: 00007fb178f9e559 [ 1002.633792][ T701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 1002.633799][ T701] RBP: 00007fb1790358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1002.633807][ T701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.633813][ T701] R13: 00007fb179226038 R14: 00007fb179225fa0 R15: 00007ffc34d1de08 [ 1002.633830][ T701] [ 1003.243573][ T708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11459'. [ 1003.243609][ T708] netlink: 'syz.5.11459': attribute type 30 has an invalid length. [ 1003.288240][ T708] vxlan1: entered promiscuous mode [ 1003.288266][ T708] vxlan1: entered allmulticast mode [ 1003.329237][ T713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11459'. [ 1003.329273][ T713] netlink: 'syz.5.11459': attribute type 30 has an invalid length. [ 1003.459352][ T713] vxlan1: entered promiscuous mode [ 1003.459379][ T713] vxlan1: entered allmulticast mode [ 1003.617380][ T675] rxe_eth0 speed is unknown, defaulting to 1000 [ 1003.720044][T25546] Bluetooth: hci7: command tx timeout [ 1003.905202][ T190] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1003.964698][ T190] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1003.990652][ T724] ceph: No mds server is up or the cluster is laggy [ 1004.254703][ T190] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1004.731672][ T745] 0x000000000001-0x000000010001 : "" [ 1005.034144][ T752] input: syz1 as /devices/virtual/input/input126 [ 1005.473347][ T745] ftl_cs: FTL header not found. [ 1005.478416][T29081] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 1005.478449][T29081] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #1222: comm udevd: checksumming directory block 0 [ 1005.518461][ T190] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1005.569234][ T766] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1222: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 1005.569277][ T766] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #1222: comm udevd: checksumming directory block 0 [ 1005.602406][ T675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.602475][ T675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.602800][ T675] bridge_slave_0: entered allmulticast mode [ 1005.604592][ T766] udevd[766]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd1ro': Bad message [ 1005.609263][ T675] bridge_slave_0: entered promiscuous mode [ 1005.660554][ T675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.660624][ T675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.686099][ T675] bridge_slave_1: entered allmulticast mode [ 1005.706076][ T190] usb 3-1: Using ep0 maxpacket: 8 [ 1005.723457][ T675] bridge_slave_1: entered promiscuous mode [ 1005.729033][ T190] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1005.760011][ T190] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1005.760062][ T190] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1005.760077][ T190] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1005.760100][ T190] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1005.760114][ T190] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.760155][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.801226][T25546] Bluetooth: hci7: command tx timeout [ 1005.885664][ T675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.888204][ T675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.953540][ T675] team0: Port device team_slave_0 added [ 1005.955874][ T675] team0: Port device team_slave_1 added [ 1006.044244][ T675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.044266][ T675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.044281][ T675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.047718][ T675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.047738][ T675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.047753][ T675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.236453][ T675] hsr_slave_0: entered promiscuous mode [ 1006.238037][ T675] hsr_slave_1: entered promiscuous mode [ 1006.238654][ T675] debugfs: 'hsr0' already exists in 'hsr' [ 1006.238668][ T675] Cannot create hsr debugfs directory [ 1006.281394][ T32] INFO: task syz-executor:28114 blocked for more than 143 seconds. [ 1006.281422][ T32] Tainted: G L syzkaller #0 [ 1006.281430][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1006.281435][ T32] task:syz-executor state:D stack:22120 pid:28114 tgid:28114 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1006.281487][ T32] Call Trace: [ 1006.281492][ T32] [ 1006.281499][ T32] __schedule+0x1259/0x6920 [ 1006.281529][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1006.281559][ T32] ? irqentry_exit+0x24d/0xa10 [ 1006.281588][ T32] ? lock_acquire+0x1d1/0x380 [ 1006.281611][ T32] ? __pfx___schedule+0x10/0x10 [ 1006.281625][ T32] ? find_held_lock+0x2b/0x80 [ 1006.281653][ T32] ? schedule+0x225/0x2c0 [ 1006.281680][ T32] schedule+0xdd/0x2c0 [ 1006.281696][ T32] schedule_preempt_disabled+0x13/0x30 [ 1006.281720][ T32] __mutex_lock+0xccb/0x1bd0 [ 1006.281747][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1006.281778][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1006.281808][ T32] ? net_generic+0x25/0x2a0 [ 1006.281825][ T32] ? net_generic+0xea/0x2a0 [ 1006.281848][ T32] ? net_generic+0xea/0x2a0 [ 1006.281877][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1006.281893][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 1006.281919][ T32] nfsd_umount+0x3b/0x60 [ 1006.281947][ T32] deactivate_locked_super+0xbd/0x130 [ 1006.281972][ T32] deactivate_super+0xea/0x110 [ 1006.281988][ T32] cleanup_mnt+0xb7/0x160 [ 1006.282012][ T32] task_work_run+0x150/0x240 [ 1006.282040][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1006.282073][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 1006.282091][ T32] ? rcu_is_watching+0x13/0xc0 [ 1006.282133][ T32] do_syscall_64+0x661/0x790 [ 1006.282152][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.282174][ T32] RIP: 0033:0x7f1652d9f797 [ 1006.282185][ T32] RSP: 002b:00007ffdf2f56b18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1006.282206][ T32] RAX: 0000000000000000 RBX: 00007f1652e34cf3 RCX: 00007f1652d9f797 [ 1006.282214][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf2f56bd0 [ 1006.282221][ T32] RBP: 00007ffdf2f56bd0 R08: 00007ffdf2f57bd0 R09: 00000000ffffffff [ 1006.282237][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf2f57c60 [ 1006.282245][ T32] R13: 00007f1652e34cf3 R14: 00000000000d207f R15: 00007ffdf2f57ca0 [ 1006.282271][ T32] [ 1006.282336][ T32] [ 1006.282336][ T32] Showing all locks held in the system: [ 1006.282347][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1006.282365][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1006.282450][ T32] locks held by syz.3.9448/27732: 3, on CPU#0: [ 1006.282468][ T32] #0: ffff888034707970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1006.282504][ T32] #1: ffff8880391f6460 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1006.282545][ T32] #2: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1006.282584][ T32] locks held by syz-executor/28114: 2, on CPU#0: [ 1006.282600][ T32] #0: ffff8880563220e8 (&type->s_umount_key#77){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1006.282641][ T32] #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1006.282693][ T32] locks held by getty/30356: 2, on CPU#0: [ 1006.282701][ T32] #0: ffff888039cb10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1006.282742][ T32] #1: ffffc900038432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1006.282792][ T32] locks held by syz.7.11369/428: 1, on CPU#0: [ 1006.282801][ T32] #0: ffff8880563220e8 (&type->s_umount_key#77){++++}-{4:4}, at: super_lock+0x326/0x3f0 [ 1006.282840][ T32] locks held by syz-executor/675: 2, last CPU#0: [ 1006.282973][ T32] #0: ffffffff91053a88 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1006.283024][ T32] #1: ffffffff91cd5a80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 1006.283064][ T32] locks held by syz.5.11480/770: 10, last CPU#0: [ 1006.283073][ T32] #0: ffff88807d46c630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1006.283120][ T32] #1: ffff888058bba460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1006.283161][ T32] #2: ffff888037b8f080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1006.283201][ T32] #3: ffff88802e3e4008 (kn->active#155){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1006.283253][ T32] #4: ffffffff914e5c60 (serio_mutex){+.+.}-{4:4}, at: drvctl_store+0x3c/0x350 [ 1006.283291][ T32] #5: ffff88802e370320 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1006.283329][ T32] #6: ffff88802e3701d0 (&serio->drv_mutex){+.+.}-{4:4}, at: serio_driver_remove+0x21/0xa0 [ 1006.283366][ T32] #7: ffffffff914ff380 (psmouse_mutex){+.+.}-{4:4}, at: psmouse_disconnect+0x6a/0x770 [ 1006.283413][ T32] #8: ffffffff914ed640 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x138/0x4d0 [ 1006.283453][ T32] #9: ffff88801e2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 1006.283511][ T32] [ 1006.283514][ T32] ============================================= [ 1006.283514][ T32] [ 1006.283526][ T32] NMI backtrace for cpu 0 [ 1006.283537][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.283554][ T32] Tainted: [L]=SOFTLOCKUP [ 1006.283558][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1006.283565][ T32] Call Trace: [ 1006.283570][ T32] [ 1006.283575][ T32] dump_stack_lvl+0x100/0x190 [ 1006.283594][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1006.283612][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1006.283627][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1006.283643][ T32] sys_info+0x141/0x190 [ 1006.283655][ T32] watchdog+0xcb1/0x1030 [ 1006.283673][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1006.283689][ T32] ? __pfx_watchdog+0x10/0x10 [ 1006.283704][ T32] ? __kthread_parkme+0x18f/0x230 [ 1006.283720][ T32] ? kthread+0x13a/0x450 [ 1006.283735][ T32] ? __pfx_watchdog+0x10/0x10 [ 1006.283748][ T32] kthread+0x373/0x450 [ 1006.283764][ T32] ? __pfx_kthread+0x10/0x10 [ 1006.283781][ T32] ret_from_fork+0x730/0xd60 [ 1006.283796][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.283812][ T32] ? __switch_to+0x800/0x10f0 [ 1006.283829][ T32] ? __pfx_kthread+0x10/0x10 [ 1006.283846][ T32] ret_from_fork_asm+0x1a/0x30 [ 1006.283866][ T32] [ 1006.283908][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1006.922496][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.933338][ T32] Tainted: [L]=SOFTLOCKUP [ 1006.937659][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1006.947695][ T32] Call Trace: [ 1006.950958][ T32] [ 1006.953886][ T32] dump_stack_lvl+0x100/0x190 [ 1006.958640][ T32] vpanic+0x553/0x970 [ 1006.962637][ T32] ? __pfx_vpanic+0x10/0x10 [ 1006.967133][ T32] panic+0xd1/0xe0 [ 1006.970839][ T32] ? __pfx_panic+0x10/0x10 [ 1006.975674][ T32] ? nmi_trigger_cpumask_backtrace+0x1c2/0x2a0 [ 1006.981843][ T32] ? __pfx_printk_trigger_flush+0x10/0x10 [ 1006.987661][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 1006.993983][ T32] ? watchdog.cold+0x1ec/0x234 [ 1006.998762][ T32] watchdog.cold+0x1fd/0x234 [ 1007.003344][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1007.009130][ T32] ? __pfx_watchdog+0x10/0x10 [ 1007.013815][ T32] ? __kthread_parkme+0x18f/0x230 [ 1007.018821][ T32] ? kthread+0x13a/0x450 [ 1007.023053][ T32] ? __pfx_watchdog+0x10/0x10 [ 1007.027705][ T32] kthread+0x373/0x450 [ 1007.031752][ T32] ? __pfx_kthread+0x10/0x10 [ 1007.036322][ T32] ret_from_fork+0x730/0xd60 [ 1007.040889][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1007.045977][ T32] ? __switch_to+0x800/0x10f0 [ 1007.050648][ T32] ? __pfx_kthread+0x10/0x10 [ 1007.055218][ T32] ret_from_fork_asm+0x1a/0x30 [ 1007.059979][ T32] [ 1007.062994][ T32] Kernel Offset: disabled [ 1007.067321][ T32] Rebooting in 86400 seconds..