last executing test programs: 2m35.812858258s ago: executing program 2 (id=347): shutdown(0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000340)) 2m35.258954895s ago: executing program 2 (id=351): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) 2m35.09303379s ago: executing program 2 (id=353): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) 2m33.415750246s ago: executing program 2 (id=360): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 2m33.341026867s ago: executing program 2 (id=361): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb010000000000000000070200", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m33.183406813s ago: executing program 2 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='udp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) 2m18.104345224s ago: executing program 32 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='udp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) 1m53.605268629s ago: executing program 1 (id=611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x3}) 1m53.335373629s ago: executing program 1 (id=617): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 1m52.754611912s ago: executing program 1 (id=625): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xb, 0x1, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x10, "da0da0e6dcd2d54c7d93dc83833dd3e83b8b02ef53d27f694e8fcc90a392de2d", 0x33363248}) 1m52.397968762s ago: executing program 1 (id=627): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) 1m52.235619249s ago: executing program 1 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f0000000700)='1', 0x1) 1m52.054979641s ago: executing program 1 (id=632): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m50.849809186s ago: executing program 4 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000300)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x18, 0xf}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x2f, 0x3c, 0x64, 0x0, 0xb, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3e}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0xc2, 0x101, 0x0, 0x411, {[@md5sig={0x13, 0x12, "90b573eefb8e807fb24450f4743cbbda"}]}}}}}, 0x4a) 1m50.618374263s ago: executing program 4 (id=658): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 1m50.395834169s ago: executing program 4 (id=651): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r0, 0x1) 1m50.22940487s ago: executing program 4 (id=652): ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 1m50.172734547s ago: executing program 4 (id=654): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f0000000700)='1', 0x1) 1m50.107060132s ago: executing program 4 (id=655): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1m36.571924922s ago: executing program 33 (id=632): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m35.006575495s ago: executing program 34 (id=655): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 21.07486474s ago: executing program 5 (id=1110): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, 0x0, 0x0) 20.796157007s ago: executing program 5 (id=1113): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa2, 0x200000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 20.544510011s ago: executing program 5 (id=1115): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 20.443715684s ago: executing program 5 (id=1117): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 20.367338459s ago: executing program 5 (id=1119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) close(0xffffffffffffffff) r1 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, r0}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000001c0)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x803, 0x0, 0x0, 0x162}}}, 0x0) 19.882077319s ago: executing program 5 (id=1121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0xc, 0x14, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x11, 0x0, 0xeb65}]}) 19.732678174s ago: executing program 35 (id=1121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0xc, 0x14, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x11, 0x0, 0xeb65}]}) 18.718447803s ago: executing program 6 (id=1129): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x0) 18.405000155s ago: executing program 6 (id=1131): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) 17.818786483s ago: executing program 6 (id=1134): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x6901, &(0x7f0000000400)={0x0, 0x0, 0x400}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x94, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x3}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000540)={0x0, 0x33b6, 0x1, 0x3, 0x10d, 0x0, r1}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x73c7, 0x8000, 0x0, 0x10c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcb7e, 0x40, 0x2, 0x1da, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1a7c, 0x10000, 0x3, 0x228, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16b2, 0x40, 0x1, 0x33b, 0x0, r1}}], 0x4, &(0x7f0000001b80)={0x2e, 0x8, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x297}, 0x0, r6, '\x00', {0x4, 0xbe6, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r8, r7, &(0x7f0000000480)={0x0, 0x1d97, 0x1, 0xffffffff, 0x56}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bb1, 0x4000, 0x5, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x123c, 0x400, 0xfffffffe, 0x117}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbec6, 0x10000, 0x1, 0x210}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ce, 0x40, 0xfffffffe, 0x2b5}}], 0x4, &(0x7f0000000340)={0x2e, 0x5c, 0x0, r8, 0xc0107523, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, '\x00', {0x85, 0xb55, 0x100104, 0x0}}, 0x0) 17.528732563s ago: executing program 6 (id=1135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xffff, 0x0, 0x9b, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x8b, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x83, 0x1, 0x0, 0x1, 0x1}, {}, {}, 0x20, 0x0, 0x0, 0x30, 0x0, 0x1, 0xfe000000}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x1b, 0x0, 0x800}, {0x6e0, 0x0, 0x1}]}) 17.146535337s ago: executing program 6 (id=1140): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001080)='2', 0x1}], 0x1}}], 0x1, 0x8000) 16.796930693s ago: executing program 6 (id=1142): syz_usb_connect(0x3, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0x43, 0xfc, 0x2c, 0x8, 0xeb1a, 0xe300, 0x4260, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xb0, 0x1, "", [{{0x9, 0x4, 0x27, 0x68, 0x0, 0x1, 0x6f, 0x81, 0x80}}]}}]}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='4', 0x1) 15.326223508s ago: executing program 0 (id=1145): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) unshare(0x6020400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCSBRKP(r0, 0x5425, 0x0) 14.599889684s ago: executing program 0 (id=1146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303, 0x38}, '\x00', "0000000000e3c100", '\x00', "00000000000000fd"}, 0x28) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000140)="0088", 0x2}], 0x1) 14.132688762s ago: executing program 0 (id=1147): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) 13.069321861s ago: executing program 0 (id=1151): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 12.853981699s ago: executing program 0 (id=1153): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000022c0)={0x34, &(0x7f00000020c0)={0x20, 0x0, 0x3, "6eb8d2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.40743161s ago: executing program 0 (id=1154): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0x3, 0xeb, 0x1, 0xff, "9591c289333bef7d35119544ed641462d4304c"}) 11.988510084s ago: executing program 36 (id=1154): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0x3, 0xeb, 0x1, 0xff, "9591c289333bef7d35119544ed641462d4304c"}) 2.209970848s ago: executing program 3 (id=1186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.98637911s ago: executing program 3 (id=1189): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x7fb1) close(0x3) 1.954026482s ago: executing program 7 (id=1190): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240320005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 1.821195795s ago: executing program 3 (id=1191): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0185879, 0x0) 1.725655659s ago: executing program 7 (id=1192): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) 1.663172125s ago: executing program 37 (id=1142): syz_usb_connect(0x3, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0x43, 0xfc, 0x2c, 0x8, 0xeb1a, 0xe300, 0x4260, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xb0, 0x1, "", [{{0x9, 0x4, 0x27, 0x68, 0x0, 0x1, 0x6f, 0x81, 0x80}}]}}]}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='4', 0x1) 1.602355967s ago: executing program 8 (id=1194): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000008c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) ptrace(0x10, r0) tkill(r0, 0x30) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 1.559727674s ago: executing program 3 (id=1195): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000000010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000002"], 0xf}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) write(r0, &(0x7f0000000000)="d9290ae2", 0x4) 1.309554315s ago: executing program 7 (id=1196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7494d36f08266060266b9800000c00f326635000400000f30eade780066b9aa0200000fb266b9ab0900000f30f2b031b3e759dc2c", 0x37}], 0x1, 0x9f6a364b3fac2a47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.134291705s ago: executing program 3 (id=1197): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.023720986s ago: executing program 8 (id=1198): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$inet(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r0, &(0x7f0000000440)="b0b4", 0x2, 0x4044800, 0x0, 0x0) 935.784724ms ago: executing program 8 (id=1199): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x0, 0xc2, 0x1, 0x3, 0x2, 0x6, 0x200, 0xd4, 0x40, 0x1f0, 0x401, 0x2, 0x38, 0x1, 0x1, 0x4, 0x3}, [{0x2, 0x401, 0xe, 0x7fe32d3a, 0x4, 0x5, 0x5, 0x1}]}, 0x78) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 855.634258ms ago: executing program 8 (id=1200): openat2(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x20000, 0x8, 0x1}, 0x18) socket$inet6(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0x45, 0x1}, {0x4d, 0x2}, @cond=[{0x9, 0x5299, 0xc, 0x800, 0xf533, 0xf4a}, {0x8001, 0x807, 0x1, 0x17, 0x0, 0xffff}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001300)=""/115) 846.238801ms ago: executing program 3 (id=1201): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010083000000002a74a08538b3c83e25038a39942bb09ea54983ce"], 0x0}, 0x0) 764.513006ms ago: executing program 7 (id=1202): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) unshare(0x8040600) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 643.911554ms ago: executing program 8 (id=1203): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) 540.681895ms ago: executing program 7 (id=1204): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x5, 0x4e24, 0x5, 0xa, 0x80, 0x80, 0x5e}, {0x5, 0xffffffffffffff01, 0x9, 0x2, 0x7, 0x2, 0x4, 0xcf}, {0x0, 0x6, 0x54a, 0x7}, 0x2, 0x6e6bc0, 0x0, 0x0, 0x5, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0x6c}, 0x2, @in=@multicast2, 0x3502, 0x1, 0x0, 0x5, 0x8, 0x10001, 0x1ad5bd38}}, 0xe8) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cde701004002000050000000600010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 233.186442ms ago: executing program 8 (id=1205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d900b80c0000000f23c00f21f83501000f000f23f8ba00e500000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x6a}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000005c0)={0x1, 0x0, [{0x80000008, 0x2, 0xa, 0x1, 0xfffffff9, 0x6, 0x6b89}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 7 (id=1206): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x1c4) mount$bind(&(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', &(0x7f0000000280), 0x4, 0x0) kernel console output (not intermixed with test programs): 0000000 R09: 0000000000000000 [ 225.698128][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.698139][ T8580] R13: 00007fc461226038 R14: 00007fc461225fa0 R15: 00007ffc6763f798 [ 225.698165][ T8580] [ 225.835330][ T5702] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 225.974574][ T5749] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 226.005458][ T5702] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 226.009358][ T5702] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.009430][ T5702] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.009450][ T5702] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.009470][ T5702] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.009510][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.170998][ T8583] tcpci 0-0002: probe with driver tcpci failed with error -5 [ 226.186527][ T8583] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 226.455492][ T8589] kvm: apic: phys broadcast and lowest prio [ 226.655404][ T5701] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 226.656134][ T5701] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 226.661325][ T5701] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 226.679100][ T5701] usb 7-1: USB disconnect, device number 8 [ 226.702599][ T5701] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 226.705386][ T5701] ftdi_sio 7-1:1.0: device disconnected [ 227.060613][ T32] kauditd_printk_skb: 79 callbacks suppressed [ 227.060631][ T32] audit: type=1800 audit(1700000066.544:1937): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178518 res=0 errno=0 [ 227.089512][ T5702] [drm] Initialized gud 1.0.0 for 4-1:1.0 on minor 1 [ 227.097273][ T32] audit: type=1800 audit(1700000066.584:1938): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178532 res=0 errno=0 [ 227.097366][ T5749] usb 6-1: device descriptor read/64, error -71 [ 227.188071][ T32] audit: type=1800 audit(1700000066.674:1939): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15718 res=0 errno=0 [ 227.264006][ T32] audit: type=1800 audit(1700000066.744:1940): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15718 res=0 errno=0 [ 227.308531][ T5702] gud 4-1:1.0: [drm] *ERROR* fbdev: Failed to setup emulation (ret=-22) [ 227.311549][ T5702] usb 4-1: USB disconnect, device number 34 [ 227.353560][ T5749] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 227.358344][ T8601] syzkaller1: entered promiscuous mode [ 227.358367][ T8601] syzkaller1: entered allmulticast mode [ 227.468054][ T32] audit: type=1800 audit(1700000066.954:1941): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14980 res=0 errno=0 [ 227.514530][ T5749] usb 6-1: Using ep0 maxpacket: 16 [ 227.515248][ T5749] usb 6-1: New USB device found: idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 227.518114][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.518138][ T5749] usb 6-1: Product: syz [ 227.518152][ T5749] usb 6-1: Manufacturer: syz [ 227.518166][ T5749] usb 6-1: SerialNumber: syz [ 227.543848][ T32] audit: type=1800 audit(1700000067.014:1942): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15718 res=0 errno=0 [ 227.556712][ T8605] kAFS: bad VL server IP address [ 227.588764][ T32] audit: type=1800 audit(1700000067.074:1943): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178669 res=0 errno=0 [ 227.593079][ T32] audit: type=1800 audit(1700000067.074:1944): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=178701 res=0 errno=0 [ 227.599165][ T32] audit: type=1800 audit(1700000067.084:1945): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=178676 res=0 errno=0 [ 227.600399][ T32] audit: type=1800 audit(1700000067.084:1946): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=178677 res=0 errno=0 [ 227.675054][ T8603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.710408][ T8608] FAULT_INJECTION: forcing a failure. [ 227.710408][ T8608] name failslab, interval 1, probability 0, space 0, times 0 [ 227.710433][ T8608] CPU: 0 UID: 0 PID: 8608 Comm: syz.0.953 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.710449][ T8608] Tainted: [L]=SOFTLOCKUP [ 227.710456][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.710467][ T8608] Call Trace: [ 227.710474][ T8608] [ 227.710482][ T8608] dump_stack_lvl+0xe8/0x150 [ 227.710513][ T8608] should_fail_ex+0x3eb/0x540 [ 227.710545][ T8608] should_failslab+0xa8/0x100 [ 227.710558][ T8608] ? posix_lock_inode+0x356/0x3e80 [ 227.710569][ T8608] kmem_cache_alloc_noprof+0x9c/0x600 [ 227.710586][ T8608] ? posix_lock_inode+0x356/0x3e80 [ 227.710598][ T8608] ? __init_waitqueue_head+0xa8/0x150 [ 227.710633][ T8608] posix_lock_inode+0x356/0x3e80 [ 227.710664][ T8608] ? rcu_is_watching+0x16/0xb0 [ 227.710686][ T8608] ? trace_kmem_cache_alloc+0x29/0xe0 [ 227.710713][ T8608] ? fcntl_setlk+0xa9/0x1060 [ 227.710734][ T8608] ? __pfx_posix_lock_inode+0x10/0x10 [ 227.710764][ T8608] fcntl_setlk+0x9a0/0x1060 [ 227.710801][ T8608] ? __pfx_fcntl_setlk+0x10/0x10 [ 227.710828][ T8608] ? __might_fault+0xaf/0x130 [ 227.710860][ T8608] do_fcntl+0x94c/0x1a20 [ 227.710878][ T8608] ? lock_acquire+0x115/0x350 [ 227.710888][ T8608] ? __pfx_do_fcntl+0x10/0x10 [ 227.710903][ T8608] ? __fget_files+0x2a/0x420 [ 227.710914][ T8608] ? __fget_files+0x2a/0x420 [ 227.710927][ T8608] ? bpf_lsm_file_fcntl+0x9/0x20 [ 227.710954][ T8608] __se_sys_fcntl+0xc8/0x150 [ 227.710977][ T8608] do_syscall_64+0x166/0x520 [ 227.711004][ T8608] ? trace_irq_disable+0x3b/0x140 [ 227.711024][ T8608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.711035][ T8608] ? clear_bhb_loop+0x70/0xc0 [ 227.711047][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.711057][ T8608] RIP: 0033:0x7fc460f9e159 [ 227.711068][ T8608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.711077][ T8608] RSP: 002b:00007fc461e4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 227.711098][ T8608] RAX: ffffffffffffffda RBX: 00007fc461225fa0 RCX: 00007fc460f9e159 [ 227.711112][ T8608] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 227.711124][ T8608] RBP: 00007fc46103506b R08: 0000000000000000 R09: 0000000000000000 [ 227.711137][ T8608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.711149][ T8608] R13: 00007fc461226038 R14: 00007fc461225fa0 R15: 00007ffc6763f798 [ 227.711174][ T8608] [ 227.986079][ T5749] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 227.990273][ T5749] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 227.990646][ T5749] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 227.990691][ T5749] usb 6-1: media controller created [ 228.041089][ T5749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.074332][ T5749] zl10353_read_register: readreg error (reg=127, ret==-32) [ 228.125224][ T5749] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 228.226036][ T5702] hid-generic 0005:0C45:1010.0018: item fetching failed at offset 0/1 [ 228.226816][ T5702] hid-generic 0005:0C45:1010.0018: probe with driver hid-generic failed with error -22 [ 228.333928][ T5342] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 228.453285][ T5701] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 228.488706][ T5342] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 228.489886][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.495768][ T5342] usb 4-1: config 0 descriptor?? [ 228.608278][ T5701] usb 7-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 228.609392][ T5701] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 228.609430][ T5701] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 228.609499][ T5701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.628175][ T5701] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 228.638719][ T5701] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 228.710650][ T5342] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 228.810256][ T54] block nbd0: Receive control failed (result -107) [ 228.848045][ T7547] block nbd0: shutting down sockets [ 228.877495][ T8631] sd 0:0:1:0: PR command failed: 1026 [ 228.877539][ T8631] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 228.877574][ T8631] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 228.959716][ T5342] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 228.959741][ T5342] [drm] Initialized udl on minor 1 [ 229.055720][ T8617] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 229.056097][ T8617] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 229.056535][ T8617] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 229.148116][ T8617] SPCP8x5 ttyUSB0: Set UART format 0x1 failed (error = -32) [ 229.183882][ T5751] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 229.345082][ T5751] usb 1-1: unable to get BOS descriptor or descriptor too short [ 229.345133][ T5751] usb 1-1: New USB device found: idVendor=22d4, idProduct=1503, bcdDevice=0.40 [ 229.346071][ T5751] usb 1-1: config 1 interface 0 has no altsetting 0 [ 229.348741][ T5751] usb 1-1: string descriptor 0 read error: -22 [ 229.348868][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.663445][ T5680] usb 6-1: USB disconnect, device number 14 [ 229.783700][ T5751] hid (null): global environment stack underflow [ 229.837183][ T5751] glorious 0003:22D4:1503.0019: global environment stack underflow [ 229.837206][ T5751] glorious 0003:22D4:1503.0019: item 0 4 1 11 parsing failed [ 229.838098][ T5751] glorious 0003:22D4:1503.0019: probe with driver glorious failed with error -22 [ 229.995307][ T5680] usb 1-1: USB disconnect, device number 32 [ 231.083717][ T5701] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 231.177228][ T5680] usb 7-1: USB disconnect, device number 9 [ 231.205487][ T5680] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 231.206678][ T5680] spcp8x5 7-1:1.0: device disconnected [ 231.243129][ T5701] usb 6-1: Using ep0 maxpacket: 8 [ 231.243926][ T5701] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 231.245136][ T5701] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 231.245181][ T5701] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.245202][ T5701] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.245251][ T5701] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.245273][ T5701] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.245311][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.471830][ T8662] kvm: apic: phys broadcast and lowest prio [ 231.542574][ T5701] usb 6-1: usb_control_msg returned -32 [ 231.542623][ T5701] usbtmc 6-1:16.0: can't read capabilities [ 231.623512][ T5710] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 231.784076][ T5710] usb 1-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 231.785713][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.785736][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.785757][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.787892][ T5710] usb 1-1: config 0 descriptor?? [ 231.897909][ T8663] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 232.099583][ T5687] usb 6-1: USB disconnect, device number 15 [ 232.196998][ T32] kauditd_printk_skb: 72 callbacks suppressed [ 232.197017][ T32] audit: type=1800 audit(1700000071.684:2019): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179486 res=0 errno=0 [ 232.395348][ T5710] usb 1-1: language id specifier not provided by device, defaulting to English [ 232.643836][ T32] audit: type=1800 audit(1700000072.134:2020): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15595 res=0 errno=0 [ 232.737534][ T32] audit: type=1800 audit(1700000072.224:2021): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15595 res=0 errno=0 [ 232.778468][ T8669] syzkaller1: entered promiscuous mode [ 232.778484][ T8669] syzkaller1: entered allmulticast mode [ 232.881937][ T32] audit: type=1800 audit(1700000072.364:2022): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15595 res=0 errno=0 [ 232.984616][ T5701] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 233.006752][ T5710] uclogic 0003:256C:006D.001A: failed retrieving string descriptor #100: -71 [ 233.006834][ T5710] uclogic 0003:256C:006D.001A: failed retrieving pen parameters: -71 [ 233.006852][ T5710] uclogic 0003:256C:006D.001A: failed probing pen v1 parameters: -71 [ 233.006902][ T5710] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 233.007026][ T5710] uclogic 0003:256C:006D.001A: probe with driver uclogic failed with error -71 [ 233.011634][ T5710] usb 1-1: USB disconnect, device number 33 [ 233.025778][ T32] audit: type=1800 audit(1700000072.504:2023): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15595 res=0 errno=0 [ 233.119352][ T32] audit: type=1800 audit(1700000072.594:2024): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=26313 res=0 errno=0 [ 233.119405][ T32] audit: type=1800 audit(1700000072.594:2025): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=26314 res=0 errno=0 [ 233.163694][ T5701] usb 7-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 233.169707][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.169735][ T5701] usb 7-1: Product: syz [ 233.169748][ T5701] usb 7-1: Manufacturer: syz [ 233.169760][ T5701] usb 7-1: SerialNumber: syz [ 233.175283][ T5701] usb 7-1: config 0 descriptor?? [ 233.184979][ T32] audit: type=1800 audit(1700000072.664:2026): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179626 res=0 errno=0 [ 233.188435][ T32] audit: type=1800 audit(1700000072.674:2027): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=179658 res=0 errno=0 [ 233.188508][ T32] audit: type=1800 audit(1700000072.674:2028): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=179633 res=0 errno=0 [ 233.584981][ T5701] usb 7-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 233.792176][ T5701] usb 7-1: no permanent extended address found, random address set [ 233.792206][ T5701] usb 7-1: atusb_probe: initialization failed, error = -524 [ 233.793487][ T5701] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 234.023270][ T5342] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 234.023740][ T5342] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 234.033541][ T5342] usb 4-1: USB disconnect, device number 35 [ 234.040252][ T5710] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 234.040719][ T5710] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 234.041221][ T5710] usb 7-1: USB disconnect, device number 10 [ 234.842910][ T5710] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 234.843101][ T5342] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 234.995160][ T5342] usb 7-1: unable to get BOS descriptor or descriptor too short [ 234.995213][ T5342] usb 7-1: New USB device found: idVendor=22d4, idProduct=1503, bcdDevice=0.40 [ 234.996293][ T5710] usb 1-1: unable to get BOS descriptor or descriptor too short [ 234.996332][ T5710] usb 1-1: New USB device found: idVendor=1740, idProduct=9707, bcdDevice=34.de [ 234.996449][ T5342] usb 7-1: config 1 interface 0 has no altsetting 0 [ 234.996950][ T5710] usb 1-1: config 0 has no interfaces? [ 234.999388][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.999404][ T5710] usb 1-1: Product: syz [ 234.999411][ T5710] usb 1-1: Manufacturer: syz [ 234.999419][ T5710] usb 1-1: SerialNumber: syz [ 235.001438][ T5342] usb 7-1: string descriptor 0 read error: -22 [ 235.001598][ T5342] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.003578][ T5710] usb 1-1: config 0 descriptor?? [ 235.219198][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.219686][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.231565][ T5701] usb 1-1: USB disconnect, device number 34 [ 235.477776][ T5342] hid (null): global environment stack underflow [ 235.515015][ T5342] glorious 0003:22D4:1503.001B: global environment stack underflow [ 235.515040][ T5342] glorious 0003:22D4:1503.001B: item 0 4 1 11 parsing failed [ 235.515788][ T5342] glorious 0003:22D4:1503.001B: probe with driver glorious failed with error -22 [ 235.672787][ T5687] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 235.694295][ T5342] usb 7-1: USB disconnect, device number 11 [ 235.709150][ T5701] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 235.824142][ T5687] usb 1-1: New USB device found: idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 235.825108][ T5687] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 235.825132][ T5687] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 235.825145][ T5687] usb 1-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 235.825155][ T5687] usb 1-1: config 220 has no interface number 2 [ 235.825192][ T5687] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 235.825205][ T5687] usb 1-1: config 220 interface 0 has no altsetting 0 [ 235.825214][ T5687] usb 1-1: config 220 interface 76 has no altsetting 0 [ 235.825223][ T5687] usb 1-1: config 220 interface 1 has no altsetting 0 [ 235.827162][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.827185][ T5687] usb 1-1: Product: syz [ 235.827198][ T5687] usb 1-1: Manufacturer: syz [ 235.827211][ T5687] usb 1-1: SerialNumber: syz [ 235.913552][ T5701] usb 4-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 235.945422][ T5701] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 8 [ 235.945467][ T5701] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.945491][ T5701] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 235.945515][ T5701] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 235.945549][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.948932][ T8706] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 236.048479][ T5687] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 236.048514][ T5687] uvcvideo 1-1:220.0: No valid video chain found. [ 236.048568][ T5687] usb 1-1: selecting invalid altsetting 0 [ 236.074935][ T5687] usb 1-1: selecting invalid altsetting 0 [ 236.074963][ T5687] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 236.082567][ T5687] usb 1-1: USB disconnect, device number 35 [ 236.312284][ T54] Bluetooth: hci5: link tx timeout [ 236.312405][ T54] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.332276][ T54] Bluetooth: hci5: link tx timeout [ 236.332295][ T54] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.336963][ T8714] FAULT_INJECTION: forcing a failure. [ 236.336963][ T8714] name failslab, interval 1, probability 0, space 0, times 0 [ 236.337023][ T8714] CPU: 0 UID: 0 PID: 8714 Comm: syz.6.995 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.337049][ T8714] Tainted: [L]=SOFTLOCKUP [ 236.337055][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.337067][ T8714] Call Trace: [ 236.337074][ T8714] [ 236.337082][ T8714] dump_stack_lvl+0xe8/0x150 [ 236.337110][ T8714] should_fail_ex+0x3eb/0x540 [ 236.337146][ T8714] should_failslab+0xa8/0x100 [ 236.337170][ T8714] __kmalloc_cache_noprof+0x9e/0x600 [ 236.337191][ T8714] ? alloc_fdtable+0xc0/0x2c0 [ 236.337215][ T8714] ? alloc_fdtable+0xc0/0x2c0 [ 236.337246][ T8714] alloc_fdtable+0xc0/0x2c0 [ 236.337270][ T8714] ? dup_fd+0x99c/0xbf0 [ 236.337296][ T8714] dup_fd+0x9a5/0xbf0 [ 236.337328][ T8714] ? do_raw_spin_unlock+0xf5/0x200 [ 236.337359][ T8714] unshare_fd+0xa8/0x120 [ 236.337386][ T8714] ksys_unshare+0x4d2/0x890 [ 236.337414][ T8714] ? __pfx_ksys_unshare+0x10/0x10 [ 236.337438][ T8714] ? rcu_is_watching+0x16/0xb0 [ 236.337471][ T8714] __x64_sys_unshare+0x38/0x50 [ 236.337495][ T8714] do_syscall_64+0x166/0x520 [ 236.337522][ T8714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.337540][ T8714] ? clear_bhb_loop+0x70/0xc0 [ 236.337561][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.337579][ T8714] RIP: 0033:0x7f7725f9e159 [ 236.337596][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.337612][ T8714] RSP: 002b:00007f7726dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 236.337631][ T8714] RAX: ffffffffffffffda RBX: 00007f7726225fa0 RCX: 00007f7725f9e159 [ 236.337645][ T8714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 236.337656][ T8714] RBP: 00007f772603506b R08: 0000000000000000 R09: 0000000000000000 [ 236.337668][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.337679][ T8714] R13: 00007f7726226038 R14: 00007f7726225fa0 R15: 00007fff9c41af88 [ 236.337707][ T8714] [ 236.613930][ T8720] bond0: entered promiscuous mode [ 236.613947][ T8720] bond_slave_0: entered promiscuous mode [ 236.614075][ T8720] bond_slave_1: entered promiscuous mode [ 236.681002][ T8722] FAULT_INJECTION: forcing a failure. [ 236.681002][ T8722] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.681035][ T8722] CPU: 1 UID: 0 PID: 8722 Comm: syz.0.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.681070][ T8722] Tainted: [L]=SOFTLOCKUP [ 236.681076][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.681088][ T8722] Call Trace: [ 236.681096][ T8722] [ 236.681105][ T8722] dump_stack_lvl+0xe8/0x150 [ 236.681128][ T8722] should_fail_ex+0x3eb/0x540 [ 236.681147][ T8722] prepare_alloc_pages+0x21e/0x5f0 [ 236.681162][ T8722] __alloc_frozen_pages_noprof+0x17a/0x400 [ 236.681173][ T8722] ? __kmalloc_cache_noprof+0x31c/0x600 [ 236.681185][ T8722] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.681201][ T8722] ? policy_nodemask+0x2cc/0x8e0 [ 236.681218][ T8722] alloc_pages_mpol+0x21e/0x390 [ 236.681234][ T8722] alloc_pages_noprof+0xb1/0x2b0 [ 236.681247][ T8722] kimage_alloc_pages+0xbe/0x3c0 [ 236.681266][ T8722] kimage_alloc_control_pages+0x49b/0xbc0 [ 236.681282][ T8722] ? __kmalloc_cache_noprof+0x31c/0x600 [ 236.681293][ T8722] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 236.681310][ T8722] do_kexec_load+0x492/0x7c0 [ 236.681327][ T8722] ? __pfx_do_kexec_load+0x10/0x10 [ 236.681342][ T8722] ? _copy_from_user+0x94/0xb0 [ 236.681356][ T8722] __se_sys_kexec_load+0x134/0x160 [ 236.681370][ T8722] do_syscall_64+0x166/0x520 [ 236.681385][ T8722] ? trace_irq_disable+0x3b/0x140 [ 236.681397][ T8722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.681407][ T8722] ? clear_bhb_loop+0x70/0xc0 [ 236.681419][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.681429][ T8722] RIP: 0033:0x7fc460f9e159 [ 236.681440][ T8722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.681448][ T8722] RSP: 002b:00007fc461e4d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 236.681460][ T8722] RAX: ffffffffffffffda RBX: 00007fc461225fa0 RCX: 00007fc460f9e159 [ 236.681468][ T8722] RDX: 0000200000000140 RSI: 0000000000000008 RDI: 0000000000000002 [ 236.681474][ T8722] RBP: 00007fc46103506b R08: 0000000000000000 R09: 0000000000000000 [ 236.681481][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.681487][ T8722] R13: 00007fc461226038 R14: 00007fc461225fa0 R15: 00007ffc6763f798 [ 236.681502][ T8722] [ 236.681654][ T8722] kexec: Could not allocate control_code_buffer [ 236.752673][ T5710] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 236.924716][ T5710] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 236.928188][ T5710] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.928212][ T5710] usb 7-1: Product: syz [ 236.928225][ T5710] usb 7-1: Manufacturer: syz [ 236.928238][ T5710] usb 7-1: SerialNumber: syz [ 237.087902][ T8729] syzkaller1: entered promiscuous mode [ 237.087926][ T8729] syzkaller1: entered allmulticast mode [ 237.170827][ T8731] FAULT_INJECTION: forcing a failure. [ 237.170827][ T8731] name failslab, interval 1, probability 0, space 0, times 0 [ 237.170857][ T8731] CPU: 1 UID: 0 PID: 8731 Comm: syz.0.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.170881][ T8731] Tainted: [L]=SOFTLOCKUP [ 237.170888][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.170899][ T8731] Call Trace: [ 237.170907][ T8731] [ 237.170915][ T8731] dump_stack_lvl+0xe8/0x150 [ 237.170945][ T8731] should_fail_ex+0x3eb/0x540 [ 237.170979][ T8731] should_failslab+0xa8/0x100 [ 237.171005][ T8731] __kmalloc_cache_noprof+0x9e/0x600 [ 237.171025][ T8731] ? sctp_association_new+0x89/0x25d0 [ 237.171052][ T8731] ? sctp_association_new+0x89/0x25d0 [ 237.171085][ T8731] sctp_association_new+0x89/0x25d0 [ 237.171122][ T8731] sctp_connect_new_asoc+0x2e4/0x6b0 [ 237.171153][ T8731] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 237.171187][ T8731] ? __local_bh_enable_ip+0xd6/0x140 [ 237.171209][ T8731] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 237.171232][ T8731] ? security_sctp_bind_connect+0x7e/0x2c0 [ 237.171258][ T8731] sctp_sendmsg+0x159b/0x2d00 [ 237.171331][ T8731] ? __pfx_sctp_sendmsg+0x10/0x10 [ 237.171359][ T8731] ? finish_task_switch+0x40e/0xc60 [ 237.171389][ T8731] ? __lock_acquire+0x747/0x2de0 [ 237.171423][ T8731] ? aa_sock_msg_perm+0xfc/0x210 [ 237.171449][ T8731] ? sock_rps_record_flow+0x19/0x350 [ 237.171473][ T8731] ? inet_sendmsg+0x298/0x320 [ 237.171494][ T8731] ? __pfx_inet_sendmsg+0x10/0x10 [ 237.171512][ T8731] sock_sendmsg_nosec+0x10e/0x180 [ 237.171533][ T8731] ____sys_sendmsg+0x54e/0x850 [ 237.171562][ T8731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.171599][ T8731] ? import_iovec+0x73/0xa0 [ 237.171621][ T8731] ___sys_sendmsg+0x2a5/0x360 [ 237.171645][ T8731] ? __lock_acquire+0x747/0x2de0 [ 237.171670][ T8731] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.171699][ T8731] ? __pfx_futex_wake_mark+0x10/0x10 [ 237.171744][ T8731] ? __fget_files+0x3a2/0x420 [ 237.171761][ T8731] ? __fget_files+0x2a/0x420 [ 237.171786][ T8731] __sys_sendmmsg+0x273/0x4d0 [ 237.171816][ T8731] ? __pfx___sys_sendmmsg+0x10/0x10 [ 237.171841][ T8731] ? do_futex+0x3e7/0x4e0 [ 237.171874][ T8731] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.171913][ T8731] ? rcu_is_watching+0x16/0xb0 [ 237.171943][ T8731] __x64_sys_sendmmsg+0xa0/0xc0 [ 237.171971][ T8731] do_syscall_64+0x166/0x520 [ 237.171994][ T8731] ? trace_irq_disable+0x3b/0x140 [ 237.172014][ T8731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.172034][ T8731] ? clear_bhb_loop+0x70/0xc0 [ 237.172060][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.172079][ T8731] RIP: 0033:0x7fc460f9e159 [ 237.172097][ T8731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.172113][ T8731] RSP: 002b:00007fc461e4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 237.172135][ T8731] RAX: ffffffffffffffda RBX: 00007fc461225fa0 RCX: 00007fc460f9e159 [ 237.172150][ T8731] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 237.172163][ T8731] RBP: 00007fc46103506b R08: 0000000000000000 R09: 0000000000000000 [ 237.172176][ T8731] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.172188][ T8731] R13: 00007fc461226038 R14: 00007fc461225fa0 R15: 00007ffc6763f798 [ 237.172219][ T8731] [ 237.326087][ T32] kauditd_printk_skb: 72 callbacks suppressed [ 237.326105][ T32] audit: type=1800 audit(1700000076.804:2101): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15595 res=0 errno=0 [ 237.388481][ T32] audit: type=1800 audit(1700000076.874:2102): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14980 res=0 errno=0 [ 237.541250][ T5701] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 237.549507][ T5701] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input27 [ 237.570026][ T32] audit: type=1800 audit(1700000077.054:2103): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180767 res=0 errno=0 [ 237.614799][ T32] audit: type=1800 audit(1700000077.104:2104): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=180783 res=0 errno=0 [ 237.615551][ T32] audit: type=1800 audit(1700000077.104:2105): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=180786 res=0 errno=0 [ 237.617912][ T32] audit: type=1800 audit(1700000077.104:2106): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=180785 res=0 errno=0 [ 237.623504][ T32] audit: type=1800 audit(1700000077.104:2107): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=180784 res=0 errno=0 [ 237.623547][ T32] audit: type=1800 audit(1700000077.104:2108): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=180775 res=0 errno=0 [ 237.708437][ T32] audit: type=1800 audit(1700000077.194:2109): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=180778 res=0 errno=0 [ 237.735556][ T5342] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 237.759754][ T32] audit: type=1800 audit(1700000077.244:2110): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=180292 res=0 errno=0 [ 237.812223][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 237.812255][ T5701] usb 4-1: USB disconnect, device number 36 [ 237.854071][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 237.877260][ T5342] usb 1-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 237.878749][ T5342] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.878795][ T5342] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 237.878820][ T5342] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 237.878886][ T5342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.004150][ T5710] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 238.004186][ T5710] cdc_ncm 7-1:1.0: setting rx_max = 16384 [ 238.203904][ T5702] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 238.205015][ T5710] cdc_ncm 7-1:1.0: setting tx_max = 16384 [ 238.232168][ T5710] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 238.244760][ T5710] usb 7-1: USB disconnect, device number 12 [ 238.246210][ T5710] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 238.308927][ T5342] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 238.308948][ T5342] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 238.339161][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 238.362878][ T5702] usb 6-1: Using ep0 maxpacket: 16 [ 238.363615][ T5702] usb 6-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 238.365636][ T5702] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.365654][ T5702] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.365668][ T5702] usb 6-1: config 0 interface 0 has no altsetting 0 [ 238.365687][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.381243][ T5702] usb 6-1: config 0 descriptor?? [ 238.386686][ T5342] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 238.408113][ T5342] usb 1-1: USB disconnect, device number 36 [ 238.432621][ T5701] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 238.593905][ T5701] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.595114][ T5701] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.595149][ T5701] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.595204][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.806602][ T5701] usb 4-1: usb_control_msg returned -32 [ 238.806639][ T5701] usbtmc 4-1:16.0: can't read capabilities [ 238.837800][ T5702] hid-multitouch 0003:0EEF:72C4.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 239.502513][ T5701] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 239.550298][ T5687] usb 6-1: USB disconnect, device number 16 [ 239.652957][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 239.653698][ T5701] usb 1-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 239.654277][ T5701] usb 1-1: config 0 has no interfaces? [ 239.656206][ T5701] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 239.656231][ T5701] usb 1-1: Product: syz [ 239.656244][ T5701] usb 1-1: Manufacturer: syz [ 239.656256][ T5701] usb 1-1: SerialNumber: syz [ 239.660360][ T5701] usb 1-1: config 0 descriptor?? [ 239.867385][ T5687] usb 1-1: USB disconnect, device number 37 [ 239.942654][ T5702] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 240.092821][ T5702] usb 7-1: Using ep0 maxpacket: 32 [ 240.093390][ T5702] usb 7-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 240.094540][ T5702] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 240.094738][ T5702] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 240.094762][ T5702] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 240.094795][ T5702] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 240.094819][ T5702] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 240.097044][ T5702] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.097069][ T5702] usb 7-1: Product: syz [ 240.097084][ T5702] usb 7-1: Manufacturer: syz [ 240.097098][ T5702] usb 7-1: SerialNumber: syz [ 240.098949][ T5702] usb 7-1: config 0 descriptor?? [ 240.257982][ T8758] kvm: apic: phys broadcast and lowest prio [ 240.508912][ T5618] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 240.512962][ T5702] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 240.513021][ T5702] input input29: Device does not respond to id packet M [ 240.532566][ T5702] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 240.532623][ T5702] input input29: Device does not respond to id packet P [ 240.534194][ T5702] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 240.534237][ T5702] input input29: Device does not respond to id packet B [ 240.739341][ T5702] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 240.740626][ T5702] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 240.741055][ T5702] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 240.741468][ T5702] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 240.755173][ T5702] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input29 [ 240.793218][ T5702] usb 7-1: USB disconnect, device number 13 [ 241.121822][ T5702] usb 4-1: USB disconnect, device number 37 [ 241.332633][ T5687] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 241.483570][ T5687] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.08 [ 241.484855][ T5687] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 241.484881][ T5687] usb 6-1: config 1 has no interface number 0 [ 241.486999][ T5687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.487024][ T5687] usb 6-1: Product: syz [ 241.487037][ T5687] usb 6-1: Manufacturer: syz [ 241.487049][ T5687] usb 6-1: SerialNumber: syz [ 241.574014][ T5687] usb 6-1: 3:0 : does not exist [ 241.574036][ T5687] usb 6-1: 3:0 : does not exist [ 241.737022][ T5687] usb 6-1: USB disconnect, device number 17 [ 241.782039][ T8763] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 241.960572][ T7744] udevd[7744]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.979552][ T8801] input: syz0 as /devices/virtual/input/input30 [ 242.212331][ T5702] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 242.350607][ T32] kauditd_printk_skb: 96 callbacks suppressed [ 242.350624][ T32] audit: type=1800 audit(1700000081.835:2206): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15595 res=0 errno=0 [ 242.363958][ T5702] usb 7-1: not running at top speed; connect to a high speed hub [ 242.363991][ T5702] usb 7-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 242.365852][ T5702] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.367313][ T5702] usb 7-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 242.367335][ T5702] usb 7-1: Product: syz [ 242.367348][ T5702] usb 7-1: Manufacturer: syz [ 242.378392][ T32] audit: type=1800 audit(1700000081.865:2207): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182195 res=0 errno=0 [ 242.386398][ T32] audit: type=1800 audit(1700000081.875:2208): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=182226 res=0 errno=0 [ 242.387907][ T5702] uvcvideo 7-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 242.387969][ T5702] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 242.396469][ T32] audit: type=1800 audit(1700000081.875:2209): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=182202 res=0 errno=0 [ 242.407153][ T32] audit: type=1800 audit(1700000081.895:2210): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=182203 res=0 errno=0 [ 242.421147][ T32] audit: type=1800 audit(1700000081.905:2211): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=182224 res=0 errno=0 [ 242.421206][ T32] audit: type=1800 audit(1700000081.905:2212): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=182225 res=0 errno=0 [ 242.426194][ T32] audit: type=1800 audit(1700000081.915:2213): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=182204 res=0 errno=0 [ 242.504858][ T32] audit: type=1800 audit(1700000081.995:2214): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182246 res=0 errno=0 [ 242.527088][ T32] audit: type=1800 audit(1700000082.015:2215): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=182282 res=0 errno=0 [ 242.598200][ T5701] usb 7-1: USB disconnect, device number 14 [ 243.067883][ T8825] FAULT_INJECTION: forcing a failure. [ 243.067883][ T8825] name failslab, interval 1, probability 0, space 0, times 0 [ 243.067916][ T8825] CPU: 1 UID: 0 PID: 8825 Comm: syz.5.1040 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.067937][ T8825] Tainted: [L]=SOFTLOCKUP [ 243.067941][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.067948][ T8825] Call Trace: [ 243.067952][ T8825] [ 243.067958][ T8825] dump_stack_lvl+0xe8/0x150 [ 243.067982][ T8825] should_fail_ex+0x3eb/0x540 [ 243.068008][ T8825] should_failslab+0xa8/0x100 [ 243.068023][ T8825] __kmalloc_cache_noprof+0x9e/0x600 [ 243.068034][ T8825] ? do_fcntl+0x1284/0x1a20 [ 243.068047][ T8825] ? do_fcntl+0x1284/0x1a20 [ 243.068061][ T8825] do_fcntl+0x1284/0x1a20 [ 243.068075][ T8825] ? lock_acquire+0x115/0x350 [ 243.068086][ T8825] ? __pfx_do_fcntl+0x10/0x10 [ 243.068100][ T8825] ? __fget_files+0x2a/0x420 [ 243.068111][ T8825] ? __fget_files+0x2a/0x420 [ 243.068124][ T8825] ? bpf_lsm_file_fcntl+0x9/0x20 [ 243.068138][ T8825] __se_sys_fcntl+0xc8/0x150 [ 243.068150][ T8825] do_syscall_64+0x166/0x520 [ 243.068165][ T8825] ? trace_irq_disable+0x3b/0x140 [ 243.068178][ T8825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.068189][ T8825] ? clear_bhb_loop+0x70/0xc0 [ 243.068201][ T8825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.068212][ T8825] RIP: 0033:0x7f84d339e159 [ 243.068222][ T8825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.068231][ T8825] RSP: 002b:00007f84d423e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 243.068243][ T8825] RAX: ffffffffffffffda RBX: 00007f84d3625fa0 RCX: 00007f84d339e159 [ 243.068251][ T8825] RDX: 00002000000000c0 RSI: 000000000000000f RDI: 0000000000000003 [ 243.068257][ T8825] RBP: 00007f84d343506b R08: 0000000000000000 R09: 0000000000000000 [ 243.068263][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.068269][ T8825] R13: 00007f84d3626038 R14: 00007f84d3625fa0 R15: 00007ffc2f60faa8 [ 243.068285][ T8825] [ 243.470304][ T8835] syzkaller1: entered promiscuous mode [ 243.470339][ T8835] syzkaller1: entered allmulticast mode [ 243.807301][ T8847] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0) [ 244.413787][ T5618] Bluetooth: hci6: command tx timeout [ 244.499642][ T8876] syzkaller1: entered promiscuous mode [ 244.499665][ T8876] syzkaller1: entered allmulticast mode [ 245.042686][ T27] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 245.192959][ T27] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0003, bcdDevice=0.00 [ 245.194077][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.194101][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.195060][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.195081][ T27] usb 1-1: SerialNumber: syz [ 245.247562][ T27] usb 1-1: 0:2 : does not exist [ 245.676415][ T27] usb 1-1: USB disconnect, device number 38 [ 245.942122][ T5701] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 245.987676][ T8927] syzkaller1: entered promiscuous mode [ 245.987700][ T8927] syzkaller1: entered allmulticast mode [ 246.103267][ T5701] usb 7-1: Using ep0 maxpacket: 16 [ 246.108269][ T5701] usb 7-1: New USB device found: idVendor=0458, idProduct=5010, bcdDevice=0.00 [ 246.111280][ T5701] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 246.111332][ T5701] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.111357][ T5701] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.111377][ T5701] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 246.111401][ T5701] usb 7-1: config 7 interface 0 has no altsetting 0 [ 246.111433][ T5701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.590117][ T8950] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 246.686002][ T5701] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.001D/input/input31 [ 246.855410][ T5701] kye 0003:0458:5010.001D: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 246.871679][ T5701] usb 7-1: USB disconnect, device number 15 [ 246.993209][ T8961] fido_id[8961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 247.209131][ T8960] nvme_tcp: queue 0: failed to receive icresp, error -4 [ 247.317312][ T8973] nbd0: detected capacity change from 0 to 1 [ 247.319375][ T7744] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.319412][ T7744] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.319466][ T7744] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.319506][ T7744] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.319530][ T7744] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.319542][ T7744] ldm_validate_partition_table(): Disk read failed. [ 247.319564][ T7744] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.319589][ T7744] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.319613][ T7744] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.319637][ T7744] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.319650][ T7744] Dev nbd0: unable to read RDB block 0 [ 247.319673][ T7744] Buffer I/O error on dev nbd0, logical block 0, async page read [ 247.319715][ T7744] nbd0: unable to read partition table [ 247.319922][ T7744] nbd0: partition table beyond EOD, truncated [ 247.443215][ T32] kauditd_printk_skb: 89 callbacks suppressed [ 247.443234][ T32] audit: type=1800 audit(1700000086.935:2305): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15349 res=0 errno=0 [ 247.458769][ T8974] nbd0: detected capacity change from 1 to 0 [ 247.491315][ T32] audit: type=1800 audit(1700000086.975:2306): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15718 res=0 errno=0 [ 247.572483][ T32] audit: type=1800 audit(1700000087.065:2307): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15718 res=0 errno=0 [ 247.598126][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1089'. [ 247.637650][ T32] audit: type=1800 audit(1700000087.125:2308): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15718 res=0 errno=0 [ 247.697705][ T32] audit: type=1800 audit(1700000087.185:2309): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15718 res=0 errno=0 [ 247.741342][ T8986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.750679][ T32] audit: type=1800 audit(1700000087.235:2310): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183256 res=0 errno=0 [ 247.801625][ T32] audit: type=1800 audit(1700000087.285:2311): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15718 res=0 errno=0 [ 247.886806][ T32] audit: type=1800 audit(1700000087.375:2312): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15718 res=0 errno=0 [ 247.972269][ T32] audit: type=1800 audit(1700000087.455:2313): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15595 res=0 errno=0 [ 248.091517][ T32] audit: type=1800 audit(1700000087.575:2314): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15595 res=0 errno=0 [ 248.143678][ T8973] block nbd0: shutting down sockets [ 249.551884][ T5710] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 249.601898][ T5701] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 249.701870][ T5710] usb 6-1: Using ep0 maxpacket: 8 [ 249.704040][ T5710] usb 6-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 249.718023][ T5710] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.718047][ T5710] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 249.718086][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 249.718109][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 249.718146][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.754735][ T5701] usb 7-1: New USB device found: idVendor=17ef, idProduct=6161, bcdDevice=0.00 [ 249.758343][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.758368][ T5701] usb 7-1: Product: syz [ 249.758382][ T5701] usb 7-1: Manufacturer: syz [ 249.758417][ T5701] usb 7-1: SerialNumber: syz [ 249.808529][ T5710] hub 6-1:1.0: bad descriptor, ignoring hub [ 249.808557][ T5710] hub 6-1:1.0: probe with driver hub failed with error -5 [ 249.822695][ T5710] cdc_wdm 6-1:1.0: skipping garbage [ 249.822738][ T5710] cdc_wdm 6-1:1.0: skipping garbage [ 249.836054][ T5710] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 249.836075][ T5710] cdc_wdm 6-1:1.0: Unknown control protocol [ 249.977569][ T5701] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 250.001225][ T5701] usb 7-1: USB disconnect, device number 16 [ 250.097365][ T5342] usb 6-1: USB disconnect, device number 18 [ 250.105491][ T9025] cdc_wdm 6-1:1.0: Error autopm - -16 [ 250.481883][ T5701] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 250.522037][ T5342] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 250.632606][ T5701] usb 7-1: New USB device found: idVendor=17ef, idProduct=6161, bcdDevice=0.00 [ 250.635714][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.635740][ T5701] usb 7-1: Product: syz [ 250.635753][ T5701] usb 7-1: Manufacturer: syz [ 250.635766][ T5701] usb 7-1: SerialNumber: syz [ 250.671916][ T5342] usb 6-1: Using ep0 maxpacket: 8 [ 250.674202][ T5342] usb 6-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 250.676008][ T5342] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.676036][ T5342] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 250.676074][ T5342] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.676136][ T5342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.688044][ T5342] hub 6-1:1.0: bad descriptor, ignoring hub [ 250.688071][ T5342] hub 6-1:1.0: probe with driver hub failed with error -5 [ 250.688660][ T5342] cdc_wdm 6-1:1.0: skipping garbage [ 250.688674][ T5342] cdc_wdm 6-1:1.0: skipping garbage [ 250.688717][ T5342] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 251.004152][ T5751] usb 6-1: USB disconnect, device number 19 [ 251.044894][ T5701] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 251.457585][ T5751] usb 7-1: USB disconnect, device number 17 [ 251.505416][ T9032] FAULT_INJECTION: forcing a failure. [ 251.505416][ T9032] name failslab, interval 1, probability 0, space 0, times 0 [ 251.505452][ T9032] CPU: 0 UID: 0 PID: 9032 Comm: syz.5.1109 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.505502][ T9032] Tainted: [L]=SOFTLOCKUP [ 251.505517][ T9032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.505542][ T9032] Call Trace: [ 251.505549][ T9032] [ 251.505558][ T9032] dump_stack_lvl+0xe8/0x150 [ 251.505588][ T9032] should_fail_ex+0x3eb/0x540 [ 251.505621][ T9032] should_failslab+0xa8/0x100 [ 251.505652][ T9032] ? sk_prot_alloc+0x57/0x210 [ 251.505678][ T9032] kmem_cache_alloc_noprof+0x9c/0x600 [ 251.505705][ T9032] ? lock_acquire+0x115/0x350 [ 251.505726][ T9032] ? sk_prot_alloc+0x57/0x210 [ 251.505753][ T9032] sk_prot_alloc+0x57/0x210 [ 251.505773][ T9032] ? sk_alloc+0x27/0x390 [ 251.505798][ T9032] sk_alloc+0x3a/0x390 [ 251.505823][ T9032] pn_socket_create+0xf5/0x520 [ 251.505846][ T9032] __sock_create+0x4b5/0xac0 [ 251.505871][ T9032] __sys_socket+0xd6/0x1b0 [ 251.505894][ T9032] __x64_sys_socket+0x7a/0x90 [ 251.505915][ T9032] do_syscall_64+0x166/0x520 [ 251.505941][ T9032] ? trace_irq_disable+0x3b/0x140 [ 251.505961][ T9032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.505981][ T9032] ? clear_bhb_loop+0x70/0xc0 [ 251.506003][ T9032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.506025][ T9032] RIP: 0033:0x7f84d339e159 [ 251.506042][ T9032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.506060][ T9032] RSP: 002b:00007f84d423e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 251.506079][ T9032] RAX: ffffffffffffffda RBX: 00007f84d3625fa0 RCX: 00007f84d339e159 [ 251.506094][ T9032] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000023 [ 251.506104][ T9032] RBP: 00007f84d343506b R08: 0000000000000000 R09: 0000000000000000 [ 251.506116][ T9032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.506129][ T9032] R13: 00007f84d3626038 R14: 00007f84d3625fa0 R15: 00007ffc2f60faa8 [ 251.506156][ T9032] [ 251.532165][ T9002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.829244][ T9037] FAULT_INJECTION: forcing a failure. [ 251.829244][ T9037] name failslab, interval 1, probability 0, space 0, times 0 [ 251.829279][ T9037] CPU: 0 UID: 0 PID: 9037 Comm: syz.0.1112 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.829307][ T9037] Tainted: [L]=SOFTLOCKUP [ 251.829314][ T9037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.829336][ T9037] Call Trace: [ 251.829344][ T9037] [ 251.829352][ T9037] dump_stack_lvl+0xe8/0x150 [ 251.829383][ T9037] should_fail_ex+0x3eb/0x540 [ 251.829417][ T9037] should_failslab+0xa8/0x100 [ 251.829447][ T9037] ? do_getname_kernel+0x54/0x230 [ 251.829476][ T9037] kmem_cache_alloc_noprof+0x9c/0x600 [ 251.829507][ T9037] ? do_getname_kernel+0x54/0x230 [ 251.829538][ T9037] do_getname_kernel+0x54/0x230 [ 251.829570][ T9037] ? kern_path+0x1b/0x150 [ 251.829600][ T9037] kern_path+0x25/0x150 [ 251.829629][ T9037] lookup_bdev+0xc8/0x2b0 [ 251.829657][ T9037] ? __pfx_lookup_bdev+0x10/0x10 [ 251.829684][ T9037] ? do_getname+0x151/0x250 [ 251.829713][ T9037] __se_sys_quotactl+0x268/0x9a0 [ 251.829740][ T9037] ? __se_sys_futex+0x3a8/0x450 [ 251.829773][ T9037] ? __pfx___se_sys_quotactl+0x10/0x10 [ 251.829799][ T9037] ? rcu_is_watching+0x16/0xb0 [ 251.829835][ T9037] do_syscall_64+0x166/0x520 [ 251.829864][ T9037] ? trace_irq_disable+0x3b/0x140 [ 251.829886][ T9037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.829906][ T9037] ? clear_bhb_loop+0x70/0xc0 [ 251.829931][ T9037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.829950][ T9037] RIP: 0033:0x7fc460f9e159 [ 251.829969][ T9037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.829986][ T9037] RSP: 002b:00007fc461e4d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 251.830007][ T9037] RAX: ffffffffffffffda RBX: 00007fc461225fa0 RCX: 00007fc460f9e159 [ 251.830021][ T9037] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000802 [ 251.830035][ T9037] RBP: 00007fc46103506b R08: 0000000000000000 R09: 0000000000000000 [ 251.830047][ T9037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.830064][ T9037] R13: 00007fc461226038 R14: 00007fc461225fa0 R15: 00007ffc6763f798 [ 251.830095][ T9037] [ 252.207042][ T9050] ªªªªªª: renamed from vlan0 (while UP) [ 252.308373][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1118'. [ 252.320920][ T5687] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 252.484021][ T5687] usb 1-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 252.485116][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.487201][ T5687] usb 1-1: config 0 descriptor?? [ 252.488590][ T32] kauditd_printk_skb: 62 callbacks suppressed [ 252.488606][ T32] audit: type=1800 audit(1700000091.975:2377): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184626 res=0 errno=0 [ 252.511978][ T32] audit: type=1800 audit(1700000091.985:2378): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=184655 res=0 errno=0 [ 252.512025][ T32] audit: type=1800 audit(1700000091.985:2379): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=184633 res=0 errno=0 [ 252.512057][ T32] audit: type=1800 audit(1700000091.985:2380): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=184634 res=0 errno=0 [ 252.512092][ T32] audit: type=1800 audit(1700000091.995:2381): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=184635 res=0 errno=0 [ 252.512977][ T5687] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 252.634778][ T32] audit: type=1800 audit(1700000092.125:2382): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184684 res=0 errno=0 [ 252.744821][ T5687] gp8psk: usb in 128 operation failed. [ 252.930325][ T32] audit: type=1800 audit(1700000092.415:2383): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15349 res=0 errno=0 [ 252.975508][ T5687] gp8psk: usb in 146 operation failed. [ 252.975528][ T5687] gp8psk: failed to get FW version [ 252.977707][ T5687] gp8psk: FPGA Version = 133 [ 253.034971][ T32] audit: type=1800 audit(1700000092.525:2384): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184989 res=0 errno=0 [ 253.036557][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.053930][ T32] audit: type=1800 audit(1700000092.535:2385): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185000 res=0 errno=0 [ 253.072973][ T9059] binder: Failure when writing BR_NOOP at beginning of buffer. [ 253.072991][ T9059] binder: Read failure Err(EFAULT) in pid:183 [ 253.101482][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.131039][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.144444][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.146969][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.187031][ T32] audit: type=1800 audit(1700000092.675:2386): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185019 res=0 errno=0 [ 253.206494][ T5687] gp8psk: usb in 138 operation failed. [ 253.206515][ T5687] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 253.206565][ T5687] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 253.224061][ T5687] usb 1-1: USB disconnect, device number 39 [ 253.297540][ T2174] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.337675][ T9064] FAULT_INJECTION: forcing a failure. [ 253.337675][ T9064] name failslab, interval 1, probability 0, space 0, times 0 [ 253.337711][ T9064] CPU: 1 UID: 0 PID: 9064 Comm: syz.3.1124 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.337736][ T9064] Tainted: [L]=SOFTLOCKUP [ 253.337742][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.337755][ T9064] Call Trace: [ 253.337762][ T9064] [ 253.337770][ T9064] dump_stack_lvl+0xe8/0x150 [ 253.337801][ T9064] should_fail_ex+0x3eb/0x540 [ 253.337834][ T9064] should_failslab+0xa8/0x100 [ 253.337858][ T9064] ? __se_sys_mbind+0x82b/0x10e0 [ 253.337879][ T9064] kmem_cache_alloc_noprof+0x9c/0x600 [ 253.337910][ T9064] ? __se_sys_mbind+0x82b/0x10e0 [ 253.337937][ T9064] __se_sys_mbind+0x82b/0x10e0 [ 253.337958][ T9064] ? __hugetlb_vmemmap_restore_folio+0x104/0x650 [ 253.337985][ T9064] ? __pfx___se_sys_mbind+0x10/0x10 [ 253.338015][ T9064] ? __se_sys_futex+0x3a8/0x450 [ 253.338049][ T9064] ? rcu_is_watching+0x16/0xb0 [ 253.338083][ T9064] ? __x64_sys_mbind+0x21/0xf0 [ 253.338107][ T9064] do_syscall_64+0x166/0x520 [ 253.338134][ T9064] ? trace_irq_disable+0x3b/0x140 [ 253.338157][ T9064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.338177][ T9064] ? clear_bhb_loop+0x70/0xc0 [ 253.338200][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.338218][ T9064] RIP: 0033:0x7eff87d9e159 [ 253.338234][ T9064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.338247][ T9064] RSP: 002b:00007eff85ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 253.338268][ T9064] RAX: ffffffffffffffda RBX: 00007eff88025fa0 RCX: 00007eff87d9e159 [ 253.338283][ T9064] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000 [ 253.338294][ T9064] RBP: 00007eff87e3506b R08: 0000000000000000 R09: 0000000000000002 [ 253.338305][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.338315][ T9064] R13: 00007eff88026038 R14: 00007eff88025fa0 R15: 00007fff16ba8858 [ 253.338337][ T9064] [ 253.603350][ T9068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.884557][ T2174] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.976235][ T9081] FAULT_INJECTION: forcing a failure. [ 253.976235][ T9081] name failslab, interval 1, probability 0, space 0, times 0 [ 253.976268][ T9081] CPU: 0 UID: 0 PID: 9081 Comm: syz.6.1129 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.976293][ T9081] Tainted: [L]=SOFTLOCKUP [ 253.976300][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.976313][ T9081] Call Trace: [ 253.976321][ T9081] [ 253.976329][ T9081] dump_stack_lvl+0xe8/0x150 [ 253.976362][ T9081] should_fail_ex+0x3eb/0x540 [ 253.976396][ T9081] should_failslab+0xa8/0x100 [ 253.976421][ T9081] __kmalloc_cache_noprof+0x9e/0x600 [ 253.976443][ T9081] ? alloc_fs_context+0x66/0xd00 [ 253.976466][ T9081] ? alloc_fs_context+0x66/0xd00 [ 253.976493][ T9081] alloc_fs_context+0x66/0xd00 [ 253.976516][ T9081] ? do_getname+0x151/0x250 [ 253.976550][ T9081] __se_sys_fspick+0x197/0x3c0 [ 253.976585][ T9081] ? __pfx___se_sys_fspick+0x10/0x10 [ 253.976620][ T9081] do_syscall_64+0x166/0x520 [ 253.976650][ T9081] ? trace_irq_disable+0x3b/0x140 [ 253.976673][ T9081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.976694][ T9081] ? clear_bhb_loop+0x70/0xc0 [ 253.976720][ T9081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.976740][ T9081] RIP: 0033:0x7f7725f9e159 [ 253.976760][ T9081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.976777][ T9081] RSP: 002b:00007f7726dd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 253.976799][ T9081] RAX: ffffffffffffffda RBX: 00007f7726225fa0 RCX: 00007f7725f9e159 [ 253.976815][ T9081] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 253.976830][ T9081] RBP: 00007f772603506b R08: 0000000000000000 R09: 0000000000000000 [ 253.976843][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.976856][ T9081] R13: 00007f7726226038 R14: 00007f7726225fa0 R15: 00007fff9c41af88 [ 253.976885][ T9081] [ 254.256160][ T2174] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.383715][ T9087] FAULT_INJECTION: forcing a failure. [ 254.383715][ T9087] name failslab, interval 1, probability 0, space 0, times 0 [ 254.383746][ T9087] CPU: 0 UID: 0 PID: 9087 Comm: syz.6.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.383771][ T9087] Tainted: [L]=SOFTLOCKUP [ 254.383778][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.383789][ T9087] Call Trace: [ 254.383797][ T9087] [ 254.383805][ T9087] dump_stack_lvl+0xe8/0x150 [ 254.383835][ T9087] should_fail_ex+0x3eb/0x540 [ 254.383867][ T9087] should_failslab+0xa8/0x100 [ 254.383890][ T9087] __kmalloc_cache_noprof+0x9e/0x600 [ 254.383907][ T9087] ? get_mountpoint+0x2cc/0x510 [ 254.383925][ T9087] ? get_mountpoint+0x2cc/0x510 [ 254.383952][ T9087] get_mountpoint+0x2cc/0x510 [ 254.383978][ T9087] do_lock_mount+0x570/0x970 [ 254.384006][ T9087] do_new_mount+0x478/0xdc0 [ 254.384039][ T9087] ? __pfx_do_new_mount+0x10/0x10 [ 254.384066][ T9087] ? ns_capable+0x84/0xe0 [ 254.384090][ T9087] ? path_mount+0x647/0x1050 [ 254.384120][ T9087] ? user_path_at+0xd4/0x160 [ 254.384140][ T9087] __se_sys_mount+0x31d/0x420 [ 254.384169][ T9087] ? __pfx___se_sys_mount+0x10/0x10 [ 254.384199][ T9087] ? __x64_sys_mount+0x20/0xc0 [ 254.384224][ T9087] do_syscall_64+0x166/0x520 [ 254.384245][ T9087] ? trace_irq_disable+0x3b/0x140 [ 254.384264][ T9087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.384280][ T9087] ? clear_bhb_loop+0x70/0xc0 [ 254.384299][ T9087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.384315][ T9087] RIP: 0033:0x7f7725f9e159 [ 254.384332][ T9087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.384346][ T9087] RSP: 002b:00007f7726dd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.384365][ T9087] RAX: ffffffffffffffda RBX: 00007f7726225fa0 RCX: 00007f7725f9e159 [ 254.384376][ T9087] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000000000000000 [ 254.384387][ T9087] RBP: 00007f772603506b R08: 0000000000000000 R09: 0000000000000000 [ 254.384398][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.384408][ T9087] R13: 00007f7726226038 R14: 00007f7726225fa0 R15: 00007fff9c41af88 [ 254.384434][ T9087] [ 254.396030][ T9089] FAULT_INJECTION: forcing a failure. [ 254.396030][ T9089] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 254.396064][ T9089] CPU: 1 UID: 0 PID: 9089 Comm: syz.0.1132 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.396090][ T9089] Tainted: [L]=SOFTLOCKUP [ 254.396097][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.396109][ T9089] Call Trace: [ 254.396117][ T9089] [ 254.396125][ T9089] dump_stack_lvl+0xe8/0x150 [ 254.396176][ T9089] should_fail_ex+0x3eb/0x540 [ 254.396208][ T9089] _copy_from_user+0x2d/0xb0 [ 254.396229][ T9089] get_timespec64+0x96/0x1b0 [ 254.396254][ T9089] ? __pfx_get_timespec64+0x10/0x10 [ 254.396276][ T9089] ? __fget_files+0x3a2/0x420 [ 254.396294][ T9089] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 254.396330][ T9089] __se_sys_futex+0x19a/0x450 [ 254.396362][ T9089] ? __pfx___se_sys_futex+0x10/0x10 [ 254.396387][ T9089] ? rcu_is_watching+0x16/0xb0 [ 254.396417][ T9089] ? __x64_sys_futex+0x21/0xf0 [ 254.396445][ T9089] do_syscall_64+0x166/0x520 [ 254.396471][ T9089] ? trace_irq_disable+0x3b/0x140 [ 254.396492][ T9089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.396511][ T9089] ? clear_bhb_loop+0x70/0xc0 [ 254.396532][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.396550][ T9089] RIP: 0033:0x7fc460f9e159 [ 254.396567][ T9089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.396583][ T9089] RSP: 002b:00007fc461e4d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 254.396603][ T9089] RAX: ffffffffffffffda RBX: 00007fc461225fa0 RCX: 00007fc460f9e159 [ 254.396625][ T9089] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000 [ 254.396637][ T9089] RBP: 00007fc46103506b R08: 0000000000000000 R09: 0000000000000000 [ 254.396649][ T9089] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 254.396660][ T9089] R13: 00007fc461226038 R14: 00007fc461225fa0 R15: 00007ffc6763f798 [ 254.396689][ T9089] [ 254.470571][ T2174] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.222098][ T5621] Bluetooth: hci5: command tx timeout [ 255.661540][ T5710] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 255.680502][ T2174] bridge_slave_1: left allmulticast mode [ 255.680528][ T2174] bridge_slave_1: left promiscuous mode [ 255.680743][ T2174] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.730359][ T2174] bridge_slave_0: left allmulticast mode [ 255.730395][ T2174] bridge_slave_0: left promiscuous mode [ 255.733461][ T2174] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.826548][ T5710] usb 1-1: New USB device found: idVendor=1532, idProduct=010d, bcdDevice=0.40 [ 255.829268][ T5710] usb 1-1: config 1 interface 0 has no altsetting 0 [ 255.862284][ T5710] usb 1-1: string descriptor 0 read error: -22 [ 255.862419][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.168946][ T2174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.178135][ T2174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.190978][ T2174] bond0 (unregistering): Released all slaves [ 256.193613][ T5342] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 256.262884][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.262940][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.382740][ T5342] usb 7-1: Using ep0 maxpacket: 8 [ 256.382910][ T5751] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 256.385122][ T5342] usb 7-1: New USB device found: idVendor=eb1a, idProduct=e300, bcdDevice=42.60 [ 256.387018][ T5342] usb 7-1: config 5 has an invalid interface number: 39 but max is 0 [ 256.387043][ T5342] usb 7-1: config 5 has no interface number 0 [ 256.387068][ T5342] usb 7-1: config 5 interface 39 has no altsetting 0 [ 256.437308][ T5342] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.437346][ T5342] usb 7-1: Product: syz [ 256.437360][ T5342] usb 7-1: Manufacturer: syz [ 256.437372][ T5342] usb 7-1: SerialNumber: syz [ 256.461851][ T5710] hid_parser_main: 1316 callbacks suppressed [ 256.461875][ T5710] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 256.461905][ T5710] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 256.461973][ T5710] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 256.461999][ T5710] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 256.462023][ T5710] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 256.462047][ T5710] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 256.462070][ T5710] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 256.462114][ T5710] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 256.462138][ T5710] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 256.462162][ T5710] razer 0003:1532:010D.001E: unknown main item tag 0x0 [ 256.575702][ T5710] razer 0003:1532:010D.001E: failed to enable macro keys: -71 [ 256.592443][ T5751] usb 4-1: Using ep0 maxpacket: 32 [ 256.598289][ T5751] usb 4-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 256.614253][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.614280][ T5751] usb 4-1: Product: syz [ 256.614293][ T5751] usb 4-1: Manufacturer: syz [ 256.614307][ T5751] usb 4-1: SerialNumber: syz [ 256.640168][ T5710] razer 0003:1532:010D.001E: hidraw0: USB HID vff.7f Device [HID 1532:010d] on usb-dummy_hcd.0-1/input0 [ 256.696185][ T5710] usb 1-1: USB disconnect, device number 40 [ 256.747330][ T9132] fido_id[9132]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 257.020145][ T2174] hsr_slave_0: left promiscuous mode [ 257.020978][ T2174] hsr_slave_1: left promiscuous mode [ 257.035217][ T2174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.035241][ T2174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.036067][ T2174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.036083][ T2174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.077457][ T2174] veth1_macvtap: left promiscuous mode [ 257.078220][ T2174] veth0_macvtap: left promiscuous mode [ 257.078319][ T2174] veth1_vlan: left promiscuous mode [ 257.078388][ T2174] veth0_vlan: left promiscuous mode and tx timeout [ 257.971079][ T5751] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 258.026842][ T32] kauditd_printk_skb: 62 callbacks suppressed [ 258.026860][ T32] audit: type=1800 audit(1700000097.516:2449): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14980 res=0 errno=0 [ 258.188964][ T5751] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 258.198921][ T5751] usb 4-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 258.307765][ T2174] team0 (unregistering): Port device team_slave_1 removed [ 258.331302][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 258.336468][ T2174] team0 (unregistering): Port device team_slave_0 removed [ 258.551012][ T32] audit: type=1800 audit(1700000098.036:2450): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14980 res=0 errno=0 [ 258.626398][ T32] audit: type=1800 audit(1700000098.116:2451): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=187249 res=0 errno=0 [ 258.628963][ T32] audit: type=1800 audit(1700000098.116:2452): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=187250 res=0 errno=0 [ 258.630084][ T5751] usb 4-1: USB disconnect, device number 38 [ 258.726815][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.726952][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.727116][ T9060] bridge_slave_0: entered allmulticast mode [ 258.730556][ T9060] bridge_slave_0: entered promiscuous mode [ 258.753676][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 258.756377][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.756479][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.756629][ T9060] bridge_slave_1: entered allmulticast mode [ 258.761055][ T9060] bridge_slave_1: entered promiscuous mode [ 258.866629][ T32] audit: type=1800 audit(1700000098.356:2453): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15349 res=0 errno=0 [ 258.958318][ T9060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.973840][ T9158] device-mapper: table: 248:0: cache: Error opening cache device (-ENOENT) [ 258.973863][ T9158] device-mapper: ioctl: error adding target to table [ 258.974997][ T9060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.025883][ T32] audit: type=1800 audit(1700000098.516:2454): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=187229 res=0 errno=0 [ 259.025929][ T32] audit: type=1800 audit(1700000098.516:2455): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=187251 res=0 errno=0 [ 259.135372][ T9060] team0: Port device team_slave_0 added [ 259.138281][ T9060] team0: Port device team_slave_1 added [ 259.168440][ T9160] udevd[9160]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.219320][ T32] audit: type=1800 audit(1700000098.706:2456): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15349 res=0 errno=0 [ 259.269131][ T9164] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 259.314311][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.314328][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.314351][ T9060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.388474][ T32] audit: type=1800 audit(1700000098.876:2457): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15349 res=0 errno=0 [ 259.388908][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.388922][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.388947][ T9060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.412216][ T5618] Bluetooth: hci5: command tx timeout [ 259.598025][ T32] audit: type=1800 audit(1700000099.086:2458): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14980 res=0 errno=0 [ 259.632366][ T9060] hsr_slave_0: entered promiscuous mode [ 259.635855][ T9060] hsr_slave_1: entered promiscuous mode [ 259.640987][ T9060] debugfs: 'hsr0' already exists in 'hsr' [ 259.641011][ T9060] Cannot create hsr debugfs directory [ 260.586893][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 260.699628][ T2174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.777981][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.789746][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.799246][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.832795][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.833653][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.893313][ T2174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.069691][ T9060] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 261.090158][ T9060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 261.135230][ T2174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.184298][ T9209] FAULT_INJECTION: forcing a failure. [ 261.184298][ T9209] name failslab, interval 1, probability 0, space 0, times 0 [ 261.184332][ T9209] CPU: 1 UID: 0 PID: 9209 Comm: syz.3.1158 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.184359][ T9209] Tainted: [L]=SOFTLOCKUP [ 261.184367][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.184380][ T9209] Call Trace: [ 261.184396][ T9209] [ 261.184404][ T9209] dump_stack_lvl+0xe8/0x150 [ 261.184437][ T9209] should_fail_ex+0x3eb/0x540 [ 261.184471][ T9209] should_failslab+0xa8/0x100 [ 261.184497][ T9209] __kmalloc_noprof+0xf9/0x710 [ 261.184517][ T9209] ? __kmalloc_noprof+0x1a6/0x710 [ 261.184534][ T9209] ? ima_alloc_init_template+0x185/0x700 [ 261.184552][ T9209] ? ima_alloc_init_template+0x185/0x700 [ 261.184577][ T9209] ima_alloc_init_template+0x185/0x700 [ 261.184605][ T9209] ima_store_measurement+0x1d4/0x690 [ 261.184625][ T9209] ? take_dentry_name_snapshot+0x2b/0x510 [ 261.184661][ T9209] ? __pfx_ima_store_measurement+0x10/0x10 [ 261.184680][ T9209] ? ima_d_path+0x1cb/0x230 [ 261.184719][ T9209] process_measurement+0x15ac/0x1c10 [ 261.184754][ T9209] ? __pfx_process_measurement+0x10/0x10 [ 261.184778][ T9209] ? tomoyo_check_open_permission+0x38e/0x470 [ 261.184827][ T9209] ? apparmor_file_open+0x523/0x6c0 [ 261.184866][ T9209] ima_file_check+0xdc/0x130 [ 261.184884][ T9209] ? file_ra_state_init+0x3d/0xc0 [ 261.184905][ T9209] ? __pfx_ima_file_check+0x10/0x10 [ 261.184934][ T9209] security_file_post_open+0xb3/0x260 [ 261.184960][ T9209] path_openat+0x14e9/0x1da0 [ 261.185001][ T9209] do_file_open+0x23e/0x4a0 [ 261.185029][ T9209] ? __pfx_do_file_open+0x10/0x10 [ 261.185071][ T9209] ? _raw_spin_unlock+0x28/0x50 [ 261.185095][ T9209] ? alloc_fd+0x6af/0x760 [ 261.185134][ T9209] do_sys_openat2+0x115/0x200 [ 261.185159][ T9209] ? __se_sys_futex+0x3a8/0x450 [ 261.185187][ T9209] ? __pfx_do_sys_openat2+0x10/0x10 [ 261.185218][ T9209] ? rcu_is_watching+0x16/0xb0 [ 261.185248][ T9209] __x64_sys_openat+0x138/0x170 [ 261.185280][ T9209] do_syscall_64+0x166/0x520 [ 261.185307][ T9209] ? trace_irq_disable+0x3b/0x140 [ 261.185333][ T9209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.185352][ T9209] ? clear_bhb_loop+0x70/0xc0 [ 261.185377][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.185404][ T9209] RIP: 0033:0x7eff87d5e98e [ 261.185423][ T9209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 261.185440][ T9209] RSP: 002b:00007eff85ff5f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.185461][ T9209] RAX: ffffffffffffffda RBX: 00007eff85ff66c0 RCX: 00007eff87d5e98e [ 261.185476][ T9209] RDX: 0000000000000000 RSI: 00007eff87e347a6 RDI: ffffffffffffff9c [ 261.185490][ T9209] RBP: 00007eff87e3506b R08: 0000000000000000 R09: 0000000000000000 [ 261.185502][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.185515][ T9209] R13: 00007eff88026038 R14: 00007eff88025fa0 R15: 00007fff16ba8858 [ 261.185541][ T9209] [ 261.349637][ T9060] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 261.396910][ T9060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 261.399999][ T9060] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 261.440052][ T9060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 261.458952][ T5618] Bluetooth: hci5: command tx timeout [ 261.465062][ T9060] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 261.502699][ T5342] em28xx 7-1:5.39: audio device (eb1a:e300): interface 39, class 1 [ 261.544408][ T9060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.593872][ T9214] FAULT_INJECTION: forcing a failure. [ 261.593872][ T9214] name failslab, interval 1, probability 0, space 0, times 0 [ 261.593906][ T9214] CPU: 1 UID: 0 PID: 9214 Comm: syz.3.1159 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.593939][ T9214] Tainted: [L]=SOFTLOCKUP [ 261.593946][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.593958][ T9214] Call Trace: [ 261.593965][ T9214] [ 261.593973][ T9214] dump_stack_lvl+0xe8/0x150 [ 261.594016][ T9214] should_fail_ex+0x3eb/0x540 [ 261.594050][ T9214] should_failslab+0xa8/0x100 [ 261.594075][ T9214] __kmalloc_cache_noprof+0x9e/0x600 [ 261.594100][ T9214] ? __kmalloc_cache_noprof+0x148/0x600 [ 261.594117][ T9214] ? sctp_add_bind_addr+0x8c/0x370 [ 261.594137][ T9214] ? sctp_add_bind_addr+0x8c/0x370 [ 261.594162][ T9214] sctp_add_bind_addr+0x8c/0x370 [ 261.594185][ T9214] sctp_copy_local_addr_list+0x31a/0x4e0 [ 261.594207][ T9214] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 261.594228][ T9214] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 261.594253][ T9214] ? sctp_v4_is_any+0x35/0x60 [ 261.594271][ T9214] ? sctp_copy_one_addr+0x93/0x360 [ 261.594296][ T9214] sctp_bind_addr_copy+0x189/0x3c0 [ 261.594323][ T9214] sctp_connect_new_asoc+0x2ff/0x6b0 [ 261.594349][ T9214] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 261.594386][ T9214] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 261.594411][ T9214] __sctp_connect+0x5cb/0xdc0 [ 261.594445][ T9214] ? __pfx___sctp_connect+0x10/0x10 [ 261.594468][ T9214] ? security_sctp_bind_connect+0x7e/0x2c0 [ 261.594494][ T9214] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 261.594516][ T9214] sctp_getsockopt_connectx3+0x227/0x360 [ 261.594540][ T9214] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 261.594564][ T9214] ? sctp_getsockopt+0x12f/0xb90 [ 261.594588][ T9214] ? __local_bh_enable_ip+0xd6/0x140 [ 261.594613][ T9214] sctp_getsockopt+0x984/0xb90 [ 261.594637][ T9214] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 261.594660][ T9214] do_sock_getsockopt+0x4aa/0x640 [ 261.594690][ T9214] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 261.594724][ T9214] ? __fget_files+0x3a2/0x420 [ 261.594739][ T9214] ? __fget_files+0x2a/0x420 [ 261.594761][ T9214] __x64_sys_getsockopt+0x1a4/0x240 [ 261.594793][ T9214] do_syscall_64+0x166/0x520 [ 261.594814][ T9214] ? trace_irq_disable+0x3b/0x140 [ 261.594835][ T9214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.594855][ T9214] ? clear_bhb_loop+0x70/0xc0 [ 261.594878][ T9214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.594897][ T9214] RIP: 0033:0x7eff87d9e159 [ 261.594915][ T9214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.594931][ T9214] RSP: 002b:00007eff85ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 261.594951][ T9214] RAX: ffffffffffffffda RBX: 00007eff88025fa0 RCX: 00007eff87d9e159 [ 261.594966][ T9214] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 261.594978][ T9214] RBP: 00007eff87e3506b R08: 00002000000007c0 R09: 0000000000000000 [ 261.594991][ T9214] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.595012][ T9214] R13: 00007eff88026038 R14: 00007eff88025fa0 R15: 00007fff16ba8858 [ 261.595044][ T9214] [ 261.921157][ T2174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.280892][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 262.334089][ T9060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.408312][ T2174] bridge_slave_1: left allmulticast mode [ 262.408331][ T2174] bridge_slave_1: left promiscuous mode [ 262.408472][ T2174] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.435936][ T2174] bridge_slave_0: left allmulticast mode [ 262.435954][ T2174] bridge_slave_0: left promiscuous mode [ 262.436083][ T2174] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.478648][ T2174] tipc: Resetting bearer [ 262.734125][ T2174] tipc: Disabling bearer [ 262.753655][ T2174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.753993][ T2174] bond_slave_0: left promiscuous mode [ 262.756702][ T2174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.757186][ T2174] bond_slave_1: left promiscuous mode [ 262.758496][ T2174] bond0 (unregistering): Released all slaves [ 262.965623][ T2174] tipc: Left network mode [ 262.971248][ T5618] Bluetooth: hci2: command tx timeout [ 263.013429][ T9060] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.119605][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.119710][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.205745][ T32] kauditd_printk_skb: 40 callbacks suppressed [ 263.205764][ T32] audit: type=1800 audit(1700000102.686:2499): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15349 res=0 errno=0 [ 263.206562][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.206656][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.279996][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 263.355491][ T9257] syzkaller1: entered promiscuous mode [ 263.355512][ T9257] syzkaller1: entered allmulticast mode [ 263.389957][ T2174] hsr_slave_0: left promiscuous mode [ 263.390510][ T2174] hsr_slave_1: left promiscuous mode [ 263.393400][ T2174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.393422][ T2174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.421292][ T2174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.421314][ T2174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.426911][ T2174] veth1_macvtap: left promiscuous mode [ 263.426941][ T2174] veth0_macvtap: left promiscuous mode [ 263.427014][ T2174] veth1_vlan: left promiscuous mode [ 263.427052][ T2174] veth0_vlan: left promiscuous mode [ 263.623539][ T2174] team0 (unregistering): Port device team_slave_1 removed [ 263.639547][ T2174] team0 (unregistering): Port device team_slave_0 removed [ 263.889160][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.889316][ T9197] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.889452][ T9197] bridge_slave_0: entered allmulticast mode [ 263.897443][ T9197] bridge_slave_0: entered promiscuous mode [ 263.905110][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.905209][ T9197] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.905326][ T9197] bridge_slave_1: entered allmulticast mode [ 263.909424][ T9197] bridge_slave_1: entered promiscuous mode [ 263.982420][ T32] audit: type=1800 audit(1700000103.456:2500): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15349 res=0 errno=0 [ 264.030159][ T9060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.058729][ T9197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.102841][ T9197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.157309][ T9197] team0: Port device team_slave_0 added [ 264.169038][ T9197] team0: Port device team_slave_1 added [ 264.186503][ T32] audit: type=1800 audit(1700000103.676:2501): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15349 res=0 errno=0 [ 264.254591][ T9197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.254608][ T9197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.254631][ T9197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.295798][ T9197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.295815][ T9197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.295837][ T9197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.406456][ T32] audit: type=1800 audit(1700000103.896:2502): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196363 res=0 errno=0 [ 264.413604][ T5687] hid_parser_main: 3991 callbacks suppressed [ 264.413627][ T5687] hid-generic 0005:10CF:0005.001F: unknown main item tag 0x0 [ 264.413656][ T5687] hid-generic 0005:10CF:0005.001F: unknown main item tag 0x0 [ 264.456225][ T5687] hid-generic 0005:10CF:0005.001F: unknown main item tag 0x0 [ 264.456271][ T5687] hid-generic 0005:10CF:0005.001F: unknown main item tag 0x0 [ 264.456296][ T5687] hid-generic 0005:10CF:0005.001F: unknown main item tag 0x0 [ 264.456320][ T5687] hid-generic 0005:10CF:0005.001F: unknown main item tag 0x0 [ 264.456344][ T5687] hid-generic 0005:10CF:0005.001F: unknown main item tag 0x0 [ 264.456368][ T5687] hid-generic 0005:10CF:0005.001F: unknown main item tag 0x0 [ 264.456392][ T5687] hid-generic 0005:10CF:0005.001F: unknown main item tag 0x0 [ 264.456416][ T5687] hid-generic 0005:10CF:0005.001F: unknown main item tag 0x0 [ 264.581569][ T5687] hid-generic 0005:10CF:0005.001F: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 264.596035][ T32] audit: type=1800 audit(1700000104.086:2503): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15349 res=0 errno=0 [ 264.615811][ T32] audit: type=1800 audit(1700000104.096:2504): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196544 res=0 errno=0 [ 264.618790][ T9197] hsr_slave_0: entered promiscuous mode [ 264.666816][ T9197] hsr_slave_1: entered promiscuous mode [ 264.667514][ T9197] debugfs: 'hsr0' already exists in 'hsr' [ 264.667531][ T9197] Cannot create hsr debugfs directory [ 264.799271][ T32] audit: type=1800 audit(1700000104.286:2505): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=196365 res=0 errno=0 [ 264.890985][ T5701] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 264.979872][ T32] audit: type=1800 audit(1700000104.466:2506): pid=9197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24624 res=0 errno=0 [ 264.980479][ T32] audit: type=1800 audit(1700000104.466:2507): pid=9197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24623 res=0 errno=0 [ 265.048321][ T32] audit: type=1800 audit(1700000104.536:2508): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198124 res=0 errno=0 [ 265.055091][ T5618] Bluetooth: hci2: command tx timeout [ 265.057523][ T5701] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 265.059062][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.059088][ T5701] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 265.059108][ T5701] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.069503][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 265.069530][ T5701] usb 4-1: Product: syz [ 265.069543][ T5701] usb 4-1: Manufacturer: syz [ 265.069557][ T5701] usb 4-1: SerialNumber: syz [ 265.255611][ T9197] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 265.259938][ T9197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.274880][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 265.283106][ T9197] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 265.287265][ T9197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.288460][ T9197] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 265.315465][ T9197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.316569][ T9197] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 265.320529][ T5701] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 265.349874][ T9197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.485596][ T9197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.514664][ T9197] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.542890][ T5701] usb 4-1: USB disconnect, device number 39 [ 265.557717][ T5701] usblp0: removed [ 265.564587][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.564691][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.593923][ T2174] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.594028][ T2174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.719703][ T9060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.343152][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 266.397790][ T9060] veth0_vlan: entered promiscuous mode [ 266.443907][ T9060] veth1_vlan: entered promiscuous mode [ 266.529752][ T9060] veth0_macvtap: entered promiscuous mode [ 266.548421][ T9060] veth1_macvtap: entered promiscuous mode [ 266.593935][ T9060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.628067][ T9060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.695395][ T9197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.744034][ T3006] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.822223][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.822273][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.822307][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.038016][ T2174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.038039][ T2174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.131976][ T5621] Bluetooth: hci2: command tx timeout [ 267.161132][ T2174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.161152][ T2174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.501128][ T9357] FAULT_INJECTION: forcing a failure. [ 267.501128][ T9357] name failslab, interval 1, probability 0, space 0, times 0 [ 267.501162][ T9357] CPU: 0 UID: 0 PID: 9357 Comm: syz.3.1168 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.501192][ T9357] Tainted: [L]=SOFTLOCKUP [ 267.501200][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.501211][ T9357] Call Trace: [ 267.501219][ T9357] [ 267.501226][ T9357] dump_stack_lvl+0xe8/0x150 [ 267.501253][ T9357] should_fail_ex+0x3eb/0x540 [ 267.501282][ T9357] should_failslab+0xa8/0x100 [ 267.501306][ T9357] __kmalloc_noprof+0xf9/0x710 [ 267.501325][ T9357] ? security_sk_alloc+0x52/0x360 [ 267.501345][ T9357] ? security_sk_alloc+0x52/0x360 [ 267.501381][ T9357] security_sk_alloc+0x52/0x360 [ 267.501405][ T9357] sk_prot_alloc+0x101/0x210 [ 267.501432][ T9357] ? sk_alloc+0x27/0x390 [ 267.501461][ T9357] sk_alloc+0x3a/0x390 [ 267.501489][ T9357] xsk_create+0x104/0x690 [ 267.501513][ T9357] __sock_create+0x4b5/0xac0 [ 267.501544][ T9357] __sys_socket+0xd6/0x1b0 [ 267.501568][ T9357] __x64_sys_socket+0x7a/0x90 [ 267.501592][ T9357] do_syscall_64+0x166/0x520 [ 267.501620][ T9357] ? trace_irq_disable+0x3b/0x140 [ 267.501643][ T9357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.501663][ T9357] ? clear_bhb_loop+0x70/0xc0 [ 267.501684][ T9357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.501702][ T9357] RIP: 0033:0x7eff87d9e159 [ 267.501720][ T9357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.501737][ T9357] RSP: 002b:00007eff85ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 267.501757][ T9357] RAX: ffffffffffffffda RBX: 00007eff88025fa0 RCX: 00007eff87d9e159 [ 267.501772][ T9357] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 267.501784][ T9357] RBP: 00007eff87e3506b R08: 0000000000000000 R09: 0000000000000000 [ 267.501797][ T9357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.501809][ T9357] R13: 00007eff88026038 R14: 00007eff88025fa0 R15: 00007fff16ba8858 [ 267.501843][ T9357] [ 267.530723][ T5621] Bluetooth: hci6: command 0x0406 tx timeout [ 267.579402][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 267.687518][ T9197] veth0_vlan: entered promiscuous mode [ 267.763123][ T9197] veth1_vlan: entered promiscuous mode [ 267.829477][ T9362] FAULT_INJECTION: forcing a failure. [ 267.829477][ T9362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.829511][ T9362] CPU: 0 UID: 0 PID: 9362 Comm: syz.3.1169 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.829535][ T9362] Tainted: [L]=SOFTLOCKUP [ 267.829542][ T9362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.829555][ T9362] Call Trace: [ 267.829562][ T9362] [ 267.829571][ T9362] dump_stack_lvl+0xe8/0x150 [ 267.829602][ T9362] should_fail_ex+0x3eb/0x540 [ 267.829639][ T9362] _copy_from_user+0x2d/0xb0 [ 267.829661][ T9362] set_selection_user+0x96/0x150 [ 267.829689][ T9362] ? __pfx_set_selection_user+0x10/0x10 [ 267.829720][ T9362] ? tioclinux+0x37a/0x520 [ 267.829748][ T9362] vt_ioctl+0x836/0x20e0 [ 267.829777][ T9362] ? __pfx_vt_ioctl+0x10/0x10 [ 267.829812][ T9362] ? __fget_files+0x2a/0x420 [ 267.829835][ T9362] ? tty_jobctrl_ioctl+0x378/0xba0 [ 267.829858][ T9362] ? __fget_files+0x2a/0x420 [ 267.829879][ T9362] tty_ioctl+0x920/0xde0 [ 267.829907][ T9362] ? __pfx_tty_ioctl+0x10/0x10 [ 267.829935][ T9362] __se_sys_ioctl+0xfc/0x170 [ 267.829968][ T9362] do_syscall_64+0x166/0x520 [ 267.829995][ T9362] ? trace_irq_disable+0x3b/0x140 [ 267.830015][ T9362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.830035][ T9362] ? clear_bhb_loop+0x70/0xc0 [ 267.830059][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.830078][ T9362] RIP: 0033:0x7eff87d9e159 [ 267.830096][ T9362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.830112][ T9362] RSP: 002b:00007eff85ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.830133][ T9362] RAX: ffffffffffffffda RBX: 00007eff88025fa0 RCX: 00007eff87d9e159 [ 267.830147][ T9362] RDX: 00002000000002c0 RSI: 000000000000541c RDI: 0000000000000004 [ 267.830159][ T9362] RBP: 00007eff87e3506b R08: 0000000000000000 R09: 0000000000000000 [ 267.830169][ T9362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.830179][ T9362] R13: 00007eff88026038 R14: 00007eff88025fa0 R15: 00007fff16ba8858 [ 267.830206][ T9362] [ 267.854922][ T9197] veth0_macvtap: entered promiscuous mode [ 267.885437][ T9197] veth1_macvtap: entered promiscuous mode [ 267.949280][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.967373][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.002140][ T161] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.003722][ T2174] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.003760][ T2174] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.003790][ T2174] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.279509][ T32] kauditd_printk_skb: 20 callbacks suppressed [ 268.279530][ T32] audit: type=1800 audit(1700000107.766:2529): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198872 res=0 errno=0 [ 268.405684][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.405707][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.408663][ T32] audit: type=1800 audit(1700000107.896:2530): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198998 res=0 errno=0 [ 268.518745][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.518767][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.657237][ T32] audit: type=1800 audit(1700000108.146:2531): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15964 res=0 errno=0 [ 268.723364][ T32] audit: type=1800 audit(1700000108.216:2532): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15841 res=0 errno=0 [ 268.796460][ T32] audit: type=1800 audit(1700000108.286:2533): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15349 res=0 errno=0 [ 268.954651][ T32] audit: type=1800 audit(1700000108.446:2534): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15841 res=0 errno=0 [ 269.019020][ T32] audit: type=1800 audit(1700000108.506:2535): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15964 res=0 errno=0 [ 269.048903][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 269.088638][ T32] audit: type=1800 audit(1700000108.576:2536): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15349 res=0 errno=0 [ 269.130198][ T32] audit: type=1804 audit(1700000108.616:2537): pid=9390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1173" name="/newroot/2/sec/tomoyo/profile" dev="securityfs" ino=46 res=1 errno=0 [ 269.212743][ T5618] Bluetooth: hci2: command tx timeout [ 269.288241][ T32] audit: type=1800 audit(1700000108.776:2538): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15841 res=0 errno=0 [ 269.862156][ T9416] FAULT_INJECTION: forcing a failure. [ 269.862156][ T9416] name failslab, interval 1, probability 0, space 0, times 0 [ 269.862199][ T9416] CPU: 0 UID: 0 PID: 9416 Comm: syz.8.1180 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.862230][ T9416] Tainted: [L]=SOFTLOCKUP [ 269.862237][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.862247][ T9416] Call Trace: [ 269.862254][ T9416] [ 269.862265][ T9416] dump_stack_lvl+0xe8/0x150 [ 269.862293][ T9416] should_fail_ex+0x3eb/0x540 [ 269.862321][ T9416] should_failslab+0xa8/0x100 [ 269.862341][ T9416] __kmalloc_cache_noprof+0x9e/0x600 [ 269.862357][ T9416] ? lock_acquire+0x115/0x350 [ 269.862376][ T9416] ? blk_mq_init_allocated_queue+0xc2/0x13c0 [ 269.862402][ T9416] ? blk_mq_init_allocated_queue+0xc2/0x13c0 [ 269.862431][ T9416] blk_mq_init_allocated_queue+0xc2/0x13c0 [ 269.862459][ T9416] ? blk_alloc_queue+0x55d/0x690 [ 269.862484][ T9416] __blk_mq_alloc_disk+0x1d2/0x390 [ 269.862511][ T9416] ? __pfx___blk_mq_alloc_disk+0x10/0x10 [ 269.862562][ T9416] loop_add+0x480/0xb40 [ 269.862593][ T9416] ? __pfx_loop_add+0x10/0x10 [ 269.862642][ T9416] loop_control_ioctl+0x12b/0x5a0 [ 269.862668][ T9416] ? __fget_files+0x2a/0x420 [ 269.862687][ T9416] ? __pfx_loop_control_ioctl+0x10/0x10 [ 269.862719][ T9416] ? bpf_lsm_file_ioctl+0x9/0x20 [ 269.862741][ T9416] ? __pfx_loop_control_ioctl+0x10/0x10 [ 269.862767][ T9416] __se_sys_ioctl+0xfc/0x170 [ 269.862790][ T9416] do_syscall_64+0x166/0x520 [ 269.862818][ T9416] ? trace_irq_disable+0x3b/0x140 [ 269.862840][ T9416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.862860][ T9416] ? clear_bhb_loop+0x70/0xc0 [ 269.862881][ T9416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.862901][ T9416] RIP: 0033:0x7fccb179e159 [ 269.862919][ T9416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.862936][ T9416] RSP: 002b:00007fccb26f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.862957][ T9416] RAX: ffffffffffffffda RBX: 00007fccb1a25fa0 RCX: 00007fccb179e159 [ 269.862970][ T9416] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 269.862980][ T9416] RBP: 00007fccb183506b R08: 0000000000000000 R09: 0000000000000000 [ 269.862991][ T9416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.863002][ T9416] R13: 00007fccb1a26038 R14: 00007fccb1a25fa0 R15: 00007ffd9ef37b88 [ 269.863031][ T9416] [ 270.238124][ T9422] netlink: 'syz.3.1183': attribute type 10 has an invalid length. [ 270.256675][ T9422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.260041][ T9422] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 270.472888][ T9431] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 270.472913][ T9431] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 270.691605][ T9439] FAULT_INJECTION: forcing a failure. [ 270.691605][ T9439] name fail_futex, interval 1, probability 0, space 0, times 1 [ 270.691635][ T9439] CPU: 0 UID: 0 PID: 9439 Comm: syz.8.1188 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.691661][ T9439] Tainted: [L]=SOFTLOCKUP [ 270.691669][ T9439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.691681][ T9439] Call Trace: [ 270.691688][ T9439] [ 270.691698][ T9439] dump_stack_lvl+0xe8/0x150 [ 270.691726][ T9439] should_fail_ex+0x3eb/0x540 [ 270.691759][ T9439] get_futex_key+0x1b4/0x1580 [ 270.691791][ T9439] ? __pfx_get_futex_key+0x10/0x10 [ 270.691819][ T9439] ? __lock_acquire+0x747/0x2de0 [ 270.691842][ T9439] futex_wake+0x119/0x5f0 [ 270.691864][ T9439] ? __pfx_futex_wake+0x10/0x10 [ 270.691887][ T9439] ? __mutex_unlock_slowpath+0x731/0x900 [ 270.691926][ T9439] do_futex+0x458/0x4e0 [ 270.691955][ T9439] ? __pfx_do_futex+0x10/0x10 [ 270.691979][ T9439] ? ppp_ioctl+0x166f/0x1c00 [ 270.692004][ T9439] __se_sys_futex+0x3a8/0x450 [ 270.692032][ T9439] ? __fget_files+0x2a/0x420 [ 270.692050][ T9439] ? __pfx___se_sys_futex+0x10/0x10 [ 270.692080][ T9439] ? __x64_sys_futex+0x21/0xf0 [ 270.692107][ T9439] do_syscall_64+0x166/0x520 [ 270.692142][ T9439] ? trace_irq_disable+0x3b/0x140 [ 270.692163][ T9439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.692183][ T9439] ? clear_bhb_loop+0x70/0xc0 [ 270.692204][ T9439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.692220][ T9439] RIP: 0033:0x7fccb179e159 [ 270.692237][ T9439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.692253][ T9439] RSP: 002b:00007fccb26f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 270.692275][ T9439] RAX: ffffffffffffffda RBX: 00007fccb1a25fa8 RCX: 00007fccb179e159 [ 270.692288][ T9439] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fccb1a25fac [ 270.692299][ T9439] RBP: 00007fccb1a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 270.692311][ T9439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.692324][ T9439] R13: 00007fccb1a26038 R14: 00007ffd9ef37aa0 R15: 00007ffd9ef37b88 [ 270.692353][ T9439] [ 271.064391][ T9448] FAULT_INJECTION: forcing a failure. [ 271.064391][ T9448] name fail_futex, interval 1, probability 0, space 0, times 0 [ 271.064424][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.7.1192 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.064451][ T9448] Tainted: [L]=SOFTLOCKUP [ 271.064458][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.064470][ T9448] Call Trace: [ 271.064476][ T9448] [ 271.064484][ T9448] dump_stack_lvl+0xe8/0x150 [ 271.064512][ T9448] should_fail_ex+0x3eb/0x540 [ 271.064545][ T9448] get_futex_key+0x1b4/0x1580 [ 271.064565][ T9448] ? __lock_acquire+0x747/0x2de0 [ 271.064596][ T9448] ? __pfx_get_futex_key+0x10/0x10 [ 271.064625][ T9448] ? update_se+0x90/0x1080 [ 271.064652][ T9448] futex_wait_setup+0x4a/0x590 [ 271.064674][ T9448] ? __futex_wait+0xdb/0x470 [ 271.064696][ T9448] __futex_wait+0x175/0x470 [ 271.064715][ T9448] ? update_protect_slice+0x128/0x210 [ 271.064737][ T9448] ? __pfx___futex_wait+0x10/0x10 [ 271.064758][ T9448] ? __pfx_futex_wake_mark+0x10/0x10 [ 271.064782][ T9448] ? try_to_wake_up+0x8c5/0x14d0 [ 271.064811][ T9448] futex_wait+0x121/0x390 [ 271.064832][ T9448] ? __pfx_futex_wait+0x10/0x10 [ 271.064865][ T9448] do_futex+0x3e7/0x4e0 [ 271.064893][ T9448] ? __pfx_do_futex+0x10/0x10 [ 271.064925][ T9448] __se_sys_futex+0x3a8/0x450 [ 271.064955][ T9448] ? __fget_files+0x2a/0x420 [ 271.064975][ T9448] ? __pfx___se_sys_futex+0x10/0x10 [ 271.065010][ T9448] ? __x64_sys_futex+0x21/0xf0 [ 271.065043][ T9448] do_syscall_64+0x166/0x520 [ 271.065072][ T9448] ? trace_irq_disable+0x3b/0x140 [ 271.065095][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.065115][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 271.065139][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.065159][ T9448] RIP: 0033:0x7fd64999e159 [ 271.065186][ T9448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.065203][ T9448] RSP: 002b:00007fd64a8b50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 271.065225][ T9448] RAX: ffffffffffffffda RBX: 00007fd649c25fa8 RCX: 00007fd64999e159 [ 271.065240][ T9448] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd649c25fa8 [ 271.065253][ T9448] RBP: 00007fd649c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 271.065265][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.065277][ T9448] R13: 00007fd649c26038 R14: 00007fff80e8fa80 R15: 00007fff80e8fb68 [ 271.065307][ T9448] [ 271.096024][ T5621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.100600][ T5621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.103344][ T5621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.113645][ T5621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.118480][ T5621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.396129][ T9457] Bluetooth: MGMT ver 1.23 [ 271.564142][ T9465] kvm: emulating exchange as write [ 271.974439][ T9482] FAULT_INJECTION: forcing a failure. [ 271.974439][ T9482] name failslab, interval 1, probability 0, space 0, times 0 [ 271.974471][ T9482] CPU: 1 UID: 0 PID: 9482 Comm: syz.7.1202 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.974497][ T9482] Tainted: [L]=SOFTLOCKUP [ 271.974504][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.974515][ T9482] Call Trace: [ 271.974521][ T9482] [ 271.974579][ T9482] dump_stack_lvl+0xe8/0x150 [ 271.974606][ T9482] should_fail_ex+0x3eb/0x540 [ 271.974683][ T9482] should_failslab+0xa8/0x100 [ 271.974709][ T9482] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 271.974731][ T9482] ? _raw_spin_unlock+0x28/0x50 [ 271.974757][ T9482] ? setup_ipc_sysctls+0x55/0x2e0 [ 271.974775][ T9482] ? setup_ipc_sysctls+0x55/0x2e0 [ 271.974797][ T9482] kmemdup_noprof+0x2b/0x70 [ 271.974827][ T9482] setup_ipc_sysctls+0x55/0x2e0 [ 271.974849][ T9482] copy_ipcs+0x48f/0x6c0 [ 271.974875][ T9482] create_new_namespaces+0x210/0x6b0 [ 271.974904][ T9482] ? security_capable+0x7e/0x2c0 [ 271.974932][ T9482] unshare_nsproxy_namespaces+0x144/0x190 [ 271.974959][ T9482] ksys_unshare+0x53c/0x890 [ 271.974986][ T9482] ? __pfx_ksys_unshare+0x10/0x10 [ 271.975014][ T9482] ? rcu_is_watching+0x16/0xb0 [ 271.975044][ T9482] __x64_sys_unshare+0x38/0x50 [ 271.975066][ T9482] do_syscall_64+0x166/0x520 [ 271.975092][ T9482] ? trace_irq_disable+0x3b/0x140 [ 271.975114][ T9482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.975134][ T9482] ? clear_bhb_loop+0x70/0xc0 [ 271.975154][ T9482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.975172][ T9482] RIP: 0033:0x7fd64999e159 [ 271.975190][ T9482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.975204][ T9482] RSP: 002b:00007fd64a8b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 271.975225][ T9482] RAX: ffffffffffffffda RBX: 00007fd649c25fa0 RCX: 00007fd64999e159 [ 271.975240][ T9482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040600 [ 271.975252][ T9482] RBP: 00007fd649a3506b R08: 0000000000000000 R09: 0000000000000000 [ 271.975264][ T9482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.975274][ T9482] R13: 00007fd649c26038 R14: 00007fd649c25fa0 R15: 00007fff80e8fb68 [ 271.975304][ T9482] [ 272.191910][ T5342] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 272.245613][ T9485] FAULT_INJECTION: forcing a failure. [ 272.245613][ T9485] name fail_futex, interval 1, probability 0, space 0, times 0 [ 272.245646][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.8.1203 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.245672][ T9485] Tainted: [L]=SOFTLOCKUP [ 272.245678][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.245690][ T9485] Call Trace: [ 272.245698][ T9485] [ 272.245706][ T9485] dump_stack_lvl+0xe8/0x150 [ 272.245736][ T9485] should_fail_ex+0x3eb/0x540 [ 272.245767][ T9485] get_futex_key+0x1b4/0x1580 [ 272.245803][ T9485] ? __pfx_get_futex_key+0x10/0x10 [ 272.245827][ T9485] ? mmput+0x61/0x70 [ 272.245846][ T9485] ? pagemap_read+0x1b0/0x7c0 [ 272.245869][ T9485] futex_wake+0x119/0x5f0 [ 272.245888][ T9485] ? __pfx_pagemap_read+0x10/0x10 [ 272.245908][ T9485] ? __pfx_futex_wake+0x10/0x10 [ 272.245940][ T9485] do_futex+0x458/0x4e0 [ 272.245969][ T9485] ? __pfx_do_futex+0x10/0x10 [ 272.246008][ T9485] ? __fget_files+0x3a2/0x420 [ 272.246026][ T9485] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 272.246061][ T9485] __se_sys_futex+0x3a8/0x450 [ 272.246098][ T9485] ? ksys_read+0x242/0x270 [ 272.246117][ T9485] ? __pfx___se_sys_futex+0x10/0x10 [ 272.246145][ T9485] ? __pfx_ksys_read+0x10/0x10 [ 272.246167][ T9485] ? __x64_sys_futex+0x21/0xf0 [ 272.246196][ T9485] do_syscall_64+0x166/0x520 [ 272.246222][ T9485] ? trace_irq_disable+0x3b/0x140 [ 272.246244][ T9485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.246263][ T9485] ? clear_bhb_loop+0x70/0xc0 [ 272.246283][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.246305][ T9485] RIP: 0033:0x7fccb179e159 [ 272.246322][ T9485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.246338][ T9485] RSP: 002b:00007fccb26f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 272.246357][ T9485] RAX: ffffffffffffffda RBX: 00007fccb1a25fa8 RCX: 00007fccb179e159 [ 272.246370][ T9485] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fccb1a25fac [ 272.246382][ T9485] RBP: 00007fccb1a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 272.246394][ T9485] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 272.246404][ T9485] R13: 00007fccb1a26038 R14: 00007ffd9ef37aa0 R15: 00007ffd9ef37b88 [ 272.246431][ T9485] [ 272.382280][ T5342] usb 4-1: Using ep0 maxpacket: 16 [ 272.392057][ T5342] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 272.468283][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.468316][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.468336][ T5342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 272.468373][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.573243][ T5342] usb 4-1: config 0 descriptor?? [ 272.754528][ T9494] FAULT_INJECTION: forcing a failure. [ 272.754528][ T9494] name failslab, interval 1, probability 0, space 0, times 0 [ 272.754564][ T9494] CPU: 0 UID: 0 PID: 9494 Comm: syz.7.1206 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.754592][ T9494] Tainted: [L]=SOFTLOCKUP [ 272.754607][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.754621][ T9494] Call Trace: [ 272.754629][ T9494] [ 272.754641][ T9494] dump_stack_lvl+0xe8/0x150 [ 272.754673][ T9494] should_fail_ex+0x3eb/0x540 [ 272.754706][ T9494] should_failslab+0xa8/0x100 [ 272.754726][ T9494] ? security_inode_alloc+0x39/0x310 [ 272.754753][ T9494] kmem_cache_alloc_noprof+0x9c/0x600 [ 272.754783][ T9494] ? security_inode_alloc+0x39/0x310 [ 272.754814][ T9494] security_inode_alloc+0x39/0x310 [ 272.754842][ T9494] inode_init_always_gfp+0x97e/0xd30 [ 272.754876][ T9494] alloc_inode+0x82/0x1b0 [ 272.754904][ T9494] new_inode+0x1f/0x170 [ 272.754935][ T9494] pseudo_fs_fill_super+0x200/0x440 [ 272.754956][ T9494] ? __pfx_pseudo_fs_fill_super+0x10/0x10 [ 272.754977][ T9494] get_tree_nodev+0xbb/0x150 [ 272.754998][ T9494] vfs_get_tree+0x92/0x2a0 [ 272.755022][ T9494] do_new_mount+0x319/0xdc0 [ 272.755054][ T9494] ? __pfx_do_new_mount+0x10/0x10 [ 272.755080][ T9494] ? ns_capable+0x84/0xe0 [ 272.755108][ T9494] ? path_mount+0x647/0x1050 [ 272.755141][ T9494] ? user_path_at+0xd4/0x160 [ 272.755163][ T9494] __se_sys_mount+0x31d/0x420 [ 272.755198][ T9494] ? __pfx___se_sys_mount+0x10/0x10 [ 272.755233][ T9494] ? __x64_sys_mount+0x20/0xc0 [ 272.755264][ T9494] do_syscall_64+0x166/0x520 [ 272.755293][ T9494] ? trace_irq_disable+0x3b/0x140 [ 272.755314][ T9494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.755334][ T9494] ? clear_bhb_loop+0x70/0xc0 [ 272.755358][ T9494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.755378][ T9494] RIP: 0033:0x7fd64999e159 [ 272.755397][ T9494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.755414][ T9494] RSP: 002b:00007fd64a8b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 272.755443][ T9494] RAX: ffffffffffffffda RBX: 00007fd649c25fa0 RCX: 00007fd64999e159 [ 272.755460][ T9494] RDX: 0000200000000280 RSI: 0000200000000200 RDI: 00002000000001c0 [ 272.755474][ T9494] RBP: 00007fd649a3506b R08: 0000000000000000 R09: 0000000000000000 [ 272.755488][ T9494] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 272.755500][ T9494] R13: 00007fd649c26038 R14: 00007fd649c25fa0 R15: 00007fff80e8fb68 [ 272.755529][ T9494] [ 272.946974][ T33] INFO: task syz.2.362:6702 blocked for more than 143 seconds. [ 272.946997][ T33] Tainted: G L syzkaller #0 [ 272.947009][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.947018][ T33] task:syz.2.362 state:D stack:27432 pid:6702 tgid:6698 ppid:5607 task_flags:0x400040 flags:0x00080002 [ 272.947100][ T33] Call Trace: [ 272.947106][ T33] [ 272.947118][ T33] __schedule+0x1b47/0x5c60 [ 272.947176][ T33] ? __pfx___schedule+0x10/0x10 [ 272.947233][ T33] ? schedule+0x90/0x2b0 [ 272.947262][ T33] schedule+0x164/0x2b0 [ 272.947289][ T33] schedule_preempt_disabled+0x13/0x30 [ 272.947313][ T33] __mutex_lock+0x7c4/0x15a0 [ 272.947365][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 272.947397][ T33] ? write_threads+0x3b1/0x610 [ 272.947426][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 272.947450][ T33] ? simple_strntoull+0x114/0x190 [ 272.947504][ T33] ? qword_get+0x5ad/0x650 [ 272.947532][ T33] write_threads+0x3b1/0x610 [ 272.947559][ T33] ? __pfx_write_threads+0x10/0x10 [ 272.947602][ T33] ? _copy_from_user+0x94/0xb0 [ 272.947645][ T33] ? simple_transaction_get+0x12d/0x160 [ 272.947677][ T33] nfsctl_transaction_write+0x10f/0x160 [ 272.947705][ T33] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 272.947732][ T33] vfs_write+0x296/0xba0 [ 272.947780][ T33] ? __pfx_vfs_write+0x10/0x10 [ 272.947802][ T33] ? __fget_files+0x2a/0x420 [ 272.947819][ T33] ? __fget_files+0x3a2/0x420 [ 272.947835][ T33] ? __fget_files+0x2a/0x420 [ 272.947856][ T33] ? fdget+0x1ac/0x250 [ 272.947880][ T33] ksys_write+0x150/0x270 [ 272.947924][ T33] ? __pfx_ksys_write+0x10/0x10 [ 272.947953][ T33] do_syscall_64+0x166/0x520 [ 272.947978][ T33] ? trace_irq_disable+0x3b/0x140 [ 272.947999][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.948018][ T33] ? clear_bhb_loop+0x70/0xc0 [ 272.948070][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.948090][ T33] RIP: 0033:0x7f3120b9e159 [ 272.948107][ T33] RSP: 002b:00007f31219c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.948126][ T33] RAX: ffffffffffffffda RBX: 00007f3120e26090 RCX: 00007f3120b9e159 [ 272.948140][ T33] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 272.948152][ T33] RBP: 00007f3120c3506b R08: 0000000000000000 R09: 0000000000000000 [ 272.948164][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.948175][ T33] R13: 00007f3120e26128 R14: 00007f3120e26090 R15: 00007fff836e49e8 [ 272.948225][ T33] [ 272.959472][ T9449] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.959828][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.960002][ T9449] bridge_slave_0: entered allmulticast mode [ 272.966722][ T9449] bridge_slave_0: entered promiscuous mode [ 272.970986][ T9449] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.971142][ T9449] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.971527][ T9449] bridge_slave_1: entered allmulticast mode [ 272.973344][ T9449] bridge_slave_1: entered promiscuous mode [ 273.032190][ T33] [ 273.032190][ T33] Showing all locks held in the system: [ 273.032208][ T33] locks held by pr/ttyS0/16: 1, last CPU#0: [ 273.032223][ T33] #0: ffffffff8f035e98 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 273.032281][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 273.032294][ T33] #0: ffffffff8f15c2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 273.032371][ T33] locks held by kworker/0:2/5342: 5, last CPU#0: [ 273.032385][ T33] #0: ffff8880226d0d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.032435][ T33] #1: ffffc900035afc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.032484][ T33] #2: ffff88802a43a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 273.032527][ T33] #3: ffff88802c2241d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 273.032571][ T33] #4: ffff88801c7f31a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 273.032614][ T33] locks held by getty/5372: 2, on CPU#1: [ 273.032627][ T33] #0: ffff88802ca8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 273.032674][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 273.032726][ T33] locks held by syz-executor/5611: 2, on CPU#0: [ 273.032741][ T33] #0: ffff8880574360e8 (&type->s_umount_key#63){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 273.032796][ T33] #1: ffffffff8f49efe0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 273.032843][ T33] locks held by kworker/0:5/5702: 2, last CPU#0: [ 273.032855][ T33] #0: ffff88802d476948 ((wq_completion)wg-crypt-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.032909][ T33] #1: ffffc900042afc40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 273.032961][ T33] locks held by syz.2.362/6699: 3, on CPU#1: [ 273.032974][ T33] #0: ffff8880797b75f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 273.033019][ T33] #1: ffff88807eec4460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 273.033076][ T33] #2: ffffffff8f49efe0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 273.033125][ T33] locks held by syz.2.362/6702: 3, on CPU#1: [ 273.033137][ T33] #0: ffff88807ae20b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 273.033178][ T33] #1: ffff88807eec4460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 273.033222][ T33] #2: ffffffff8f49efe0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 273.033271][ T33] locks held by syz-executor/6965: 2, on CPU#0: [ 273.033284][ T33] #0: ffff8880691d00e8 (&type->s_umount_key#63){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 273.033338][ T33] #1: ffffffff8f49efe0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 273.033390][ T33] locks held by syz.6.1142/9120: 3, on CPU#0: [ 273.033402][ T33] #0: ffff88807c037b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 273.033444][ T33] #1: ffff88807c3b8460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 273.033491][ T33] #2: ffffffff8f49efe0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 273.033543][ T33] locks held by syz-executor/9449: 2, last CPU#1: [ 273.033555][ T33] #0: ffffffff8fdd6de8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 273.033611][ T33] #1: ffffffff90673de0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 273.033660][ T33] locks held by syz.8.1205/9491: 4, last CPU#0: [ 273.033673][ T33] #0: ffff88802a242928 (&vcpu->mutex){+.+.}-{4:4}, at: kvm_vcpu_ioctl+0x27f/0xfd0 [ 273.033724][ T33] #1: ffff8880460f2318 (&kvm->srcu){.+.+}-{0:0}, at: kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 273.033772][ T33] #2: ffffffff8f2923a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x5f/0x600 [ 273.033820][ T33] #3: ffffffff8f2a8ac0 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x7c/0x100 [ 273.033864][ T33] locks held by syz.7.1206/9493: 2, last CPU#1: [ 273.033877][ T33] #0: ffff88801269f180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 273.033923][ T33] #1: ffffffff8f15c2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 273.033967][ T33] [ 273.033972][ T33] ============================================= [ 273.033972][ T33] [ 273.033980][ T33] NMI backtrace for cpu 0 [ 273.033994][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 273.034018][ T33] Tainted: [L]=SOFTLOCKUP [ 273.034025][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.034043][ T33] Call Trace: [ 273.034051][ T33] [ 273.034059][ T33] dump_stack_lvl+0xe8/0x150 [ 273.034082][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 273.034106][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 273.034133][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 273.034158][ T33] sys_info+0x135/0x170 [ 273.034177][ T33] watchdog+0x1058/0x10d0 [ 273.034205][ T33] ? watchdog+0x209/0x10d0 [ 273.034231][ T33] kthread+0x38b/0x480 [ 273.034250][ T33] ? __pfx_watchdog+0x10/0x10 [ 273.034268][ T33] ? __pfx_kthread+0x10/0x10 [ 273.034287][ T33] ret_from_fork+0x514/0xb70 [ 273.034315][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 273.034339][ T33] ? __switch_to+0xc78/0x1410 [ 273.034364][ T33] ? __pfx_kthread+0x10/0x10 [ 273.034381][ T33] ret_from_fork_asm+0x1a/0x30 [ 273.034419][ T33] [ 273.034426][ T33] Sending NMI from CPU 0 to CPUs 1: [ 273.034467][ C1] NMI backtrace for cpu 1 [ 273.034491][ C1] CPU: 1 UID: 0 PID: 9493 Comm: syz.7.1206 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.034515][ C1] Tainted: [L]=SOFTLOCKUP [ 273.034521][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.034531][ C1] RIP: 0010:__lock_acquire+0x447/0x2de0 [ 273.034564][ C1] Code: 27 90 e8 2c 64 45 03 85 c0 74 1c 83 3d f5 6a 18 0f 00 75 13 48 8d 3d 28 75 1b 0f 48 c7 c6 8b 3a 87 8e 67 48 0f b9 3a 90 31 c0 <0f> b6 98 c4 00 00 00 48 8b 45 20 25 ff 1f 00 00 48 0f a3 05 11 b1 [ 273.034578][ C1] RSP: 0018:ffffc900036af600 EFLAGS: 00000006 [ 273.034593][ C1] RAX: ffffffff9485d990 RBX: 0000000000000000 RCX: 0000000000000000 [ 273.034605][ C1] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 6200000000000000 [ 273.034622][ C1] RBP: ffff888033614a58 R08: ffffffff84f8d364 R09: 0000000000000001 [ 273.034634][ C1] R10: dffffc0000000000 R11: fffffbfff2178c98 R12: 0000000000000000 [ 273.034646][ C1] R13: ffff888033614a30 R14: ffff888033613e80 R15: ffff888033613e80 [ 273.034660][ C1] FS: 0000000000000000(0000) GS:ffff88812472e000(0000) knlGS:0000000000000000 [ 273.034674][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.034687][ C1] CR2: 0000001b2df1fff8 CR3: 0000000045abc000 CR4: 00000000003526f0 [ 273.034703][ C1] Call Trace: [ 273.034709][ C1] [ 273.034718][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 273.034748][ C1] lock_acquire+0x115/0x350 [ 273.034771][ C1] ? debug_object_active_state+0xa4/0x260 [ 273.034794][ C1] ? rcu_is_watching+0x16/0xb0 [ 273.034817][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 273.034842][ C1] ? debug_object_active_state+0xa4/0x260 [ 273.034861][ C1] debug_object_active_state+0xa4/0x260 [ 273.034882][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 273.034902][ C1] ? tear_down_vmas+0x31f/0x530 [ 273.034925][ C1] rcu_do_enqueue+0x42/0x870 [ 273.034945][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 273.034966][ C1] ? tear_down_vmas+0x31f/0x530 [ 273.034987][ C1] call_rcu+0x20e/0x300 [ 273.035009][ C1] ? __pfx_call_rcu+0x10/0x10 [ 273.035034][ C1] ? tear_down_vmas+0x31f/0x530 [ 273.035055][ C1] kmem_cache_free+0x471/0x650 [ 273.035076][ C1] tear_down_vmas+0x31f/0x530 [ 273.035101][ C1] exit_mmap+0x4ca/0x9f0 [ 273.035123][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 273.035154][ C1] ? __pfx_exit_aio+0x10/0x10 [ 273.035177][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 273.035198][ C1] __mmput+0x118/0x420 [ 273.035223][ C1] exit_mm+0x18e/0x240 [ 273.035247][ C1] do_exit+0x6a8/0x2380 [ 273.035271][ C1] ? try_to_wake_up+0x8c5/0x14d0 [ 273.035292][ C1] ? __pfx_do_exit+0x10/0x10 [ 273.035314][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 273.035331][ C1] ? preempt_schedule_common+0x7f/0xd0 [ 273.035354][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 273.035372][ C1] do_group_exit+0x22d/0x2f0 [ 273.035398][ C1] __x64_sys_exit_group+0x3f/0x40 [ 273.035422][ C1] x64_sys_call+0x18c6/0x18d0 [ 273.035443][ C1] do_syscall_64+0x166/0x520 [ 273.035467][ C1] ? trace_irq_disable+0x3b/0x140 [ 273.035486][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.035504][ C1] ? clear_bhb_loop+0x70/0xc0 [ 273.035523][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.035545][ C1] RIP: 0033:0x7fd64999e159 [ 273.035559][ C1] Code: Unable to access opcode bytes at 0x7fd64999e12f. [ 273.035567][ C1] RSP: 002b:00007fff80e8fea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 273.035584][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd64999e159 [ 273.035597][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.035607][ C1] RBP: 00007fff80e8ff0c R08: 0000000000000000 R09: 00000000000927c0 [ 273.035619][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 000000000000000a [ 273.035629][ C1] R13: 00000000000927c0 R14: 0000000000042839 R15: 00007fff80e8ff60 [ 273.035648][ C1] [ 273.036475][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 274.260833][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 274.271686][ T33] Tainted: [L]=SOFTLOCKUP [ 274.276005][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.286065][ T33] Call Trace: [ 274.289457][ T33] [ 274.292382][ T33] vpanic+0x26f/0x710 [ 274.296467][ T33] panic+0xc5/0xd0 [ 274.300218][ T33] ? __pfx_panic+0x10/0x10 [ 274.304644][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 274.309927][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 274.316116][ T33] watchdog+0x10cc/0x10d0 [ 274.320561][ T33] ? watchdog+0x209/0x10d0 [ 274.325152][ T33] kthread+0x38b/0x480 [ 274.329239][ T33] ? __pfx_watchdog+0x10/0x10 [ 274.333913][ T33] ? __pfx_kthread+0x10/0x10 [ 274.338593][ T33] ret_from_fork+0x514/0xb70 [ 274.343192][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 274.348300][ T33] ? __switch_to+0xc78/0x1410 [ 274.352979][ T33] ? __pfx_kthread+0x10/0x10 [ 274.357670][ T33] ret_from_fork_asm+0x1a/0x30 [ 274.362658][ T33] [ 274.366064][ T33] Kernel Offset: disabled [ 274.370393][ T33] Rebooting in 86400 seconds..