last executing test programs: 4.199872684s ago: executing program 1 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x20) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0x42cc, 0x200, 0xfffffffe, 0x109}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe70a, 0x1000, 0x1000001, 0x313, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3afc, 0x4000, 0x4000004, 0x3aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x8000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80000005, 0x4, 0x1, 0x295, 0x0, r5}}], 0x1, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) (async) socket$xdp(0x2c, 0x3, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9e65) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.026363072s ago: executing program 2 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2000000018000a000000020200000000000004001200a53ce8db16747f75c55d68"], 0x20}], 0x1, 0x0, 0x0, 0x40800}, 0x88004) 3.777544944s ago: executing program 1 (id=25): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x1, 0x1000}) 3.777274894s ago: executing program 1 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001081c06040001", @ANYRES64, @ANYRES32], 0x32) 3.64147211s ago: executing program 1 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') setns(0xc9, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 3.526464696s ago: executing program 1 (id=33): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000000)=""/113, 0x71}], 0x3}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write(r3, &(0x7f0000000900)="0aaf", 0x2000) 2.959734522s ago: executing program 2 (id=41): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001081c06040001", @ANYRES64, @ANYRES32], 0x32) 2.901703274s ago: executing program 2 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008061c01080006040001", @ANYRES64, @ANYRES32], 0x32) 2.846585337s ago: executing program 2 (id=48): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/notes', 0x400002, 0x46) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x4) socket$inet6(0xa, 0x80000, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\aU'], 0x0) 741.512696ms ago: executing program 2 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4) (async) io_setup(0x7f, &(0x7f0000000100)=0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x1, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff8, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x0, 0x5, 0x9, 0x5, 0x0, 0x9, 0x20000003, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x7, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x0, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1006, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xd8b, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES8=r3], 0x5c}, 0x1, 0x0, 0x0, 0x2400c414}, 0x4000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3}) (async) r5 = eventfd(0x8e) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0x1f0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x11, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xfd}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$binfmt_script(r7, &(0x7f0000000100)={'#! ', './sys/bus/usb/devices/usb2/power/autosuspend_delay_ms'}, 0x39) 741.258436ms ago: executing program 3 (id=65): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x1, 0x1000}) 728.285686ms ago: executing program 3 (id=66): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008061c01080006040001", @ANYRES64, @ANYRES32], 0x32) 658.25621ms ago: executing program 3 (id=67): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2a4282, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301019e"], 0x38}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x2000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) close(0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f74, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 582.582973ms ago: executing program 2 (id=68): syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYRESDEC]}]}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) (async) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00008906bbbbbbbbbbbbffffffffffff88a82000810080000806030b600006000009aaaaaaaaaabbaaaaaaaaaabb6495bc86d2e73823a1374b813b76a6e464b9f93c9a0930463f345ef3c49663d873860318abc28a482f617a487cd176e9057ec61337c8ffc923755a0da0bc8742640f1daf54f33cbb788397e1ea251360a0017fcc988caa2a06a0fc377113094be2035afef3a1dc43510709250dd1b64a09bfc9d65cc76789ed6763d0a0ce30e46aaf7788cb5778fdf6b0fd67e915"], 0x2e) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000b, 0x30, r1, 0x5befd000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) (async) write(r3, &(0x7f0000000000)='3', 0x1) ioctl$TCFLSH(r3, 0x540b, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) 507.041126ms ago: executing program 0 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 489.409747ms ago: executing program 0 (id=71): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001081c06040001", @ANYRES64, @ANYRES32], 0x32) 442.34026ms ago: executing program 0 (id=72): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) ftruncate(r2, 0xf09) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x800, 0x4) 95.133426ms ago: executing program 0 (id=73): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x13, 0x53, 0x0, 0x16, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_lifetime={0x4, 0x0, 0x5, 0x3, 0xc, 0x1}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x80000000, @mcast1, 0x1}, @in6={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_address={0x5, 0x17, 0x33, 0x80, 0x0, @in6={0xa, 0x4e23, 0xffff7e00, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x4}}]}, 0xb0}}, 0x20000800) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') writev(r2, &(0x7f00000012c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000000)="792792e9", 0x4}], 0x2) r3 = openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0x1bc) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x8, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={0xfffffffffffffffc, 0x100d000, 0x800}, 0x20) lseek(r3, 0x7fffdfff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (fail_nth: 21) 94.794956ms ago: executing program 0 (id=74): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x1, 0x1000}) 88.927436ms ago: executing program 1 (id=75): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008061c01080006040001", @ANYRES64, @ANYRES32], 0x32) 68.936977ms ago: executing program 3 (id=76): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0xd12, 0x200, 0x5, 0x5, 0x7, "ea71000500f9000000024200215f058400", 0xacc9, 0x3}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x42) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0xfffffff6, 0x4) listen(r0, 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2001a) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="2e0ffc82002866b96708000028bcfd7d000066ba000000002d0f8b8b66d22166b9eb080000f30f35f30f2b4e690f300f0176f0650f09660f38f5b600000f01c30f076564260fc72d", 0x48}], 0x1, 0x5e, &(0x7f0000000000)=[@dstype3={0x7, 0xb}], 0x1) r6 = socket$inet6(0xa, 0x80000, 0x1084) setsockopt$inet6_int(r6, 0x29, 0x18, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = syz_ublk_setup_io_uring(0x33e5, &(0x7f0000000040)={0x0, 0xd8ed, 0x2000, 0x3, 0x1fd}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) unshare(0x24020400) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r14, 0xc400941d, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x8591, 0x80, 0x3, 0x3d9}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb470, 0x200, 0x1ffe, 0x10000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b98, 0x10000, 0x0, 0x30b, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb10, 0x10, 0x1, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc56e, 0x40, 0x0, 0x30f}}], 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r12, '\x00', {0xfff8, 0x4, 0x0, 0x0}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 505.11µs ago: executing program 0 (id=77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2e400f3805b63c20000066b82200b90d0a0000b8f8350000ba000000000f30f3410fbdfe430f0926263ef2a585f6b805000000b99e9991760f01c1b800000000ba008000000f3041ab0fc73a0fc71f", 0x4f}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2e400f3805b63c20000066b82200b90d0a0000b8f8350000ba000000000f30f3410fbdfe430f0926263ef2a585f6b805000000b99e9991760f01c1b800000000ba008000000f3041ab0fc73a0fc71f", 0x4f}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r7, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) close_range(r9, r9, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 203.46µs ago: executing program 3 (id=78): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) 0s ago: executing program 3 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 21.745807][ T36] audit: type=1400 audit(1789141161.270:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.746902][ T286] cgroup: Unknown subsys name 'net' [ 21.768457][ T36] audit: type=1400 audit(1789141161.270:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.795727][ T36] audit: type=1400 audit(1789141161.300:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.795935][ T286] cgroup: Unknown subsys name 'devices' [ 21.922938][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.928558][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.020260][ T36] audit: type=1400 audit(1789141161.540:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.043431][ T36] audit: type=1400 audit(1789141161.540:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.068133][ T36] audit: type=1400 audit(1789141161.540:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.096478][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.105261][ T36] audit: type=1400 audit(1789141161.630:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.130707][ T36] audit: type=1400 audit(1789141161.630:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.157325][ T36] audit: type=1400 audit(1789141161.680:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.157829][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.182830][ T36] audit: type=1400 audit(1789141161.680:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.015655][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.022743][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.029809][ T295] bridge_slave_0: entered allmulticast mode [ 23.036147][ T295] bridge_slave_0: entered promiscuous mode [ 23.049476][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.056553][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.063622][ T295] bridge_slave_1: entered allmulticast mode [ 23.069796][ T295] bridge_slave_1: entered promiscuous mode [ 23.096644][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.103766][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.110828][ T293] bridge_slave_0: entered allmulticast mode [ 23.117081][ T293] bridge_slave_0: entered promiscuous mode [ 23.124912][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.131995][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.139052][ T293] bridge_slave_1: entered allmulticast mode [ 23.145302][ T293] bridge_slave_1: entered promiscuous mode [ 23.204196][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.211285][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.218362][ T296] bridge_slave_0: entered allmulticast mode [ 23.224672][ T296] bridge_slave_0: entered promiscuous mode [ 23.233894][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.240950][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.248029][ T296] bridge_slave_1: entered allmulticast mode [ 23.254321][ T296] bridge_slave_1: entered promiscuous mode [ 23.265372][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.272436][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.279480][ T294] bridge_slave_0: entered allmulticast mode [ 23.285785][ T294] bridge_slave_0: entered promiscuous mode [ 23.294878][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.301949][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.309003][ T294] bridge_slave_1: entered allmulticast mode [ 23.315258][ T294] bridge_slave_1: entered promiscuous mode [ 23.441964][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.449020][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.456328][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.463361][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.480754][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.487823][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.495096][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.502130][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.515265][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.522328][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.529602][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.536647][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.547537][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.554595][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.561836][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.568856][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.612552][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.619836][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.627606][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.634962][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.643305][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.650503][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.657750][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.665016][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.683717][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.690749][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.698384][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.705426][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.713660][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.720687][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.728204][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.735257][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.753507][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.760542][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.768181][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.775230][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.804762][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.811818][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.820406][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.827444][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.856802][ T294] veth0_vlan: entered promiscuous mode [ 23.869039][ T296] veth0_vlan: entered promiscuous mode [ 23.879723][ T294] veth1_macvtap: entered promiscuous mode [ 23.888421][ T295] veth0_vlan: entered promiscuous mode [ 23.898861][ T296] veth1_macvtap: entered promiscuous mode [ 23.930206][ T295] veth1_macvtap: entered promiscuous mode [ 23.938948][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.942991][ T293] veth0_vlan: entered promiscuous mode [ 23.993264][ T293] veth1_macvtap: entered promiscuous mode [ 24.138926][ T337] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.182564][ T339] 9pnet: Could not find request transport: Qd [ 24.200458][ T343] overlayfs: failed to resolve './bus': -2 [ 24.316176][ T361] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 24.353425][ T366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 24.415088][ T375] FAULT_INJECTION: forcing a failure. [ 24.415088][ T375] name failslab, interval 1, probability 0, space 0, times 0 [ 24.428431][ T375] CPU: 0 UID: 0 PID: 375 Comm: syz.0.20 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 24.428459][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.428475][ T375] Call Trace: [ 24.428481][ T375] [ 24.428487][ T375] __dump_stack+0x21/0x30 [ 24.428521][ T375] dump_stack_lvl+0x140/0x1c0 [ 24.428542][ T375] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.428564][ T375] ? kasan_save_track+0x4f/0x80 [ 24.428584][ T375] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 24.428603][ T375] ? vfs_parse_monolithic_sep+0x243/0x360 [ 24.428625][ T375] ? ovl_parse_monolithic+0x28/0x40 [ 24.428643][ T375] ? parse_monolithic_mount_data+0x7f/0x90 [ 24.428665][ T375] ? path_mount+0x66a/0xff0 [ 24.428681][ T375] ? __se_sys_mount+0x2bf/0x480 [ 24.428699][ T375] dump_stack+0x19/0x20 [ 24.428719][ T375] should_fail_ex+0x3c2/0x510 [ 24.428739][ T375] should_failslab+0xac/0x100 [ 24.428759][ T375] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 24.428777][ T375] ? ovl_parse_param_lowerdir+0x1cb/0x6f0 [ 24.428797][ T375] kstrdup+0x4d/0x130 [ 24.428819][ T375] ovl_parse_param_lowerdir+0x1cb/0x6f0 [ 24.428839][ T375] ovl_parse_param+0x503/0x8c0 [ 24.428858][ T375] ? __cfi_ovl_parse_param+0x10/0x10 [ 24.428876][ T375] ? static_key_count+0x45/0x70 [ 24.428896][ T375] ? security_fs_context_parse_param+0x27b/0x2a0 [ 24.428917][ T375] vfs_parse_fs_param+0x1ef/0x470 [ 24.428938][ T375] vfs_parse_monolithic_sep+0x279/0x360 [ 24.428958][ T375] ? __kmalloc_cache_noprof+0x23c/0x470 [ 24.428976][ T375] ? __cfi_ovl_next_opt+0x10/0x10 [ 24.428994][ T375] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 24.429015][ T375] ? ovl_init_fs_context+0x192/0x790 [ 24.429034][ T375] ? alloc_fs_context+0x5dd/0x800 [ 24.429060][ T375] ovl_parse_monolithic+0x28/0x40 [ 24.429079][ T375] parse_monolithic_mount_data+0x7f/0x90 [ 24.429101][ T375] do_new_mount+0x222/0xb40 [ 24.429117][ T375] ? security_capable+0x44/0x130 [ 24.429136][ T375] path_mount+0x66a/0xff0 [ 24.429152][ T375] ? putname+0x113/0x150 [ 24.429170][ T375] __se_sys_mount+0x2bf/0x480 [ 24.429187][ T375] ? ksys_write+0x1f3/0x260 [ 24.429204][ T375] ? __x64_sys_mount+0xf0/0xf0 [ 24.429223][ T375] __x64_sys_mount+0xc3/0xf0 [ 24.429240][ T375] x64_sys_call+0x2021/0x2ee0 [ 24.429255][ T375] do_syscall_64+0x57/0xf0 [ 24.429270][ T375] ? clear_bhb_loop+0x50/0xa0 [ 24.429289][ T375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.429308][ T375] RIP: 0033:0x7f71ebf9e159 [ 24.429326][ T375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.429340][ T375] RSP: 002b:00007f71ecde7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 24.429364][ T375] RAX: ffffffffffffffda RBX: 00007f71ec225fa0 RCX: 00007f71ebf9e159 [ 24.429377][ T375] RDX: 0000200000000240 RSI: 0000200000000100 RDI: 0000000000000000 [ 24.429388][ T375] RBP: 00007f71ecde7090 R08: 0000200000000340 R09: 0000000000000000 [ 24.429399][ T375] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 24.429410][ T375] R13: 00007f71ec226038 R14: 00007f71ec225fa0 R15: 00007ffe997eab88 [ 24.429424][ T375] [ 24.864978][ T424] FAULT_INJECTION: forcing a failure. [ 24.864978][ T424] name failslab, interval 1, probability 0, space 0, times 0 [ 24.882487][ T424] CPU: 0 UID: 0 PID: 424 Comm: syz.3.30 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 24.882518][ T424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.882529][ T424] Call Trace: [ 24.882535][ T424] [ 24.882543][ T424] __dump_stack+0x21/0x30 [ 24.882573][ T424] dump_stack_lvl+0x140/0x1c0 [ 24.882598][ T424] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.882624][ T424] dump_stack+0x19/0x20 [ 24.882648][ T424] should_fail_ex+0x3c2/0x510 [ 24.882670][ T424] should_failslab+0xac/0x100 [ 24.882694][ T424] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 24.882716][ T424] ? vfs_parse_monolithic_sep+0x243/0x360 [ 24.882741][ T424] kmemdup_nul+0x5a/0x1a0 [ 24.882758][ T424] vfs_parse_monolithic_sep+0x243/0x360 [ 24.882781][ T424] ? __kmalloc_cache_noprof+0x23c/0x470 [ 24.882802][ T424] ? __cfi_ovl_next_opt+0x10/0x10 [ 24.882824][ T424] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 24.882848][ T424] ? ovl_init_fs_context+0x192/0x790 [ 24.882869][ T424] ? alloc_fs_context+0x5dd/0x800 [ 24.882892][ T424] ovl_parse_monolithic+0x28/0x40 [ 24.882912][ T424] parse_monolithic_mount_data+0x7f/0x90 [ 24.882939][ T424] do_new_mount+0x222/0xb40 [ 24.882959][ T424] ? security_capable+0x44/0x130 [ 24.882982][ T424] path_mount+0x66a/0xff0 [ 24.883001][ T424] ? putname+0x113/0x150 [ 24.883030][ T424] __se_sys_mount+0x2bf/0x480 [ 24.883050][ T424] ? ksys_write+0x1f3/0x260 [ 24.883070][ T424] ? __x64_sys_mount+0xf0/0xf0 [ 24.883091][ T424] __x64_sys_mount+0xc3/0xf0 [ 24.883109][ T424] x64_sys_call+0x2021/0x2ee0 [ 24.883127][ T424] do_syscall_64+0x57/0xf0 [ 24.883144][ T424] ? clear_bhb_loop+0x50/0xa0 [ 24.883168][ T424] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.883188][ T424] RIP: 0033:0x7fb2c479e159 [ 24.883205][ T424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.883221][ T424] RSP: 002b:00007fb2c56b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 24.883242][ T424] RAX: ffffffffffffffda RBX: 00007fb2c4a25fa0 RCX: 00007fb2c479e159 [ 24.883257][ T424] RDX: 0000200000000240 RSI: 0000200000000100 RDI: 0000000000000000 [ 24.883271][ T424] RBP: 00007fb2c56b6090 R08: 0000200000000340 R09: 0000000000000000 [ 24.883284][ T424] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 24.883296][ T424] R13: 00007fb2c4a26038 R14: 00007fb2c4a25fa0 R15: 00007ffcdb4b8728 [ 24.883313][ T424] [ 25.169111][ T310] smpboot: CPU 1 is now offline [ 25.180430][ T429] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 25.232559][ T450] FAULT_INJECTION: forcing a failure. [ 25.232559][ T450] name failslab, interval 1, probability 0, space 0, times 0 [ 25.245209][ T450] CPU: 0 UID: 0 PID: 450 Comm: syz.0.39 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 25.245228][ T450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.245235][ T450] Call Trace: [ 25.245239][ T450] [ 25.245243][ T450] __dump_stack+0x21/0x30 [ 25.245262][ T450] dump_stack_lvl+0x140/0x1c0 [ 25.245276][ T450] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.245290][ T450] dump_stack+0x19/0x20 [ 25.245303][ T450] should_fail_ex+0x3c2/0x510 [ 25.245316][ T450] should_failslab+0xac/0x100 [ 25.245329][ T450] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 25.245341][ T450] ? ovl_parse_param_lowerdir+0x1fb/0x6f0 [ 25.245353][ T450] ? kstrdup+0x7b/0x130 [ 25.245369][ T450] kstrdup+0x4d/0x130 [ 25.245382][ T450] ovl_parse_param_lowerdir+0x1fb/0x6f0 [ 25.245395][ T450] ovl_parse_param+0x503/0x8c0 [ 25.245406][ T450] ? __cfi_ovl_parse_param+0x10/0x10 [ 25.245417][ T450] ? static_key_count+0x45/0x70 [ 25.245430][ T450] ? security_fs_context_parse_param+0x27b/0x2a0 [ 25.245444][ T450] vfs_parse_fs_param+0x1ef/0x470 [ 25.245458][ T450] vfs_parse_monolithic_sep+0x279/0x360 [ 25.245471][ T450] ? __kmalloc_cache_noprof+0x23c/0x470 [ 25.245481][ T450] ? __cfi_ovl_next_opt+0x10/0x10 [ 25.245492][ T450] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 25.245506][ T450] ? ovl_init_fs_context+0x192/0x790 [ 25.245517][ T450] ? alloc_fs_context+0x5dd/0x800 [ 25.245530][ T450] ovl_parse_monolithic+0x28/0x40 [ 25.245541][ T450] parse_monolithic_mount_data+0x7f/0x90 [ 25.245555][ T450] do_new_mount+0x222/0xb40 [ 25.245566][ T450] ? security_capable+0x44/0x130 [ 25.245577][ T450] path_mount+0x66a/0xff0 [ 25.245587][ T450] ? putname+0x113/0x150 [ 25.245598][ T450] __se_sys_mount+0x2bf/0x480 [ 25.245609][ T450] ? ksys_write+0x1f3/0x260 [ 25.245620][ T450] ? __x64_sys_mount+0xf0/0xf0 [ 25.245631][ T450] __x64_sys_mount+0xc3/0xf0 [ 25.245641][ T450] x64_sys_call+0x2021/0x2ee0 [ 25.245650][ T450] do_syscall_64+0x57/0xf0 [ 25.245660][ T450] ? clear_bhb_loop+0x50/0xa0 [ 25.245672][ T450] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.245683][ T450] RIP: 0033:0x7f71ebf9e159 [ 25.245693][ T450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.245701][ T450] RSP: 002b:00007f71ecde7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 25.245713][ T450] RAX: ffffffffffffffda RBX: 00007f71ec225fa0 RCX: 00007f71ebf9e159 [ 25.245721][ T450] RDX: 0000200000000240 RSI: 0000200000000100 RDI: 0000000000000000 [ 25.245728][ T450] RBP: 00007f71ecde7090 R08: 0000200000000340 R09: 0000000000000000 [ 25.245734][ T450] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 25.245740][ T450] R13: 00007f71ec226038 R14: 00007f71ec225fa0 R15: 00007ffe997eab88 [ 25.245749][ T450] [ 25.622750][ T29] IRQ fixup: irq 34 move in progress, old vector 49 [ 25.630937][ T310] smpboot: CPU 1 is now offline [ 25.638155][ T431] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 25.741185][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.753392][ T475] FAULT_INJECTION: forcing a failure. [ 25.753392][ T475] name failslab, interval 1, probability 0, space 0, times 0 [ 25.766296][ T475] CPU: 0 UID: 0 PID: 475 Comm: syz.0.49 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 25.766315][ T475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.766322][ T475] Call Trace: [ 25.766325][ T475] [ 25.766329][ T475] __dump_stack+0x21/0x30 [ 25.766356][ T475] dump_stack_lvl+0x140/0x1c0 [ 25.766370][ T475] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.766385][ T475] dump_stack+0x19/0x20 [ 25.766398][ T475] should_fail_ex+0x3c2/0x510 [ 25.766411][ T475] should_failslab+0xac/0x100 [ 25.766424][ T475] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 25.766436][ T475] ? ovl_parse_layer+0x117/0xe70 [ 25.766448][ T475] ? kstrdup+0x7b/0x130 [ 25.766464][ T475] kstrdup+0x4d/0x130 [ 25.766477][ T475] ? ovl_parse_layer+0xec/0xe70 [ 25.766488][ T475] ovl_parse_layer+0x117/0xe70 [ 25.766499][ T475] ? __kasan_kmalloc+0x96/0xb0 [ 25.766512][ T475] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 25.766523][ T475] ? ovl_parse_param_lowerdir+0x6f0/0x6f0 [ 25.766535][ T475] ? kstrdup+0x7b/0x130 [ 25.766549][ T475] ovl_parse_param_lowerdir+0x4a8/0x6f0 [ 25.766561][ T475] ovl_parse_param+0x503/0x8c0 [ 25.766573][ T475] ? __cfi_ovl_parse_param+0x10/0x10 [ 25.766584][ T475] ? static_key_count+0x45/0x70 [ 25.766597][ T475] ? security_fs_context_parse_param+0x27b/0x2a0 [ 25.766611][ T475] vfs_parse_fs_param+0x1ef/0x470 [ 25.766625][ T475] vfs_parse_monolithic_sep+0x279/0x360 [ 25.766637][ T475] ? __kmalloc_cache_noprof+0x23c/0x470 [ 25.766648][ T475] ? __cfi_ovl_next_opt+0x10/0x10 [ 25.766659][ T475] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 25.766672][ T475] ? ovl_init_fs_context+0x192/0x790 [ 25.766684][ T475] ? alloc_fs_context+0x5dd/0x800 [ 25.766697][ T475] ovl_parse_monolithic+0x28/0x40 [ 25.766708][ T475] parse_monolithic_mount_data+0x7f/0x90 [ 25.766722][ T475] do_new_mount+0x222/0xb40 [ 25.766732][ T475] ? security_capable+0x44/0x130 [ 25.766744][ T475] path_mount+0x66a/0xff0 [ 25.766753][ T475] ? putname+0x113/0x150 [ 25.766764][ T475] __se_sys_mount+0x2bf/0x480 [ 25.766775][ T475] ? ksys_write+0x1f3/0x260 [ 25.766786][ T475] ? __x64_sys_mount+0xf0/0xf0 [ 25.766797][ T475] __x64_sys_mount+0xc3/0xf0 [ 25.766807][ T475] x64_sys_call+0x2021/0x2ee0 [ 25.766816][ T475] do_syscall_64+0x57/0xf0 [ 25.766826][ T475] ? clear_bhb_loop+0x50/0xa0 [ 25.766838][ T475] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.766849][ T475] RIP: 0033:0x7f71ebf9e159 [ 25.766859][ T475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.766867][ T475] RSP: 002b:00007f71ecde7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 25.766879][ T475] RAX: ffffffffffffffda RBX: 00007f71ec225fa0 RCX: 00007f71ebf9e159 [ 25.766887][ T475] RDX: 0000200000000240 RSI: 0000200000000100 RDI: 0000000000000000 [ 25.766894][ T475] RBP: 00007f71ecde7090 R08: 0000200000000340 R09: 0000000000000000 [ 25.766900][ T475] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 25.766907][ T475] R13: 00007f71ec226038 R14: 00007f71ec225fa0 R15: 00007ffe997eab88 [ 25.766915][ T475] [ 26.107841][ T478] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.172070][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.183051][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.192879][ T10] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 26.202072][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.221069][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.237330][ T10] usb 2-1: config 0 descriptor?? [ 26.292587][ T489] process 'syz.0.54' launched '/dev/fd/5' with NULL argv: empty string added [ 26.371019][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 26.387563][ T495] netlink: 72 bytes leftover after parsing attributes in process `syz.0.57'. [ 26.407938][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.428517][ T310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.447890][ T310] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.459121][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.476674][ T310] usb 3-1: Product: syz [ 26.485141][ T310] usb 3-1: Manufacturer: syz [ 26.495098][ T310] usb 3-1: SerialNumber: syz [ 26.577496][ T562] FAULT_INJECTION: forcing a failure. [ 26.577496][ T562] name failslab, interval 1, probability 0, space 0, times 0 [ 26.596412][ T562] CPU: 0 UID: 0 PID: 562 Comm: syz.3.59 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 26.596439][ T562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.596448][ T562] Call Trace: [ 26.596454][ T562] [ 26.596461][ T562] __dump_stack+0x21/0x30 [ 26.596490][ T562] dump_stack_lvl+0x140/0x1c0 [ 26.596512][ T562] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.596535][ T562] dump_stack+0x19/0x20 [ 26.596556][ T562] should_fail_ex+0x3c2/0x510 [ 26.596577][ T562] should_failslab+0xac/0x100 [ 26.596600][ T562] kmem_cache_alloc_noprof+0x42/0x410 [ 26.596620][ T562] ? getname_kernel+0x6b/0x450 [ 26.596641][ T562] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 26.596662][ T562] getname_kernel+0x6b/0x450 [ 26.596683][ T562] kern_path+0x23/0x60 [ 26.596704][ T562] ovl_parse_layer+0x289/0xe70 [ 26.596726][ T562] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 26.596747][ T562] ? ovl_parse_param_lowerdir+0x6f0/0x6f0 [ 26.596769][ T562] ? kstrdup+0x7b/0x130 [ 26.596794][ T562] ovl_parse_param_lowerdir+0x4a8/0x6f0 [ 26.596823][ T562] ovl_parse_param+0x503/0x8c0 [ 26.596844][ T562] ? __cfi_ovl_parse_param+0x10/0x10 [ 26.596865][ T562] ? static_key_count+0x45/0x70 [ 26.596887][ T562] ? security_fs_context_parse_param+0x27b/0x2a0 [ 26.596911][ T562] vfs_parse_fs_param+0x1ef/0x470 [ 26.596935][ T562] vfs_parse_monolithic_sep+0x279/0x360 [ 26.596958][ T562] ? __kmalloc_cache_noprof+0x23c/0x470 [ 26.596977][ T562] ? __cfi_ovl_next_opt+0x10/0x10 [ 26.596997][ T562] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 26.597021][ T562] ? ovl_init_fs_context+0x192/0x790 [ 26.597041][ T562] ? alloc_fs_context+0x5dd/0x800 [ 26.597064][ T562] ovl_parse_monolithic+0x28/0x40 [ 26.597084][ T562] parse_monolithic_mount_data+0x7f/0x90 [ 26.597109][ T562] do_new_mount+0x222/0xb40 [ 26.597128][ T562] ? security_capable+0x44/0x130 [ 26.597150][ T562] path_mount+0x66a/0xff0 [ 26.597167][ T562] ? putname+0x113/0x150 [ 26.597187][ T562] __se_sys_mount+0x2bf/0x480 [ 26.597206][ T562] ? ksys_write+0x1f3/0x260 [ 26.597226][ T562] ? __x64_sys_mount+0xf0/0xf0 [ 26.597246][ T562] __x64_sys_mount+0xc3/0xf0 [ 26.597265][ T562] x64_sys_call+0x2021/0x2ee0 [ 26.597282][ T562] do_syscall_64+0x57/0xf0 [ 26.597299][ T562] ? clear_bhb_loop+0x50/0xa0 [ 26.597320][ T562] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.597341][ T562] RIP: 0033:0x7fb2c479e159 [ 26.597357][ T562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.597372][ T562] RSP: 002b:00007fb2c56b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 26.597393][ T562] RAX: ffffffffffffffda RBX: 00007fb2c4a25fa0 RCX: 00007fb2c479e159 [ 26.597407][ T562] RDX: 0000200000000240 RSI: 0000200000000100 RDI: 0000000000000000 [ 26.597420][ T562] RBP: 00007fb2c56b6090 R08: 0000200000000340 R09: 0000000000000000 [ 26.597433][ T562] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 26.597445][ T562] R13: 00007fb2c4a26038 R14: 00007fb2c4a25fa0 R15: 00007ffcdb4b8728 [ 26.597461][ T562] [ 26.908552][ T562] overlayfs: failed to resolve '.': -12 [ 26.925953][ T36] kauditd_printk_skb: 100 callbacks suppressed [ 26.925969][ T36] audit: type=1400 audit(1789141166.450:172): avc: denied { mount } for pid=565 comm="syz.3.61" name="/" dev="configfs" ino=2463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 26.932912][ T310] usb 3-1: 0:2 : does not exist [ 26.956649][ T36] audit: type=1400 audit(1789141166.460:173): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 26.973268][ T310] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 26.991542][ T10] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 27.001308][ T310] usb 3-1: USB disconnect, device number 2 [ 27.008703][ T385] udevd[385]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.009109][ T10] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 27.036930][ T36] audit: type=1400 audit(1789141166.560:174): avc: denied { read } for pid=567 comm="syz.3.62" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.052030][ T572] netlink: 252 bytes leftover after parsing attributes in process `syz.0.63'. [ 27.064617][ T36] audit: type=1400 audit(1789141166.560:175): avc: denied { open } for pid=567 comm="syz.3.62" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.068801][ T572] IPv6: NLM_F_CREATE should be specified when creating new route [ 27.108691][ T10] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 27.116681][ T10] hid-steam 0003:28DE:1142.0001: No HID_FEATURE_REPORT submitted - nothing to read [ 27.127442][ T10] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 27.135265][ T10] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 27.155208][ T572] FAULT_INJECTION: forcing a failure. [ 27.155208][ T572] name failslab, interval 1, probability 0, space 0, times 0 [ 27.167998][ T572] CPU: 0 UID: 0 PID: 572 Comm: syz.0.63 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 27.168031][ T572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.168043][ T572] Call Trace: [ 27.168049][ T572] [ 27.168057][ T572] __dump_stack+0x21/0x30 [ 27.168090][ T572] dump_stack_lvl+0x140/0x1c0 [ 27.168116][ T572] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.168142][ T572] dump_stack+0x19/0x20 [ 27.168165][ T572] should_fail_ex+0x3c2/0x510 [ 27.168189][ T572] should_failslab+0xac/0x100 [ 27.168212][ T572] kmem_cache_alloc_noprof+0x42/0x410 [ 27.168233][ T572] ? sk_prot_alloc+0x69/0x3a0 [ 27.168256][ T572] ? security_inode_alloc+0x51/0x230 [ 27.168282][ T572] sk_prot_alloc+0x69/0x3a0 [ 27.168302][ T572] ? security_inode_alloc+0xc2/0x230 [ 27.168326][ T572] sk_alloc+0x40/0x590 [ 27.168346][ T572] ? inode_init_always_gfp+0x76e/0x9e0 [ 27.168370][ T572] inet_create+0x5b7/0x1010 [ 27.168391][ T572] __sock_create+0x3a5/0x810 [ 27.168412][ T572] __sys_socket+0xe1/0x1c0 [ 27.168440][ T572] __x64_sys_socket+0x7e/0x90 [ 27.168462][ T572] x64_sys_call+0x2608/0x2ee0 [ 27.168480][ T572] do_syscall_64+0x57/0xf0 [ 27.168498][ T572] ? clear_bhb_loop+0x50/0xa0 [ 27.168521][ T572] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.168543][ T572] RIP: 0033:0x7f71ebf9e159 [ 27.168559][ T572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.168575][ T572] RSP: 002b:00007f71ecde7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 27.168595][ T572] RAX: ffffffffffffffda RBX: 00007f71ec225fa0 RCX: 00007f71ebf9e159 [ 27.168610][ T572] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 27.168622][ T572] RBP: 00007f71ec03503b R08: 0000000000000000 R09: 0000000000000000 [ 27.168634][ T572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.168646][ T572] R13: 00007f71ec226038 R14: 00007f71ec225fa0 R15: 00007ffe997eab88 [ 27.168663][ T572] [ 27.735097][ T10] usb 2-1: USB disconnect, device number 2 [ 27.743931][ T10] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 27.817003][ T36] audit: type=1400 audit(1789141167.340:176): avc: denied { set_context_mgr } for pid=577 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.929057][ T589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.67'. [ 27.952773][ T592] syzkaller1: entered promiscuous mode [ 27.989690][ T36] audit: type=1400 audit(1789141167.510:177): avc: denied { mounton } for pid=590 comm="syz.2.68" path="/7/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 27.995248][ T594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.020175][ T592] syzkaller1: entered allmulticast mode [ 28.051448][ T594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.140904][ T606] FAULT_INJECTION: forcing a failure. [ 28.140904][ T606] name failslab, interval 1, probability 0, space 0, times 0 [ 28.154080][ T606] CPU: 0 UID: 0 PID: 606 Comm: syz.0.73 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 28.154100][ T606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.154107][ T606] Call Trace: [ 28.154111][ T606] [ 28.154115][ T606] __dump_stack+0x21/0x30 [ 28.154135][ T606] dump_stack_lvl+0x140/0x1c0 [ 28.154149][ T606] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.154163][ T606] dump_stack+0x19/0x20 [ 28.154176][ T606] should_fail_ex+0x3c2/0x510 [ 28.154189][ T606] should_failslab+0xac/0x100 [ 28.154202][ T606] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 28.154214][ T606] ? ovl_parse_layer+0x117/0xe70 [ 28.154226][ T606] ? kstrdup+0x7b/0x130 [ 28.154241][ T606] kstrdup+0x4d/0x130 [ 28.154254][ T606] ? ovl_parse_layer+0xec/0xe70 [ 28.154266][ T606] ovl_parse_layer+0x117/0xe70 [ 28.154277][ T606] ? __kasan_kmalloc+0x96/0xb0 [ 28.154289][ T606] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 28.154301][ T606] ? ovl_parse_param_lowerdir+0x6f0/0x6f0 [ 28.154312][ T606] ? kstrdup+0x7b/0x130 [ 28.154326][ T606] ovl_parse_param_lowerdir+0x4a8/0x6f0 [ 28.154338][ T606] ovl_parse_param+0x503/0x8c0 [ 28.154350][ T606] ? __cfi_ovl_parse_param+0x10/0x10 [ 28.154361][ T606] ? static_key_count+0x45/0x70 [ 28.154374][ T606] ? security_fs_context_parse_param+0x27b/0x2a0 [ 28.154388][ T606] vfs_parse_fs_param+0x1ef/0x470 [ 28.154401][ T606] vfs_parse_monolithic_sep+0x279/0x360 [ 28.154414][ T606] ? __kmalloc_cache_noprof+0x23c/0x470 [ 28.154425][ T606] ? __cfi_ovl_next_opt+0x10/0x10 [ 28.154436][ T606] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 28.154449][ T606] ? ovl_init_fs_context+0x192/0x790 [ 28.154460][ T606] ? alloc_fs_context+0x5dd/0x800 [ 28.154473][ T606] ovl_parse_monolithic+0x28/0x40 [ 28.154485][ T606] parse_monolithic_mount_data+0x7f/0x90 [ 28.154499][ T606] do_new_mount+0x222/0xb40 [ 28.154509][ T606] ? security_capable+0x44/0x130 [ 28.154521][ T606] path_mount+0x66a/0xff0 [ 28.154530][ T606] ? putname+0x113/0x150 [ 28.154541][ T606] __se_sys_mount+0x2bf/0x480 [ 28.154552][ T606] ? ksys_write+0x1f3/0x260 [ 28.154562][ T606] ? __x64_sys_mount+0xf0/0xf0 [ 28.154573][ T606] __x64_sys_mount+0xc3/0xf0 [ 28.154584][ T606] x64_sys_call+0x2021/0x2ee0 [ 28.154593][ T606] do_syscall_64+0x57/0xf0 [ 28.154603][ T606] ? clear_bhb_loop+0x50/0xa0 [ 28.154615][ T606] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.154626][ T606] RIP: 0033:0x7f71ebf9e159 [ 28.154636][ T606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.154645][ T606] RSP: 002b:00007f71ecde7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 28.154656][ T606] RAX: ffffffffffffffda RBX: 00007f71ec225fa0 RCX: 00007f71ebf9e159 [ 28.154664][ T606] RDX: 0000200000000240 RSI: 0000200000000100 RDI: 0000000000000000 [ 28.154671][ T606] RBP: 00007f71ecde7090 R08: 0000200000000340 R09: 0000000000000000 [ 28.154678][ T606] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 28.154684][ T606] R13: 00007f71ec226038 R14: 00007f71ec225fa0 R15: 00007ffe997eab88 [ 28.154693][ T606] [ 28.486113][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.505827][ T36] audit: type=1400 audit(1789141168.030:178): avc: denied { read } for pid=609 comm="syz.3.76" dev="nsfs" ino=4026532387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.530480][ T36] audit: type=1400 audit(1789141168.030:179): avc: denied { open } for pid=609 comm="syz.3.76" path="net:[4026532387]" dev="nsfs" ino=4026532387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.546630][ T616] BUG: scheduling while atomic: syz.3.79/616/0x00000002 [ 28.562704][ T616] Modules linked in: [ 28.566764][ T616] CPU: 0 UID: 0 PID: 616 Comm: syz.3.79 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 28.566793][ T616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.566804][ T616] Call Trace: [ 28.566809][ T616] [ 28.566817][ T616] __dump_stack+0x21/0x30 [ 28.566847][ T616] dump_stack_lvl+0x140/0x1c0 [ 28.566870][ T616] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.566893][ T616] ? is_bpf_text_address+0x17b/0x1a0 [ 28.566919][ T616] dump_stack+0x19/0x20 [ 28.566940][ T616] __schedule_bug+0x12b/0x200 [ 28.566959][ T616] ? find_proxy_task+0x2460/0x2460 [ 28.566977][ T616] __schedule+0xb85/0x20b0 [ 28.566996][ T616] ? is_bpf_text_address+0x17b/0x1a0 [ 28.567020][ T616] ? kernel_text_address+0xa9/0xe0 [ 28.567041][ T616] ? __sched_text_start+0x10/0x10 [ 28.567057][ T616] ? unwind_get_return_address+0x51/0x90 [ 28.567078][ T616] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 28.567098][ T616] ? arch_stack_walk+0x10a/0x170 [ 28.567116][ T616] ? __kasan_check_write+0x18/0x20 [ 28.567133][ T616] ? _raw_spin_lock_irq+0x93/0x120 [ 28.567148][ T616] ? rwsem_set_nonspinnable+0x140/0x140 [ 28.567173][ T616] schedule+0xc5/0x240 [ 28.567189][ T616] schedule_preempt_disabled+0x14/0x30 [ 28.567206][ T616] rwsem_down_read_slowpath+0x88c/0x14c0 [ 28.567229][ T616] ? down_write_killable+0x2d0/0x2d0 [ 28.567251][ T616] ? __kasan_check_write+0x18/0x20 [ 28.567267][ T616] ? downgrade_write+0x470/0x470 [ 28.567290][ T616] ? call_rcu_nocb+0x694/0xc60 [ 28.567313][ T616] down_read+0x95/0xe0 [ 28.567333][ T616] ? __cfi_down_read+0x10/0x10 [ 28.567353][ T616] kernfs_find_and_get_ns+0x76/0x130 [ 28.567376][ T616] sysfs_unmerge_group+0x66/0x130 [ 28.567395][ T616] dpm_sysfs_remove+0x64/0xd0 [ 28.567418][ T616] device_del+0x241/0xcf0 [ 28.567433][ T616] ? __cfi_class_find_device+0x10/0x10 [ 28.567452][ T616] ? __cfi_device_del+0x10/0x10 [ 28.567467][ T616] ? __kasan_check_write+0x18/0x20 [ 28.567483][ T616] ? kobject_put+0x1cc/0x2a0 [ 28.567498][ T616] device_destroy+0xb0/0x100 [ 28.567514][ T616] ? __cfi_device_destroy+0x10/0x10 [ 28.567530][ T616] ? __kasan_check_write+0x18/0x20 [ 28.567548][ T616] android_device_destroy+0x118/0x180 [ 28.567571][ T616] gadgets_drop+0x1d/0x30 [ 28.567588][ T616] ? __cfi_gadgets_drop+0x10/0x10 [ 28.567604][ T616] configfs_rmdir+0x8b7/0x9b0 [ 28.567627][ T616] vfs_rmdir+0x3db/0x560 [ 28.567655][ T616] do_rmdir+0x29a/0x590 [ 28.567678][ T616] ? __cfi_do_rmdir+0x10/0x10 [ 28.567700][ T616] ? __kasan_check_write+0x18/0x20 [ 28.567718][ T616] __x64_sys_rmdir+0x4b/0x60 [ 28.567742][ T616] x64_sys_call+0xaf7/0x2ee0 [ 28.567758][ T616] do_syscall_64+0x57/0xf0 [ 28.567773][ T616] ? clear_bhb_loop+0x50/0xa0 [ 28.567794][ T616] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.567815][ T616] RIP: 0033:0x7fb2c479e159 [ 28.567830][ T616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.567844][ T616] RSP: 002b:00007fb2c56b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 28.567862][ T616] RAX: ffffffffffffffda RBX: 00007fb2c4a25fa0 RCX: 00007fb2c479e159 [ 28.567875][ T616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 28.567886][ T616] RBP: 00007fb2c483503b R08: 0000000000000000 R09: 0000000000000000 [ 28.567897][ T616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.567908][ T616] R13: 00007fb2c4a26038 R14: 00007fb2c4a25fa0 R15: 00007ffcdb4b8728 [ 28.567923][ T616] [ 28.569469][ T616] ------------[ cut here ]------------ [ 28.927424][ T36] audit: type=1400 audit(1789141168.450:180): avc: denied { append } for pid=617 comm="syz.0.77" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.956603][ T616] WARNING: CPU: 0 PID: 616 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 28.966223][ T616] Modules linked in: [ 28.970121][ T616] CPU: 0 UID: 0 PID: 616 Comm: syz.3.79 Tainted: G W syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 28.982905][ T616] Tainted: [W]=WARN [ 28.986703][ T616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.996772][ T616] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 29.002967][ T616] Code: 48 83 3d 74 02 dc 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 8c 43 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 29.022628][ T616] RSP: 0018:ffffc9000d2df9d0 EFLAGS: 00010206 [ 29.028696][ T616] RAX: 000000007fffffff RBX: ffff8881f60de270 RCX: 0000000000ede270 [ 29.037293][ T616] RDX: ffff8881f60de270 RSI: 0000000000000001 RDI: 000000003095106f [ 29.045605][ T616] RBP: ffffc9000d2dfa30 R08: 000000005ff83795 R09: 00000000b75d176f [ 29.053596][ T616] R10: 000000000000000d R11: ffffffff8175a740 R12: 00000000131ede27 [ 29.061585][ T616] R13: 0000000000000000 R14: ffffc9000d2dfa40 R15: 000000000000000d [ 29.069825][ T616] FS: 00007fb2c56b66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.078785][ T616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.085425][ T616] CR2: 00007fb2c47eb840 CR3: 0000000118926000 CR4: 00000000003526b0 [ 29.093453][ T616] Call Trace: [ 29.096734][ T616] [ 29.099656][ T616] ? kasan_save_free_info+0x44/0x50 [ 29.104868][ T616] kasan_save_track+0x4f/0x80 [ 29.109556][ T616] ? kasan_save_track+0x3e/0x80 [ 29.114751][ T616] ? kasan_save_free_info+0x44/0x50 [ 29.120167][ T616] ? __kasan_slab_free+0x5f/0x80 [ 29.125148][ T616] ? kfree+0x158/0x440 [ 29.129240][ T616] ? configfs_d_iput+0x1d8/0x290 [ 29.134197][ T616] ? dentry_unlink_inode+0x363/0x430 [ 29.139488][ T616] ? d_delete+0xa8/0x120 [ 29.143757][ T616] ? vfs_rmdir+0x264/0x560 [ 29.148177][ T616] ? do_rmdir+0x29a/0x590 [ 29.152521][ T616] ? __x64_sys_rmdir+0x4b/0x60 [ 29.157293][ T616] ? x64_sys_call+0xaf7/0x2ee0 [ 29.162080][ T616] ? do_syscall_64+0x57/0xf0 [ 29.166668][ T616] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.172762][ T616] kasan_save_free_info+0x44/0x50 [ 29.177788][ T616] __kasan_slab_free+0x5f/0x80 [ 29.182564][ T616] kfree+0x158/0x440 [ 29.186463][ T616] ? configfs_d_iput+0x1d8/0x290 [ 29.191610][ T616] configfs_d_iput+0x1d8/0x290 [ 29.196399][ T616] ? __cfi_configfs_d_iput+0x10/0x10 [ 29.201865][ T616] dentry_unlink_inode+0x363/0x430 [ 29.206986][ T616] d_delete+0xa8/0x120 [ 29.211078][ T616] vfs_rmdir+0x264/0x560 [ 29.215331][ T616] do_rmdir+0x29a/0x590 [ 29.219487][ T616] ? __cfi_do_rmdir+0x10/0x10 [ 29.224178][ T616] ? __kasan_check_write+0x18/0x20 [ 29.229293][ T616] __x64_sys_rmdir+0x4b/0x60 [ 29.233922][ T616] x64_sys_call+0xaf7/0x2ee0 [ 29.238512][ T616] do_syscall_64+0x57/0xf0 [ 29.242935][ T616] ? clear_bhb_loop+0x50/0xa0 [ 29.247613][ T616] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.253521][ T616] RIP: 0033:0x7fb2c479e159 [ 29.257930][ T616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.278038][ T616] RSP: 002b:00007fb2c56b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 29.286770][ T616] RAX: ffffffffffffffda RBX: 00007fb2c4a25fa0 RCX: 00007fb2c479e159 [ 29.294764][ T616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 29.302766][ T616] RBP: 00007fb2c483503b R08: 0000000000000000 R09: 0000000000000000 [ 29.310754][ T616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.319108][ T616] R13: 00007fb2c4a26038 R14: 00007fb2c4a25fa0 R15: 00007ffcdb4b8728 [ 29.327114][ T616] [ 29.330121][ T616] ---[ end trace 0000000000000000 ]--- [ 29.335836][ T10] usb 3-1: device descriptor read/64, error -71 [ 29.449948][ T616] BUG: scheduling while atomic: syz.3.79/616/0x00000000 [ 29.464569][ T616] Modules linked in: [ 29.468576][ T616] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 29.481137][ T616] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 29.489558][ T616] CPU: 0 UID: 0 PID: 616 Comm: syz.3.79 Tainted: G W syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 29.502301][ T616] Tainted: [W]=WARN [ 29.506084][ T616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.516119][ T616] RIP: 0010:__schedule+0x14e/0x20b0 [ 29.521301][ T616] Code: 00 00 48 89 04 24 4c 8d 70 20 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ac 9f 3a fc 4d 8b 36 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 93 9f 3a fc 49 81 3e 9d 6e ac 57 [ 29.540933][ T616] RSP: 0018:ffffc9000d2df2a0 EFLAGS: 00010246 [ 29.546991][ T616] RAX: 0000000000000000 RBX: ffff8881f6e4fa40 RCX: ffff88811a689300 [ 29.554948][ T616] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 29.562915][ T616] RBP: ffffc9000d2df470 R08: 0000000000000003 R09: 0000000000000004 [ 29.571517][ T616] R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: 1ffff92001a5be6c [ 29.579565][ T616] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1103edca0c9 [ 29.587699][ T616] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.596635][ T616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.603202][ T616] CR2: 00007fb2c49ef2f8 CR3: 0000000135e90000 CR4: 00000000003526b0 [ 29.611159][ T616] Call Trace: [ 29.614420][ T616] Modules linked in: [ 29.618351][ C0] WARNING: kernel stack frame pointer at ffffc90000007fe8 in syz.3.79:616 has bad value ffffc9000d2df028 [ 29.618393][ C0] unwind stack type:0 next_sp:ffffc9000d2df018 mask:0x4 graph_idx:0 [ 29.618411][ C0] ffffc90000007738: ffffc900000077d0 (0xffffc900000077d0) [ 29.618433][ C0] ffffc90000007740: ffffffff813e0848 (arch_stack_walk+0x138/0x170) [ 29.618455][ C0] ffffc90000007748: 0000000000000000 ... [ 29.618462][ C0] ffffc90000007750: ffffc90000000000 (0xffffc90000000000) [ 29.618477][ C0] ffffc90000007758: ffffc90000008000 (0xffffc90000008000) [ 29.618490][ C0] ffffc90000007760: ffffc9000d2df018 (0xffffc9000d2df018) [ 29.618504][ C0] ffffc90000007768: 0000000000000004 (0x4) [ 29.618516][ C0] ffffc90000007770: ffff88811a689300 (0xffff88811a689300) [ 29.618529][ C0] ffffc90000007778: 0000000100000000 (0x100000000) [ 29.618560][ C0] ffffc90000007780: ffffc90000007fe8 (0xffffc90000007fe8) [ 29.618577][ C0] ffffc90000007788: ffffc90000007738 (0xffffc90000007738) [ 29.618593][ C0] ffffc90000007790: ffffffff85a506d2 (sysvec_apic_timer_interrupt+0x82/0x90) [ 29.618623][ C0] ffffc90000007798: 0000000000000000 ... [ 29.618632][ C0] ffffc900000077a8: f328fdb86b78db00 (0xf328fdb86b78db00) [ 29.618648][ C0] ffffc900000077b0: 1ffff92000000efc (0x1ffff92000000efc) [ 29.618665][ C0] ffffc900000077b8: ffffc900000078c0 (0xffffc900000078c0) [ 29.618679][ C0] ffffc900000077c0: dffffc0000000000 (0xdffffc0000000000) [ 29.618692][ C0] ffffc900000077c8: ffff888106e4da00 (0xffff888106e4da00) [ 29.618705][ C0] ffffc900000077d0: ffffc90000007870 (0xffffc90000007870) [ 29.618719][ C0] ffffc900000077d8: ffffffff8175a6da (stack_trace_save+0xaa/0x100) [ 29.618743][ C0] ffffc900000077e0: 0000000041b58ab3 (0x41b58ab3) [ 29.618755][ C0] ffffc900000077e8: ffffffff87088346 (kallsyms_seqs_of_names+0x11ddce/0x27baa5) [ 29.618794][ C0] ffffc900000077f0: ffffffff8175a630 (__cfi_stack_trace_save+0x10/0x10) [ 29.618819][ C0] ffffc900000077f8: 0000000000000000 ... [ 29.618828][ C0] ffffc90000007800: ffffc900000078c0 (0xffffc900000078c0) [ 29.618845][ C0] ffffc90000007808: 0000000000000040 (0x40) [ 29.618858][ C0] ffffc90000007810: 000000000000000c (0xc) [ 29.618870][ C0] ffffc90000007818: 1ffff1103edc5901 (0x1ffff1103edc5901) [ 29.618885][ C0] ffffc90000007820: 0000000000000200 (0x200) [ 29.618899][ C0] ffffc90000007828: dffffc0000000000 (0xdffffc0000000000) [ 29.618916][ C0] ffffc90000007830: fffff52000000f18 (0xfffff52000000f18) [ 29.618934][ C0] ffffc90000007838: 0000000000000820 (0x820) [ 29.618949][ C0] ffffc90000007840: 0000000000000000 ... [ 29.618958][ C0] ffffc90000007848: ffff888106e4da08 (0xffff888106e4da08) [ 29.618972][ C0] ffffc90000007850: 0000000000000100 (0x100) [ 29.618986][ C0] ffffc90000007858: f328fdb86b78db00 (0xf328fdb86b78db00) [ 29.619004][ C0] ffffc90000007860: 0000000000000820 (0x820) [ 29.619016][ C0] ffffc90000007868: 0000000000000100 (0x100) [ 29.619028][ C0] ffffc90000007870: ffffc90000007b50 (0xffffc90000007b50) [ 29.619042][ C0] ffffc90000007878: ffffffff81e0806f (__kfence_alloc+0x23f/0x350) [ 29.619067][ C0] ffffc90000007880: ffff8881f6e2cf20 (0xffff8881f6e2cf20) [ 29.619084][ C0] ffffc90000007888: ffff8881f6e2cec8 (0xffff8881f6e2cec8) [ 29.619101][ C0] ffffc90000007890: ffff888106e4da00 (0xffff888106e4da00) [ 29.619118][ C0] ffffc90000007898: fffff52000000f14 (0xfffff52000000f14) [ 29.619136][ C0] ffffc900000078a0: 0000000041b58ab3 (0x41b58ab3) [ 29.619150][ C0] ffffc900000078a8: ffffffff87157c4d (kallsyms_seqs_of_names+0x1ed6d5/0x27baa5) [ 29.619178][ C0] ffffc900000078b0: ffffffff81e07e30 (__cfi___kfence_alloc+0x10/0x10) [ 29.619201][ C0] ffffc900000078b8: ffff8881f6e2cf00 (0xffff8881f6e2cf00) [ 29.619216][ C0] ffffc900000078c0: ffffffff81e0806f (__kfence_alloc+0x23f/0x350) [ 29.619241][ C0] ffffc900000078c8: ffffffff81dc14d3 (kmem_cache_alloc_node_noprof+0x2c3/0x420) [ 29.619268][ C0] ffffc900000078d0: ffffffff847ac57c (__alloc_skb+0x10c/0x360) [ 29.619291][ C0] ffffc900000078d8: ffffffff84ffc4a2 (ndisc_send_rs+0x322/0x880) [ 29.619318][ C0] ffffc900000078e0: ffffffff84fa51f2 (addrconf_rs_timer+0x362/0x620) [ 29.619341][ C0] ffffc900000078e8: ffffffff8176da0c (call_timer_fn+0x4c/0x300) [ 29.619366][ C0] ffffc900000078f0: ffffffff81769650 (__run_timer_base+0x6c0/0x9b0) [ 29.619393][ C0] ffffc900000078f8: ffffffff8176b2b5 (run_timer_softirq+0x35/0x70) [ 29.619419][ C0] ffffc90000007900: ffffffff81508e2a (handle_softirqs+0x1aa/0x620) [ 29.619443][ C0] ffffc90000007908: ffffffff81509487 (__irq_exit_rcu+0x47/0xb0) [ 29.619463][ C0] ffffc90000007910: ffffffff8150941d (irq_exit_rcu+0xd/0x30) [ 29.619485][ C0] ffffc90000007918: ffffffff85a506d2 (sysvec_apic_timer_interrupt+0x82/0x90) [ 29.619514][ C0] ffffc90000007920: 0000000000000000 ... [ 29.619524][ C0] ffffc90000007ac0: 0000000000000001 (0x1) [ 29.619536][ C0] ffffc90000007ac8: ffffffff87201290 (cpu_smt_max_threads+0x4/0x4) [ 29.619559][ C0] ffffc90000007ad0: ffffc90000007b90 (0xffffc90000007b90) [ 29.619573][ C0] ffffc90000007ad8: ffffffff816065e0 (kick_ilb+0x180/0x470) [ 29.619591][ T36] audit: type=1400 audit(1789141169.150:181): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 29.619593][ C0] ffffc90000007ae0: 0000000800000f60 (0x800000f60) [ 29.619610][ C0] ffffc90000007ae8: 1ffff92000000f60 (0x1ffff92000000f60) [ 29.619626][ C0] ffffc90000007af0: ffffc90000000000 (0xffffc90000000000) [ 29.619638][ C0] ffffc90000007af8: 0000000000000000 ... [ 29.619646][ C0] ffffc90000007b00: f328fdb86b78db00 (0xf328fdb86b78db00) [ 29.619661][ C0] ffffc90000007b08: 0000000000000820 (0x820) [ 29.619674][ C0] ffffc90000007b10: ffff888106e4da1c (0xffff888106e4da1c) [ 29.619691][ C0] ffffc90000007b18: 00000000ffffffff (0xffffffff) [ 29.619706][ C0] ffffc90000007b20: ffffc90000007b50 (0xffffc90000007b50) [ 29.619721][ C0] ffffc90000007b28: 0000000000000100 (0x100) [ 29.619735][ C0] ffffc90000007b30: ffff888106e4da00 (0xffff888106e4da00) [ 29.619751][ C0] ffffc90000007b38: 0000000000000820 (0x820) [ 29.619764][ C0] ffffc90000007b40: 00000000fffffffe (0xfffffffe) [ 29.619790][ C0] ffffc90000007b48: 00000000ffffffff (0xffffffff) [ 29.619805][ C0] ffffc90000007b50: ffffc90000007bc8 (0xffffc90000007bc8) [ 29.619820][ C0] ffffc90000007b58: ffffffff81dc14d3 (kmem_cache_alloc_node_noprof+0x2c3/0x420) [ 29.619845][ C0] ffffc90000007b60: 1ffff92000000f7c (0x1ffff92000000f7c) [ 29.619861][ C0] ffffc90000007b68: 1ffff92000000f74 (0x1ffff92000000f74) [ 29.619876][ C0] ffffc90000007b70: ffffffff847ac57c (__alloc_skb+0x10c/0x360) [ 29.619900][ C0] ffffc90000007b78: 00000820ffffffff (0x820ffffffff) [ 29.619915][ C0] ffffc90000007b80: ffffc90000007ce0 (0xffffc90000007ce0) [ 29.619931][ C0] ffffc90000007b88: 1ffff92000000f9d (0x1ffff92000000f9d) [ 29.619946][ C0] ffffc90000007b90: ffffc90000007ce8 (0xffffc90000007ce8) [ 29.619962][ C0] ffffc90000007b98: f328fdb86b78db00 (0xf328fdb86b78db00) [ 29.619978][ C0] ffffc90000007ba0: 0000000000000000 ... [ 29.619987][ C0] ffffc90000007ba8: 0000000000000801 (0x801) [ 29.620000][ C0] ffffc90000007bb0: 0000000000000820 (0x820) [ 29.620013][ C0] ffffc90000007bb8: 00000000fffffffe (0xfffffffe) [ 29.620027][ C0] ffffc90000007bc0: 00000000ffffffff (0xffffffff) [ 29.620041][ C0] ffffc90000007bc8: ffffc90000007c28 (0xffffc90000007c28) [ 29.620057][ C0] ffffc90000007bd0: ffffffff847ac57c (__alloc_skb+0x10c/0x360) [ 29.620081][ C0] ffffc90000007bd8: 1ffff92000000f80 (0x1ffff92000000f80) [ 29.620096][ C0] ffffc90000007be0: ffff888106e4da00 (0xffff888106e4da00) [ 29.620112][ C0] ffffc90000007be8: 00000000ffffffff (0xffffffff) [ 29.620126][ C0] ffffc90000007bf0: 0000004800000000 (0x4800000000) [ 29.620141][ C0] ffffc90000007bf8: f328fdb86b78db00 (0xf328fdb86b78db00) [ 29.620157][ C0] ffffc90000007c00: ffff88813421e1ea (0xffff88813421e1ea) [ 29.620173][ C0] ffffc90000007c08: ffff88813421e000 (0xffff88813421e000) [ 29.620188][ C0] ffffc90000007c10: 0000000000000038 (0x38) [ 29.620201][ C0] ffffc90000007c18: 0000000000000010 (0x10) [ 29.620214][ C0] ffffc90000007c20: dffffc0000000000 (0xdffffc0000000000) [ 29.620229][ C0] ffffc90000007c28: ffffc90000007c90 (0xffffc90000007c90) [ 29.620245][ C0] ffffc90000007c30: ffffffff84ffc4a2 (ndisc_send_rs+0x322/0x880) [ 29.620273][ C0] ffffc90000007c38: ffffc90000007ce0 (0xffffc90000007ce0) [ 29.620289][ C0] ffffc90000007c40: ffffffff8692bbc0 (in6addr_linklocal_allnodes+0x20/0x20) [ 29.620315][ C0] ffffc90000007c48: ffffc90000007c90 (0xffffc90000007c90) [ 29.620330][ C0] ffffc90000007c50: ffffffff84f7e782 (ipv6_get_lladdr+0x1c2/0x200) [ 29.620357][ C0] ffffc90000007c58: ffff88813421e000 (0xffff88813421e000) [ 29.620372][ C0] ffffc90000007c60: ffff888100000000 (0xffff888100000000) [ 29.620388][ C0] ffffc90000007c68: ffff88813422a458 (0xffff88813422a458) [ 29.620404][ C0] ffffc90000007c70: ffffc90000007ce0 (0xffffc90000007ce0) [ 29.620420][ C0] ffffc90000007c78: ffff88813421e000 (0xffff88813421e000) [ 29.620435][ C0] ffffc90000007c80: 1ffff92000000f98 (0x1ffff92000000f98) [ 29.620451][ C0] ffffc90000007c88: 0000000000000000 ... [ 29.620460][ C0] ffffc90000007c90: ffffc90000007d58 (0xffffc90000007d58) [ 29.620475][ C0] ffffc90000007c98: ffffffff84fa51f2 (addrconf_rs_timer+0x362/0x620) [ 29.620497][ C0] ffffc90000007ca0: 1ffff11026845490 (0x1ffff11026845490) [ 29.620513][ C0] ffffc90000007ca8: ffff88813421e000 (0xffff88813421e000) [ 29.620529][ C0] ffffc90000007cb0: 1ffff11026845467 (0x1ffff11026845467) [ 29.620544][ C0] ffffc90000007cb8: ffff88813422a000 (0xffff88813422a000) [ 29.620560][ C0] ffffc90000007cc0: 0000000041b58ab3 (0x41b58ab3) [ 29.620574][ C0] ffffc90000007cc8: ffffffff8712f57e (kallsyms_seqs_of_names+0x1c5006/0x27baa5) [ 29.620605][ C0] ffffc90000007cd0: ffffffff84fa4e90 (__cfi_addrconf_rs_timer+0x10/0x10) [ 29.620626][ C0] ffffc90000007cd8: dffffc0000000000 (0xdffffc0000000000) [ 29.620641][ C0] ffffc90000007ce0: 00000000000080fe (0x80fe) [ 29.620655][ C0] ffffc90000007ce8: 3900000000000000 (0x3900000000000000) [ 29.620671][ C0] ffffc90000007cf0: ffffc90000007d90 (0xffffc90000007d90) [ 29.620686][ C0] ffffc90000007cf8: ffffc90000007d90 (0xffffc90000007d90) [ 29.620702][ C0] ffffc90000007d00: f328fdb86b78db00 (0xf328fdb86b78db00) [ 29.620718][ C0] ffffc90000007d08: ffffffff8716eedc (kallsyms_seqs_of_names+0x204964/0x27baa5) [ 29.620748][ C0] ffffc90000007d10: ffffffff85a73010 (__cfi__raw_spin_lock_irq+0x10/0x10) [ 29.620769][ C0] ffffc90000007d18: ffff8881f6e2cf00 (0xffff8881f6e2cf00) [ 29.620791][ C0] ffffc90000007d20: ffff888100000000 (0xffff888100000000) [ 29.620807][ C0] ffffc90000007d28: 1ffff1103edc55ba (0x1ffff1103edc55ba) [ 29.620823][ C0] ffffc90000007d30: 0000000000000102 (0x102) [ 29.620836][ C0] ffffc90000007d38: 00000000ffff95f8 (0xffff95f8) [ 29.620850][ C0] ffffc90000007d40: dffffc0000000000 (0xdffffc0000000000) [ 29.620865][ C0] ffffc90000007d48: ffffffff84fa4e90 (__cfi_addrconf_rs_timer+0x10/0x10) [ 29.620887][ C0] ffffc90000007d50: ffff88813422a458 (0xffff88813422a458) [ 29.620903][ C0] ffffc90000007d58: ffffc90000007d90 (0xffffc90000007d90) [ 29.620919][ C0] ffffc90000007d60: ffffffff8176da0c (call_timer_fn+0x4c/0x300) [ 29.620946][ C0] ffffc90000007d68: ffff8881f6e2adc0 (0xffff8881f6e2adc0) [ 29.620962][ C0] ffffc90000007d70: ffffffff84fa4e90 (__cfi_addrconf_rs_timer+0x10/0x10) [ 29.621013][ C0] ffffc90000007d78: dffffc0000000000 (0xdffffc0000000000) [ 29.621029][ C0] ffffc90000007d80: ffffc90000007e60 (0xffffc90000007e60) [ 29.621044][ C0] ffffc90000007d88: ffff88813422a458 (0xffff88813422a458) [ 29.621060][ C0] ffffc90000007d90: ffffc90000007f18 (0xffffc90000007f18) [ 29.621076][ C0] ffffc90000007d98: ffffffff81769650 (__run_timer_base+0x6c0/0x9b0) [ 29.621103][ C0] ffffc90000007da0: ffffc90000007e60 (0xffffc90000007e60) [ 29.621119][ C0] ffffc90000007da8: 00000000ffff95f8 (0xffff95f8) [ 29.621133][ C0] ffffc90000007db0: 0000000000007dc0 (0x7dc0) [ 29.621147][ C0] ffffc90000007db8: ffff8881f6e2adc0 (0xffff8881f6e2adc0) [ 29.621163][ C0] ffffc90000007dc0: 1ffff92000000fc8 (0x1ffff92000000fc8) [ 29.621179][ C0] ffffc90000007dc8: 1ffff1103edc55ba (0x1ffff1103edc55ba) [ 29.621195][ C0] ffffc90000007dd0: ffff8881f6e2ade6 (0xffff8881f6e2ade6) [ 29.621211][ C0] ffffc90000007dd8: ffff8881f6e2ade4 (0xffff8881f6e2ade4) [ 29.621226][ C0] ffffc90000007de0: ffff8881f6e2add0 (0xffff8881f6e2add0) [ 29.621241][ C0] ffffc90000007de8: 1ffffffff0e81738 (0x1ffffffff0e81738) [ 29.621257][ C0] ffffc90000007df0: ffff8881f6e2adc8 (0xffff8881f6e2adc8) [ 29.621273][ C0] ffffc90000007df8: 1ffff1103edc55b9 (0x1ffff1103edc55b9) [ 29.621289][ C0] ffffc90000007e00: 1ffff1103edc55bc (0x1ffff1103edc55bc) [ 29.621305][ C0] ffffc90000007e08: 1ffff1103edc55bc (0x1ffff1103edc55bc) [ 29.621321][ C0] ffffc90000007e10: 1ffff1103edc55bb (0x1ffff1103edc55bb) [ 29.621336][ C0] ffffc90000007e18: ffff8881f6e2add8 (0xffff8881f6e2add8) [ 29.621352][ C0] ffffc90000007e20: ffff8881f6e2ae28 (0xffff8881f6e2ae28) [ 29.621368][ C0] ffffc90000007e28: ffff8881f6e2ade8 (0xffff8881f6e2ade8) [ 29.621383][ C0] ffffc90000007e30: ffffc90000007e60 (0xffffc90000007e60) [ 29.621399][ C0] ffffc90000007e38: 1ffff92000000fcc (0x1ffff92000000fcc) [ 29.621415][ C0] ffffc90000007e40: 0000000041b58ab3 (0x41b58ab3) [ 29.621429][ C0] ffffc90000007e48: ffffffff870f6a8a (kallsyms_seqs_of_names+0x18c512/0x27baa5) [ 29.621459][ C0] ffffc90000007e50: ffffffff81768f90 (timer_expire_remote+0xa0/0xa0) [ 29.621485][ C0] ffffc90000007e58: ffffffff85a50aa5 (kvm_sched_clock_read+0x15/0x30) [ 29.621511][ C0] ffffc90000007e60: ffff88813394d458 (0xffff88813394d458) [ 29.621527][ C0] ffffc90000007e68: 0000000000000000 ... [ 29.621536][ C0] ffffc90000007ea0: 1ffff1103edc59ef (0x1ffff1103edc59ef) [ 29.621552][ C0] ffffc90000007ea8: ffff8881f6e2d078 (0xffff8881f6e2d078) [ 29.621568][ C0] ffffc90000007eb0: 1ffff1103edc5a0f (0x1ffff1103edc5a0f) [ 29.621584][ C0] ffffc90000007eb8: 0000000000000000 ... [ 29.621592][ C0] ffffc90000007ec0: f328fdb86b78db00 (0xf328fdb86b78db00) [ 29.621608][ C0] ffffc90000007ec8: 0000000000000100 (0x100) [ 29.621621][ C0] ffffc90000007ed0: dffffc0000000000 (0xdffffc0000000000) [ 29.621637][ C0] ffffc90000007ed8: ffff88811a689300 (0xffff88811a689300) [ 29.621653][ C0] ffffc90000007ee0: ffffc90000007f28 (0xffffc90000007f28) [ 29.621669][ C0] ffffc90000007ee8: ffffffff816196c1 (irqtime_account_irq+0x51/0x1c0) [ 29.621698][ C0] ffffc90000007ef0: 0000000000000002 (0x2) [ 29.621711][ C0] ffffc90000007ef8: 0000000000000102 (0x102) [ 29.621724][ C0] ffffc90000007f00: 0000000000000001 (0x1) [ 29.621737][ C0] ffffc90000007f08: ffffffff8740a0c8 (softirq_vec+0x8/0x80) [ 29.621763][ C0] ffffc90000007f10: 1ffffffff0e81419 (0x1ffffffff0e81419) [ 29.621784][ C0] ffffc90000007f18: ffffc90000007f28 (0xffffc90000007f28) [ 29.621800][ C0] ffffc90000007f20: ffffffff8176b2b5 (run_timer_softirq+0x35/0x70) [ 29.621826][ C0] ffffc90000007f28: ffffc90000007fc0 (0xffffc90000007fc0) [ 29.621841][ C0] ffffc90000007f30: ffffffff81508e2a (handle_softirqs+0x1aa/0x620) [ 29.621863][ C0] ffffc90000007f38: 1ffff110234d126f (0x1ffff110234d126f) [ 29.621879][ C0] ffffc90000007f40: 00000000ffff9602 (0xffff9602) [ 29.621894][ C0] ffffc90000007f48: 1ffffffff0e81738 (0x1ffffffff0e81738) [ 29.621909][ C0] ffffc90000007f50: 1ffff110234d1260 (0x1ffff110234d1260) [ 29.621925][ C0] ffffc90000007f58: ffff88811a68932c (0xffff88811a68932c) [ 29.621940][ C0] ffffc90000007f60: 1ffff110234d1265 (0x1ffff110234d1265) [ 29.621956][ C0] ffffc90000007f68: ffff88811a689300 (0xffff88811a689300) [ 29.621972][ C0] ffffc90000007f70: 0000000a00000082 (0xa00000082) [ 29.621987][ C0] ffffc90000007f78: 0040854c00000000 (0x40854c00000000) [ 29.622002][ C0] ffffc90000007f80: ffff88811a68937c (0xffff88811a68937c) [ 29.622018][ C0] ffffc90000007f88: ffff88811a689300 (0xffff88811a689300) [ 29.622034][ C0] ffffc90000007f90: 0000000000000001 (0x1) [ 29.622046][ C0] ffffc90000007f98: ffff88811a689300 (0xffff88811a689300) [ 29.622062][ C0] ffffc90000007fa0: 0000000000000000 ... [ 29.622070][ C0] ffffc90000007fc0: ffffc90000007fd8 (0xffffc90000007fd8) [ 29.622086][ C0] ffffc90000007fc8: ffffffff81509487 (__irq_exit_rcu+0x47/0xb0) [ 29.622107][ C0] ffffc90000007fd0: ffffc9000d2df038 (0xffffc9000d2df038) [ 29.622123][ C0] ffffc90000007fd8: ffffc90000007fe8 (0xffffc90000007fe8) [ 29.622139][ C0] ffffc90000007fe0: ffffffff8150941d (irq_exit_rcu+0xd/0x30) [ 29.622159][ C0] ffffc90000007fe8: ffffc9000d2df028 (0xffffc9000d2df028) [ 29.622175][ C0] ffffc90000007ff0: ffffffff85a506d2 (sysvec_apic_timer_interrupt+0x82/0x90) [ 29.622202][ C0] ffffc90000007ff8: ffffc9000d2df018 (0xffffc9000d2df018) [ 29.623009][ T616] ---[ end trace 0000000000000000 ]--- [ 31.219553][ T616] RIP: 0010:__schedule+0x14e/0x20b0 [ 31.224770][ T616] Code: 00 00 48 89 04 24 4c 8d 70 20 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ac 9f 3a fc 4d 8b 36 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 93 9f 3a fc 49 81 3e 9d 6e ac 57 [ 31.244401][ T616] RSP: 0018:ffffc9000d2df2a0 EFLAGS: 00010246 [ 31.250452][ T616] RAX: 0000000000000000 RBX: ffff8881f6e4fa40 RCX: ffff88811a689300 [ 31.258454][ T616] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 31.266467][ T616] RBP: ffffc9000d2df470 R08: 0000000000000003 R09: 0000000000000004 [ 31.274461][ T616] R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: 1ffff92001a5be6c [ 31.282475][ T616] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1103edca0c9 [ 31.290448][ T616] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.299396][ T616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.306006][ T616] CR2: 00007fb2c49ef2f8 CR3: 0000000135e90000 CR4: 00000000003526b0 [ 31.313998][ T616] Kernel panic - not syncing: Fatal exception [ 31.320326][ T616] Kernel Offset: disabled [ 31.324634][ T616] Rebooting in 86400 seconds..