last executing test programs: 3m7.553628393s ago: executing program 1 (id=279): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x8) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r0, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x101, 0x1, r1, 0x0) 3m6.96721467s ago: executing program 1 (id=287): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20a000, 0x85) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3m6.910536641s ago: executing program 1 (id=289): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffa, 0x4b, 0x0, 0x0) read$midi(r0, 0x0, 0x3b) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) 3m6.776431125s ago: executing program 1 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x9801) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000400)='.\x00', 0x9000, &(0x7f0000000440)={0x0, 0x0, 0x80000, {r1}}, 0x20) 3m6.742455468s ago: executing program 1 (id=291): unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x1f02, 0x12) getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000240)) write$dsp(0xffffffffffffffff, 0x0, 0x0) 3m6.409764213s ago: executing program 1 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='8\x00', 0x2) 3m6.326465333s ago: executing program 32 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='8\x00', 0x2) 2m34.114245469s ago: executing program 2 (id=512): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000100), 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f0000000740)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000780)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40) 2m33.939589299s ago: executing program 2 (id=515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000001900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001980)={'syzkaller1\x00', 0x1}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000019c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xfff3}}]}}]}, 0x40}}, 0x0) 2m33.723153436s ago: executing program 2 (id=518): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r2, 0x0, 0x0, 0x1000f4) 2m32.516396612s ago: executing program 2 (id=524): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x9801) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x8) 2m32.073199999s ago: executing program 2 (id=527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x1, 0x0}, &(0x7f00000002c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 2m31.777997613s ago: executing program 2 (id=529): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000003c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x2eb5, 0x30}, 0xc) r1 = dup(r0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000540)="d580", 0x2}], 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000580)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) 2m31.205733695s ago: executing program 33 (id=529): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000003c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x2eb5, 0x30}, 0xc) r1 = dup(r0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000540)="d580", 0x2}], 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000580)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) 1m43.744936557s ago: executing program 6 (id=840): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000) setitimer(0x1, &(0x7f0000000300)={{}, {0x77359400}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000800)=0x0) prlimit64(0x0, 0x0, &(0x7f0000000840)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000900)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000000940), 0x800001d, 0x1c) 1m43.663882951s ago: executing program 6 (id=842): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 1m43.524522951s ago: executing program 6 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x1a5342, 0xe5) write$FUSE_INIT(r0, 0x0, 0x0) 1m43.414451088s ago: executing program 6 (id=848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x4, 0x2, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x41, 0x0}, 0x10) 1m43.340322422s ago: executing program 6 (id=849): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x90, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m43.218674291s ago: executing program 6 (id=852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write(0xffffffffffffffff, &(0x7f0000000140)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0x10, 0x7, 0x4}, {0xf000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xa, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x1ffe, 0xeeee0000, 0xa, 0x4, 0x0, 0x5, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0x8, 0x6, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x134, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m37.09667132s ago: executing program 5 (id=901): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1m36.927583974s ago: executing program 4 (id=906): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 1m36.498079359s ago: executing program 4 (id=907): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmsg$inet_nvme(r0, 0x0, 0x220) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503"], 0x0) 1m36.159459429s ago: executing program 3 (id=908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1m36.154955627s ago: executing program 5 (id=909): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}], [], 0x6b}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m35.983858473s ago: executing program 3 (id=911): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc91, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x2, {0x800000001, 0x0, 0x0, '\x00', {0x10000, 0x8004, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffdfffe, 0x0, 0xffffffffffffc2f3, 0x0, {0xfffffffffffffffd, 0xfffffffc}, {0x5}, {0x0, 0x4}, {0x5, 0xfffffffe}, 0x62, 0x0, 0x7fff, 0x200}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m35.981310306s ago: executing program 5 (id=912): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m32.780756456s ago: executing program 5 (id=914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x13, 0xffffffffffffffff, 0x0) close(0x3) 1m32.7805591s ago: executing program 3 (id=915): io_uring_setup(0x7191, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='\bj', 0x2}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='dummy0\x00', 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x2, {{0x2, 0xfffc, @multicast2}}}, 0x88) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x4, @empty, 0x3}}, 0x800, 0x6, 0xffff1891, 0x0, 0xb23be0fbe66397b6, 0x9, 0x1b}, 0x9c) 1m32.778651096s ago: executing program 4 (id=916): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = io_uring_setup(0x68e7, &(0x7f0000000340)={0x0, 0x48c9, 0x8, 0x0, 0xd1}) r2 = mq_open(&(0x7f00000003c0)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000400)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_unlink(&(0x7f0000000440)='bat\x13\x1b\r\xcbs\xecave_5\x00') mq_timedreceive(r2, &(0x7f00000004c0)=""/97, 0x61, 0xffffffffffffffb8, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m32.778507436s ago: executing program 0 (id=924): socket$inet6(0xa, 0x80002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='10', 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='freezer.state\x00', 0x275a, 0x0) 1m32.673069649s ago: executing program 4 (id=917): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m32.659311461s ago: executing program 0 (id=918): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000f40)={0x1}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000009c0)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000a00)=0x1) r2 = dup2(r0, r0) preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000b00)=""/90, 0x5a}], 0x1, 0xfffffffc, 0xfe000000) 1m32.557367718s ago: executing program 0 (id=919): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m32.431588939s ago: executing program 4 (id=920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0x5, 0xffff}, {0x300, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c8d1}, 0x0) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="0800080000000200b6e7"], 0xfce) 1m32.39375833s ago: executing program 3 (id=921): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000008c0)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x38, r6, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r3, @ANYBLOB="05003500b50000000500330002"], 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 1m32.361080024s ago: executing program 5 (id=922): recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000001e000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m27.641143501s ago: executing program 34 (id=852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write(0xffffffffffffffff, &(0x7f0000000140)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0x10, 0x7, 0x4}, {0xf000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xa, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x1ffe, 0xeeee0000, 0xa, 0x4, 0x0, 0x5, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0x8, 0x6, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x134, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m27.636023627s ago: executing program 3 (id=925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x7, 0x10001, 0x1, 0x1, 0xffffffffffffffff, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) 1m27.635729342s ago: executing program 4 (id=926): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_dev$loop(&(0x7f0000000380), 0xb7c8, 0xa8182) r1 = memfd_create(&(0x7f00000003c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002680)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) write$FUSE_INIT(r0, &(0x7f00000026c0)={0x50, 0x0, r1, {0x7, 0x2d, 0x4, 0x10000000, 0x7, 0x5, 0x400, 0xa, 0x0, 0x0, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002740)="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", 0x2000, &(0x7f0000004740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004800)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0xfffffffe, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000048c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000006900)={0x10, 0x0, r4}, 0x10) 1m27.431629311s ago: executing program 0 (id=928): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffff9c, &(0x7f0000001a80), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001bc0)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001c00)={[0x400002, 0x40000000000000c, 0xfffffffffffffff9, 0x0, 0x6, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x3, 0x1, 0xffffffffffffffff, 0x1ffffffffffffffe, 0xb3, 0x4a1], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m27.377622919s ago: executing program 3 (id=929): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000280)=0x90ff, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) close(r1) 1m27.299370417s ago: executing program 0 (id=930): socket$inet_tcp(0x2, 0x1, 0x0) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x406, r0) epoll_create1(0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = syz_io_uring_setup(0x27c9, &(0x7f0000000540)={0x0, 0x4fde, 0x3000, 0x2, 0xb}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 0s ago: executing program 35 (id=930): socket$inet_tcp(0x2, 0x1, 0x0) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x406, r0) epoll_create1(0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = syz_io_uring_setup(0x27c9, &(0x7f0000000540)={0x0, 0x4fde, 0x3000, 0x2, 0xb}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.950303][ T7094] af_packet: tpacket_rcv: packet too big, clamped from 4058 to 3956. macoff=92 [ 114.201702][ T7101] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 114.201741][ T7101] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 114.201788][ T7101] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 114.226593][ T7101] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 114.304742][ T5721] infiniband s`z1: ib_query_port failed (-19) [ 114.334814][ T191] smbdirect: ib_dev[s`z1] removed [ 114.339816][ T7101] siw: device registration error -19 [ 114.387186][ T5714] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.537834][ T5714] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 114.538678][ T5714] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.538717][ T5714] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.540423][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.540445][ T5714] usb 4-1: Product: syz [ 114.540459][ T5714] usb 4-1: Manufacturer: syz [ 114.540473][ T5714] usb 4-1: SerialNumber: syz [ 117.393118][ T188] usb 4-1: USB disconnect, device number 3 [ 118.035809][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 118.035828][ T30] audit: type=1400 audit(1792370714.032:3116): avc: denied { write } for pid=7166 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.410435][ T30] audit: type=1400 audit(1792370714.412:3117): avc: denied { bind } for pid=7170 comm="syz.5.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.754360][ T7178] smpboot: CPU 1 is now offline [ 119.384800][ T7187] batman_adv: batadv0: Adding interface: veth0 [ 119.384813][ T7187] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.384830][ T7187] batman_adv: batadv0: Interface activated: veth0 [ 119.753349][ T7188] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 119.753376][ T7188] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 119.753401][ T7188] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 119.827805][ T7187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.827825][ T7187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.868893][ T7187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.868909][ T7187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.872456][ T7188] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 119.911903][ T7187] batman_adv: batadv0: Interface deactivated: veth0 [ 119.911919][ T7187] batman_adv: batadv0: Removing interface: veth0 [ 120.138232][ T30] audit: type=1400 audit(1792370716.132:3118): avc: denied { sqpoll } for pid=7195 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.254599][ T30] audit: type=1400 audit(1792370716.252:3119): avc: denied { write } for pid=7173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.371715][ T30] audit: type=1400 audit(1792370716.372:3120): avc: denied { write } for pid=7202 comm="syz.0.432" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 120.545575][ T5721] infiniband s`z1: ib_query_port failed (-19) [ 120.614905][ T30] audit: type=1400 audit(1792370716.612:3121): avc: denied { write } for pid=7211 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.651658][ T59] smbdirect: ib_dev[s`z1] removed [ 120.671169][ T7188] siw: device registration error -19 [ 120.738597][ T5714] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 120.890045][ T5714] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 120.890783][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.890803][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.890822][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.896117][ T5714] usb 5-1: config 0 descriptor?? [ 121.028457][ T7218] FAULT_INJECTION: forcing a failure. [ 121.028457][ T7218] name failslab, interval 1, probability 0, space 0, times 0 [ 121.028485][ T7218] CPU: 0 UID: 0 PID: 7218 Comm: syz.5.434 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.028503][ T7218] Tainted: [L]=SOFTLOCKUP [ 121.028507][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.028515][ T7218] Call Trace: [ 121.028519][ T7218] [ 121.028525][ T7218] dump_stack_lvl+0x100/0x190 [ 121.028557][ T7218] should_fail_ex.cold+0x5/0xa [ 121.028576][ T7218] should_failslab+0xc2/0x120 [ 121.028596][ T7218] __kmalloc_cache_noprof+0x91/0x6d0 [ 121.028610][ T7218] ? iommu_group_alloc_device+0x4e/0x600 [ 121.028632][ T7218] iommu_group_alloc_device+0x4e/0x600 [ 121.028651][ T7218] ? fwnode_property_read_int_array+0x19d/0x1f0 [ 121.028665][ T7218] __iommu_probe_device+0x6b5/0x1550 [ 121.028681][ T7218] ? __pfx___iommu_probe_device+0x10/0x10 [ 121.028696][ T7218] ? __pfx___might_resched+0x10/0x10 [ 121.028713][ T7218] iommu_probe_device+0x28/0x130 [ 121.028727][ T7218] iommu_bus_notifier+0x5b/0x110 [ 121.028741][ T7218] notifier_call_chain+0x99/0x3f0 [ 121.028761][ T7218] blocking_notifier_call_chain+0x69/0xa0 [ 121.028780][ T7218] bus_notify+0x56/0x80 [ 121.028799][ T7218] device_add+0x1169/0x1970 [ 121.028814][ T7218] ? __pfx_device_add+0x10/0x10 [ 121.028827][ T7218] ? kobject_get+0xbb/0x150 [ 121.028838][ T7218] ? __pfx_software_node_get+0x10/0x10 [ 121.028854][ T7218] ? software_node_get+0x68/0x90 [ 121.028869][ T7218] ? fwnode_handle_get+0x97/0xd0 [ 121.028883][ T7218] iommu_mock_device_add+0x7c/0xb0 [ 121.028896][ T7218] iommufd_test+0x3038/0x6600 [ 121.028916][ T7218] ? __lock_acquire+0x5c0/0x1f40 [ 121.028931][ T7218] ? __lock_acquire+0x5c0/0x1f40 [ 121.028945][ T7218] ? __pfx_iommufd_test+0x10/0x10 [ 121.028964][ T7218] ? tomoyo_path_number_perm+0x188/0x580 [ 121.028984][ T7218] ? lock_acquire+0x1d1/0x380 [ 121.028996][ T7218] ? __might_fault+0xc5/0x140 [ 121.029008][ T7218] ? find_held_lock+0x2b/0x80 [ 121.029024][ T7218] ? __might_fault+0xc5/0x140 [ 121.029043][ T7218] iommufd_fops_ioctl+0x358/0x520 [ 121.029057][ T7218] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 121.029068][ T7218] ? __fget_files+0x34/0x3d0 [ 121.029092][ T7218] ? selinux_file_ioctl+0x13b/0x290 [ 121.029110][ T7218] ? selinux_file_ioctl+0xb6/0x290 [ 121.029127][ T7218] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 121.029141][ T7218] __x64_sys_ioctl+0x18e/0x210 [ 121.029156][ T7218] do_syscall_64+0x123/0x790 [ 121.029175][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.029187][ T7218] RIP: 0033:0x7fdd1d79e559 [ 121.029197][ T7218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.029209][ T7218] RSP: 002b:00007fdd1e605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.029221][ T7218] RAX: ffffffffffffffda RBX: 00007fdd1da25fa0 RCX: 00007fdd1d79e559 [ 121.029228][ T7218] RDX: 0000200000000680 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 121.029235][ T7218] RBP: 00007fdd1d835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 121.029242][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.029249][ T7218] R13: 00007fdd1da26038 R14: 00007fdd1da25fa0 R15: 00007ffc5f145698 [ 121.029265][ T7218] [ 121.663284][ T5714] aquacomputer_d5next 0003:0C70:F0B6.0004: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 121.853717][ T7239] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 121.853746][ T7239] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 121.853772][ T7239] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 121.942412][ T7239] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.975784][ T30] audit: type=1400 audit(1792370717.972:3122): avc: denied { write } for pid=7212 comm="syz.4.433" name="hidraw0" dev="devtmpfs" ino=2911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.012397][ T5714] usb 5-1: USB disconnect, device number 6 [ 122.120666][ T30] audit: type=1400 audit(1792370718.122:3123): avc: denied { write } for pid=7216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.221120][ T30] audit: type=1400 audit(1792370718.222:3124): avc: denied { create } for pid=7247 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.294897][ T30] audit: type=1400 audit(1792370718.292:3125): avc: denied { write } for pid=7249 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.068627][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 124.068641][ T30] audit: type=1400 audit(1792370720.072:3128): avc: denied { create } for pid=7290 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.072351][ T30] audit: type=1400 audit(1792370720.072:3129): avc: denied { bind } for pid=7290 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.075040][ T30] audit: type=1400 audit(1792370720.072:3130): avc: denied { accept } for pid=7290 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.170468][ T30] audit: type=1400 audit(1792370720.172:3131): avc: denied { write } for pid=7290 comm="syz.2.452" path="socket:[16153]" dev="sockfs" ino=16153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.211045][ T30] audit: type=1400 audit(1792370720.212:3132): avc: denied { name_bind } for pid=7289 comm="syz.4.454" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 124.254295][ T30] audit: type=1400 audit(1792370720.252:3133): avc: denied { read } for pid=7290 comm="syz.2.452" path="socket:[16153]" dev="sockfs" ino=16153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.282717][ T30] audit: type=1400 audit(1792370720.252:3134): avc: denied { write } for pid=7264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.396062][ T7298] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.562310][ T30] audit: type=1400 audit(1792370720.562:3135): avc: denied { write } for pid=7301 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.625734][ T30] audit: type=1400 audit(1792370720.622:3136): avc: denied { mounton } for pid=7302 comm="syz.4.457" path="/100/file0" dev="tmpfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 124.976675][ T30] audit: type=1400 audit(1792370720.972:3137): avc: denied { create } for pid=7318 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.282312][ T7366] lo: entered allmulticast mode [ 126.457880][ T5714] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.576864][ T7359] FAULT_INJECTION: forcing a failure. [ 126.576864][ T7359] name failslab, interval 1, probability 0, space 0, times 0 [ 126.576891][ T7359] CPU: 0 UID: 0 PID: 7359 Comm: syz.2.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.576910][ T7359] Tainted: [L]=SOFTLOCKUP [ 126.576915][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.576923][ T7359] Call Trace: [ 126.576928][ T7359] [ 126.576933][ T7359] dump_stack_lvl+0x100/0x190 [ 126.576957][ T7359] should_fail_ex.cold+0x5/0xa [ 126.576974][ T7359] should_failslab+0xc2/0x120 [ 126.576993][ T7359] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 126.577020][ T7359] ? xas_split_alloc+0x182/0x530 [ 126.577044][ T7359] xas_split_alloc+0x182/0x530 [ 126.577067][ T7359] __folio_split+0x95e/0x1bf0 [ 126.577088][ T7359] ? __pfx___folio_split+0x10/0x10 [ 126.577101][ T7359] ? folio_alloc_swap+0xbd8/0x1e70 [ 126.577123][ T7359] ? folio_alloc_swap+0x4c6/0x1e70 [ 126.577141][ T7359] shmem_writeout+0x786/0x1a00 [ 126.577157][ T7359] ? __pfx_shmem_writeout+0x10/0x10 [ 126.577169][ T7359] ? __pfx_try_to_unmap+0x10/0x10 [ 126.577182][ T7359] ? find_held_lock+0x2b/0x80 [ 126.577199][ T7359] ? inode_to_bdi+0x9e/0x160 [ 126.577213][ T7359] ? folio_clear_dirty_for_io+0x178/0x960 [ 126.577229][ T7359] shrink_folio_list+0x399a/0x5e40 [ 126.577252][ T7359] ? __pfx_shrink_folio_list+0x10/0x10 [ 126.577275][ T7359] ? unwind_next_frame+0xbd/0x2090 [ 126.577294][ T7359] ? lock_acquire+0x1d1/0x380 [ 126.577307][ T7359] ? is_bpf_text_address+0x25/0x1a0 [ 126.577336][ T7359] ? __lock_acquire+0x5c0/0x1f40 [ 126.577349][ T7359] ? __css_rstat_updated+0x1ce/0x590 [ 126.577366][ T7359] ? __pfx___css_rstat_updated+0x10/0x10 [ 126.577384][ T7359] reclaim_folio_list+0xe9/0x5e0 [ 126.577402][ T7359] ? __pfx_reclaim_folio_list+0x10/0x10 [ 126.577418][ T7359] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 126.577441][ T7359] ? lru_gen_update_size+0x431/0xe20 [ 126.577460][ T7359] ? lru_gen_del_folio+0x382/0x5f0 [ 126.577477][ T7359] reclaim_pages+0x428/0x5e0 [ 126.577496][ T7359] ? __pfx_reclaim_pages+0x10/0x10 [ 126.577512][ T7359] ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0 [ 126.577531][ T7359] ? folio_isolate_lru+0xd6/0xe90 [ 126.577551][ T7359] madvise_cold_or_pageout_pte_range+0x147e/0x27b0 [ 126.577574][ T7359] ? rcu_read_unlock+0x17/0x60 [ 126.577587][ T7359] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 126.577605][ T7359] ? __mod_zone_page_state+0xdb/0x190 [ 126.577627][ T7359] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 126.577647][ T7359] walk_pgd_range+0xbef/0x1e00 [ 126.577665][ T7359] ? find_held_lock+0x2b/0x80 [ 126.577688][ T7359] ? __pfx_walk_pgd_range+0x10/0x10 [ 126.577703][ T7359] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 126.577723][ T7359] __walk_page_range+0x171/0x850 [ 126.577745][ T7359] walk_page_range_vma_unsafe+0x209/0x8f0 [ 126.577762][ T7359] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 126.577779][ T7359] ? find_held_lock+0x2b/0x80 [ 126.577796][ T7359] ? mlock_drain_local+0x254/0x4e0 [ 126.577808][ T7359] ? mlock_drain_local+0x254/0x4e0 [ 126.577823][ T7359] walk_page_range_vma+0x63/0x90 [ 126.577839][ T7359] madvise_pageout+0x29e/0x5b0 [ 126.577857][ T7359] ? __pfx_madvise_pageout+0x10/0x10 [ 126.577886][ T7359] madvise_vma_behavior+0x48b/0x2350 [ 126.577899][ T7359] ? mas_prev+0xa4/0x100 [ 126.577911][ T7359] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 126.577924][ T7359] ? mas_walk+0x260/0x310 [ 126.577941][ T7359] ? find_vma_prev+0xd8/0x150 [ 126.577957][ T7359] ? __pfx_find_vma_prev+0x10/0x10 [ 126.577971][ T7359] ? lock_acquire+0x1d1/0x380 [ 126.577993][ T7359] madvise_walk_vmas+0x30e/0xc50 [ 126.578014][ T7359] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 126.578028][ T7359] ? __pfx_futex_wake_mark+0x10/0x10 [ 126.578046][ T7359] ? lock_acquire+0x1d1/0x380 [ 126.578064][ T7359] madvise_do_behavior+0x1ea/0x510 [ 126.578078][ T7359] ? __pfx_madvise_do_behavior+0x10/0x10 [ 126.578091][ T7359] ? down_read+0x13b/0x4c0 [ 126.578111][ T7359] do_madvise+0x238/0x290 [ 126.578123][ T7359] ? __pfx_do_madvise+0x10/0x10 [ 126.578134][ T7359] ? do_futex+0x190/0x440 [ 126.578155][ T7359] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.578184][ T7359] __x64_sys_madvise+0xa9/0x110 [ 126.578195][ T7359] ? lockdep_hardirqs_on+0x7d/0x110 [ 126.578211][ T7359] do_syscall_64+0x123/0x790 [ 126.578230][ T7359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.578242][ T7359] RIP: 0033:0x7ff47eb9e559 [ 126.578253][ T7359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.578264][ T7359] RSP: 002b:00007ff47fa03028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 126.578277][ T7359] RAX: ffffffffffffffda RBX: 00007ff47ee25fa0 RCX: 00007ff47eb9e559 [ 126.578284][ T7359] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 126.578292][ T7359] RBP: 00007ff47ec35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 126.578298][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.578305][ T7359] R13: 00007ff47ee26038 R14: 00007ff47ee25fa0 R15: 00007ffc53dd5e28 [ 126.578323][ T7359] [ 126.619000][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 126.641443][ T5714] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 126.694306][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.694330][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.694352][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.757626][ T5714] usb 4-1: config 0 descriptor?? [ 127.420146][ T5714] koneplus 0003:1E7D:2D51.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 127.448732][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.448779][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.496403][ T7377] jffs2: notice: (7377) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.620067][ T5714] koneplus 0003:1E7D:2D51.0005: couldn't init struct koneplus_device [ 127.620095][ T5714] koneplus 0003:1E7D:2D51.0005: couldn't install mouse [ 127.649024][ T5714] koneplus 0003:1E7D:2D51.0005: probe with driver koneplus failed with error -71 [ 127.684191][ T5714] usb 4-1: USB disconnect, device number 4 [ 129.487264][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 129.487279][ T30] audit: type=1400 audit(1792370725.482:3166): avc: denied { audit_write } for pid=7414 comm="syz.5.495" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 130.188888][ T30] audit: type=1400 audit(1792370726.192:3167): avc: denied { watch watch_reads } for pid=7414 comm="syz.5.495" path="/43" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 130.925421][ T7453] netlink: 48 bytes leftover after parsing attributes in process `syz.2.508'. [ 130.959341][ T30] audit: type=1400 audit(1792370726.962:3168): avc: denied { create } for pid=7454 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 130.961896][ T30] audit: type=1400 audit(1792370726.962:3169): avc: denied { mount } for pid=7452 comm="syz.5.507" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 130.964779][ T7457] FAULT_INJECTION: forcing a failure. [ 130.964779][ T7457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.964804][ T7457] CPU: 0 UID: 0 PID: 7457 Comm: syz.0.509 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.964823][ T7457] Tainted: [L]=SOFTLOCKUP [ 130.964828][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.964836][ T7457] Call Trace: [ 130.964841][ T7457] [ 130.964846][ T7457] dump_stack_lvl+0x100/0x190 [ 130.964869][ T7457] should_fail_ex.cold+0x5/0xa [ 130.964889][ T7457] _copy_from_iter+0x1f4/0x1690 [ 130.964910][ T7457] ? kmalloc_reserve+0xf9/0x350 [ 130.964927][ T7457] ? __pfx__copy_from_iter+0x10/0x10 [ 130.964944][ T7457] ? __alloc_skb+0x4e9/0x710 [ 130.964956][ T7457] ? __alloc_skb+0x5b7/0x710 [ 130.964968][ T7457] ? __pfx___alloc_skb+0x10/0x10 [ 130.964985][ T7457] pfkey_sendmsg+0x1ce/0x840 [ 130.965006][ T7457] ____sys_sendmsg+0xa4d/0xbe0 [ 130.965023][ T7457] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 130.965041][ T7457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.965063][ T7457] ___sys_sendmsg+0x190/0x1e0 [ 130.965080][ T7457] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.965096][ T7457] ? futex_wait+0x11e/0x370 [ 130.965116][ T7457] ? find_held_lock+0x2b/0x80 [ 130.965143][ T7457] __sys_sendmsg+0x160/0x210 [ 130.965155][ T7457] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.965175][ T7457] do_syscall_64+0x123/0x790 [ 130.965193][ T7457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.965206][ T7457] RIP: 0033:0x7f9ea1b9e559 [ 130.965216][ T7457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.965229][ T7457] RSP: 002b:00007f9ea2a6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.965242][ T7457] RAX: ffffffffffffffda RBX: 00007f9ea1e25fa0 RCX: 00007f9ea1b9e559 [ 130.965249][ T7457] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 130.965256][ T7457] RBP: 00007f9ea1c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 130.965263][ T7457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.965269][ T7457] R13: 00007f9ea1e26038 R14: 00007f9ea1e25fa0 R15: 00007fffc339aab8 [ 130.965284][ T7457] [ 130.965797][ T30] audit: type=1400 audit(1792370726.962:3170): avc: denied { write } for pid=7454 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.196606][ T30] audit: type=1400 audit(1792370727.202:3171): avc: denied { search } for pid=7452 comm="syz.5.507" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 131.196642][ T30] audit: type=1400 audit(1792370727.202:3172): avc: denied { read write } for pid=7452 comm="syz.5.507" name="set_event" dev="tracefs" ino=4192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 131.196663][ T30] audit: type=1400 audit(1792370727.202:3173): avc: denied { open } for pid=7452 comm="syz.5.507" path="/45/trace/set_event" dev="tracefs" ino=4192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 131.354953][ T7453] bond1: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 131.373643][ T7453] netlink: 48 bytes leftover after parsing attributes in process `syz.2.508'. [ 131.373669][ T7453] bond1: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 131.512487][ T30] audit: type=1400 audit(1792370727.512:3174): avc: denied { create } for pid=7463 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.538640][ T30] audit: type=1400 audit(1792370727.542:3175): avc: denied { connect } for pid=7463 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.956784][ T7478] ip_tables: iptables: counters copy to user failed while replacing table [ 131.975879][ T5721] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.123267][ T5721] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 132.124129][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.124147][ T5721] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.124160][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.149682][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 132.149700][ T5721] usb 5-1: Product: syz [ 132.149709][ T5721] usb 5-1: Manufacturer: syz [ 132.149718][ T5721] usb 5-1: SerialNumber: syz [ 132.435770][ T5721] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 132.703128][ T5721] usb 5-1: USB disconnect, device number 7 [ 132.729533][ T5721] usblp0: removed [ 132.767261][ T7478] 9pnet_fd: p9_fd_create_tcp (7478): problem connecting socket to 127.0.0.1 [ 132.895303][ T7486] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 133.155144][ T7493] FAULT_INJECTION: forcing a failure. [ 133.155144][ T7493] name failslab, interval 1, probability 0, space 0, times 0 [ 133.155172][ T7493] CPU: 0 UID: 0 PID: 7493 Comm: syz.5.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.155192][ T7493] Tainted: [L]=SOFTLOCKUP [ 133.155196][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.155204][ T7493] Call Trace: [ 133.155210][ T7493] [ 133.155216][ T7493] dump_stack_lvl+0x100/0x190 [ 133.155240][ T7493] should_fail_ex.cold+0x5/0xa [ 133.155258][ T7493] should_failslab+0xc2/0x120 [ 133.155278][ T7493] __kmalloc_cache_noprof+0x91/0x6d0 [ 133.155292][ T7493] ? __genradix_ptr_alloc+0x215/0x610 [ 133.155313][ T7493] __genradix_ptr_alloc+0x215/0x610 [ 133.155334][ T7493] proc_map_files_readdir+0x356/0xb10 [ 133.155352][ T7493] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 133.155365][ T7493] ? lock_acquire+0x1d1/0x380 [ 133.155387][ T7493] ? down_read_killable+0x35d/0x520 [ 133.155399][ T7493] ? find_held_lock+0x2b/0x80 [ 133.155419][ T7493] ? __pfx_down_read_killable+0x10/0x10 [ 133.155431][ T7493] ? avc_policy_seqno+0x9/0x20 [ 133.155443][ T7493] ? selinux_file_permission+0x8f/0x6d0 [ 133.155464][ T7493] iterate_dir+0x2ba/0xc10 [ 133.155482][ T7493] __x64_sys_getdents64+0x13b/0x2c0 [ 133.155506][ T7493] ? __x64_sys_futex+0x358/0x4d0 [ 133.155527][ T7493] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 133.155544][ T7493] ? __pfx_filldir64+0x10/0x10 [ 133.155566][ T7493] do_syscall_64+0x123/0x790 [ 133.155586][ T7493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.155600][ T7493] RIP: 0033:0x7fdd1d79e559 [ 133.155612][ T7493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.155624][ T7493] RSP: 002b:00007fdd1e605028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 133.155637][ T7493] RAX: ffffffffffffffda RBX: 00007fdd1da25fa0 RCX: 00007fdd1d79e559 [ 133.155644][ T7493] RDX: 000000000000004b RSI: 0000200000000040 RDI: 0000000000000003 [ 133.155651][ T7493] RBP: 00007fdd1d835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 133.155657][ T7493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.155664][ T7493] R13: 00007fdd1da26038 R14: 00007fdd1da25fa0 R15: 00007ffc5f145698 [ 133.155680][ T7493] [ 133.471055][ T7494] xt_hashlimit: size too large, truncated to 1048576 [ 133.748471][ T5721] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.897112][ T5721] usb 4-1: Using ep0 maxpacket: 16 [ 133.898260][ T5721] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 133.900205][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.938275][ T5721] usb 4-1: config 0 descriptor?? [ 133.947015][ T5721] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 133.969532][ T5721] usb 4-1: Detected FT2233HP [ 134.089086][ T1167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.141345][ T7510] kvm: emulating exchange as write [ 134.168105][ T5721] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 134.222158][ T5721] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 134.381039][ T1167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.616093][ T1167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.729564][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.736971][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.758351][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.769579][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.772098][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.852287][ T1167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.439700][ T1167] vlan2: left allmulticast mode [ 135.439716][ T1167] geneve0: left allmulticast mode [ 135.439728][ T1167] vlan2: left promiscuous mode [ 135.439734][ T1167] geneve0: left promiscuous mode [ 135.439940][ T1167] bridge0: port 3(vlan2) entered disabled state [ 135.453754][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.490446][ T1167] bridge_slave_1: left allmulticast mode [ 135.490466][ T1167] bridge_slave_1: left promiscuous mode [ 135.490607][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.506640][ T1167] bridge_slave_0: left allmulticast mode [ 135.506660][ T1167] bridge_slave_0: left promiscuous mode [ 135.506784][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.649579][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.654714][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.654734][ T10] usb 1-1: Product: syz [ 135.654743][ T10] usb 1-1: Manufacturer: syz [ 135.654764][ T10] usb 1-1: SerialNumber: syz [ 136.175566][ T7528] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate [ 136.175849][ T7528] ftdi_sio ttyUSB0: failed to set flow control: -32 [ 136.210074][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.213852][ T7499] ftdi_sio ttyUSB0: failed to get modem status: -32 [ 136.214502][ T7499] ftdi_sio ttyUSB0: error from flowcontrol urb [ 136.216718][ T5734] usb 4-1: USB disconnect, device number 5 [ 136.254678][ T12] smbdirect: ib_dev[syz1] removed [ 136.267830][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.271091][ T1167] bond0 (unregistering): Released all slaves [ 136.275802][ T5734] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 136.276080][ T5734] ftdi_sio 4-1:0.0: device disconnected [ 136.335164][ T1167] bond1 (unregistering): Released all slaves [ 136.504482][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 136.504497][ T30] audit: type=1400 audit(1792370732.502:3182): avc: denied { write } for pid=7533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.669698][ T30] audit: type=1400 audit(1792370732.672:3183): avc: denied { setopt } for pid=7551 comm="syz.5.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.779567][ T10] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 136.779589][ T10] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 136.845638][ T30] audit: type=1400 audit(1792370732.842:3184): avc: denied { write } for pid=7554 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.887693][ T5609] Bluetooth: hci3: command tx timeout [ 136.934303][ T1167] hsr_slave_0: left promiscuous mode [ 136.946400][ T1167] hsr_slave_1: left promiscuous mode [ 136.954124][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.954138][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.010235][ T1167] veth1_macvtap: left promiscuous mode [ 137.010262][ T1167] veth0_macvtap: left promiscuous mode [ 137.010307][ T1167] veth1_vlan: left promiscuous mode [ 137.010363][ T1167] veth0_vlan: left promiscuous mode [ 137.120122][ T30] audit: type=1400 audit(1792370733.122:3185): avc: denied { read write } for pid=7558 comm="syz.3.539" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.120152][ T30] audit: type=1400 audit(1792370733.122:3186): avc: denied { open } for pid=7558 comm="syz.3.539" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.126135][ T30] audit: type=1400 audit(1792370733.122:3187): avc: denied { ioctl } for pid=7558 comm="syz.3.539" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.254537][ T30] audit: type=1400 audit(1792370733.252:3188): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 137.353946][ T30] audit: type=1326 audit(1792370733.352:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.3.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2882b9e559 code=0x7ffc0000 [ 137.391028][ T30] audit: type=1326 audit(1792370733.362:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.3.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2882b9e559 code=0x7ffc0000 [ 137.423414][ T30] audit: type=1326 audit(1792370733.422:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.3.541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2882b9e559 code=0x7ffc0000 [ 137.741120][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 137.781395][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 138.154616][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 138.222141][ T10] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 138.249045][ T10] usb 1-1: USB disconnect, device number 3 [ 138.249761][ T10] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 138.359815][ T7519] rxe_eth0 speed is unknown, defaulting to 1000 [ 138.411474][ T7519] rxe_eth0 speed is unknown, defaulting to 1000 [ 138.411877][ T7519] rxe_eth0 speed is unknown, defaulting to 1000 [ 138.607600][ T7585] netlink: 'syz.3.548': attribute type 1 has an invalid length. [ 138.806397][ T7585] bond2: (slave bridge1): making interface the new active one [ 138.806686][ T7585] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 138.897225][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.968263][ T5609] Bluetooth: hci3: command tx timeout [ 139.042017][ T7519] infiniband rxe0: set active [ 139.042052][ T5721] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.060560][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 139.063055][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.063365][ T7519] infiniband rxe0: added rxe_eth0 [ 139.064010][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 139.064034][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.064047][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.064060][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.064075][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.064097][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.190757][ T7519] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 139.190779][ T7519] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 139.190801][ T7519] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 139.315566][ T7519] RDS/IB: rxe0: added [ 139.315600][ T7519] smc: adding ib device rxe0 with port count 1 [ 139.315613][ T7519] smc: ib device rxe0 port 1 has no pnetid [ 139.315656][ T5721] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.343186][ T7519] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.367880][ T10] usb 1-1: usb_control_msg returned -32 [ 139.367906][ T10] usbtmc 1-1:16.0: can't read capabilities [ 139.738737][ T7615] tipc: Started in network mode [ 139.738754][ T7615] tipc: Node identity 4, cluster identity 4711 [ 139.738762][ T7615] tipc: Node number set to 4 [ 139.864763][ T7618] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 139.884662][ T10] usb 1-1: USB disconnect, device number 4 [ 139.959773][ T7519] rxe_eth0 speed is unknown, defaulting to 1000 [ 140.065949][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 140.227241][ T5714] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 140.262068][ T7629] syz_tun: entered allmulticast mode [ 140.290105][ T7628] syz_tun: left allmulticast mode [ 140.341839][ T7519] rxe_eth0 speed is unknown, defaulting to 1000 [ 140.378068][ T5714] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.384331][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.384354][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.384369][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 140.384382][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.384406][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.460078][ T5714] usb 5-1: config 0 descriptor?? [ 140.851724][ T7519] rxe_eth0 speed is unknown, defaulting to 1000 [ 141.044331][ T5714] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 141.048470][ T5609] Bluetooth: hci3: command tx timeout [ 141.284740][ T7652] PM: suspend entry (s2idle) [ 141.284755][ T7652] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 141.284760][ T7652] PM: suspend exit [ 141.393718][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 141.516772][ T7519] rxe_eth0 speed is unknown, defaulting to 1000 [ 141.550635][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 141.550650][ T30] audit: type=1400 audit(1792370737.552:3230): avc: denied { setopt } for pid=7661 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.603740][ T7660] xt_hashlimit: size too large, truncated to 1048576 [ 141.717246][ T5734] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.847939][ T5734] usb 1-1: device descriptor read/64, error -71 [ 141.943199][ T188] usb 5-1: USB disconnect, device number 8 [ 142.087799][ T5734] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.216822][ T30] audit: type=1400 audit(1792370738.212:3231): avc: denied { write } for pid=7663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.241097][ T5734] usb 1-1: device descriptor read/64, error -71 [ 142.347538][ T5734] usb usb1-port1: attempt power cycle [ 142.449455][ T30] audit: type=1400 audit(1792370738.452:3232): avc: denied { write } for pid=7685 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.686126][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 142.693919][ T5734] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 142.708997][ T5734] usb 1-1: device descriptor read/8, error -71 [ 142.784010][ T30] audit: type=1400 audit(1792370738.782:3233): avc: denied { map } for pid=7691 comm="syz.3.571" path="socket:[19055]" dev="sockfs" ino=19055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 142.830757][ T30] audit: type=1400 audit(1792370738.822:3234): avc: denied { cmd } for pid=7691 comm="iou-wrk-7692" path="socket:[19055]" dev="sockfs" ino=19055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 142.936768][ T7519] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.939336][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.939431][ T7519] bridge_slave_0: entered allmulticast mode [ 142.943492][ T7519] bridge_slave_0: entered promiscuous mode [ 142.952449][ T5734] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.973228][ T5734] usb 1-1: device descriptor read/8, error -71 [ 142.991976][ T7519] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.992939][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.993041][ T7519] bridge_slave_1: entered allmulticast mode [ 142.996747][ T7519] bridge_slave_1: entered promiscuous mode [ 143.058356][ T7701] FAULT_INJECTION: forcing a failure. [ 143.058356][ T7701] name failslab, interval 1, probability 0, space 0, times 0 [ 143.058382][ T7701] CPU: 0 UID: 0 PID: 7701 Comm: syz.4.573 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.058400][ T7701] Tainted: [L]=SOFTLOCKUP [ 143.058405][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.058414][ T7701] Call Trace: [ 143.058418][ T7701] [ 143.058423][ T7701] dump_stack_lvl+0x100/0x190 [ 143.058448][ T7701] should_fail_ex.cold+0x5/0xa [ 143.058467][ T7701] should_failslab+0xc2/0x120 [ 143.058485][ T7701] __kmalloc_noprof+0xfc/0x840 [ 143.058501][ T7701] ? aes_set_key_common+0x78/0xc0 [ 143.058517][ T7701] ? init_skcipher_req.constprop.0+0x9c/0x180 [ 143.058534][ T7701] init_skcipher_req.constprop.0+0x9c/0x180 [ 143.058548][ T7701] derived_key_encrypt.constprop.0+0x10f/0x6b0 [ 143.058571][ T7701] ? __pfx_derived_key_encrypt.constprop.0+0x10/0x10 [ 143.058588][ T7701] ? kasan_quarantine_put+0x104/0x240 [ 143.058607][ T7701] ? lockdep_hardirqs_on+0x7d/0x110 [ 143.058628][ T7701] ? __kasan_check_byte+0x13/0x50 [ 143.058650][ T7701] ? get_derived_key+0x11b/0x140 [ 143.058666][ T7701] encrypted_read+0x389/0x850 [ 143.058680][ T7701] ? lock_acquire+0x1d1/0x380 [ 143.058694][ T7701] ? keyctl_read_key+0x227/0x510 [ 143.058707][ T7701] ? __pfx_encrypted_read+0x10/0x10 [ 143.058720][ T7701] ? __pfx___might_resched+0x10/0x10 [ 143.058737][ T7701] ? down_read+0x13b/0x4c0 [ 143.058749][ T7701] ? __pfx_down_read+0x10/0x10 [ 143.058760][ T7701] ? keyctl_read_key+0x2ac/0x510 [ 143.058774][ T7701] ? keyctl_read_key+0x2ac/0x510 [ 143.058787][ T7701] ? keyctl_read_key+0x427/0x510 [ 143.058803][ T7701] keyctl_read_key+0x29a/0x510 [ 143.058819][ T7701] __do_sys_keyctl+0x36d/0x5a0 [ 143.058835][ T7701] do_syscall_64+0x123/0x790 [ 143.058854][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.058867][ T7701] RIP: 0033:0x7fb52779e559 [ 143.058878][ T7701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.058889][ T7701] RSP: 002b:00007fb528712028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 143.058901][ T7701] RAX: ffffffffffffffda RBX: 00007fb527a25fa0 RCX: 00007fb52779e559 [ 143.058908][ T7701] RDX: 0000200000000240 RSI: 000000003f16d965 RDI: 000000000000000b [ 143.058915][ T7701] RBP: 00007fb527835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 143.058922][ T7701] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 143.058928][ T7701] R13: 00007fb527a26038 R14: 00007fb527a25fa0 R15: 00007ffe6df4d8f8 [ 143.058945][ T7701] [ 143.080767][ T5734] usb usb1-port1: unable to enumerate USB device [ 143.127225][ T5609] Bluetooth: hci3: command tx timeout [ 143.228410][ T7701] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 143.389329][ T7519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.410421][ T7519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.515266][ T7519] team0: Port device team_slave_0 added [ 143.532381][ T7519] team0: Port device team_slave_1 added [ 143.605293][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.605309][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.605324][ T7519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.654651][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.654662][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.654676][ T7519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.781626][ T7519] hsr_slave_0: entered promiscuous mode [ 143.791686][ T7519] hsr_slave_1: entered promiscuous mode [ 144.024015][ T7714] ref_ctr_offset mismatch. inode: 0x158 offset: 0x0 ref_ctr_offset(old): 0x40000057f0006 ref_ctr_offset(new): 0x1000000210800 [ 144.135932][ T7717] netlink: 'syz.3.577': attribute type 1 has an invalid length. [ 144.177861][ T30] audit: type=1400 audit(1792370740.182:3235): avc: denied { sqpoll } for pid=7719 comm="syz.5.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 144.219431][ T7717] bond3: entered promiscuous mode [ 144.220671][ T7717] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.378552][ T7717] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.385134][ T7717] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 144.385151][ T7717] bond3: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 144.464358][ T7717] bond3: (slave ipip0): making interface the new active one [ 144.464379][ T7717] ipip0: entered promiscuous mode [ 144.501196][ T7717] bond3: (slave ipip0): Enslaving as an active interface with an up link [ 144.565913][ T30] audit: type=1400 audit(1792370740.562:3236): avc: denied { read write } for pid=7729 comm="syz.0.579" name="sg0" dev="devtmpfs" ino=1035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 144.565948][ T30] audit: type=1400 audit(1792370740.562:3237): avc: denied { open } for pid=7729 comm="syz.0.579" path="/dev/sg0" dev="devtmpfs" ino=1035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 144.821016][ T7519] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 144.848448][ T7519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.851203][ T7519] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 144.882208][ T7519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.886497][ T7519] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 144.921108][ T7519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.921565][ T7519] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 144.957430][ T7519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.214050][ T7519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.261667][ T7519] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.293350][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.293400][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.321045][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.321094][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.641603][ T30] audit: type=1400 audit(1792370741.642:3238): avc: denied { write } for pid=7732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.916547][ T30] audit: type=1400 audit(1792370741.912:3239): avc: denied { write } for pid=7766 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.634094][ T7519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.956945][ T7791] lo: entered allmulticast mode [ 147.005869][ T7791] lo: left allmulticast mode [ 147.147846][ T7794] lo: entered allmulticast mode [ 147.222265][ T7793] lo: left allmulticast mode [ 147.235278][ T30] audit: type=1400 audit(1792370743.232:3240): avc: denied { ioctl } for pid=7796 comm="syz.0.587" path="socket:[19693]" dev="sockfs" ino=19693 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.489269][ T7519] veth0_vlan: entered promiscuous mode [ 147.515985][ T7519] veth1_vlan: entered promiscuous mode [ 147.604506][ T7519] veth0_macvtap: entered promiscuous mode [ 147.631567][ T7519] veth1_macvtap: entered promiscuous mode [ 147.690255][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.720828][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.757222][ T4300] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.757465][ T4300] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.757552][ T4300] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.757571][ T4300] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.090185][ T7753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.090203][ T7753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.222890][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.222905][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.465004][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.594'. [ 148.516768][ T7816] bond1: entered promiscuous mode [ 148.529042][ T7816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.651831][ T7816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.652029][ T7816] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 148.678222][ T7816] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 148.981817][ T30] audit: type=1400 audit(1792370744.982:3241): avc: denied { setopt } for pid=7834 comm="syz.5.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.161060][ T7841] TCP: TCP_TX_DELAY enabled [ 149.213969][ T7843] FAULT_INJECTION: forcing a failure. [ 149.213969][ T7843] name failslab, interval 1, probability 0, space 0, times 0 [ 149.213999][ T7843] CPU: 0 UID: 0 PID: 7843 Comm: syz.5.601 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.214021][ T7843] Tainted: [L]=SOFTLOCKUP [ 149.214027][ T7843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 149.214035][ T7843] Call Trace: [ 149.214040][ T7843] [ 149.214046][ T7843] dump_stack_lvl+0x100/0x190 [ 149.214071][ T7843] should_fail_ex.cold+0x5/0xa [ 149.214088][ T7843] should_failslab+0xc2/0x120 [ 149.214108][ T7843] kmem_cache_alloc_noprof+0x92/0x6a0 [ 149.214126][ T7843] ? add_lock_to_list+0x9d/0x1d0 [ 149.214139][ T7843] ? fib6_add_1+0x33b/0x1700 [ 149.214153][ T7843] fib6_add_1+0x33b/0x1700 [ 149.214169][ T7843] fib6_add+0x1c5/0x1eb0 [ 149.214182][ T7843] ? lock_acquire+0x1d1/0x380 [ 149.214195][ T7843] ? do_raw_spin_lock+0x128/0x260 [ 149.214210][ T7843] ? __pfx_fib6_add+0x10/0x10 [ 149.214220][ T7843] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 149.214240][ T7843] ip6_ins_rt+0xb5/0x110 [ 149.214253][ T7843] ? __pfx_ip6_ins_rt+0x10/0x10 [ 149.214268][ T7843] ? __local_bh_enable_ip+0xa5/0x120 [ 149.214282][ T7843] ? lockdep_hardirqs_on+0x7d/0x110 [ 149.214303][ T7843] __ipv6_dev_ac_inc+0x912/0xdb0 [ 149.214320][ T7843] ipv6_sock_ac_join+0x67c/0xd80 [ 149.214334][ T7843] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 149.214345][ T7843] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 149.214360][ T7843] ? __local_bh_enable_ip+0xa5/0x120 [ 149.214373][ T7843] ? lockdep_hardirqs_on+0x7d/0x110 [ 149.214391][ T7843] do_ipv6_setsockopt+0x3874/0x44a0 [ 149.214404][ T7843] ? avc_has_perm_noaudit+0x56/0x470 [ 149.214420][ T7843] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 149.214435][ T7843] ? avc_has_perm_noaudit+0x145/0x470 [ 149.214449][ T7843] ? avc_has_perm+0x135/0x1e0 [ 149.214461][ T7843] ? __pfx_avc_has_perm+0x10/0x10 [ 149.214476][ T7843] ? futex_wait+0x11e/0x370 [ 149.214491][ T7843] ? sock_has_perm+0x25a/0x2f0 [ 149.214506][ T7843] ? __pfx_sock_has_perm+0x10/0x10 [ 149.214528][ T7843] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 149.214551][ T7843] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 149.214576][ T7843] ? ipv6_setsockopt+0xcb/0x170 [ 149.214590][ T7843] ipv6_setsockopt+0xcb/0x170 [ 149.214606][ T7843] tcp_setsockopt+0xa7/0x100 [ 149.214620][ T7843] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 149.214636][ T7843] do_sock_setsockopt+0xf3/0x1d0 [ 149.214652][ T7843] __sys_setsockopt+0x195/0x220 [ 149.214666][ T7843] __x64_sys_setsockopt+0xbd/0x160 [ 149.214676][ T7843] ? do_syscall_64+0xae/0x790 [ 149.214692][ T7843] ? lockdep_hardirqs_on+0x7d/0x110 [ 149.214708][ T7843] do_syscall_64+0x123/0x790 [ 149.214728][ T7843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.214741][ T7843] RIP: 0033:0x7fdd1d79e559 [ 149.214753][ T7843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.214764][ T7843] RSP: 002b:00007fdd1e605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.214777][ T7843] RAX: ffffffffffffffda RBX: 00007fdd1da25fa0 RCX: 00007fdd1d79e559 [ 149.214784][ T7843] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 149.214791][ T7843] RBP: 00007fdd1d835ab8 R08: 0000000000000020 R09: 0000000000000000 [ 149.214797][ T7843] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 149.214804][ T7843] R13: 00007fdd1da26038 R14: 00007fdd1da25fa0 R15: 00007ffc5f145698 [ 149.214819][ T7843] [ 149.646157][ T30] audit: type=1400 audit(1792370745.642:3242): avc: denied { getopt } for pid=7846 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.671077][ T7847] lo speed is unknown, defaulting to 1000 [ 149.671113][ T7847] lo speed is unknown, defaulting to 1000 [ 149.671466][ T7847] lo speed is unknown, defaulting to 1000 [ 149.671885][ T7847] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 149.671906][ T7847] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 149.671933][ T7847] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 149.760883][ T7847] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 149.792528][ T7847] lo speed is unknown, defaulting to 1000 [ 149.805326][ T7847] lo speed is unknown, defaulting to 1000 [ 149.822495][ T7847] lo speed is unknown, defaulting to 1000 [ 149.823261][ T7847] lo speed is unknown, defaulting to 1000 [ 149.841150][ T7847] lo speed is unknown, defaulting to 1000 [ 150.245139][ T30] audit: type=1400 audit(1792370746.242:3243): avc: denied { write } for pid=7865 comm="syz.6.610" name="video1" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 150.397354][ T5714] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.609130][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 150.609159][ T5714] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 150.609763][ T5714] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 150.609784][ T5714] usb 1-1: can't read configurations, error -71 [ 151.027694][ T30] audit: type=1400 audit(1792370747.032:3244): avc: denied { read write } for pid=7875 comm="syz.6.613" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 151.027729][ T30] audit: type=1400 audit(1792370747.032:3245): avc: denied { open } for pid=7875 comm="syz.6.613" path="/5/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 151.034682][ T30] audit: type=1400 audit(1792370747.032:3246): avc: denied { ioctl } for pid=7875 comm="syz.6.613" path="/5/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 151.154667][ T7878] device-mapper: table: 248:0: mirror: Too few mirror arguments (-EINVAL) [ 151.154685][ T7878] device-mapper: ioctl: error adding target to table [ 151.380622][ T7888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.616'. [ 151.429682][ T30] audit: type=1400 audit(1792370747.432:3247): avc: denied { write } for pid=7889 comm="syz.5.617" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 151.429714][ T30] audit: type=1400 audit(1792370747.432:3248): avc: denied { open } for pid=7889 comm="syz.5.617" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 151.431880][ T30] audit: type=1400 audit(1792370747.432:3249): avc: denied { ioctl } for pid=7889 comm="syz.5.617" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 151.577142][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 152.977428][ T5721] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.127618][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 153.128127][ T5721] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 153.128678][ T5721] usb 5-1: config 0 has no interfaces? [ 153.129178][ T5721] usb 5-1: config 0 has no interfaces? [ 153.130726][ T5721] usb 5-1: config 0 has no interfaces? [ 153.132583][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.132597][ T5721] usb 5-1: Product: syz [ 153.132606][ T5721] usb 5-1: Manufacturer: syz [ 153.132615][ T5721] usb 5-1: SerialNumber: syz [ 153.201063][ T5721] usb 5-1: config 0 descriptor?? [ 153.412466][ T7934] FAULT_INJECTION: forcing a failure. [ 153.412466][ T7934] name failslab, interval 1, probability 0, space 0, times 0 [ 153.412491][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.4.634 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.412516][ T7934] Tainted: [L]=SOFTLOCKUP [ 153.412521][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.412528][ T7934] Call Trace: [ 153.412533][ T7934] [ 153.412538][ T7934] dump_stack_lvl+0x100/0x190 [ 153.412561][ T7934] should_fail_ex.cold+0x5/0xa [ 153.412578][ T7934] should_failslab+0xc2/0x120 [ 153.412596][ T7934] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 153.412614][ T7934] ? __lock_acquire+0x5c0/0x1f40 [ 153.412627][ T7934] ? kstrdup_const+0x63/0x80 [ 153.412642][ T7934] kstrdup+0x51/0xe0 [ 153.412654][ T7934] kstrdup_const+0x63/0x80 [ 153.412666][ T7934] __kernfs_new_node+0x9b/0xa10 [ 153.412679][ T7934] ? module_add_driver+0x12f/0x420 [ 153.412696][ T7934] ? __pfx___kernfs_new_node+0x10/0x10 [ 153.412710][ T7934] ? lock_acquire+0x1d1/0x380 [ 153.412723][ T7934] ? kernfs_root+0x23/0x2a0 [ 153.412734][ T7934] ? find_held_lock+0x2b/0x80 [ 153.412754][ T7934] ? kernfs_root+0xee/0x2a0 [ 153.412765][ T7934] ? kernfs_root+0xee/0x2a0 [ 153.412781][ T7934] kernfs_new_node+0x117/0x150 [ 153.412796][ T7934] kernfs_create_link+0xcc/0x240 [ 153.412813][ T7934] sysfs_do_create_link_sd+0x90/0x140 [ 153.412826][ T7934] sysfs_create_link+0x61/0xc0 [ 153.412837][ T7934] module_add_driver+0x1c0/0x420 [ 153.412853][ T7934] bus_add_driver+0x34a/0x5b0 [ 153.412873][ T7934] driver_register+0x1e2/0x360 [ 153.412884][ T7934] ? rcu_is_watching+0x13/0xc0 [ 153.412902][ T7934] usb_gadget_register_driver_owner+0x132/0x210 [ 153.412922][ T7934] raw_ioctl+0x1a85/0x2b80 [ 153.412942][ T7934] ? __pfx_raw_ioctl+0x10/0x10 [ 153.412957][ T7934] ? selinux_file_ioctl+0x13b/0x290 [ 153.412974][ T7934] ? selinux_file_ioctl+0xb6/0x290 [ 153.412991][ T7934] ? __pfx_raw_ioctl+0x10/0x10 [ 153.413007][ T7934] __x64_sys_ioctl+0x18e/0x210 [ 153.413022][ T7934] do_syscall_64+0x123/0x790 [ 153.413041][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.413053][ T7934] RIP: 0033:0x7fb52779e1eb [ 153.413062][ T7934] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 153.413074][ T7934] RSP: 002b:00007fb52870ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.413087][ T7934] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb52779e1eb [ 153.413095][ T7934] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 153.413101][ T7934] RBP: 00007fb528710fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 153.413108][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.413115][ T7934] R13: 0000200000000040 R14: 0000000000000005 R15: 0000000000000868 [ 153.413130][ T7934] [ 153.413204][ T7934] bus_add_driver: failed to create module links for raw-gadget.2 [ 153.413244][ T7934] UDC core: USB Raw Gadget: driver registration failed: -12 [ 153.413255][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 153.416248][ T5714] usb 5-1: USB disconnect, device number 9 [ 153.472980][ T5721] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 153.643195][ T5721] usb 7-1: Using ep0 maxpacket: 32 [ 153.783186][ T5721] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 153.786886][ T5721] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 153.786911][ T5721] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 153.786932][ T5721] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 153.786948][ T5721] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 153.786964][ T5721] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 153.786979][ T5721] usb 7-1: config 0 interface 0 has no altsetting 0 [ 153.870420][ T5721] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 153.870438][ T5721] usb 7-1: Product: syz [ 153.870448][ T5721] usb 7-1: Manufacturer: syz [ 153.870457][ T5721] usb 7-1: SerialNumber: syz [ 153.911628][ T5721] usb 7-1: config 0 descriptor?? [ 153.913455][ T7946] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 153.915235][ T5721] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 153.950131][ T5721] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 154.254946][ T5721] usb 7-1: USB disconnect, device number 2 [ 154.266094][ T5721] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 154.520131][ T7968] rxe_eth0 speed is unknown, defaulting to 1000 [ 154.591942][ T7968] lo speed is unknown, defaulting to 1000 [ 154.759313][ T30] audit: type=1400 audit(1792370750.762:3250): avc: denied { write } for pid=7967 comm="syz.4.643" name="functions" dev="configfs" ino=18758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.763020][ T30] audit: type=1400 audit(1792370750.762:3251): avc: denied { write } for pid=7967 comm="syz.4.643" name="c.1" dev="configfs" ino=18764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.763053][ T30] audit: type=1400 audit(1792370750.762:3252): avc: denied { write } for pid=7967 comm="syz.4.643" name="c.1" dev="configfs" ino=18764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.976039][ T30] audit: type=1400 audit(1792370750.972:3253): avc: denied { write } for pid=7955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.134652][ T7980] FAULT_INJECTION: forcing a failure. [ 155.134652][ T7980] name failslab, interval 1, probability 0, space 0, times 0 [ 155.134676][ T7980] CPU: 0 UID: 0 PID: 7980 Comm: syz.6.646 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.134694][ T7980] Tainted: [L]=SOFTLOCKUP [ 155.134699][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 155.134707][ T7980] Call Trace: [ 155.134712][ T7980] [ 155.134718][ T7980] dump_stack_lvl+0x100/0x190 [ 155.134741][ T7980] should_fail_ex.cold+0x5/0xa [ 155.134760][ T7980] should_failslab+0xc2/0x120 [ 155.134781][ T7980] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 155.134797][ T7980] ? bus_notify+0x56/0x80 [ 155.134815][ T7980] ? device_add+0x1169/0x1970 [ 155.134826][ T7980] ? iommu_mock_device_add+0x7c/0xb0 [ 155.134839][ T7980] ? kstrdup_const+0x63/0x80 [ 155.134855][ T7980] kstrdup+0x51/0xe0 [ 155.134867][ T7980] kstrdup_const+0x63/0x80 [ 155.134879][ T7980] __kernfs_new_node+0x9b/0xa10 [ 155.134896][ T7980] ? __pfx___kernfs_new_node+0x10/0x10 [ 155.134910][ T7980] ? lock_acquire+0x1d1/0x380 [ 155.134924][ T7980] ? kernfs_root+0x23/0x2a0 [ 155.134935][ T7980] ? find_held_lock+0x2b/0x80 [ 155.134952][ T7980] ? kernfs_root+0xee/0x2a0 [ 155.134962][ T7980] ? kernfs_root+0xee/0x2a0 [ 155.134977][ T7980] kernfs_create_dir_ns+0xa6/0x2b0 [ 155.134994][ T7980] sysfs_create_dir_ns+0x13a/0x2b0 [ 155.135006][ T7980] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 155.135017][ T7980] ? find_held_lock+0x2b/0x80 [ 155.135034][ T7980] ? kobject_add_internal+0x25f/0x930 [ 155.135048][ T7980] ? kobject_add_internal+0x25f/0x930 [ 155.135062][ T7980] ? do_raw_spin_unlock+0x145/0x1e0 [ 155.135079][ T7980] kobject_add_internal+0x2c8/0x930 [ 155.135094][ T7980] kobject_init_and_add+0x121/0x180 [ 155.135108][ T7980] ? __pfx_kobject_init_and_add+0x10/0x10 [ 155.135125][ T7980] ? lockdep_init_map_type+0x5c/0x250 [ 155.135140][ T7980] ? lockdep_init_map_type+0x5c/0x250 [ 155.135156][ T7980] iommu_group_alloc+0x229/0x4a0 [ 155.135169][ T7980] __iommu_probe_device+0x3b1/0x1550 [ 155.135185][ T7980] ? __pfx___iommu_probe_device+0x10/0x10 [ 155.135200][ T7980] ? __pfx___might_resched+0x10/0x10 [ 155.135215][ T7980] iommu_probe_device+0x28/0x130 [ 155.135229][ T7980] iommu_bus_notifier+0x5b/0x110 [ 155.135244][ T7980] notifier_call_chain+0x99/0x3f0 [ 155.135263][ T7980] blocking_notifier_call_chain+0x69/0xa0 [ 155.135282][ T7980] bus_notify+0x56/0x80 [ 155.135298][ T7980] device_add+0x1169/0x1970 [ 155.135312][ T7980] ? __pfx_device_add+0x10/0x10 [ 155.135325][ T7980] ? kobject_get+0xbb/0x150 [ 155.135336][ T7980] ? __pfx_software_node_get+0x10/0x10 [ 155.135352][ T7980] ? software_node_get+0x68/0x90 [ 155.135367][ T7980] ? fwnode_handle_get+0x97/0xd0 [ 155.135381][ T7980] iommu_mock_device_add+0x7c/0xb0 [ 155.135394][ T7980] iommufd_test+0x3038/0x6600 [ 155.135416][ T7980] ? __lock_acquire+0x5c0/0x1f40 [ 155.135430][ T7980] ? __lock_acquire+0x5c0/0x1f40 [ 155.135443][ T7980] ? __pfx_iommufd_test+0x10/0x10 [ 155.135461][ T7980] ? tomoyo_path_number_perm+0x188/0x580 [ 155.135480][ T7980] ? lock_acquire+0x1d1/0x380 [ 155.135494][ T7980] ? __might_fault+0xc5/0x140 [ 155.135508][ T7980] ? find_held_lock+0x2b/0x80 [ 155.135527][ T7980] ? __might_fault+0xc5/0x140 [ 155.135547][ T7980] iommufd_fops_ioctl+0x358/0x520 [ 155.135560][ T7980] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 155.135571][ T7980] ? __fget_files+0x34/0x3d0 [ 155.135595][ T7980] ? selinux_file_ioctl+0x13b/0x290 [ 155.135611][ T7980] ? selinux_file_ioctl+0xb6/0x290 [ 155.135628][ T7980] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 155.135647][ T7980] __x64_sys_ioctl+0x18e/0x210 [ 155.135665][ T7980] do_syscall_64+0x123/0x790 [ 155.135686][ T7980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.135699][ T7980] RIP: 0033:0x7fd553f9e559 [ 155.135711][ T7980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.135722][ T7980] RSP: 002b:00007fd554f24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.135734][ T7980] RAX: ffffffffffffffda RBX: 00007fd554225fa0 RCX: 00007fd553f9e559 [ 155.135744][ T7980] RDX: 00002000000009c0 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 155.135752][ T7980] RBP: 00007fd554035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 155.135760][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.135767][ T7980] R13: 00007fd554226038 R14: 00007fd554225fa0 R15: 00007ffde31e40b8 [ 155.135786][ T7980] [ 155.324238][ T7980] kobject: kobject_add_internal failed for 0 (error: -12 parent: iommu_groups) [ 155.459519][ T5721] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 155.656045][ T5721] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 155.673124][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.673147][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.673167][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.766912][ T5721] usb 1-1: config 0 descriptor?? [ 155.813383][ T30] audit: type=1400 audit(1792370751.812:3254): avc: denied { write } for pid=7988 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.209462][ T5721] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 156.209492][ T5721] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 156.209505][ T5721] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 156.209518][ T5721] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 156.209532][ T5721] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 156.209544][ T5721] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 156.209557][ T5721] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 156.300144][ T5721] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 156.410142][ T5721] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 156.754804][ T8014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.905558][ T30] audit: type=1400 audit(1792370752.902:3255): avc: denied { write } for pid=7997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.028930][ T30] audit: type=1400 audit(1792370753.032:3256): avc: denied { execute_no_trans } for pid=8025 comm="syz.5.658" path="/77/file2" dev="tmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 157.063674][ T7984] cp2112 0003:10C4:EA90.0007: Error starting transaction: -38 [ 157.073890][ T5721] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 157.096135][ T5721] usb 1-1: USB disconnect, device number 11 [ 157.197152][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 157.237891][ T8026] FAULT_INJECTION: forcing a failure. [ 157.237891][ T8026] name failslab, interval 1, probability 0, space 0, times 0 [ 157.237920][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.5.658 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.237938][ T8026] Tainted: [L]=SOFTLOCKUP [ 157.237942][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.237950][ T8026] Call Trace: [ 157.237955][ T8026] [ 157.237961][ T8026] dump_stack_lvl+0x100/0x190 [ 157.237985][ T8026] should_fail_ex.cold+0x5/0xa [ 157.238003][ T8026] should_failslab+0xc2/0x120 [ 157.238021][ T8026] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 157.238040][ T8026] ? kasprintf+0xc7/0x100 [ 157.238062][ T8026] kvasprintf+0xbc/0x150 [ 157.238078][ T8026] ? __pfx_kvasprintf+0x10/0x10 [ 157.238100][ T8026] kasprintf+0xc7/0x100 [ 157.238118][ T8026] ? __pfx_kasprintf+0x10/0x10 [ 157.238137][ T8026] ? find_held_lock+0x2b/0x80 [ 157.238154][ T8026] ? simple_xattr_alloc+0x6c/0xd0 [ 157.238172][ T8026] shmem_initxattrs+0x1b8/0x650 [ 157.238190][ T8026] security_inode_init_security+0x242/0x370 [ 157.238204][ T8026] ? __pfx_shmem_initxattrs+0x10/0x10 [ 157.238219][ T8026] ? __pfx_security_inode_init_security+0x10/0x10 [ 157.238237][ T8026] shmem_mknod+0x2ce/0x480 [ 157.238251][ T8026] ? __pfx_may_create+0x10/0x10 [ 157.238269][ T8026] ? __pfx_shmem_mknod+0x10/0x10 [ 157.238285][ T8026] ? inode_permission+0x374/0x620 [ 157.238300][ T8026] shmem_mkdir+0x31/0x80 [ 157.238316][ T8026] vfs_mkdir+0x364/0x850 [ 157.238331][ T8026] filename_mkdirat+0x48b/0x5e0 [ 157.238353][ T8026] ? __pfx_filename_mkdirat+0x10/0x10 [ 157.238370][ T8026] ? strncpy_from_user+0x19d/0x2d0 [ 157.238390][ T8026] ? do_getname+0x191/0x390 [ 157.238403][ T8026] __x64_sys_mkdirat+0x89/0xc0 [ 157.238420][ T8026] do_syscall_64+0x123/0x790 [ 157.238441][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.238453][ T8026] RIP: 0033:0x7fdd1d79e559 [ 157.238463][ T8026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.238482][ T8026] RSP: 002b:00007fdd1e605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 157.238495][ T8026] RAX: ffffffffffffffda RBX: 00007fdd1da25fa0 RCX: 00007fdd1d79e559 [ 157.238503][ T8026] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 157.238512][ T8026] RBP: 00007fdd1d835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 157.238520][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.238528][ T8026] R13: 00007fdd1da26038 R14: 00007fdd1da25fa0 R15: 00007ffc5f145698 [ 157.238546][ T8026] [ 157.361109][ T30] audit: type=1400 audit(1792370753.362:3257): avc: denied { write } for pid=8029 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.424011][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 157.461488][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 157.588748][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.588778][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.592517][ T9] usb 5-1: config 0 descriptor?? [ 157.826385][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 159.495310][ T9] usb 5-1: USB disconnect, device number 10 [ 159.817207][ T8064] netlink: 'syz.6.668': attribute type 1 has an invalid length. [ 159.817226][ T8064] netlink: 'syz.6.668': attribute type 1 has an invalid length. [ 159.817234][ T8064] netlink: 196 bytes leftover after parsing attributes in process `syz.6.668'. [ 159.817242][ T8064] netlink: 'syz.6.668': attribute type 1 has an invalid length. [ 159.868383][ T30] audit: type=1400 audit(1792370755.872:3258): avc: denied { write } for pid=8037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.198814][ T30] audit: type=1400 audit(1792370756.202:3259): avc: denied { write } for pid=8072 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.510852][ T30] audit: type=1400 audit(1792370756.512:3260): avc: denied { cmd } for pid=8070 comm="syz.6.670" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 160.583194][ T8083] FAULT_INJECTION: forcing a failure. [ 160.583194][ T8083] name failslab, interval 1, probability 0, space 0, times 0 [ 160.583224][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.5.673 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.583244][ T8083] Tainted: [L]=SOFTLOCKUP [ 160.583250][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.583258][ T8083] Call Trace: [ 160.583263][ T8083] [ 160.583270][ T8083] dump_stack_lvl+0x100/0x190 [ 160.583295][ T8083] should_fail_ex.cold+0x5/0xa [ 160.583314][ T8083] should_failslab+0xc2/0x120 [ 160.583335][ T8083] __kmalloc_cache_noprof+0x91/0x6d0 [ 160.583353][ T8083] ? create_filter_start.constprop.0+0x1c4/0x310 [ 160.583371][ T8083] create_filter_start.constprop.0+0x1c4/0x310 [ 160.583389][ T8083] create_filter+0xb5/0x210 [ 160.583404][ T8083] ? __pfx_create_filter+0x10/0x10 [ 160.583418][ T8083] ? __pfx___mutex_lock+0x10/0x10 [ 160.583435][ T8083] ? __might_fault+0xc5/0x140 [ 160.583447][ T8083] ? find_held_lock+0x2b/0x80 [ 160.583467][ T8083] apply_event_filter+0x220/0x500 [ 160.583482][ T8083] ? __pfx_apply_event_filter+0x10/0x10 [ 160.583511][ T8083] event_filter_write+0x16d/0x290 [ 160.583532][ T8083] vfs_write+0x2aa/0x1050 [ 160.583548][ T8083] ? __pfx_event_filter_write+0x10/0x10 [ 160.583567][ T8083] ? lock_acquire+0x1d1/0x380 [ 160.583581][ T8083] ? __fget_files+0x34/0x3d0 [ 160.583599][ T8083] ? __pfx_vfs_write+0x10/0x10 [ 160.583612][ T8083] ? find_held_lock+0x2b/0x80 [ 160.583632][ T8083] ? __fget_files+0x215/0x3d0 [ 160.583652][ T8083] ? __fget_files+0x21f/0x3d0 [ 160.583674][ T8083] ksys_write+0x12a/0x250 [ 160.583690][ T8083] ? __pfx_ksys_write+0x10/0x10 [ 160.583709][ T8083] do_syscall_64+0x123/0x790 [ 160.583727][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.583739][ T8083] RIP: 0033:0x7fdd1d79e559 [ 160.583750][ T8083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.583761][ T8083] RSP: 002b:00007fdd1e605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.583773][ T8083] RAX: ffffffffffffffda RBX: 00007fdd1da25fa0 RCX: 00007fdd1d79e559 [ 160.583781][ T8083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 160.583787][ T8083] RBP: 00007fdd1d835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 160.583794][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.583801][ T8083] R13: 00007fdd1da26038 R14: 00007fdd1da25fa0 R15: 00007ffc5f145698 [ 160.583818][ T8083] [ 161.375059][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.5.678'. [ 161.621313][ T30] audit: type=1400 audit(1792370757.622:3261): avc: denied { bind } for pid=8115 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.753596][ T30] audit: type=1400 audit(1792370757.752:3262): avc: denied { write } for pid=8084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.099417][ T30] audit: type=1400 audit(1792370758.102:3263): avc: denied { write } for pid=8125 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.319335][ T30] audit: type=1400 audit(1792370758.322:3264): avc: denied { mount } for pid=8131 comm="syz.0.686" name="/" dev="hugetlbfs" ino=21574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 162.448191][ T8132] overlayfs: failed to resolve './file1': -2 [ 162.571409][ T8143] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 162.571476][ T8143] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 162.600366][ T8143] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 162.600422][ T8143] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 162.636997][ T8143] hsr_slave_0: left promiscuous mode [ 162.650953][ T8143] hsr_slave_1: left promiscuous mode [ 162.756215][ T8149] ip_tables: iptables: counters copy to user failed while replacing table [ 162.961971][ T8151] netlink: 'syz.5.689': attribute type 2 has an invalid length. [ 163.031811][ T30] audit: type=1400 audit(1792370759.032:3265): avc: denied { ioctl } for pid=8154 comm="syz.4.692" path="socket:[21633]" dev="sockfs" ino=21633 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 163.068768][ T30] audit: type=1400 audit(1792370759.072:3266): avc: denied { write } for pid=8154 comm="syz.4.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 163.926886][ T30] audit: type=1400 audit(1792370759.922:3267): avc: denied { getopt } for pid=8179 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 164.431109][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 164.687684][ T188] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 164.838279][ T188] usb 6-1: Using ep0 maxpacket: 32 [ 164.838851][ T188] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 164.842228][ T188] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 164.842247][ T188] usb 6-1: config 0 has no interface number 0 [ 164.842268][ T188] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.842284][ T188] usb 6-1: config 0 interface 85 has no altsetting 0 [ 164.901454][ T188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.901473][ T188] usb 6-1: Product: syz [ 164.901482][ T188] usb 6-1: Manufacturer: syz [ 164.901492][ T188] usb 6-1: SerialNumber: syz [ 164.906266][ T188] usb 6-1: config 0 descriptor?? [ 165.271902][ T30] audit: type=1400 audit(1792370761.272:3268): avc: denied { unmount } for pid=7519 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 165.555939][ T188] appletouch 6-1:0.85: Geyser mode initialized. [ 165.581488][ T188] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input8 [ 165.768400][ T188] usb 6-1: USB disconnect, device number 2 [ 165.845160][ T188] appletouch 6-1:0.85: input: appletouch disconnected [ 165.957720][ T5714] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 166.111604][ T5714] usb 7-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 166.113845][ T5714] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.113872][ T5714] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 166.113888][ T5714] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.113911][ T5714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.167600][ T5714] usb 7-1: config 0 descriptor?? [ 166.188969][ T5714] appletouch 7-1:0.0: Could not find int-in endpoint [ 166.188988][ T5714] appletouch 7-1:0.0: probe with driver appletouch failed with error -5 [ 166.195887][ T5714] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 166.358063][ T8243] FAULT_INJECTION: forcing a failure. [ 166.358063][ T8243] name failslab, interval 1, probability 0, space 0, times 0 [ 166.358092][ T8243] CPU: 0 UID: 0 PID: 8243 Comm: syz.0.720 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.358111][ T8243] Tainted: [L]=SOFTLOCKUP [ 166.358116][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 166.358124][ T8243] Call Trace: [ 166.358129][ T8243] [ 166.358134][ T8243] dump_stack_lvl+0x100/0x190 [ 166.358158][ T8243] should_fail_ex.cold+0x5/0xa [ 166.358177][ T8243] should_failslab+0xc2/0x120 [ 166.358197][ T8243] __kmalloc_noprof+0xfc/0x840 [ 166.358214][ T8243] ? sock_kmalloc+0x111/0x170 [ 166.358232][ T8243] sock_kmalloc+0x111/0x170 [ 166.358249][ T8243] ip6_mc_source+0xff0/0x18a0 [ 166.358276][ T8243] do_ipv6_mcast_group_source+0x196/0x270 [ 166.358294][ T8243] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 166.358309][ T8243] ? __lock_acquire+0x5c0/0x1f40 [ 166.358340][ T8243] ? __local_bh_enable_ip+0xa5/0x120 [ 166.358354][ T8243] ? lockdep_hardirqs_on+0x7d/0x110 [ 166.358383][ T8243] do_ipv6_setsockopt+0x1fb5/0x44a0 [ 166.358398][ T8243] ? avc_has_perm_noaudit+0x56/0x470 [ 166.358417][ T8243] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 166.358433][ T8243] ? avc_has_perm_noaudit+0x145/0x470 [ 166.358449][ T8243] ? avc_has_perm+0x135/0x1e0 [ 166.358464][ T8243] ? __pfx_avc_has_perm+0x10/0x10 [ 166.358485][ T8243] ? futex_wait+0x11e/0x370 [ 166.358501][ T8243] ? sock_has_perm+0x25a/0x2f0 [ 166.358517][ T8243] ? __pfx_sock_has_perm+0x10/0x10 [ 166.358534][ T8243] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 166.358555][ T8243] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 166.358579][ T8243] ? ipv6_setsockopt+0xcb/0x170 [ 166.358593][ T8243] ipv6_setsockopt+0xcb/0x170 [ 166.358609][ T8243] tcp_setsockopt+0xa7/0x100 [ 166.358621][ T8243] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 166.358636][ T8243] do_sock_setsockopt+0xf3/0x1d0 [ 166.358652][ T8243] __sys_setsockopt+0x195/0x220 [ 166.358667][ T8243] __x64_sys_setsockopt+0xbd/0x160 [ 166.358677][ T8243] ? do_syscall_64+0xae/0x790 [ 166.358693][ T8243] ? lockdep_hardirqs_on+0x7d/0x110 [ 166.358709][ T8243] do_syscall_64+0x123/0x790 [ 166.358727][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.358739][ T8243] RIP: 0033:0x7f9ea1b9e559 [ 166.358749][ T8243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.358761][ T8243] RSP: 002b:00007f9ea2a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.358774][ T8243] RAX: ffffffffffffffda RBX: 00007f9ea1e25fa0 RCX: 00007f9ea1b9e559 [ 166.358781][ T8243] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000004 [ 166.358788][ T8243] RBP: 00007f9ea1c35ab8 R08: 0000000000000108 R09: 0000000000000000 [ 166.358795][ T8243] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 166.358801][ T8243] R13: 00007f9ea1e26038 R14: 00007f9ea1e25fa0 R15: 00007fffc339aab8 [ 166.358817][ T8243] [ 166.790325][ T8222] netlink: 'syz.6.716': attribute type 4 has an invalid length. [ 166.862869][ T9] usb 7-1: USB disconnect, device number 3 [ 166.882689][ T8248] fscrypt (sda1, inode 1262): Direct key flag not allowed with different contents and filenames modes [ 167.075725][ T8254] jffs2: notice: (8254) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 167.132516][ T30] audit: type=1400 audit(1792370763.132:3269): avc: denied { write } for pid=8252 comm="syz.5.723" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.167911][ T30] audit: type=1400 audit(1792370763.172:3270): avc: denied { add_name } for pid=8252 comm="syz.5.723" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.169686][ T30] audit: type=1400 audit(1792370763.172:3271): avc: denied { create } for pid=8252 comm="syz.5.723" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 167.258983][ T30] audit: type=1400 audit(1792370763.262:3272): avc: denied { read write open } for pid=8252 comm="syz.5.723" path="/87/file0/file0" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 167.394191][ T30] audit: type=1400 audit(1792370763.392:3273): avc: denied { bind } for pid=8257 comm="syz.0.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 167.610559][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.726'. [ 167.738163][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.728'. [ 167.958372][ T30] audit: type=1400 audit(1792370763.962:3274): avc: denied { create } for pid=8270 comm="syz.5.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 168.032347][ T30] audit: type=1400 audit(1792370764.032:3275): avc: denied { write } for pid=8270 comm="syz.5.729" path="socket:[22112]" dev="sockfs" ino=22112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 168.118374][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.730'. [ 168.336581][ T8277] lo: left promiscuous mode [ 168.370781][ T8280] FAULT_INJECTION: forcing a failure. [ 168.370781][ T8280] name failslab, interval 1, probability 0, space 0, times 0 [ 168.370811][ T8280] CPU: 0 UID: 0 PID: 8280 Comm: syz.4.733 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.370830][ T8280] Tainted: [L]=SOFTLOCKUP [ 168.370835][ T8280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.370842][ T8280] Call Trace: [ 168.370848][ T8280] [ 168.370853][ T8280] dump_stack_lvl+0x100/0x190 [ 168.370876][ T8280] should_fail_ex.cold+0x5/0xa [ 168.370896][ T8280] should_failslab+0xc2/0x120 [ 168.370916][ T8280] __kvmalloc_node_noprof+0x113/0x9b0 [ 168.370935][ T8280] ? __pfx___mutex_lock+0x10/0x10 [ 168.370954][ T8280] ? nf_hook_entries_grow+0x6b9/0x870 [ 168.370975][ T8280] nf_hook_entries_grow+0x6b9/0x870 [ 168.370993][ T8280] ? __kasan_kmalloc+0xaa/0xb0 [ 168.371013][ T8280] __nf_register_net_hook+0x112/0x780 [ 168.371033][ T8280] nf_register_net_hook+0xdb/0x170 [ 168.371051][ T8280] nf_register_net_hooks+0x5d/0xd0 [ 168.371069][ T8280] xt_register_table+0x48f/0x9a0 [ 168.371091][ T8280] ? __pfx_xt_register_table+0x10/0x10 [ 168.371107][ T8280] ? xt_alloc_table_info+0x44/0xa0 [ 168.371122][ T8280] ? __asan_memset+0x23/0x50 [ 168.371136][ T8280] ipt_register_table+0x137/0x2b0 [ 168.371155][ T8280] ? __pfx_ipt_register_table+0x10/0x10 [ 168.371171][ T8280] ? __kmalloc_noprof+0x350/0x840 [ 168.371190][ T8280] ? ipt_alloc_initial_table+0x5b8/0x700 [ 168.371208][ T8280] iptable_raw_table_init+0x63/0x90 [ 168.371225][ T8280] xt_find_table_lock+0x2db/0x520 [ 168.371246][ T8280] xt_request_find_table_lock+0x28/0xf0 [ 168.371262][ T8280] get_info+0x1a7/0x790 [ 168.371278][ T8280] ? avc_has_perm_noaudit+0x145/0x470 [ 168.371292][ T8280] ? __pfx_get_info+0x10/0x10 [ 168.371309][ T8280] ? cred_has_capability.isra.0+0x186/0x300 [ 168.371327][ T8280] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 168.371350][ T8280] ? rcu_is_watching+0x13/0xc0 [ 168.371367][ T8280] ? cap_capable+0x107/0x430 [ 168.371382][ T8280] ? bpf_lsm_capable+0x9/0x10 [ 168.371396][ T8280] ? security_capable+0x80/0x260 [ 168.371413][ T8280] do_ipt_get_ctl+0x231/0xbf0 [ 168.371430][ T8280] ? __mutex_unlock_slowpath+0x35d/0x930 [ 168.371448][ T8280] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 168.371465][ T8280] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.371484][ T8280] ? lock_acquire+0x1d1/0x380 [ 168.371508][ T8280] ? nf_sockopt_find.isra.0+0x222/0x290 [ 168.371525][ T8280] nf_getsockopt+0x7c/0xe0 [ 168.371540][ T8280] ip_getsockopt+0x192/0x1e0 [ 168.371559][ T8280] ? __pfx_ip_getsockopt+0x10/0x10 [ 168.371578][ T8280] ? rcu_is_watching+0x13/0xc0 [ 168.371596][ T8280] ? trace_sched_exit_tp+0x120/0x160 [ 168.371617][ T8280] sctp_getsockopt+0x19b/0x7160 [ 168.371632][ T8280] ? avc_has_perm_noaudit+0x56/0x470 [ 168.371645][ T8280] ? find_held_lock+0x2b/0x80 [ 168.371661][ T8280] ? avc_has_perm_noaudit+0x11e/0x470 [ 168.371673][ T8280] ? avc_has_perm_noaudit+0x11e/0x470 [ 168.371687][ T8280] ? __pfx_sctp_getsockopt+0x10/0x10 [ 168.371703][ T8280] ? __lock_acquire+0x5c0/0x1f40 [ 168.371716][ T8280] ? avc_has_perm+0x135/0x1e0 [ 168.371729][ T8280] ? __pfx_avc_has_perm+0x10/0x10 [ 168.371744][ T8280] ? lock_acquire+0x1d1/0x380 [ 168.371757][ T8280] ? __might_fault+0xc5/0x140 [ 168.371769][ T8280] ? find_held_lock+0x2b/0x80 [ 168.371785][ T8280] ? __might_fault+0xc5/0x140 [ 168.371796][ T8280] ? __might_fault+0xc5/0x140 [ 168.371812][ T8280] ? _copy_from_user+0x59/0xd0 [ 168.371829][ T8280] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 168.371845][ T8280] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 168.371863][ T8280] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 168.371879][ T8280] do_sock_getsockopt+0x50a/0x6e0 [ 168.371897][ T8280] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 168.371914][ T8280] ? __fget_files+0x34/0x3d0 [ 168.371931][ T8280] ? find_held_lock+0x2b/0x80 [ 168.371952][ T8280] ? __fget_files+0x21f/0x3d0 [ 168.371972][ T8280] __sys_getsockopt+0x148/0x260 [ 168.371988][ T8280] ? __x64_sys_getsockopt+0xbd/0x160 [ 168.371999][ T8280] __x64_sys_getsockopt+0xbd/0x160 [ 168.372010][ T8280] ? do_syscall_64+0xae/0x790 [ 168.372026][ T8280] ? lockdep_hardirqs_on+0x7d/0x110 [ 168.372042][ T8280] do_syscall_64+0x123/0x790 [ 168.372060][ T8280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.372072][ T8280] RIP: 0033:0x7fb52779e559 [ 168.372082][ T8280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.372094][ T8280] RSP: 002b:00007fb528712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 168.372106][ T8280] RAX: ffffffffffffffda RBX: 00007fb527a25fa0 RCX: 00007fb52779e559 [ 168.372114][ T8280] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 168.372120][ T8280] RBP: 00007fb527835ab8 R08: 00002000000000c0 R09: 0000000000000000 [ 168.372127][ T8280] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 168.372134][ T8280] R13: 00007fb527a26038 R14: 00007fb527a25fa0 R15: 00007ffe6df4d8f8 [ 168.372150][ T8280] [ 169.062836][ T8277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.543059][ T30] audit: type=1400 audit(1792370765.542:3276): avc: denied { append } for pid=8293 comm="syz.4.737" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.581422][ T8296] loop3: detected capacity change from 0 to 7 [ 169.598130][ T8296] loop3: p1 p4 [ 169.598146][ T8296] loop3: partition table partially beyond EOD, truncated [ 169.830287][ T7811] udevd[7811]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 169.854932][ T7947] udevd[7947]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 170.075289][ T30] audit: type=1400 audit(1792370766.072:3277): avc: denied { transition } for pid=8305 comm="syz.3.743" path="/147/file0" dev="tmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 170.235228][ T8309] Set syz1 is full, maxelem 246 reached [ 170.646831][ T8320] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.906146][ T8324] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 170.921813][ T43] IPVS: starting estimator thread 0... [ 171.007208][ T8326] IPVS: using max 73 ests per chain, 175200 per kthread [ 171.134219][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 171.134233][ T30] audit: type=1804 audit(1792370767.132:3281): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.752" name="/newroot/157/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=4243 res=1 errno=0 [ 172.048148][ T30] audit: type=1400 audit(1792370768.042:3282): avc: denied { relabelfrom } for pid=8351 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 172.098655][ T30] audit: type=1400 audit(1792370768.052:3283): avc: denied { relabelto } for pid=8351 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 173.614723][ T30] audit: type=1400 audit(1792370769.612:3284): avc: denied { create } for pid=8370 comm="syz.4.767" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 173.662014][ T30] audit: type=1400 audit(1792370769.662:3285): avc: denied { mounton } for pid=8370 comm="syz.4.767" path="/163/file0" dev="tmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 174.783074][ T30] audit: type=1400 audit(1792370770.782:3286): avc: denied { read } for pid=8389 comm="syz.0.773" name="state" dev="binder" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.783282][ T30] audit: type=1400 audit(1792370770.782:3287): avc: denied { open } for pid=8389 comm="syz.0.773" path="/dev/binderfs/binder_logs/state" dev="binder" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.144955][ T8397] siw: device registration error -23 [ 175.226587][ T8401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 175.335495][ T8404] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 175.358091][ T8404] batman_adv: batadv0: Adding interface: gretap1 [ 175.358103][ T8404] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.358121][ T8404] batman_adv: batadv0: Interface activated: gretap1 [ 176.341027][ T8405] FAULT_INJECTION: forcing a failure. [ 176.341027][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 176.341056][ T8405] CPU: 0 UID: 0 PID: 8405 Comm: syz.3.779 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.341075][ T8405] Tainted: [L]=SOFTLOCKUP [ 176.341080][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.341088][ T8405] Call Trace: [ 176.341092][ T8405] [ 176.341098][ T8405] dump_stack_lvl+0x100/0x190 [ 176.341121][ T8405] should_fail_ex.cold+0x5/0xa [ 176.341139][ T8405] should_failslab+0xc2/0x120 [ 176.341159][ T8405] __kvmalloc_node_noprof+0x113/0x9b0 [ 176.341177][ T8405] ? __kmalloc_noprof+0x350/0x840 [ 176.341191][ T8405] ? hash_ipportnet_create+0x47f/0x1360 [ 176.341213][ T8405] hash_ipportnet_create+0x47f/0x1360 [ 176.341235][ T8405] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 176.341252][ T8405] ip_set_create+0x6c4/0x1510 [ 176.341272][ T8405] ? __mutex_lock+0x829/0x1bd0 [ 176.341292][ T8405] ? __pfx_ip_set_create+0x10/0x10 [ 176.341319][ T8405] ? find_held_lock+0x2b/0x80 [ 176.341341][ T8405] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 176.341362][ T8405] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 176.341380][ T8405] ? __lock_acquire+0x5c0/0x1f40 [ 176.341416][ T8405] ? avc_has_perm_noaudit+0x145/0x470 [ 176.341436][ T8405] netlink_rcv_skb+0x159/0x420 [ 176.341450][ T8405] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 176.341468][ T8405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.341489][ T8405] ? ns_capable+0xd2/0xf0 [ 176.341504][ T8405] nfnetlink_rcv+0x1b3/0x440 [ 176.341519][ T8405] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 176.341534][ T8405] ? netlink_deliver_tap+0x1ae/0xcc0 [ 176.341558][ T8405] netlink_unicast+0x65f/0x950 [ 176.341573][ T8405] ? __pfx_netlink_unicast+0x10/0x10 [ 176.341589][ T8405] netlink_sendmsg+0x8b0/0xda0 [ 176.341603][ T8405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.341618][ T8405] ? selinux_socket_sendmsg+0x198/0x2f0 [ 176.341637][ T8405] ____sys_sendmsg+0xa4d/0xbe0 [ 176.341651][ T8405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.341666][ T8405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.341688][ T8405] ___sys_sendmsg+0x190/0x1e0 [ 176.341705][ T8405] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.341721][ T8405] ? futex_wait+0x11e/0x370 [ 176.341739][ T8405] ? find_held_lock+0x2b/0x80 [ 176.341766][ T8405] __sys_sendmsg+0x160/0x210 [ 176.341778][ T8405] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.341799][ T8405] do_syscall_64+0x123/0x790 [ 176.341817][ T8405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.341830][ T8405] RIP: 0033:0x7f2882b9e559 [ 176.341842][ T8405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.341853][ T8405] RSP: 002b:00007f28839e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.341865][ T8405] RAX: ffffffffffffffda RBX: 00007f2882e25fa0 RCX: 00007f2882b9e559 [ 176.341873][ T8405] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 176.341880][ T8405] RBP: 00007f2882c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 176.341887][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.341893][ T8405] R13: 00007f2882e26038 R14: 00007f2882e25fa0 R15: 00007fff601f9528 [ 176.341909][ T8405] [ 176.474772][ T188] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 176.696287][ T188] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 176.706730][ T188] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 176.706760][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.745457][ T8287] Set syz0 is full, maxelem 65536 reached [ 176.889725][ T8444] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 176.954546][ T8444] bond1: entered promiscuous mode [ 176.954860][ T8444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.028998][ T8444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.029224][ T8444] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 177.029235][ T8444] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 177.033748][ T8444] bond1: (slave ipip0): making interface the new active one [ 177.033789][ T8444] ipip0: entered promiscuous mode [ 177.034774][ T8444] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 177.195642][ T188] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 177.371156][ T188] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:046D:C222.0008/input/input9 [ 177.553012][ T188] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71 [ 177.585442][ T188] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71 [ 177.669890][ T188] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71 [ 177.673328][ T188] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71 [ 177.677509][ T188] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71 [ 177.734874][ T188] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71 [ 177.752743][ T188] usb 6-1: USB disconnect, device number 3 [ 178.151677][ T30] audit: type=1400 audit(1792370774.152:3288): avc: denied { bind } for pid=8475 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.196160][ T30] audit: type=1400 audit(1792370774.192:3289): avc: denied { listen } for pid=8475 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.226474][ T30] audit: type=1400 audit(1792370774.222:3290): avc: denied { accept } for pid=8475 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.327495][ T7753] tipc: Subscription rejected, illegal request [ 178.354404][ T8480] FAULT_INJECTION: forcing a failure. [ 178.354404][ T8480] name failslab, interval 1, probability 0, space 0, times 0 [ 178.354433][ T8480] CPU: 0 UID: 0 PID: 8480 Comm: syz.5.805 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.354451][ T8480] Tainted: [L]=SOFTLOCKUP [ 178.354456][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 178.354464][ T8480] Call Trace: [ 178.354469][ T8480] [ 178.354475][ T8480] dump_stack_lvl+0x100/0x190 [ 178.354500][ T8480] should_fail_ex.cold+0x5/0xa [ 178.354517][ T8480] should_failslab+0xc2/0x120 [ 178.354538][ T8480] __kmalloc_cache_noprof+0x91/0x6d0 [ 178.354553][ T8480] ? get_pid_task+0xfc/0x250 [ 178.354569][ T8480] ? newseg+0x26b/0xed0 [ 178.354595][ T8480] newseg+0x26b/0xed0 [ 178.354618][ T8480] ? find_held_lock+0x2b/0x80 [ 178.354637][ T8480] ? __pfx_newseg+0x10/0x10 [ 178.354656][ T8480] ? down_write+0x146/0x1f0 [ 178.354671][ T8480] ? ksys_write+0x190/0x250 [ 178.354688][ T8480] ipcget+0xee/0xf50 [ 178.354701][ T8480] ? __pfx_do_futex+0x10/0x10 [ 178.354719][ T8480] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 178.354738][ T8480] ? __pfx_ipcget+0x10/0x10 [ 178.354748][ T8480] ? __x64_sys_futex+0x34f/0x4d0 [ 178.354764][ T8480] ? __x64_sys_futex+0x358/0x4d0 [ 178.354783][ T8480] __x64_sys_shmget+0x13b/0x1b0 [ 178.354794][ T8480] ? __pfx___x64_sys_shmget+0x10/0x10 [ 178.354809][ T8480] do_syscall_64+0x123/0x790 [ 178.354827][ T8480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.354840][ T8480] RIP: 0033:0x7fdd1d79e559 [ 178.354852][ T8480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.354863][ T8480] RSP: 002b:00007fdd1e605028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 178.354876][ T8480] RAX: ffffffffffffffda RBX: 00007fdd1da25fa0 RCX: 00007fdd1d79e559 [ 178.354884][ T8480] RDX: 0000000000000008 RSI: 0000000000800000 RDI: 0000000000000000 [ 178.354890][ T8480] RBP: 00007fdd1d835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 178.354897][ T8480] R10: 0000200000173000 R11: 0000000000000246 R12: 0000000000000000 [ 178.354904][ T8480] R13: 00007fdd1da26038 R14: 00007fdd1da25fa0 R15: 00007ffc5f145698 [ 178.354920][ T8480] [ 178.731146][ T8485] FAULT_INJECTION: forcing a failure. [ 178.731146][ T8485] name failslab, interval 1, probability 0, space 0, times 0 [ 178.731171][ T8485] CPU: 0 UID: 0 PID: 8485 Comm: syz.5.807 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.731189][ T8485] Tainted: [L]=SOFTLOCKUP [ 178.731195][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 178.731202][ T8485] Call Trace: [ 178.731207][ T8485] [ 178.731212][ T8485] dump_stack_lvl+0x100/0x190 [ 178.731235][ T8485] should_fail_ex.cold+0x5/0xa [ 178.731252][ T8485] should_failslab+0xc2/0x120 [ 178.731272][ T8485] kmem_cache_alloc_noprof+0x92/0x6a0 [ 178.731288][ T8485] ? __inet_hash_connect+0x6da/0x2000 [ 178.731304][ T8485] __inet_hash_connect+0x6da/0x2000 [ 178.731320][ T8485] ? __pfx___inet_check_established+0x10/0x10 [ 178.731340][ T8485] ? __pfx___inet_hash_connect+0x10/0x10 [ 178.731354][ T8485] ? inet_init_ehash_secret+0xd/0x60 [ 178.731371][ T8485] ? inet_hash_connect+0x9f/0x340 [ 178.731384][ T8485] tcp_v4_connect+0xeb3/0x1b40 [ 178.731407][ T8485] ? __pfx_tcp_v4_connect+0x10/0x10 [ 178.731427][ T8485] ? avc_has_perm_noaudit+0x145/0x470 [ 178.731442][ T8485] tcp_v6_connect+0x779/0x2660 [ 178.731458][ T8485] ? __pfx_tcp_v6_connect+0x10/0x10 [ 178.731470][ T8485] ? __lock_acquire+0x5c0/0x1f40 [ 178.731488][ T8485] __inet_stream_connect+0x208/0xf90 [ 178.731506][ T8485] ? lock_acquire+0x1d1/0x380 [ 178.731520][ T8485] ? __pfx___inet_stream_connect+0x10/0x10 [ 178.731538][ T8485] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 178.731559][ T8485] ? __local_bh_enable_ip+0xa5/0x120 [ 178.731574][ T8485] inet_stream_connect+0x57/0xa0 [ 178.731599][ T8485] __sys_connect_file+0x146/0x1a0 [ 178.731620][ T8485] __sys_connect+0x141/0x170 [ 178.731637][ T8485] ? __pfx___sys_connect+0x10/0x10 [ 178.731666][ T8485] __x64_sys_connect+0x72/0xb0 [ 178.731685][ T8485] ? lockdep_hardirqs_on+0x7d/0x110 [ 178.731703][ T8485] do_syscall_64+0x123/0x790 [ 178.731723][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.731736][ T8485] RIP: 0033:0x7fdd1d79e559 [ 178.731746][ T8485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.731758][ T8485] RSP: 002b:00007fdd1e605028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 178.731771][ T8485] RAX: ffffffffffffffda RBX: 00007fdd1da25fa0 RCX: 00007fdd1d79e559 [ 178.731778][ T8485] RDX: 000000000000001c RSI: 0000200000000200 RDI: 0000000000000004 [ 178.731785][ T8485] RBP: 00007fdd1d835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 178.731791][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.731798][ T8485] R13: 00007fdd1da26038 R14: 00007fdd1da25fa0 R15: 00007ffc5f145698 [ 178.731813][ T8485] [ 179.104606][ T8491] netlink: 'syz.5.808': attribute type 1 has an invalid length. [ 179.154632][ T8491] bond1: entered promiscuous mode [ 179.162575][ T8491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.232093][ T8491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.234220][ T8491] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 179.234239][ T8491] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 179.286101][ T8491] bond1: (slave ipip0): making interface the new active one [ 179.286136][ T8491] ipip0: entered promiscuous mode [ 179.286874][ T8491] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 179.429895][ T30] audit: type=1400 audit(1792370775.432:3291): avc: denied { read write } for pid=8496 comm="syz.6.812" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 179.429929][ T30] audit: type=1400 audit(1792370775.432:3292): avc: denied { open } for pid=8496 comm="syz.6.812" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 179.646225][ T8518] netlink: 'syz.4.818': attribute type 2 has an invalid length. [ 179.720970][ T8518] : entered promiscuous mode [ 179.881604][ T30] audit: type=1400 audit(1792370775.882:3293): avc: denied { bind } for pid=8522 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.883333][ T30] audit: type=1400 audit(1792370775.882:3294): avc: denied { listen } for pid=8522 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.943183][ T30] audit: type=1400 audit(1792370775.942:3295): avc: denied { accept } for pid=8522 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.864521][ T8543] tipc: Started in network mode [ 180.864537][ T8543] tipc: Node identity 2000004, cluster identity 4711 [ 180.864546][ T8543] tipc: Node number set to 33554436 [ 180.902066][ T8539] 9pnet: p9_errstr2errno: server reported unknown error 00000 [ 181.072867][ T8550] syz_tun: entered allmulticast mode [ 181.140338][ T8550] syz_tun (unregistering): left allmulticast mode [ 181.378990][ T30] audit: type=1800 audit(1792370777.382:3296): pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.834" name="file2" dev="sda1" ino=2052 res=0 errno=0 [ 181.415601][ T30] audit: type=1400 audit(1792370777.412:3297): avc: denied { read } for pid=8560 comm="syz.5.835" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 182.404482][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.851'. [ 182.844987][ T8621] overlayfs: failed to clone upperpath [ 182.888124][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 183.037643][ T9] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 183.040073][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.040090][ T9] usb 6-1: Product: syz [ 183.040099][ T9] usb 6-1: Manufacturer: syz [ 183.040108][ T9] usb 6-1: SerialNumber: syz [ 183.046146][ T9] usb 6-1: config 0 descriptor?? [ 183.091619][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 183.244733][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 183.244747][ T30] audit: type=1400 audit(1792370779.242:3305): avc: denied { shutdown } for pid=8630 comm="syz.4.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.320998][ T9] gspca_stk1135: reg_w 0x2 err -71 [ 183.322848][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 183.322859][ T9] gspca_stk1135: Sensor write failed [ 183.322880][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 183.322886][ T9] gspca_stk1135: Sensor write failed [ 183.322906][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 183.322912][ T9] gspca_stk1135: Sensor read failed [ 183.322932][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 183.322938][ T9] gspca_stk1135: Sensor read failed [ 183.322942][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 183.322962][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 183.322967][ T9] gspca_stk1135: Sensor read failed [ 183.322984][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 183.322989][ T9] gspca_stk1135: Sensor read failed [ 183.323007][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 183.323011][ T9] gspca_stk1135: Sensor write failed [ 183.323029][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 183.323034][ T9] gspca_stk1135: Sensor write failed [ 183.323074][ T9] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 183.380888][ T9] usb 6-1: USB disconnect, device number 4 [ 183.824550][ T8644] FAULT_INJECTION: forcing a failure. [ 183.824550][ T8644] name failslab, interval 1, probability 0, space 0, times 0 [ 183.824579][ T8644] CPU: 0 UID: 0 PID: 8644 Comm: syz.4.868 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.824597][ T8644] Tainted: [L]=SOFTLOCKUP [ 183.824601][ T8644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 183.824608][ T8644] Call Trace: [ 183.824613][ T8644] [ 183.824618][ T8644] dump_stack_lvl+0x100/0x190 [ 183.824640][ T8644] should_fail_ex.cold+0x5/0xa [ 183.824660][ T8644] should_failslab+0xc2/0x120 [ 183.824680][ T8644] kmem_cache_alloc_noprof+0x92/0x6a0 [ 183.824695][ T8644] ? io_submit_one+0x124/0x1fb0 [ 183.824711][ T8644] io_submit_one+0x124/0x1fb0 [ 183.824724][ T8644] ? __lock_acquire+0x5c0/0x1f40 [ 183.824743][ T8644] ? __pfx_io_submit_one+0x10/0x10 [ 183.824759][ T8644] ? lock_acquire+0x1d1/0x380 [ 183.824775][ T8644] ? __might_fault+0xc5/0x140 [ 183.824791][ T8644] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 183.824804][ T8644] __x64_sys_io_submit+0x1b1/0x3a0 [ 183.824819][ T8644] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 183.824839][ T8644] do_syscall_64+0x123/0x790 [ 183.824858][ T8644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.824870][ T8644] RIP: 0033:0x7fb52779e559 [ 183.824882][ T8644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.824893][ T8644] RSP: 002b:00007fb528712028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 183.824904][ T8644] RAX: ffffffffffffffda RBX: 00007fb527a25fa0 RCX: 00007fb52779e559 [ 183.824912][ T8644] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 00007fb5286f1000 [ 183.824918][ T8644] RBP: 00007fb527835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 183.824925][ T8644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.824931][ T8644] R13: 00007fb527a26038 R14: 00007fb527a25fa0 R15: 00007ffe6df4d8f8 [ 183.824946][ T8644] [ 184.312713][ T30] audit: type=1400 audit(1792370780.312:3306): avc: denied { read } for pid=8649 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.429405][ T5721] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 184.579676][ T5721] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 184.585497][ T5721] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 184.585517][ T5721] usb 5-1: config 1 has no interface number 0 [ 184.613937][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.613955][ T5721] usb 5-1: Product: syz [ 184.613964][ T5721] usb 5-1: Manufacturer: syz [ 184.613973][ T5721] usb 5-1: SerialNumber: syz [ 184.645263][ T5721] usb 5-1: 3:1 : does not exist [ 184.645280][ T5721] usb 5-1: 3:2 : does not exist [ 184.934190][ T8665] bridge_slave_1: left allmulticast mode [ 184.934209][ T8665] bridge_slave_1: left promiscuous mode [ 184.935365][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.962301][ T8665] bridge_slave_0: left allmulticast mode [ 184.962321][ T8665] bridge_slave_0: left promiscuous mode [ 184.962449][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.490344][ T188] usb 5-1: USB disconnect, device number 11 [ 185.656360][ T30] audit: type=1400 audit(1792370781.652:3307): avc: denied { setopt } for pid=8677 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.516725][ T8691] mmap: syz.0.886 (8691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 186.978946][ T8651] Set syz1 is full, maxelem 65536 reached [ 187.249268][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 187.777696][ T188] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 187.936062][ T188] usb 4-1: Using ep0 maxpacket: 32 [ 187.936987][ T188] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 187.958159][ T188] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 187.958184][ T188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.958204][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.959631][ T188] usb 4-1: config 0 descriptor?? [ 188.310510][ T8733] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 188.411398][ T188] corsair-cpro 0003:1B1C:0C10.0009: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 188.720288][ T8752] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.905'. [ 188.720307][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.905'. [ 188.839786][ T188] corsair-cpro 0003:1B1C:0C10.0009: probe with driver corsair-cpro failed with error -71 [ 188.860174][ T188] usb 4-1: USB disconnect, device number 6 [ 188.897299][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.897334][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.307401][ T188] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 189.457575][ T188] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 189.457890][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 189.457903][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 189.458343][ T188] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 95, changing to 10 [ 189.458362][ T188] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 25968, setting to 1024 [ 189.458385][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.761637][ T188] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 189.787339][ T188] usb 5-1: USB disconnect, device number 12 [ 189.887359][ T5721] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 190.038981][ T5721] usb 6-1: Using ep0 maxpacket: 32 [ 190.040141][ T5721] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 190.040877][ T5721] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.040894][ T5721] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.041964][ T5721] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 190.041977][ T5721] usb 6-1: Product: syz [ 190.041984][ T5721] usb 6-1: Manufacturer: syz [ 190.104525][ T5721] hub 6-1:4.0: USB hub found [ 190.251447][ T5721] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 190.288501][ T5721] usb 6-1: USB disconnect, device number 5 [ 190.697104][ T5721] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.847121][ T5721] usb 6-1: Using ep0 maxpacket: 32 [ 190.847611][ T5721] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 190.848438][ T5721] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.848456][ T5721] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.849691][ T5721] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 190.849705][ T5721] usb 6-1: Product: syz [ 190.849713][ T5721] usb 6-1: Manufacturer: syz [ 190.854388][ T5721] hub 6-1:4.0: USB hub found [ 190.973214][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 191.055118][ T5721] hub 6-1:4.0: 1 port detected [ 191.859714][ T5721] hub 6-1:4.0: activate --> -90 [ 192.263060][ T188] usb 6-1: USB disconnect, device number 6 [ 192.264952][ T5721] usb 6-1-port1: connect-debounce failed [ 193.014514][ T8778] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 193.101880][ T8786] netlink: 'syz.0.919': attribute type 83 has an invalid length. [ 193.172174][ T8789] netlink: 'syz.0.919': attribute type 83 has an invalid length. [ 198.009792][ T8802] loop8: detected capacity change from 0 to 16384 [ 198.043080][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 198.043099][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 198.284695][ T8806] loop8: detected capacity change from 16384 to 16383 [ 198.315241][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.326354][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.336760][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.345406][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.353173][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.534101][ T30] audit: type=1400 audit(1792370794.532:3308): avc: denied { bind } for pid=8819 comm="syz.3.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 198.574337][ T30] audit: type=1400 audit(1792370794.572:3309): avc: denied { setopt } for pid=8819 comm="syz.3.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.458985][ T5609] Bluetooth: hci5: command tx timeout [ 201.691055][ C0] sched: DL replenish lagged too much [ 202.719249][ T5609] Bluetooth: hci5: command tx timeout [ 205.488055][ T5609] Bluetooth: hci5: command tx timeout [ 207.937418][ T5608] Bluetooth: hci5: command tx timeout [ 228.193882][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 254.198465][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.207385][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.627852][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.639854][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.983653][ T5607] Bluetooth: hci5: command 0x0406 tx timeout [ 392.617058][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 392.624035][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5586/1:b..l P8819/1:b..l [ 392.633049][ C0] rcu: (detected by 0, t=10502 jiffies, g=44565, q=1234 ncpus=1) [ 392.640823][ C0] task:syz.3.929 state:R running task stack:26392 pid:8819 tgid:8819 ppid:5598 task_flags:0x40044c flags:0x00080002 [ 392.654263][ C0] Call Trace: [ 392.657526][ C0] [ 392.660431][ C0] __schedule+0x1259/0x6920 [ 392.664931][ C0] ? mark_held_locks+0x40/0x70 [ 392.669674][ C0] ? __pfx___schedule+0x10/0x10 [ 392.674507][ C0] ? irqentry_exit+0x2c9/0xa90 [ 392.679252][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 392.685294][ C0] preempt_schedule_notrace+0x57/0xd0 [ 392.690653][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 392.696787][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 392.702655][ C0] rcu_is_watching+0x90/0xc0 [ 392.707220][ C0] is_bpf_text_address+0xa7/0x1a0 [ 392.712221][ C0] kernel_text_address+0x8d/0x100 [ 392.717228][ C0] __kernel_text_address+0xd/0x30 [ 392.722249][ C0] unwind_get_return_address+0x59/0xa0 [ 392.727700][ C0] arch_stack_walk+0xa6/0xf0 [ 392.732282][ C0] stack_trace_save+0x8e/0xc0 [ 392.736931][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 392.742275][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 392.747187][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 392.752098][ C0] save_stack+0x162/0x1e0 [ 392.756415][ C0] ? __pfx_save_stack+0x10/0x10 [ 392.761242][ C0] ? __free_frozen_pages+0x79f/0x10f0 [ 392.766583][ C0] ? tlb_finish_mmu+0x27d/0x810 [ 392.771403][ C0] ? exit_mmap+0x454/0xa00 [ 392.775793][ C0] ? __mmput+0x12a/0x410 [ 392.780010][ C0] ? mmput+0x67/0x80 [ 392.783881][ C0] ? do_exit+0x83b/0x2a60 [ 392.788183][ C0] ? do_group_exit+0xd5/0x2a0 [ 392.792831][ C0] ? get_signal+0x1ec7/0x21e0 [ 392.797489][ C0] ? arch_do_signal_or_restart+0x91/0x7e0 [ 392.803195][ C0] ? exit_to_user_mode_loop+0x139/0x700 [ 392.808714][ C0] ? do_syscall_64+0x661/0x790 [ 392.813462][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.819542][ C0] ? page_ext_put+0x3e/0xd0 [ 392.824040][ C0] __reset_page_owner+0x84/0x190 [ 392.828956][ C0] __free_frozen_pages+0x79f/0x10f0 [ 392.834130][ C0] tlb_finish_mmu+0x27d/0x810 [ 392.838782][ C0] exit_mmap+0x454/0xa00 [ 392.843012][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 392.847749][ C0] ? rcu_is_watching+0x13/0xc0 [ 392.852503][ C0] ? find_held_lock+0x2b/0x80 [ 392.857169][ C0] ? uprobe_clear_state+0x5f/0x250 [ 392.862259][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 392.867891][ C0] __mmput+0x12a/0x410 [ 392.871967][ C0] mmput+0x67/0x80 [ 392.875687][ C0] do_exit+0x83b/0x2a60 [ 392.879825][ C0] ? __pfx_do_exit+0x10/0x10 [ 392.884402][ C0] ? do_raw_spin_lock+0x128/0x260 [ 392.889400][ C0] ? find_held_lock+0x2b/0x80 [ 392.894063][ C0] ? get_signal+0x7e0/0x21e0 [ 392.898639][ C0] do_group_exit+0xd5/0x2a0 [ 392.903130][ C0] get_signal+0x1ec7/0x21e0 [ 392.907610][ C0] ? __pfx_get_signal+0x10/0x10 [ 392.912437][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 392.917961][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 392.924965][ C0] exit_to_user_mode_loop+0x139/0x700 [ 392.930312][ C0] ? rcu_is_watching+0x13/0xc0 [ 392.935053][ C0] do_syscall_64+0x661/0x790 [ 392.939633][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.945507][ C0] RIP: 0033:0x7f2882b9f349 [ 392.949892][ C0] RSP: 002b:00007fff601f93e8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 392.958288][ C0] RAX: fffffffffffffffc RBX: 00007f2882b5a8e0 RCX: 00007f2882b9f349 [ 392.966231][ C0] RDX: 00007f2882b5a8e0 RSI: 0000000000000058 RDI: 00007fff601f9440 [ 392.974173][ C0] RBP: 00007f28839c06c0 R08: 00007f28839c06c0 R09: 00007fff601f9527 [ 392.982117][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 392.990059][ C0] R13: 000000000000006e R14: 00007fff601f9440 R15: 00007fff601f9528 [ 392.998027][ C0] [ 393.001034][ C0] task:syz-executor state:R running task stack:21864 pid:5586 tgid:5586 ppid:5585 task_flags:0x400100 flags:0x00080000 [ 393.014476][ C0] Call Trace: [ 393.017729][ C0] [ 393.020634][ C0] __schedule+0x1259/0x6920 [ 393.025126][ C0] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 393.031187][ C0] ? find_held_lock+0x2b/0x80 [ 393.035842][ C0] ? __pfx___schedule+0x10/0x10 [ 393.040677][ C0] ? mark_held_locks+0x40/0x70 [ 393.045430][ C0] preempt_schedule_irq+0x4e/0x90 [ 393.050430][ C0] irqentry_exit+0x247/0xa90 [ 393.054999][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 393.060949][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 393.066218][ C0] Code: ff 65 0f c1 05 db 5d a6 13 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 dd 16 a6 13 0f 85 4d 01 00 00 48 83 c4 [ 393.085795][ C0] RSP: 0018:ffffc90003f5f860 EFLAGS: 00000206 [ 393.091836][ C0] RAX: 0000000000000046 RBX: ffffffff8fdec620 RCX: ffffc90003f5f86c [ 393.099793][ C0] RDX: 0000000000000000 RSI: ffffffff8e3bd91c RDI: ffffffff8c625680 [ 393.107749][ C0] RBP: ffffffff81b9c54e R08: 0000000000000001 R09: 0000000000000007 [ 393.115691][ C0] R10: 0000000000000200 R11: 000000000001987d R12: ffff88803110a580 [ 393.123633][ C0] R13: ffffc90003f5f918 R14: 0000000000000202 R15: 0000000000000002 [ 393.131578][ C0] ? unwind_next_frame+0x3be/0x2090 [ 393.136774][ C0] unwind_next_frame+0x3c3/0x2090 [ 393.141784][ C0] ? create_pipe_files+0x360/0x970 [ 393.146876][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 393.153013][ C0] arch_stack_walk+0x94/0xf0 [ 393.157582][ C0] ? do_pipe2+0xbd/0x1e0 [ 393.161803][ C0] stack_trace_save+0x8e/0xc0 [ 393.166462][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 393.171817][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 393.176746][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 393.181673][ C0] save_stack+0x162/0x1e0 [ 393.185993][ C0] ? __pfx_save_stack+0x10/0x10 [ 393.190817][ C0] ? __free_frozen_pages+0x79f/0x10f0 [ 393.196157][ C0] ? qlist_free_all+0x47/0xf0 [ 393.200806][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 393.206422][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 393.211423][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 393.217027][ C0] ? alloc_empty_file+0x5b/0x1c0 [ 393.221938][ C0] ? alloc_file_pseudo+0x183/0x290 [ 393.227017][ C0] ? create_pipe_files+0x360/0x970 [ 393.232118][ C0] ? page_ext_put+0x3e/0xd0 [ 393.236598][ C0] __reset_page_owner+0x84/0x190 [ 393.241522][ C0] __free_frozen_pages+0x79f/0x10f0 [ 393.246692][ C0] ? __free_slab+0xd0/0x220 [ 393.251179][ C0] qlist_free_all+0x47/0xf0 [ 393.255657][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 393.261095][ C0] __kasan_slab_alloc+0x69/0x90 [ 393.265921][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 393.271352][ C0] ? d_instantiate+0x8a/0xb0 [ 393.275913][ C0] ? alloc_empty_file+0x5b/0x1c0 [ 393.280821][ C0] alloc_empty_file+0x5b/0x1c0 [ 393.285556][ C0] alloc_file_pseudo+0x183/0x290 [ 393.290464][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 393.295896][ C0] create_pipe_files+0x360/0x970 [ 393.300811][ C0] do_pipe2+0xbd/0x1e0 [ 393.304864][ C0] ? __pfx_do_pipe2+0x10/0x10 [ 393.309515][ C0] ? xfd_validate_state+0x129/0x190 [ 393.314691][ C0] __x64_sys_pipe2+0x54/0x80 [ 393.319268][ C0] do_syscall_64+0x123/0x790 [ 393.323835][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.329699][ C0] RIP: 0033:0x7fbafd99d589 [ 393.334086][ C0] RSP: 002b:00007ffc2f231958 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 393.342486][ C0] RAX: ffffffffffffffda RBX: 000055555ac86ed0 RCX: 00007fbafd99d589 [ 393.350455][ C0] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00007ffc2f231968 [ 393.358418][ C0] RBP: 00007ffc2f231f40 R08: 00007fbafdbf6e20 R09: 0000000000000000 [ 393.366374][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2f231d80 [ 393.374346][ C0] R13: 000055555acf8378 R14: 000055555ac8b460 R15: 00007ffc2f231ac0 [ 393.382303][ C0] [ 393.385299][ C0] rcu: rcu_preempt kthread starved for 4670 jiffies! g44565 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 393.396196][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 393.406132][ C0] rcu: RCU grace-period kthread stack dump: [ 393.411986][ C0] task:rcu_preempt state:R running task stack:27560 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 393.425431][ C0] Call Trace: [ 393.428690][ C0] [ 393.431596][ C0] __schedule+0x1259/0x6920 [ 393.436078][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 393.440996][ C0] ? lock_acquire+0x1d1/0x380 [ 393.445645][ C0] ? __pfx___schedule+0x10/0x10 [ 393.450472][ C0] ? find_held_lock+0x2b/0x80 [ 393.455123][ C0] ? schedule+0x225/0x2c0 [ 393.459437][ C0] schedule+0xdd/0x2c0 [ 393.463492][ C0] schedule_timeout+0x127/0x280 [ 393.468315][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 393.473670][ C0] ? __pfx_process_timeout+0x10/0x10 [ 393.478933][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 393.484712][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 393.490156][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 393.494907][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 393.500164][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 393.505074][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 393.510241][ C0] ? rcu_is_watching+0x13/0xc0 [ 393.514980][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 393.520771][ C0] rcu_gp_kthread+0x17a/0x220 [ 393.525422][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 393.530591][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 393.536373][ C0] ? __kthread_parkme+0x18f/0x230 [ 393.541383][ C0] ? kthread+0x13a/0x450 [ 393.545599][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 393.550768][ C0] kthread+0x373/0x450 [ 393.554829][ C0] ? __pfx_kthread+0x10/0x10 [ 393.559395][ C0] ret_from_fork+0x730/0xd60 [ 393.563959][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 393.569042][ C0] ? __switch_to+0x800/0x10f0 [ 393.573692][ C0] ? __pfx_kthread+0x10/0x10 [ 393.578256][ C0] ret_from_fork_asm+0x1a/0x30 [ 393.583007][ C0] [ 393.585998][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 393.592294][ C0] CPU: 0 UID: 0 PID: 3222 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 393.603556][ C0] Tainted: [L]=SOFTLOCKUP [ 393.607864][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 393.617933][ C0] Workqueue: bat_events batadv_tt_purge [ 393.623488][ C0] RIP: 0010:__rcu_read_lock+0x0/0x70 [ 393.628754][ C0] Code: fd ff ff 48 89 ef e8 0f 97 90 00 e9 c0 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 53 65 48 8b 1d 91 9c 9d [ 393.648355][ C0] RSP: 0018:ffffc90000007160 EFLAGS: 00000246 [ 393.654407][ C0] RAX: ffffc90000007730 RBX: 0000000000000002 RCX: ffffc9000000712c [ 393.662351][ C0] RDX: 1ffff92000000e42 RSI: ffffffff89fa72f5 RDI: ffffc900000071d8 [ 393.670306][ C0] RBP: ffffc90000007220 R08: 0000000000000001 R09: 0000000000000007 [ 393.678266][ C0] R10: 0000000000000200 R11: 0000000000090943 R12: ffffffff81f62140 [ 393.686231][ C0] R13: ffffc900000071d8 R14: 0000000000000000 R15: ffff88803672a580 [ 393.694201][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 393.703118][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.709711][ C0] CR2: 00007fbafabf10d8 CR3: 000000005d3cf000 CR4: 00000000003526f0 [ 393.717668][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 393.725637][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 393.733637][ C0] Call Trace: [ 393.736923][ C0] [ 393.739752][ C0] unwind_next_frame+0xae/0x2090 [ 393.744849][ C0] ? nft_do_chain+0x2e5/0x19d0 [ 393.749590][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 393.755718][ C0] arch_stack_walk+0x94/0xf0 [ 393.760284][ C0] ? nft_do_chain+0x2e5/0x19d0 [ 393.765022][ C0] ? kfree_skbmem+0x19a/0x210 [ 393.769687][ C0] stack_trace_save+0x8e/0xc0 [ 393.774337][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 393.779683][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 393.784592][ C0] ? nft_synproxy_do_eval+0xa72/0xd30 [ 393.789944][ C0] ? nft_do_chain+0x2e5/0x19d0 [ 393.794706][ C0] kasan_save_stack+0x30/0x50 [ 393.799388][ C0] ? kasan_save_stack+0x30/0x50 [ 393.804212][ C0] ? kasan_save_track+0x14/0x30 [ 393.809043][ C0] ? kasan_save_free_info+0x3b/0x70 [ 393.814225][ C0] ? __kasan_slab_free+0x5f/0x80 [ 393.819147][ C0] ? kmem_cache_free+0x127/0x6c0 [ 393.824067][ C0] ? kfree_skbmem+0x19a/0x210 [ 393.828726][ C0] ? consume_skb+0xd1/0x110 [ 393.833199][ C0] ? nft_synproxy_do_eval+0xa72/0xd30 [ 393.838553][ C0] ? nft_do_chain+0x2e5/0x19d0 [ 393.843309][ C0] kasan_save_track+0x14/0x30 [ 393.847961][ C0] kasan_save_free_info+0x3b/0x70 [ 393.852969][ C0] __kasan_slab_free+0x5f/0x80 [ 393.857707][ C0] kmem_cache_free+0x127/0x6c0 [ 393.862441][ C0] ? skb_release_data+0x65e/0x860 [ 393.867438][ C0] kfree_skbmem+0x19a/0x210 [ 393.871915][ C0] consume_skb+0xd1/0x110 [ 393.876217][ C0] nft_synproxy_do_eval+0xa72/0xd30 [ 393.881390][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 393.887081][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 393.891992][ C0] ? debug_objects_fill_pool+0x18e/0x590 [ 393.897603][ C0] ? debug_objects_fill_pool+0x49b/0x590 [ 393.903211][ C0] ? debug_objects_fill_pool+0x49b/0x590 [ 393.908821][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 393.914265][ C0] nft_do_chain+0x2e5/0x19d0 [ 393.918836][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 393.923843][ C0] ? mark_held_locks+0x40/0x70 [ 393.928578][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 393.933848][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 393.939103][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 393.944286][ C0] nft_do_chain_inet+0xf3/0x400 [ 393.949119][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 393.954552][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 393.959564][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 393.964914][ C0] nf_hook_slow+0xbf/0x220 [ 393.969319][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 393.974402][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 393.980354][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 393.985967][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 393.991060][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 393.997091][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 394.002376][ C0] ip_local_deliver+0x163/0x1f0 [ 394.007214][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 394.012569][ C0] ip_rcv+0x33a/0x3c0 [ 394.016522][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 394.021005][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 394.026875][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 394.033264][ C0] ? lock_acquire+0x1d1/0x380 [ 394.037927][ C0] ? process_backlog+0x437/0x1600 [ 394.042927][ C0] ? process_backlog+0x437/0x1600 [ 394.047924][ C0] __netif_receive_skb+0x1f/0x120 [ 394.052932][ C0] process_backlog+0x487/0x1600 [ 394.057776][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 394.063214][ C0] net_rx_action+0xa40/0xf20 [ 394.067783][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 394.072893][ C0] ? mark_held_locks+0x40/0x70 [ 394.077646][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 394.082831][ C0] ? tmigr_handle_remote+0x132/0x380 [ 394.088097][ C0] ? mark_held_locks+0x40/0x70 [ 394.092834][ C0] handle_softirqs+0x1e6/0x9d0 [ 394.097571][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 394.102836][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 394.108093][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 394.113698][ C0] ? batadv_tt_purge+0x25d/0xbd0 [ 394.118608][ C0] do_softirq+0xaf/0xf0 [ 394.122738][ C0] [ 394.125642][ C0] [ 394.128547][ C0] __local_bh_enable_ip+0xff/0x120 [ 394.133647][ C0] batadv_tt_purge+0x25d/0xbd0 [ 394.138405][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 394.143684][ C0] ? lock_acquire+0x1d1/0x380 [ 394.148355][ C0] ? process_one_work+0xa2c/0x1b10 [ 394.153439][ C0] ? process_one_work+0x906/0x1b10 [ 394.158537][ C0] ? process_one_work+0x906/0x1b10 [ 394.163635][ C0] process_one_work+0xac7/0x1b10 [ 394.168560][ C0] ? __pfx_process_one_work+0x10/0x10 [ 394.173932][ C0] ? lock_acquire+0x1d1/0x380 [ 394.178611][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 394.183872][ C0] rescuer_thread+0x918/0x14e0 [ 394.188612][ C0] ? rescuer_thread+0x256/0x14e0 [ 394.193523][ C0] ? rescuer_thread+0x118/0x14e0 [ 394.198430][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 394.203610][ C0] ? __kthread_parkme+0x18f/0x230 [ 394.208627][ C0] ? kthread+0x13a/0x450 [ 394.212874][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 394.218048][ C0] kthread+0x373/0x450 [ 394.222105][ C0] ? __pfx_kthread+0x10/0x10 [ 394.226670][ C0] ret_from_fork+0x730/0xd60 [ 394.231241][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 394.236324][ C0] ? __switch_to+0x800/0x10f0 [ 394.240985][ C0] ? __pfx_kthread+0x10/0x10 [ 394.245550][ C0] ret_from_fork_asm+0x1a/0x30 [ 394.250303][ C0]