last executing test programs: 21m22.849668803s ago: executing program 32 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc) 16m45.688291566s ago: executing program 33 (id=2944): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x15) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/52, 0x34}], 0x1) 15m33.446440055s ago: executing program 34 (id=3603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4018aee1, &(0x7f0000000200)="070000000000000001") 15m32.057655652s ago: executing program 35 (id=3613): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/usb_storage/parameters/delay_use\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0\n', 0x2) 15m5.492906246s ago: executing program 36 (id=3808): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000480)={r1, 0x7}, 0x8) 13m17.681308042s ago: executing program 8 (id=4833): close(0x3) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x18, 0x0}}], 0x1, 0x20002040) close(0x3) 13m17.560500264s ago: executing program 8 (id=4835): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd29, &(0x7f0000000000)="04") 13m17.408671531s ago: executing program 8 (id=4838): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 13m16.98951793s ago: executing program 8 (id=4842): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) 13m16.67164022s ago: executing program 8 (id=4845): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 13m16.40619287s ago: executing program 8 (id=4847): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fe"], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000040)=@in={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x30, 0x4000011}], 0x1, 0x40881) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 13m15.851579959s ago: executing program 37 (id=4847): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fe"], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000040)=@in={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x30, 0x4000011}], 0x1, 0x40881) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 12m4.879955162s ago: executing program 9 (id=5566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000000080200000000020000000002000000000200000000041400706f6c6963796462000704060061616466610006", 0x66) 12m4.659611376s ago: executing program 9 (id=5569): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 12m4.334296019s ago: executing program 9 (id=5572): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000005540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 12m4.019566256s ago: executing program 9 (id=5576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(0x3) 12m3.548784016s ago: executing program 9 (id=5581): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0d0) 12m3.235744806s ago: executing program 9 (id=5583): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0xfffffee7) 11m48.123524582s ago: executing program 38 (id=5583): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0xfffffee7) 9m55.193932762s ago: executing program 6 (id=6571): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e2300050000006073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000ffffffffffff000000000000000004000000000000000600000000000000ffff0000800000001c25080000000000020000000000000009000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000ca3d0000000000002abd7000043500000a0001002000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 9m54.950640598s ago: executing program 6 (id=6575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010006, 0x0, 0x1}]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 9m54.376313469s ago: executing program 6 (id=6578): mkdir(&(0x7f0000000400)='./file0\x00', 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) mknodat$loop(r0, &(0x7f0000000080)='./file1\x00', 0x6000, 0x1) 9m53.527488525s ago: executing program 6 (id=6582): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 9m53.245903543s ago: executing program 6 (id=6584): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x400000000000000) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7840, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) 9m52.285022963s ago: executing program 6 (id=6591): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="fe", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xa8) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 9m51.470988117s ago: executing program 39 (id=6591): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="fe", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xa8) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 4m55.148441641s ago: executing program 2 (id=8503): mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x804, 0x0, 0x0, 0x0, 0x267a4e37}, 0xc) 4m54.861028687s ago: executing program 2 (id=8505): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 4m54.60641064s ago: executing program 2 (id=8507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x2, 0x37, 0x30, 0x65, 0x0, 0x11, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x1, 0xf800, 0x67, 0x7, 0x8, 0x33, 0x8, @multicast2, @private=0xa010100}}}}, 0x3e) 4m53.927420321s ago: executing program 2 (id=8512): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x8) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xf) syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') 4m53.60483511s ago: executing program 2 (id=8514): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000600)='r:s/p ./file0:0\f_', 0x11) 4m53.376751623s ago: executing program 2 (id=8516): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) 4m40.256974016s ago: executing program 1 (id=8581): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000080)='./bus/../file0\x00', &(0x7f0000000240), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000001280)={0x2020}, 0x2020) 4m39.959113173s ago: executing program 1 (id=8584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="01031e0003001400060066f7cb6e00140601fc000000000000000000000000000001ff0200000000000000000000000000014e244e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5080"], 0x46) 4m39.326443476s ago: executing program 1 (id=8587): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) ptrace(0x4208, r0) 4m38.840130105s ago: executing program 1 (id=8590): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00') 4m38.640183123s ago: executing program 1 (id=8591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x48, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0xa5}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0xa, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) 4m38.107582716s ago: executing program 40 (id=8516): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) 4m38.094745734s ago: executing program 1 (id=8595): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 4m37.073093605s ago: executing program 41 (id=8595): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 2m7.986114641s ago: executing program 0 (id=9491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) syz_open_dev$dri(&(0x7f0000007c00), 0xfffffffffffffffa, 0x8100) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dri/0/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) 2m7.712936072s ago: executing program 0 (id=9493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}, 0x1, 0x17, 0x0, 0x844}, 0x0) 2m7.403723659s ago: executing program 0 (id=9496): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, &(0x7f0000001540)=[{&(0x7f00000004c0)="3751f02b82f73ccfc7c43161c4ff26fa3893119fd147a1576d9456136ab5f15493", 0x21}, {&(0x7f0000000500)="d3e8a24fba584651e415a77c020235", 0xf}], 0x2) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x7) 2m7.096985578s ago: executing program 0 (id=9500): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x185093, 0x0) 2m6.786913446s ago: executing program 0 (id=9501): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2m6.335947377s ago: executing program 0 (id=9502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x12e, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1b, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x116, 0x0, @wg=@data={0x4, 0x202, 0x10001, "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"}}}}, 0x13c) 2m5.627968733s ago: executing program 42 (id=9502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x12e, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1b, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x116, 0x0, @wg=@data={0x4, 0x202, 0x10001, "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"}}}}, 0x13c) 28.735484054s ago: executing program 3 (id=10133): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648de62e9e5869c887c68e1bd0b0dfa32c728ef86fde309fded8428648ce3d040302303a3138303606031504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234333232313632365a180f32313234", 0x83, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280)=ANY=[], 0x8) 28.482120979s ago: executing program 3 (id=10134): syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r0]) 25.204860594s ago: executing program 3 (id=10157): r0 = syz_usb_connect(0x3, 0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001010203010902300001010080320904000002ff00000007058102000200070501020002000904000101ff00000007058201"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 21.033099912s ago: executing program 3 (id=10170): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe0302, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x13, r2, 0x0, r1}) 20.596084597s ago: executing program 3 (id=10175): mkdir(&(0x7f0000001000)='./file0\x00', 0x1ff) mkdir(&(0x7f0000000000)='./file0/sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./file0/sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0/sys/class/tty/ttyS1/console\x00', 0x2, 0x0) write(r0, &(0x7f0000000900)='1', 0x1) 20.214786008s ago: executing program 3 (id=10186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/100, 0x7ffe) read(r0, &(0x7f0000000040)=""/58, 0x3a) 4.812577413s ago: executing program 43 (id=10186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/100, 0x7ffe) read(r0, &(0x7f0000000040)=""/58, 0x3a) 4.144747003s ago: executing program 5 (id=10218): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x60000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff2) close(r1) 3.933697471s ago: executing program 7 (id=10220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) 3.478183093s ago: executing program 5 (id=10221): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 3.474909628s ago: executing program 7 (id=10222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x41000, 0x1, 0x3, 0x5, 0x0, [{0x3, 0x53, 0x9, '\x00', 0x2}, {0x0, 0x9, 0x8, '\x00', 0x4}, {0x10, 0xa, 0x1, '\x00', 0xb}, {0xd7, 0x78, 0x0, '\x00', 0x5}, {0x3, 0x6, 0xa9, '\x00', 0x3}, {0xfa, 0x4, 0xfa, '\x00', 0x4b}, {0x1, 0xa, 0x1, '\x00', 0xb1}, {0x0, 0x1, 0x2, '\x00', 0xc}, {0x8, 0xe, 0x1, '\x00', 0x7}, {0x7, 0x4, 0x1, '\x00', 0x8e}, {0x6, 0x6, 0x0, '\x00', 0x8}, {0x8, 0x4, 0x8, '\x00', 0x4}, {0x32, 0x5f, 0x3, '\x00', 0x7f}, {0x81, 0xb, 0x8, '\x00', 0x4}, {0x4d, 0x8, 0x8, '\x00', 0x4}, {0x2, 0xa9, 0x5, '\x00', 0xbd}, {0x3, 0xd2, 0x38}, {0xb5, 0x0, 0x5, '\x00', 0x3}, {0x8, 0x9, 0x5, '\x00', 0x6}, {0x6, 0x3, 0x14, '\x00', 0x4}, {0x8, 0x4, 0x2d, '\x00', 0xd}, {0x7, 0x9, 0xe1, '\x00', 0x9}, {0x8, 0x9, 0xa, '\x00', 0xa3}, {0x8, 0x9, 0x3, '\x00', 0x5}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0xa, 0x6, 0x8, 0x4, 0x4, 0x4, 0x8, 0x10, 0xb0, 0x7, 0x2, 0xe, 0x9, 0x4c, 0xfe, 0xe0}}) 3.183069587s ago: executing program 5 (id=10223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xf}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 3.111242627s ago: executing program 7 (id=10224): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x1) set_mempolicy(0x1, 0x0, 0x47) 2.798409993s ago: executing program 5 (id=10225): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) shutdown(r0, 0x1) 2.785365216s ago: executing program 7 (id=10226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) 2.287257642s ago: executing program 5 (id=10228): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000340)="ab") 2.126880976s ago: executing program 7 (id=10231): socket$rds(0x15, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) close(0x4) 1.877895677s ago: executing program 4 (id=10232): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) write$cgroup_subtree(r0, 0x0, 0x32600) 1.549737549s ago: executing program 7 (id=10233): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000080)='V', 0x1) close(0x4) 1.447489629s ago: executing program 4 (id=10234): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa31076b876c1d000000000400000300000304001a", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040040) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6802000001050101000000000000000005000006540201000000000081"], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) 1.096955467s ago: executing program 4 (id=10235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.041668417s ago: executing program 4 (id=10236): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 317.576638ms ago: executing program 5 (id=10237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="04000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100", @ANYBLOB="040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100040001000400010004000100"], 0x460}}, 0x0) 53.182086ms ago: executing program 4 (id=10238): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x40000000, 0x1000, 0x7, 0x40000001, 0x4b4d564b, 0x564b4d56, 0x4d}]}) 0s ago: executing program 4 (id=10239): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r2}, &(0x7f00000002c0)=0x8) kernel console output (not intermixed with test programs): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1240.532464][T28950] loop5: detected capacity change from 0 to 7 [ 1240.532893][T28952] fuse: fd is not a fuse device [ 1240.553283][T28950] loop5: [POWERTEC] p1 [ 1240.553475][T28950] loop5: p1 start 1701642240 is beyond EOD, truncated [ 1241.079253][T28965] ima: policy update completed [ 1243.076127][T28996] FAULT_INJECTION: forcing a failure. [ 1243.076127][T28996] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.076162][T28996] CPU: 1 UID: 0 PID: 28996 Comm: syz.3.9421 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1243.076196][T28996] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1243.076206][T28996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1243.076219][T28996] Call Trace: [ 1243.076228][T28996] [ 1243.076238][T28996] dump_stack_lvl+0xe8/0x150 [ 1243.076270][T28996] should_fail_ex+0x3eb/0x540 [ 1243.076298][T28996] should_failslab+0xa8/0x100 [ 1243.076320][T28996] ? alloc_empty_file+0x5b/0x1d0 [ 1243.076344][T28996] kmem_cache_alloc_noprof+0x9c/0x600 [ 1243.076374][T28996] ? alloc_empty_file+0x5b/0x1d0 [ 1243.076402][T28996] alloc_empty_file+0x5b/0x1d0 [ 1243.076426][T28996] dentry_open+0x44/0xa0 [ 1243.076456][T28996] open_detached_copy+0x3ee/0x530 [ 1243.076494][T28996] vfs_open_tree+0x34f/0x3c0 [ 1243.076526][T28996] ? __pfx_vfs_open_tree+0x10/0x10 [ 1243.076565][T28996] __x64_sys_open_tree+0x96/0x110 [ 1243.076591][T28996] do_syscall_64+0x166/0x520 [ 1243.076610][T28996] ? trace_irq_disable+0x3b/0x140 [ 1243.076639][T28996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.076660][T28996] ? clear_bhb_loop+0x70/0xc0 [ 1243.076684][T28996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.076705][T28996] RIP: 0033:0x7fc4fe39e159 [ 1243.076725][T28996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.076743][T28996] RSP: 002b:00007fc4ff236028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1243.076766][T28996] RAX: ffffffffffffffda RBX: 00007fc4fe625fa0 RCX: 00007fc4fe39e159 [ 1243.076781][T28996] RDX: 0000000000089901 RSI: 0000200000000100 RDI: 0000000000000003 [ 1243.076795][T28996] RBP: 00007fc4fe43506b R08: 0000000000000000 R09: 0000000000000000 [ 1243.076808][T28996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.076822][T28996] R13: 00007fc4fe626038 R14: 00007fc4fe625fa0 R15: 00007fff7ba69968 [ 1243.076852][T28996] [ 1243.732096][T29004] FAULT_INJECTION: forcing a failure. [ 1243.732096][T29004] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.732130][T29004] CPU: 1 UID: 0 PID: 29004 Comm: syz.3.9424 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1243.732161][T29004] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1243.732170][T29004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1243.732182][T29004] Call Trace: [ 1243.732192][T29004] [ 1243.732201][T29004] dump_stack_lvl+0xe8/0x150 [ 1243.732233][T29004] should_fail_ex+0x3eb/0x540 [ 1243.732261][T29004] should_failslab+0xa8/0x100 [ 1243.732287][T29004] ? do_timer_create+0x253/0x1140 [ 1243.732314][T29004] kmem_cache_alloc_noprof+0x9c/0x600 [ 1243.732345][T29004] ? do_timer_create+0x253/0x1140 [ 1243.732376][T29004] do_timer_create+0x253/0x1140 [ 1243.732421][T29004] ? __pfx_do_timer_create+0x10/0x10 [ 1243.732447][T29004] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1243.732476][T29004] __x64_sys_timer_create+0x14c/0x1c0 [ 1243.732498][T29004] ? __UNIQUE_ID_modinfo_13796+0x64302d27/0xffffffffffec8d22 [ 1243.732587][T29004] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 1243.732613][T29004] ? rcu_is_watching+0x16/0xb0 [ 1243.732645][T29004] do_syscall_64+0x166/0x520 [ 1243.732664][T29004] ? trace_irq_disable+0x3b/0x140 [ 1243.732693][T29004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.732714][T29004] ? clear_bhb_loop+0x70/0xc0 [ 1243.732738][T29004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.732758][T29004] RIP: 0033:0x7fc4fe39e159 [ 1243.732777][T29004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.732795][T29004] RSP: 002b:00007fc4ff236028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 1243.732816][T29004] RAX: ffffffffffffffda RBX: 00007fc4fe625fa0 RCX: 00007fc4fe39e159 [ 1243.732832][T29004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffff600005 [ 1243.732845][T29004] RBP: 00007fc4fe43506b R08: 0000000000000000 R09: 0000000000000000 [ 1243.732858][T29004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.732871][T29004] R13: 00007fc4fe626038 R14: 00007fc4fe625fa0 R15: 00007fff7ba69968 [ 1243.732895][T29004] ? __UNIQUE_ID_modinfo_13796+0x64302d27/0xffffffffffec8d22 [ 1243.732927][T29004] [ 1243.984624][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 1243.984643][ T31] audit: type=1800 audit(1700000177.061:10996): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1244.033052][T29009] profile_transition: unconfined exec no attachment [ 1244.054150][ T31] audit: type=1800 audit(1700000177.131:10997): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1244.099715][T29012] profile_transition: unconfined exec no attachment [ 1244.634292][ T31] audit: type=1800 audit(1700000177.711:10998): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1244.806604][T29025] profile_transition: unconfined exec no attachment [ 1244.905057][ T31] audit: type=1800 audit(1700000177.981:10999): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 1244.923021][T29027] profile_transition: unconfined exec no attachment [ 1244.975179][ T31] audit: type=1800 audit(1700000178.051:11000): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1245.416125][ T31] audit: type=1800 audit(1700000178.491:11001): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1245.638174][ T31] audit: type=1800 audit(1700000178.711:11002): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1245.993506][ T31] audit: type=1800 audit(1700000179.071:11003): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 1246.047532][ T31] audit: type=1800 audit(1700000179.121:11004): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1246.196697][T29045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9439'. [ 1246.329372][ T31] audit: type=1800 audit(1700000179.391:11005): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1246.659526][T17723] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1246.809598][T17723] usb 6-1: Using ep0 maxpacket: 32 [ 1246.811288][T17723] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1246.814232][T17723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.814263][T17723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.814301][T17723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.818416][T17723] usb 6-1: config 0 descriptor?? [ 1246.880367][T17723] hub 6-1:0.0: USB hub found [ 1247.098940][T17723] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1247.524571][T17723] hid_parser_main: 5 callbacks suppressed [ 1247.524604][T17723] hid-generic 0003:046D:C31C.004D: unknown main item tag 0x0 [ 1247.621056][T17723] hid-generic 0003:046D:C31C.004D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 1247.633517][T29054] zero sized request [ 1247.681183][T29058] profile_transition: unconfined exec no attachment [ 1248.020374][T29062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9449'. [ 1248.209818][T17723] usb 6-1: USB disconnect, device number 20 [ 1248.987520][T29083] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1249.139872][ T1226] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1249.289700][ T1226] usb 6-1: Using ep0 maxpacket: 8 [ 1249.290895][ T1226] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1249.309647][ T1226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.309673][ T1226] usb 6-1: Product: syz [ 1249.309686][ T1226] usb 6-1: Manufacturer: syz [ 1249.309700][ T1226] usb 6-1: SerialNumber: syz [ 1249.333480][ T1226] usb 6-1: config 0 descriptor?? [ 1249.346564][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 1249.346583][ T31] audit: type=1800 audit(1700000182.421:11029): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279235 res=0 errno=0 [ 1249.417569][ T31] audit: type=1800 audit(1700000182.491:11030): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=279267 res=0 errno=0 [ 1249.567454][ T31] audit: type=1800 audit(1700000182.641:11031): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=279242 res=0 errno=0 [ 1249.570769][ T31] audit: type=1800 audit(1700000182.641:11032): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=279243 res=0 errno=0 [ 1249.573139][ T1226] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1249.867993][ T31] audit: type=1800 audit(1700000182.941:11033): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1250.374525][ T1226] usb write operation failed. (-71) [ 1250.383984][ T1226] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1250.386375][ T1226] dvbdev: DVB: registering new adapter (Terratec H7) [ 1250.389524][ T1226] usb 6-1: media controller created [ 1250.392144][ T1226] usb read operation failed. (-71) [ 1250.392609][ T1226] usb write operation failed. (-71) [ 1250.417751][ T1226] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1250.424625][ T1226] usb 6-1: USB disconnect, device number 21 [ 1250.445896][ T31] audit: type=1800 audit(1700000183.511:11034): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=279264 res=0 errno=0 [ 1250.445947][ T31] audit: type=1800 audit(1700000183.521:11035): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=279265 res=0 errno=0 [ 1250.451653][ T31] audit: type=1800 audit(1700000183.521:11036): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=279266 res=0 errno=0 [ 1250.628835][T29100] Process accounting paused [ 1250.725691][ T31] audit: type=1804 audit(1700000183.801:11037): pid=29104 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9464" name="bus" dev="tmpfs" ino=15034 res=1 errno=0 [ 1251.013907][ T31] audit: type=1800 audit(1700000184.091:11038): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1251.098219][T29108] profile_transition: unconfined exec no attachment [ 1252.076948][T29128] profile_transition: unconfined exec no attachment [ 1252.151228][T29131] profile_transition: unconfined exec no attachment [ 1252.642558][T29139] FAULT_INJECTION: forcing a failure. [ 1252.642558][T29139] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.642594][T29139] CPU: 1 UID: 0 PID: 29139 Comm: syz.0.9479 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1252.642626][T29139] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1252.642634][T29139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1252.642648][T29139] Call Trace: [ 1252.642656][T29139] [ 1252.642665][T29139] dump_stack_lvl+0xe8/0x150 [ 1252.642701][T29139] should_fail_ex+0x3eb/0x540 [ 1252.642730][T29139] should_failslab+0xa8/0x100 [ 1252.642754][T29139] ? prepare_creds+0x30/0x820 [ 1252.642787][T29139] kmem_cache_alloc_noprof+0x9c/0x600 [ 1252.642819][T29139] ? prepare_creds+0x30/0x820 [ 1252.642854][T29139] prepare_creds+0x30/0x820 [ 1252.642889][T29139] __sys_setresgid+0x59c/0x8f0 [ 1252.642918][T29139] do_syscall_64+0x166/0x520 [ 1252.642947][T29139] ? trace_irq_disable+0x3b/0x140 [ 1252.642977][T29139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.642999][T29139] ? clear_bhb_loop+0x70/0xc0 [ 1252.643024][T29139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.643044][T29139] RIP: 0033:0x7fed4919e159 [ 1252.643064][T29139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.643081][T29139] RSP: 002b:00007fed49fcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 1252.643107][T29139] RAX: ffffffffffffffda RBX: 00007fed49425fa0 RCX: 00007fed4919e159 [ 1252.643125][T29139] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 000000000000ee00 [ 1252.643139][T29139] RBP: 00007fed4923506b R08: 0000000000000000 R09: 0000000000000000 [ 1252.643153][T29139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1252.643167][T29139] R13: 00007fed49426038 R14: 00007fed49425fa0 R15: 00007ffc0da86b68 [ 1252.643198][T29139] [ 1252.670845][T29142] profile_transition: unconfined exec no attachment [ 1252.867655][T29144] profile_transition: unconfined exec no attachment [ 1253.496029][T29154] profile_transition: unconfined exec no attachment [ 1254.362252][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1254.362272][ T31] audit: type=1800 audit(1700000187.441:11057): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 1254.608909][ T31] audit: type=1800 audit(1700000187.681:11058): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1254.675869][ T31] audit: type=1800 audit(1700000187.751:11059): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 1254.969866][ T31] audit: type=1800 audit(1700000188.041:11060): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1255.027403][ T31] audit: type=1800 audit(1700000188.101:11061): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 1255.088158][T29181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9498'. [ 1256.439450][ T31] audit: type=1800 audit(1700000189.522:11062): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1256.479537][T29187] profile_transition: unconfined exec no attachment [ 1256.596771][ T31] audit: type=1800 audit(1700000189.672:11063): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279362 res=0 errno=0 [ 1256.603353][ T31] audit: type=1800 audit(1700000189.682:11064): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279373 res=0 errno=0 [ 1256.650715][T14306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.700620][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1256.728036][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1256.743424][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1256.748657][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1256.769823][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1256.828521][ T31] audit: type=1800 audit(1700000189.902:11065): pid=8014 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279403 res=0 errno=0 [ 1256.835859][ T31] audit: type=1800 audit(1700000189.912:11066): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=279392 res=0 errno=0 [ 1256.891364][T29192] profile_transition: unconfined exec no attachment [ 1256.959239][T29193] profile_transition: unconfined exec no attachment [ 1257.104358][T29194] profile_transition: unconfined exec no attachment [ 1257.145851][T29195] profile_transition: unconfined exec no attachment [ 1257.528448][T14306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.625328][T29208] profile_transition: unconfined exec no attachment [ 1257.658318][T29209] profile_transition: unconfined exec no attachment [ 1257.869475][T27996] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1257.942042][T14306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.028677][T27996] usb 6-1: Using ep0 maxpacket: 32 [ 1258.030003][T27996] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1258.031631][T27996] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1258.031654][T27996] usb 6-1: config 0 has no interface number 0 [ 1258.031691][T27996] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1258.031717][T27996] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1258.036196][T27996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.036219][T27996] usb 6-1: Product: syz [ 1258.036235][T27996] usb 6-1: Manufacturer: syz [ 1258.036248][T27996] usb 6-1: SerialNumber: syz [ 1258.091779][T29212] profile_transition: unconfined exec no attachment [ 1258.115071][T27996] usb 6-1: config 0 descriptor?? [ 1258.372130][T29213] profile_transition: unconfined exec no attachment [ 1258.673442][T14306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.760671][T27996] appletouch 6-1:0.85: Geyser mode initialized. [ 1258.778755][T27996] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input128 [ 1258.859002][ T52] Bluetooth: hci3: command tx timeout [ 1258.990950][T27996] usb 6-1: USB disconnect, device number 22 [ 1259.143523][T27996] appletouch 6-1:0.85: input: appletouch disconnected [ 1259.524935][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 1259.524955][ T31] audit: type=1800 audit(1700000192.602:11091): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1259.581725][ T31] audit: type=1800 audit(1700000192.662:11092): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=280567 res=0 errno=0 [ 1259.598677][ T31] audit: type=1800 audit(1700000192.672:11093): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=280572 res=0 errno=0 [ 1259.598964][T29225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9514'. [ 1259.603119][ T31] audit: type=1800 audit(1700000192.682:11094): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=280576 res=0 errno=0 [ 1259.622380][ T31] audit: type=1800 audit(1700000192.702:11095): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=280575 res=0 errno=0 [ 1259.722442][ T31] audit: type=1800 audit(1700000192.792:11096): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=280578 res=0 errno=0 [ 1259.803607][ T31] audit: type=1800 audit(1700000192.882:11097): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1259.888228][ T31] audit: type=1800 audit(1700000192.962:11098): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1259.942649][ T31] audit: type=1800 audit(1700000193.022:11099): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=280867 res=0 errno=0 [ 1259.944882][ T31] audit: type=1800 audit(1700000193.022:11100): pid=8014 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=280872 res=0 errno=0 [ 1260.289051][T29241] profile_transition: unconfined exec no attachment [ 1260.404900][T14306] bond0: left allmulticast mode [ 1260.404925][T14306] bond_slave_0: left allmulticast mode [ 1260.404943][T14306] bond_slave_1: left allmulticast mode [ 1260.451572][T14306] bond0: left promiscuous mode [ 1260.451594][T14306] bond_slave_0: left promiscuous mode [ 1260.451795][T14306] bond_slave_1: left promiscuous mode [ 1260.457341][T14306] bridge0: port 3(bond0) entered disabled state [ 1260.480042][T14306] bridge_slave_1: left allmulticast mode [ 1260.480068][T14306] bridge_slave_1: left promiscuous mode [ 1260.480273][T14306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.517362][T14306] bridge_slave_0: left allmulticast mode [ 1260.517390][T14306] bridge_slave_0: left promiscuous mode [ 1260.517741][T14306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.528788][ T989] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1260.698671][ T989] usb 6-1: Using ep0 maxpacket: 16 [ 1260.701291][ T989] usb 6-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 1260.704186][ T989] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1260.704222][ T989] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1260.704251][ T989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.707271][ T989] usb 6-1: config 0 descriptor?? [ 1260.938676][ T52] Bluetooth: hci3: command tx timeout [ 1261.183376][ T989] lenovo 0003:17EF:6009.004E: unknown main item tag 0x2 [ 1261.183411][ T989] lenovo 0003:17EF:6009.004E: unknown main item tag 0x6 [ 1261.183482][ T989] lenovo 0003:17EF:6009.004E: ignoring exceeding usage max [ 1261.240250][ T989] lenovo 0003:17EF:6009.004E: hidraw0: USB HID v40.81 Device [HID 17ef:6009] on usb-dummy_hcd.5-1/input0 [ 1261.424469][ T989] usb 6-1: USB disconnect, device number 23 [ 1261.562321][T29258] profile_transition: 6 callbacks suppressed [ 1261.562342][T29258] profile_transition: unconfined exec no attachment [ 1261.610413][T29256] fido_id[29256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1261.732036][T29259] profile_transition: unconfined exec no attachment [ 1261.751949][T14306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.787444][T14306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.802358][T14306] bond0 (unregistering): Released all slaves [ 1261.855343][T29260] profile_transition: unconfined exec no attachment [ 1261.985852][T29261] profile_transition: unconfined exec no attachment [ 1262.355025][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1262.435816][T29188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.435918][T29188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.447961][T29188] bridge_slave_0: entered allmulticast mode [ 1262.454202][T29188] bridge_slave_0: entered promiscuous mode [ 1262.469523][T29188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.473205][T29188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.473377][T29188] bridge_slave_1: entered allmulticast mode [ 1262.482590][T29188] bridge_slave_1: entered promiscuous mode [ 1262.695675][T29271] profile_transition: unconfined exec no attachment [ 1262.851674][T29188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.873995][T29188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.887851][T29275] profile_transition: unconfined exec no attachment [ 1263.027303][ T52] Bluetooth: hci3: command tx timeout [ 1263.290734][T29282] profile_transition: unconfined exec no attachment [ 1263.355778][T29188] team0: Port device team_slave_0 added [ 1263.362533][T29188] team0: Port device team_slave_1 added [ 1263.506305][T29284] profile_transition: unconfined exec no attachment [ 1263.604865][T29188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.604886][T29188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.604914][T29188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.614824][T29188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.614842][T29188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.614869][T29188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.987087][T14306] hsr_slave_0: left promiscuous mode [ 1264.027269][T14306] hsr_slave_1: left promiscuous mode [ 1264.033750][T29292] profile_transition: unconfined exec no attachment [ 1264.037893][T14306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.037917][T14306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.066904][T14306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.066928][T14306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.145272][T14306] veth1_macvtap: left promiscuous mode [ 1264.145313][T14306] veth0_macvtap: left promiscuous mode [ 1264.145411][T14306] veth1_vlan: left promiscuous mode [ 1264.145474][T14306] veth0_vlan: left promiscuous mode [ 1264.180266][T29296] profile_transition: unconfined exec no attachment [ 1264.736035][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 1264.736054][ T31] audit: type=1800 audit(1700000197.812:11132): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1265.100052][ T52] Bluetooth: hci3: command tx timeout [ 1265.160750][ T31] audit: type=1800 audit(1700000198.242:11133): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1265.283398][ T31] audit: type=1800 audit(1700000198.362:11134): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1265.465005][ T31] audit: type=1800 audit(1700000198.542:11135): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1265.764161][T14306] team0 (unregistering): Port device team_slave_1 removed [ 1265.805754][T14306] team0 (unregistering): Port device team_slave_0 removed [ 1266.014745][T29188] hsr_slave_0: entered promiscuous mode [ 1266.018893][T29188] hsr_slave_1: entered promiscuous mode [ 1266.021470][T29188] debugfs: 'hsr0' already exists in 'hsr' [ 1266.021490][T29188] Cannot create hsr debugfs directory [ 1266.023235][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1266.085564][T29314] syzkaller1: entered promiscuous mode [ 1266.085587][T29314] syzkaller1: entered allmulticast mode [ 1266.366673][ T31] audit: type=1800 audit(1700000199.442:11136): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1266.616982][ T31] audit: type=1800 audit(1700000199.692:11137): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1266.766736][T29331] profile_transition: 8 callbacks suppressed [ 1266.766757][T29331] profile_transition: unconfined exec no attachment [ 1266.890050][T29333] profile_transition: unconfined exec no attachment [ 1267.076272][T29339] profile_transition: unconfined exec no attachment [ 1267.350803][ T31] audit: type=1800 audit(1700000200.432:11138): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1267.440870][T29343] profile_transition: unconfined exec no attachment [ 1267.678732][ T31] audit: type=1800 audit(1700000200.762:11139): pid=29188 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24608 res=0 errno=0 [ 1267.698813][T29350] profile_transition: unconfined exec no attachment [ 1267.728168][ T31] audit: type=1800 audit(1700000200.812:11140): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1267.941306][ T31] audit: type=1800 audit(1700000201.022:11141): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1268.090576][T27996] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1268.143281][T29359] profile_transition: unconfined exec no attachment [ 1268.192900][T29363] sock: sock_set_timeout: `syz.4.9552' (pid 29363) tries to set negative timeout [ 1268.279201][T27996] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1268.283637][T27996] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.283660][T27996] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1268.283692][T27996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.336031][T27996] usb 6-1: config 0 descriptor?? [ 1268.476894][T29368] profile_transition: unconfined exec no attachment [ 1268.623704][T29371] profile_transition: unconfined exec no attachment [ 1269.056494][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1269.082686][T29376] input: syz1 as /devices/virtual/input/input129 [ 1269.082724][T29376] input: failed to attach handler leds to device input129, error: -6 [ 1269.187640][T29377] profile_transition: unconfined exec no attachment [ 1269.377537][T29381] profile_transition: unconfined exec no attachment [ 1269.669950][T29386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1269.927291][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 1269.927310][ T31] audit: type=1800 audit(1700000203.002:11161): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1270.222093][ T31] audit: type=1800 audit(1700000203.302:11162): pid=29188 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24607 res=0 errno=0 [ 1270.255276][ T31] audit: type=1800 audit(1700000203.332:11163): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=286180 res=0 errno=0 [ 1270.702038][ T31] audit: type=1800 audit(1700000203.782:11164): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1270.889476][ T5694] usb 6-1: USB disconnect, device number 24 [ 1271.005571][ T31] audit: type=1800 audit(1700000204.083:11165): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1271.253006][ T31] audit: type=1800 audit(1700000204.333:11166): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1271.476507][ T31] audit: type=1800 audit(1700000204.553:11167): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1271.478166][T29415] FAULT_INJECTION: forcing a failure. [ 1271.478166][T29415] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.478198][T29415] CPU: 1 UID: 0 PID: 29415 Comm: syz.5.9568 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1271.478224][T29415] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1271.478231][T29415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1271.478243][T29415] Call Trace: [ 1271.478251][T29415] [ 1271.478259][T29415] dump_stack_lvl+0xe8/0x150 [ 1271.478288][T29415] should_fail_ex+0x3eb/0x540 [ 1271.478318][T29415] should_failslab+0xa8/0x100 [ 1271.478340][T29415] __kmalloc_cache_noprof+0x9e/0x600 [ 1271.478366][T29415] ? resv_map_alloc+0x51/0x2c0 [ 1271.478390][T29415] ? resv_map_alloc+0x51/0x2c0 [ 1271.478412][T29415] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1271.478433][T29415] resv_map_alloc+0x51/0x2c0 [ 1271.478458][T29415] hugetlbfs_get_inode+0x5f/0x660 [ 1271.478489][T29415] hugetlb_file_setup+0x21d/0x630 [ 1271.478513][T29415] ksys_mmap_pgoff+0x1ec/0x760 [ 1271.478540][T29415] do_syscall_64+0x166/0x520 [ 1271.478556][T29415] ? trace_irq_disable+0x3b/0x140 [ 1271.478581][T29415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.478600][T29415] ? clear_bhb_loop+0x70/0xc0 [ 1271.478622][T29415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.478639][T29415] RIP: 0033:0x7f111059e159 [ 1271.478657][T29415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.478673][T29415] RSP: 002b:00007f1111546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1271.478695][T29415] RAX: ffffffffffffffda RBX: 00007f1110825fa0 RCX: 00007f111059e159 [ 1271.478710][T29415] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 1271.478723][T29415] RBP: 00007f111063506b R08: ffffffffffffffff R09: 0000000000000000 [ 1271.478734][T29415] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 1271.478746][T29415] R13: 00007f1110826038 R14: 00007f1110825fa0 R15: 00007fff4c9ba998 [ 1271.478773][T29415] [ 1271.716883][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1271.796550][ T31] audit: type=1800 audit(1700000204.873:11168): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1271.915494][T29423] profile_transition: 8 callbacks suppressed [ 1271.915515][T29423] profile_transition: unconfined exec no attachment [ 1272.081914][ T31] audit: type=1800 audit(1700000205.163:11169): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1272.132217][T29188] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1272.185069][T29188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1272.196122][T29188] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1272.252525][T29188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1272.253638][T29188] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1272.277130][ T31] audit: type=1800 audit(1700000205.353:11170): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1272.357147][T29188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1272.371065][T29188] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1272.402028][T29188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1272.505556][T29437] profile_transition: unconfined exec no attachment [ 1272.683055][T29444] profile_transition: unconfined exec no attachment [ 1272.906775][T29449] profile_transition: unconfined exec no attachment [ 1272.992389][T29188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.062418][T29188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.080272][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.080380][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.170965][ T234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.171064][ T234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.362153][T29461] profile_transition: unconfined exec no attachment [ 1273.375229][T29462] profile_transition: unconfined exec no attachment [ 1273.417768][ T5694] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1273.504599][T29465] profile_transition: unconfined exec no attachment [ 1273.568969][ T5694] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1273.572913][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.594578][ T5694] usb 6-1: config 0 descriptor?? [ 1273.802294][T29468] profile_transition: unconfined exec no attachment [ 1273.815536][T29469] profile_transition: unconfined exec no attachment [ 1273.848438][ T5694] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1274.073369][T29472] profile_transition: unconfined exec no attachment [ 1274.102508][ T5694] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1274.102536][ T5694] [drm] Initialized udl on minor 1 [ 1275.115722][T29490] syzkaller1: entered promiscuous mode [ 1275.115747][T29490] syzkaller1: entered allmulticast mode [ 1275.688867][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 1275.688888][ T31] audit: type=1800 audit(1700000208.753:11187): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1275.715283][T29188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.294572][ T31] audit: type=1800 audit(1700000209.363:11188): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1276.696987][ T31] audit: type=1800 audit(1700000209.763:11189): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1276.956697][T29525] profile_transition: 19 callbacks suppressed [ 1276.956720][T29525] profile_transition: unconfined exec no attachment [ 1277.011186][T29526] profile_transition: unconfined exec no attachment [ 1277.235568][ T31] audit: type=1800 audit(1700000210.303:11190): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1277.306434][T29188] veth0_vlan: entered promiscuous mode [ 1277.332758][T29188] veth1_vlan: entered promiscuous mode [ 1277.367211][T29529] profile_transition: unconfined exec no attachment [ 1277.505494][T29188] veth0_macvtap: entered promiscuous mode [ 1277.541211][T29188] veth1_macvtap: entered promiscuous mode [ 1277.576363][T29188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.686189][T29188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.748777][ T31] audit: type=1800 audit(1700000210.823:11191): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1277.752141][T29534] netlink: 'syz.4.9597': attribute type 16 has an invalid length. [ 1277.752163][T29534] netlink: 63874 bytes leftover after parsing attributes in process `syz.4.9597'. [ 1277.788683][T28530] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.790302][T28530] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.790341][T28530] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.790374][T28530] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.931562][ T31] audit: type=1800 audit(1700000211.003:11192): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1278.074878][T29540] profile_transition: unconfined exec no attachment [ 1278.198768][ T31] audit: type=1800 audit(1700000211.273:11193): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=286828 res=0 errno=0 [ 1278.302711][ T31] audit: type=1800 audit(1700000211.383:11194): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1278.653988][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.654012][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.718318][T29549] profile_transition: unconfined exec no attachment [ 1278.727656][ T31] audit: type=1800 audit(1700000211.793:11195): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=286954 res=0 errno=0 [ 1279.180757][ T5694] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1279.181300][ T5694] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1279.184210][T29542] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1279.245706][ T5694] usb 6-1: USB disconnect, device number 25 [ 1279.253309][T29542] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1279.253504][T29542] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1279.393469][T28530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.393492][T28530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.488188][ T31] audit: type=1800 audit(1700000212.563:11196): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1279.866091][T29562] profile_transition: unconfined exec no attachment [ 1279.924866][T29564] profile_transition: unconfined exec no attachment [ 1280.514799][T29575] profile_transition: unconfined exec no attachment [ 1280.764749][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1280.764769][ T31] audit: type=1800 audit(1700000213.833:11202): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1280.810288][T29570] Process accounting resumed [ 1280.888274][T29587] profile_transition: unconfined exec no attachment [ 1281.081747][ T31] audit: type=1800 audit(1700000214.153:11203): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1281.094075][T29590] profile_transition: unconfined exec no attachment [ 1281.120303][ T31] audit: type=1800 audit(1700000214.183:11204): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1281.435086][ T31] audit: type=1800 audit(1700000214.503:11205): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1281.505269][T29594] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1281.505310][T29594] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1281.505350][T29594] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1281.564260][T29594] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1281.593408][T29594] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1281.653514][ T31] audit: type=1800 audit(1700000214.723:11206): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=287210 res=0 errno=0 [ 1281.693620][ T31] audit: type=1800 audit(1700000214.763:11207): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=287225 res=0 errno=0 [ 1281.750934][ T31] audit: type=1800 audit(1700000214.823:11208): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=287176 res=0 errno=0 [ 1282.074002][ T31] audit: type=1800 audit(1700000215.143:11209): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1282.171139][T29606] profile_transition: 2 callbacks suppressed [ 1282.171160][T29606] profile_transition: unconfined exec no attachment [ 1282.518512][ T31] audit: type=1800 audit(1700000215.593:11210): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1282.542290][T29612] profile_transition: unconfined exec no attachment [ 1282.623705][T28532] smbdirect: ib_dev[syz2] removed [ 1282.788488][ T31] audit: type=1800 audit(1700000215.863:11211): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1282.911490][T29618] profile_transition: unconfined exec no attachment [ 1283.159767][T29622] profile_transition: unconfined exec no attachment [ 1283.232058][T29626] profile_transition: unconfined exec no attachment [ 1283.292958][T29628] profile_transition: unconfined exec no attachment [ 1283.382209][T29629] profile_transition: unconfined exec no attachment [ 1283.659895][T29636] profile_transition: unconfined exec no attachment [ 1283.821086][T29638] overlayfs: failed to clone upperpath [ 1283.898548][T29642] profile_transition: unconfined exec no attachment [ 1283.932193][T29641] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input130 [ 1284.155004][T29649] profile_transition: unconfined exec no attachment [ 1284.957365][T28608] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1285.110642][T28608] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1285.113474][T28608] usb 6-1: config index 0 descriptor too short (expected 45, got 28) [ 1285.113500][T28608] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 1285.113550][T28608] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1285.159896][T28608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.159922][T28608] usb 6-1: Product: syz [ 1285.159937][T28608] usb 6-1: Manufacturer: syz [ 1285.159952][T28608] usb 6-1: SerialNumber: syz [ 1285.930004][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 1285.930022][ T31] audit: type=1800 audit(1700000219.003:11239): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1286.031531][ T31] audit: type=1800 audit(1700000219.103:11240): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1286.146576][ T31] audit: type=1800 audit(1700000219.213:11241): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1286.312099][T29695] gadgetfs: bound to dummy_udc driver [ 1286.533283][T29708] overlayfs: failed to clone upperpath [ 1286.580785][ T31] audit: type=1800 audit(1700000219.653:11242): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1286.750872][ T31] audit: type=1800 audit(1700000219.814:11243): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1286.883669][ T31] audit: type=1800 audit(1700000219.954:11244): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1287.302529][T29727] profile_transition: 13 callbacks suppressed [ 1287.302550][T29727] profile_transition: unconfined exec no attachment [ 1287.637934][ T31] audit: type=1800 audit(1700000220.714:11245): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1287.659527][T29732] profile_transition: unconfined exec no attachment [ 1287.894130][ T1226] usb 6-1: USB disconnect, device number 26 [ 1287.929161][ T31] audit: type=1800 audit(1700000221.004:11246): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1287.989660][ T31] audit: type=1800 audit(1700000221.064:11247): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1288.116289][ T31] audit: type=1800 audit(1700000221.184:11248): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1288.162347][T29742] profile_transition: unconfined exec no attachment [ 1288.420288][T29750] profile_transition: unconfined exec no attachment [ 1288.685804][T29761] profile_transition: unconfined exec no attachment [ 1288.711023][T29756] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1288.711256][T29756] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1288.711359][T29756] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1288.791331][T29763] profile_transition: unconfined exec no attachment [ 1288.915032][T29756] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1289.000245][T29771] profile_transition: unconfined exec no attachment [ 1289.058323][T29772] profile_transition: unconfined exec no attachment [ 1289.285480][T29775] profile_transition: unconfined exec no attachment [ 1289.475274][T29781] profile_transition: unconfined exec no attachment [ 1289.608970][T29782] FAULT_INJECTION: forcing a failure. [ 1289.608970][T29782] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.609007][T29782] CPU: 0 UID: 0 PID: 29782 Comm: syz.5.9669 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1289.609039][T29782] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1289.609048][T29782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1289.609061][T29782] Call Trace: [ 1289.609069][T29782] [ 1289.609078][T29782] dump_stack_lvl+0xe8/0x150 [ 1289.609110][T29782] should_fail_ex+0x3eb/0x540 [ 1289.609138][T29782] should_failslab+0xa8/0x100 [ 1289.609164][T29782] __kmalloc_noprof+0xf9/0x710 [ 1289.609195][T29782] ? sk_prot_alloc+0xe7/0x210 [ 1289.609297][T29782] ? sk_prot_alloc+0xe7/0x210 [ 1289.609317][T29782] ? security_inode_alloc+0xd5/0x310 [ 1289.609348][T29782] sk_prot_alloc+0xe7/0x210 [ 1289.609368][T29782] ? sk_alloc+0x27/0x390 [ 1289.609390][T29782] sk_alloc+0x3a/0x390 [ 1289.609415][T29782] __netlink_create+0x62/0x260 [ 1289.609472][T29782] ? __netlink_kernel_create+0xd4/0x720 [ 1289.609499][T29782] __netlink_kernel_create+0x13d/0x720 [ 1289.609526][T29782] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1289.609554][T29782] ? diag_net_init+0xa5/0x140 [ 1289.609608][T29782] diag_net_init+0xba/0x140 [ 1289.609635][T29782] ? __pfx_diag_net_init+0x10/0x10 [ 1289.609665][T29782] ? __pfx_sock_diag_rcv+0x10/0x10 [ 1289.609693][T29782] ? __pfx_sock_diag_bind+0x10/0x10 [ 1289.609722][T29782] ? cma_pernet+0x23/0x240 [ 1289.609813][T29782] ? __raw_spin_lock_init+0x45/0x100 [ 1289.609844][T29782] ops_init+0x35d/0x5d0 [ 1289.609874][T29782] setup_net+0x118/0x350 [ 1289.609906][T29782] ? __pfx_setup_net+0x10/0x10 [ 1289.609936][T29782] ? down_read_killable+0x1b6/0x3b0 [ 1289.609960][T29782] ? __ns_common_init+0x38a/0x590 [ 1289.609988][T29782] copy_net_ns+0x536/0x770 [ 1289.610021][T29782] create_new_namespaces+0x3f0/0x6b0 [ 1289.610047][T29782] ? security_capable+0x7e/0x2c0 [ 1289.610076][T29782] unshare_nsproxy_namespaces+0x144/0x190 [ 1289.610103][T29782] ksys_unshare+0x5a7/0x950 [ 1289.610136][T29782] ? __pfx_ksys_unshare+0x10/0x10 [ 1289.610161][T29782] ? rcu_is_watching+0x16/0xb0 [ 1289.610217][T29782] __x64_sys_unshare+0x38/0x50 [ 1289.610243][T29782] do_syscall_64+0x166/0x520 [ 1289.610262][T29782] ? trace_irq_disable+0x3b/0x140 [ 1289.610291][T29782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.610312][T29782] ? clear_bhb_loop+0x70/0xc0 [ 1289.610337][T29782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.610355][T29782] RIP: 0033:0x7f111059e159 [ 1289.610375][T29782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.610396][T29782] RSP: 002b:00007f1111546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1289.610419][T29782] RAX: ffffffffffffffda RBX: 00007f1110825fa0 RCX: 00007f111059e159 [ 1289.610433][T29782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1289.610452][T29782] RBP: 00007f111063506b R08: 0000000000000000 R09: 0000000000000000 [ 1289.610465][T29782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1289.610477][T29782] R13: 00007f1110826038 R14: 00007f1110825fa0 R15: 00007fff4c9ba998 [ 1289.610506][T29782] [ 1290.699159][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 1290.776707][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1291.001610][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1291.001629][ T31] audit: type=1800 audit(1700000224.074:11267): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1291.081443][T29814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1291.096289][ T31] audit: type=1800 audit(1700000224.164:11268): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=287836 res=0 errno=0 [ 1291.220099][ T31] audit: type=1800 audit(1700000224.294:11269): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1291.396103][ T31] audit: type=1800 audit(1700000224.474:11270): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1291.550413][ T31] audit: type=1800 audit(1700000224.624:11271): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1291.741879][ T31] audit: type=1800 audit(1700000224.814:11272): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1291.785047][T29835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9688'. [ 1292.003756][ T31] audit: type=1800 audit(1700000225.074:11273): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1292.107999][ T31] audit: type=1800 audit(1700000225.184:11274): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1292.248433][ T31] audit: type=1800 audit(1700000225.324:11275): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1292.434871][T29852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1292.481432][T29854] profile_transition: 7 callbacks suppressed [ 1292.481451][T29854] profile_transition: unconfined exec no attachment [ 1292.483709][ T31] audit: type=1800 audit(1700000225.554:11276): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1292.588451][T29856] profile_transition: unconfined exec no attachment [ 1292.658714][T29859] profile_transition: unconfined exec no attachment [ 1292.746406][T29864] profile_transition: unconfined exec no attachment [ 1292.856486][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1292.959537][T29871] profile_transition: unconfined exec no attachment [ 1293.348706][T29881] profile_transition: unconfined exec no attachment [ 1293.776781][T29895] profile_transition: unconfined exec no attachment [ 1294.075083][T29902] overlayfs: failed to clone upperpath [ 1294.083971][T29906] profile_transition: unconfined exec no attachment [ 1294.439467][T29911] profile_transition: unconfined exec no attachment [ 1294.658785][T29917] profile_transition: unconfined exec no attachment [ 1294.936696][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1295.122738][T29928] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1296.247421][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 1296.247440][ T31] audit: type=1800 audit(1700000229.324:11294): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1296.804844][ T31] audit: type=1800 audit(1700000229.874:11295): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1297.062451][ T31] audit: type=1800 audit(1700000230.134:11296): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1297.109093][ T31] audit: type=1800 audit(1700000230.184:11297): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31581 res=0 errno=0 [ 1297.113327][ T31] audit: type=1800 audit(1700000230.184:11298): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31604 res=0 errno=0 [ 1297.240997][ T31] audit: type=1800 audit(1700000230.314:11299): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1297.562624][T29974] profile_transition: 13 callbacks suppressed [ 1297.562646][T29974] profile_transition: unconfined exec no attachment [ 1297.562717][T29973] profile_transition: unconfined exec no attachment [ 1297.685052][ T31] audit: type=1800 audit(1700000230.754:11300): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1297.717351][T29976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9728'. [ 1297.829935][ T31] audit: type=1800 audit(1700000230.904:11301): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1297.899681][T29983] profile_transition: unconfined exec no attachment [ 1297.964451][T29985] profile_transition: unconfined exec no attachment [ 1298.077216][T29990] profile_transition: unconfined exec no attachment [ 1298.170561][T29993] profile_transition: unconfined exec no attachment [ 1298.236609][T29994] profile_transition: unconfined exec no attachment [ 1298.289852][T29995] profile_transition: unconfined exec no attachment [ 1298.341504][ T31] audit: type=1800 audit(1700000231.404:11302): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1298.409749][T29997] profile_transition: unconfined exec no attachment [ 1298.474616][T29999] profile_transition: unconfined exec no attachment [ 1298.582069][ T31] audit: type=1800 audit(1700000231.654:11303): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1299.470143][T30023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9742'. [ 1299.777205][T30029] sctp: [Deprecated]: syz.3.9745 (pid 30029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1299.777205][T30029] Use struct sctp_sack_info instead [ 1300.143450][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.143508][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.284956][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 1301.284974][ T31] audit: type=1800 audit(1700000234.354:11327): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1301.450534][ T31] audit: type=1800 audit(1700000234.524:11328): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1301.685021][ T31] audit: type=1800 audit(1700000234.754:11329): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=289561 res=0 errno=0 [ 1301.707043][ T31] audit: type=1800 audit(1700000234.784:11330): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=289572 res=0 errno=0 [ 1301.883854][ T31] audit: type=1800 audit(1700000234.954:11331): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1302.309051][ T31] audit: type=1800 audit(1700000235.385:11332): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1302.647903][ T31] audit: type=1800 audit(1700000235.725:11333): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1302.744401][T30088] profile_transition: 5 callbacks suppressed [ 1302.744422][T30088] profile_transition: unconfined exec no attachment [ 1302.887795][T30092] profile_transition: unconfined exec no attachment [ 1303.002554][T30095] profile_transition: unconfined exec no attachment [ 1303.050919][ T31] audit: type=1800 audit(1700000236.125:11334): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1303.092240][T30096] profile_transition: unconfined exec no attachment [ 1303.151202][T30099] profile_transition: unconfined exec no attachment [ 1303.201846][ T31] audit: type=1800 audit(1700000236.275:11335): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290421 res=0 errno=0 [ 1303.210209][T30098] input: syz1 as /devices/virtual/input/input131 [ 1303.218457][ T31] audit: type=1800 audit(1700000236.285:11336): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=290436 res=0 errno=0 [ 1303.738288][ T52] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1303.964063][T30107] profile_transition: unconfined exec no attachment [ 1304.409854][T30117] profile_transition: unconfined exec no attachment [ 1304.671273][T30125] profile_transition: unconfined exec no attachment [ 1304.974651][T30131] profile_transition: unconfined exec no attachment [ 1305.283266][T30136] profile_transition: unconfined exec no attachment [ 1305.901610][T28608] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1306.060930][T28608] usb 6-1: Using ep0 maxpacket: 16 [ 1306.061777][T28608] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1306.065963][T28608] usb 6-1: config 0 has no interfaces? [ 1306.101957][T28608] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1306.101985][T28608] usb 6-1: Product: syz [ 1306.101999][T28608] usb 6-1: Manufacturer: syz [ 1306.102014][T28608] usb 6-1: SerialNumber: syz [ 1306.124632][T28608] usb 6-1: config 0 descriptor?? [ 1306.378659][T28608] usb 6-1: USB disconnect, device number 27 [ 1306.394790][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 1306.394809][ T31] audit: type=1800 audit(1700000239.465:11366): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1306.513870][ T31] audit: type=1800 audit(1700000239.585:11367): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1306.726493][ T31] audit: type=1800 audit(1700000239.805:11368): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1306.830932][ T31] audit: type=1800 audit(1700000239.905:11369): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1306.886655][ T31] audit: type=1800 audit(1700000239.965:11370): pid=30168 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.9792" name="hashsize" dev="sysfs" ino=63439 res=0 errno=0 [ 1307.009600][ T31] audit: type=1800 audit(1700000240.085:11371): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1307.078215][ T31] audit: type=1800 audit(1700000240.155:11372): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1307.128376][ T31] audit: type=1800 audit(1700000240.195:11373): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1307.240469][T30175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.254748][ T31] audit: type=1800 audit(1700000240.325:11374): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290708 res=0 errno=0 [ 1307.462509][ T31] audit: type=1800 audit(1700000240.535:11375): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1310.875518][T30234] Process accounting paused [ 1311.030309][T30243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.069532][T30245] netlink: 'syz.4.9824': attribute type 11 has an invalid length. [ 1311.338924][T30248] profile_transition: 5 callbacks suppressed [ 1311.338944][T30248] profile_transition: unconfined exec no attachment [ 1311.433237][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 1311.433259][ T31] audit: type=1800 audit(1700000244.505:11396): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1311.634916][T30259] profile_transition: unconfined exec no attachment [ 1311.734419][T30261] profile_transition: unconfined exec no attachment [ 1311.849585][ T31] audit: type=1800 audit(1700000244.925:11397): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1311.974859][ T31] audit: type=1800 audit(1700000245.045:11398): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1312.050936][T30268] profile_transition: unconfined exec no attachment [ 1312.200290][T30271] profile_transition: unconfined exec no attachment [ 1312.218160][ T31] audit: type=1800 audit(1700000245.295:11399): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1312.310007][T30276] profile_transition: unconfined exec no attachment [ 1312.362009][T30278] profile_transition: unconfined exec no attachment [ 1312.445822][T30280] profile_transition: unconfined exec no attachment [ 1312.496010][ T31] audit: type=1800 audit(1700000245.565:11400): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1312.577808][T30283] profile_transition: unconfined exec no attachment [ 1312.623860][ T31] audit: type=1800 audit(1700000245.695:11401): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1312.679976][T30287] profile_transition: unconfined exec no attachment [ 1312.707375][ T31] audit: type=1800 audit(1700000245.785:11402): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1313.126541][ T31] audit: type=1800 audit(1700000246.205:11403): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1313.218275][T30304] overlayfs: failed to clone upperpath [ 1313.221095][ T31] audit: type=1800 audit(1700000246.295:11404): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1313.257918][T30304] overlayfs: failed to clone lowerpath [ 1313.317922][ T31] audit: type=1800 audit(1700000246.395:11405): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1313.444659][T30310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9840'. [ 1313.515149][T30311] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1314.145963][T26897] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1314.297407][T26897] usb 6-1: Using ep0 maxpacket: 32 [ 1314.298637][T26897] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1314.300421][T26897] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1314.300446][T26897] usb 6-1: config 0 has no interface number 0 [ 1314.300487][T26897] usb 6-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 1314.300513][T26897] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1314.357410][T26897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.357435][T26897] usb 6-1: Product: syz [ 1314.357450][T26897] usb 6-1: Manufacturer: syz [ 1314.357464][T26897] usb 6-1: SerialNumber: syz [ 1314.376079][T26897] usb 6-1: config 0 descriptor?? [ 1314.396913][T30324] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1314.634094][T30324] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1315.053028][T26897] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1315.053059][T26897] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1315.272062][T26897] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1315.272093][T26897] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1315.272113][T26897] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1315.272129][T26897] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1315.272366][T26897] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1315.328925][T26897] usb 6-1: USB disconnect, device number 28 [ 1316.473866][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 1316.473886][ T31] audit: type=1800 audit(1700000249.545:11429): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1316.771026][ T31] audit: type=1800 audit(1700000249.845:11430): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1316.832732][ T31] audit: type=1800 audit(1700000249.905:11431): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1317.066821][ T31] audit: type=1800 audit(1700000250.145:11432): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1317.173575][ T31] audit: type=1800 audit(1700000250.245:11433): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1317.405535][ T31] audit: type=1800 audit(1700000250.485:11434): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1317.467545][ T31] audit: type=1800 audit(1700000250.545:11435): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1317.728006][ T31] audit: type=1800 audit(1700000250.805:11436): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1317.769038][ T31] audit: type=1800 audit(1700000250.845:11437): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1317.972651][ T31] audit: type=1800 audit(1700000251.046:11438): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1319.315397][T30417] sock: sock_set_timeout: `syz.5.9892' (pid 30417) tries to set negative timeout [ 1320.244211][T30441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9902'. [ 1320.406647][ T3368] bond0: (slave bond_slave_0): interface is now down [ 1320.406712][ T3368] bond0: (slave bond_slave_1): interface is now down [ 1320.442613][ T3368] bond0: (slave bond_slave_0): interface is now down [ 1320.468775][ T3368] bond0: (slave bond_slave_1): interface is now down [ 1320.477689][T30446] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9905'. [ 1320.728602][ T3368] bond0: now running without any active interface! [ 1320.798048][T30457] nbd: nbd3 already in use [ 1320.798349][T30457] block nbd3: NBD_DISCONNECT [ 1320.798420][T30457] block nbd3: Send disconnect failed -32 [ 1321.228045][T30468] Set syz1 is full, maxelem 256 reached [ 1321.229515][T30467] syzkaller1: entered promiscuous mode [ 1321.229534][T30467] syzkaller1: entered allmulticast mode [ 1321.548989][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 1321.549009][ T31] audit: type=1800 audit(1700000254.626:11463): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1321.604789][ T31] audit: type=1800 audit(1700000254.686:11464): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1321.808201][ T31] audit: type=1800 audit(1700000254.886:11465): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1322.059598][ T31] audit: type=1800 audit(1700000255.136:11466): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1322.111289][ T31] audit: type=1800 audit(1700000255.186:11467): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1322.179188][ T31] audit: type=1800 audit(1700000255.256:11468): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1322.320603][T30484] overlayfs: failed to clone upperpath [ 1322.405583][ T31] audit: type=1800 audit(1700000255.486:11469): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1322.625203][ T31] audit: type=1800 audit(1700000255.706:11470): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1322.682127][ T31] audit: type=1800 audit(1700000255.756:11471): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1322.854779][T30498] fuse: fd is not a fuse device [ 1322.953723][ T31] audit: type=1800 audit(1700000256.026:11472): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1323.493687][ T52] Bluetooth: hci6: unexpected event for opcode 0x2031 [ 1323.673806][T30517] profile_transition: 4 callbacks suppressed [ 1323.673826][T30517] profile_transition: unconfined exec no attachment [ 1323.752861][T30521] profile_transition: unconfined exec no attachment [ 1324.320910][T30529] kvm [30526]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x800 [ 1324.664529][ T5694] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1324.829291][ T5694] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1324.832156][ T5694] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1324.832244][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.832270][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.832292][ T5694] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1324.832339][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.842059][ T5694] usb 6-1: config 0 descriptor?? [ 1325.282266][ T5694] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1325.282313][ T5694] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1325.282341][ T5694] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1325.282367][ T5694] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1325.282392][ T5694] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1325.282416][ T5694] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1325.282440][ T5694] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1325.282465][ T5694] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1325.282491][ T5694] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1325.282515][ T5694] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1325.327880][ T5694] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1325.391595][T30539] profile_transition: unconfined exec no attachment [ 1325.538032][T26897] usb 6-1: USB disconnect, device number 29 [ 1326.638569][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 1326.638591][ T31] audit: type=1800 audit(1700000259.716:11497): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1326.880954][ T31] audit: type=1800 audit(1700000259.956:11498): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1327.087093][ T31] audit: type=1800 audit(1700000260.166:11499): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1327.332257][ T31] audit: type=1800 audit(1700000260.406:11500): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1327.436661][ T31] audit: type=1800 audit(1700000260.516:11501): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1327.602441][T30573] syzkaller1: entered promiscuous mode [ 1327.602464][T30573] syzkaller1: entered allmulticast mode [ 1327.743795][ T31] audit: type=1800 audit(1700000260.816:11502): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1327.866369][ T31] audit: type=1800 audit(1700000260.946:11503): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1327.988505][T30577] FAULT_INJECTION: forcing a failure. [ 1327.988505][T30577] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.988541][T30577] CPU: 0 UID: 0 PID: 30577 Comm: syz.3.9963 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1327.988574][T30577] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1327.988583][T30577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1327.988596][T30577] Call Trace: [ 1327.988605][T30577] [ 1327.988615][T30577] dump_stack_lvl+0xe8/0x150 [ 1327.988651][T30577] should_fail_ex+0x3eb/0x540 [ 1327.988683][T30577] should_failslab+0xa8/0x100 [ 1327.988710][T30577] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 1327.988742][T30577] ? __d_alloc+0x37/0x6f0 [ 1327.988769][T30577] ? __d_alloc+0x37/0x6f0 [ 1327.988804][T30577] __d_alloc+0x37/0x6f0 [ 1327.988837][T30577] d_alloc_parallel+0xde/0x16b0 [ 1327.988869][T30577] ? lock_acquire+0x115/0x350 [ 1327.988909][T30577] ? __d_lookup+0x66/0x790 [ 1327.988940][T30577] ? __d_lookup+0x66/0x790 [ 1327.988969][T30577] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1327.989000][T30577] ? d_lookup+0x1f/0xa0 [ 1327.989031][T30577] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1327.989066][T30577] lookup_open+0x26b/0x1380 [ 1327.989115][T30577] ? lookup_fast+0x1a8/0x5d0 [ 1327.989152][T30577] path_openat+0x696/0x1e40 [ 1327.989201][T30577] do_file_open+0x23e/0x4a0 [ 1327.989237][T30577] ? __pfx_do_file_open+0x10/0x10 [ 1327.989291][T30577] ? _raw_spin_unlock+0x28/0x50 [ 1327.989323][T30577] ? alloc_fd+0x651/0x6c0 [ 1327.989358][T30577] do_sys_openat2+0x115/0x200 [ 1327.989383][T30577] ? __se_sys_futex+0x3a8/0x450 [ 1327.989407][T30577] ? __pfx_do_sys_openat2+0x10/0x10 [ 1327.989436][T30577] ? rcu_is_watching+0x16/0xb0 [ 1327.989463][T30577] __x64_sys_openat+0x138/0x170 [ 1327.989492][T30577] do_syscall_64+0x166/0x520 [ 1327.989512][T30577] ? trace_irq_disable+0x3b/0x140 [ 1327.989541][T30577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.989562][T30577] ? clear_bhb_loop+0x70/0xc0 [ 1327.989587][T30577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.989607][T30577] RIP: 0033:0x7fc4fe39e159 [ 1327.989627][T30577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.989646][T30577] RSP: 002b:00007fc4ff236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1327.989670][T30577] RAX: ffffffffffffffda RBX: 00007fc4fe625fa0 RCX: 00007fc4fe39e159 [ 1327.989686][T30577] RDX: 0000000000060042 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1327.989701][T30577] RBP: 00007fc4fe43506b R08: 0000000000000000 R09: 0000000000000000 [ 1327.989715][T30577] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1327.989727][T30577] R13: 00007fc4fe626038 R14: 00007fc4fe625fa0 R15: 00007fff7ba69968 [ 1327.989761][T30577] [ 1328.281905][ T31] audit: type=1800 audit(1700000261.356:11504): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1328.428100][ T31] audit: type=1800 audit(1700000261.506:11505): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1328.513187][ T31] audit: type=1800 audit(1700000261.586:11506): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1328.833214][T30592] netlink: 408 bytes leftover after parsing attributes in process `syz.7.9970'. [ 1328.931190][T30595] syzkaller1: entered promiscuous mode [ 1328.931214][T30595] syzkaller1: entered allmulticast mode [ 1329.838227][T30616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1331.024372][ T5694] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1331.174901][ T5694] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1331.176354][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.180342][ T5694] usb 6-1: config 0 descriptor?? [ 1331.397625][ T5694] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1331.568996][T30640] profile_transition: unconfined exec no attachment [ 1331.637694][ T5694] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1331.637721][ T5694] [drm] Initialized udl on minor 1 [ 1331.680636][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 1331.680769][ T31] audit: type=1800 audit(1700000264.756:11528): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292786 res=0 errno=0 [ 1331.725893][T30642] profile_transition: unconfined exec no attachment [ 1333.012970][ T31] audit: type=1800 audit(1700000266.086:11529): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1333.590748][ T31] audit: type=1800 audit(1700000266.666:11530): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1333.745581][ T31] audit: type=1800 audit(1700000266.826:11531): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1334.654477][ T31] audit: type=1800 audit(1700000267.736:11532): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1334.897187][ T31] audit: type=1800 audit(1700000267.976:11533): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1335.207233][ T31] audit: type=1800 audit(1700000268.286:11534): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1335.537351][T30678] fuse: fd is not a fuse device [ 1335.772855][ T31] audit: type=1800 audit(1700000268.846:11535): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1335.986068][ T31] audit: type=1800 audit(1700000269.066:11536): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1336.106006][T30687] profile_transition: unconfined exec no attachment [ 1336.245115][T30689] profile_transition: unconfined exec no attachment [ 1336.702930][ T5694] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1336.703380][ T5694] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1336.736517][ T5694] usb 6-1: USB disconnect, device number 30 [ 1336.766980][T28608] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1336.890850][ T31] audit: type=1800 audit(1700000269.966:11537): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1337.091438][ T31] audit: type=1800 audit(1700000270.166:11538): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1337.097049][ T31] audit: type=1800 audit(1700000270.176:11539): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292991 res=0 errno=0 [ 1337.251860][ T31] audit: type=1800 audit(1700000270.326:11540): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1337.395897][ T5694] libceph: connect (2)127.0.0.1:6789 error -101 [ 1337.396075][ T5694] libceph: ceph_tcp_connect failed: -101 [ 1337.396089][ T5694] libceph: mon0 (2)127.0.0.1:6789 connect error [ 1337.397942][ T31] audit: type=1800 audit(1700000270.476:11541): pid=30703 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.10017" name="multicast_fast_leave" dev="sysfs" ino=264399 res=0 errno=0 [ 1337.397987][ T31] audit: type=1800 audit(1700000270.476:11542): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293018 res=0 errno=0 [ 1337.401578][ T5694] libceph: connect (2)127.0.0.1:6789 error -101 [ 1337.401734][ T5694] libceph: ceph_tcp_connect failed: -101 [ 1337.401750][ T5694] libceph: mon0 (2)127.0.0.1:6789 connect error [ 1337.564748][ T31] audit: type=1800 audit(1700000270.646:11543): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1337.660071][ T5694] libceph: connect (2)127.0.0.1:6789 error -101 [ 1337.660239][ T5694] libceph: ceph_tcp_connect failed: -101 [ 1337.660255][ T5694] libceph: mon0 (2)127.0.0.1:6789 connect error [ 1337.847375][ T31] audit: type=1800 audit(1700000270.926:11544): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1338.016877][T30697] ceph: No mds server is up or the cluster is laggy [ 1338.067685][ T31] audit: type=1800 audit(1700000271.146:11545): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1338.335528][ T31] audit: type=1800 audit(1700000271.416:11546): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1338.470467][T30715] kernel read not supported for file /o2net/connected_nodes (pid: 30715 comm: syz.5.10022) [ 1338.486755][T30717] profile_transition: unconfined exec no attachment [ 1338.577727][T30719] profile_transition: unconfined exec no attachment [ 1339.348144][T30734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1339.433355][T30734] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1339.460949][T30728] block device autoloading is deprecated and will be removed. [ 1339.706459][T30738] syz_tun (unregistering): left allmulticast mode [ 1339.750630][T30736] syz1: rxe_port_immutable: returned err = -19 [ 1339.750661][T30736] infiniband syz1: Couldn't create per-port data [ 1339.751470][T30736] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1339.825826][T30740] input: syz0 as /devices/virtual/input/input132 [ 1340.067159][T30744] fuse: fd is not a fuse device [ 1340.068384][T30744] overlayfs: failed to clone lowerpath [ 1340.631381][T30760] profile_transition: unconfined exec no attachment [ 1340.755767][T30762] profile_transition: unconfined exec no attachment [ 1340.983810][T30761] Process accounting resumed [ 1341.691653][T30775] 9p: Bad value for 'rfdno' [ 1341.922488][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 1341.922506][ T31] audit: type=1800 audit(1700000274.996:11576): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1342.023767][ T31] audit: type=1800 audit(1700000275.096:11577): pid=30783 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.10050" name="file0" dev="tmpfs" ino=16172 res=0 errno=0 [ 1342.213781][ T31] audit: type=1800 audit(1700000275.286:11578): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1342.283712][ T31] audit: type=1800 audit(1700000275.356:11579): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1342.525403][ T5764] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1342.678362][ T5764] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 1342.683450][ T5764] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 1342.683489][ T5764] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024 [ 1342.709161][ T5764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.709187][ T5764] usb 6-1: Product: syz [ 1342.709202][ T5764] usb 6-1: Manufacturer: syz [ 1342.709216][ T5764] usb 6-1: SerialNumber: syz [ 1342.728320][ T31] audit: type=1800 audit(1700000275.806:11580): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293501 res=0 errno=0 [ 1342.737787][ T31] audit: type=1800 audit(1700000275.816:11581): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=293533 res=0 errno=0 [ 1342.739244][ T5764] symbolserial 6-1:1.0: symbol converter detected [ 1342.754195][ T31] audit: type=1800 audit(1700000275.826:11582): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=293508 res=0 errno=0 [ 1342.758291][ T5764] usb 6-1: symbol converter now attached to ttyUSB0 [ 1342.761093][ T31] audit: type=1800 audit(1700000275.826:11583): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=293509 res=0 errno=0 [ 1342.776378][ T31] audit: type=1800 audit(1700000275.856:11584): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=293530 res=0 errno=0 [ 1342.776424][ T31] audit: type=1800 audit(1700000275.856:11585): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=293531 res=0 errno=0 [ 1343.007314][ T5764] usb 6-1: USB disconnect, device number 31 [ 1343.018401][T30797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10056'. [ 1343.112233][ T5764] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1343.112806][ T5764] symbolserial 6-1:1.0: device disconnected [ 1343.519844][T30805] profile_transition: unconfined exec no attachment [ 1343.657007][T30809] profile_transition: unconfined exec no attachment [ 1344.924501][T30823] netlink: 'syz.4.10067': attribute type 12 has an invalid length. [ 1345.073052][T30833] loop3: detected capacity change from 0 to 7 [ 1345.137298][T30833] Dev loop3: unable to read RDB block 7 [ 1345.137343][T30833] loop3: unable to read partition table [ 1345.137543][T30833] loop3: partition table beyond EOD, truncated [ 1345.137582][T30833] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1345.912134][T30845] profile_transition: unconfined exec no attachment [ 1346.010827][T30847] profile_transition: unconfined exec no attachment [ 1346.286652][T30851] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 1346.823692][T30863] profile_transition: name lookup ix on error [ 1347.018231][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 1347.018251][ T31] audit: type=1800 audit(1700000280.096:11610): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1347.129208][ T31] audit: type=1800 audit(1700000280.206:11611): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1347.363307][ T31] audit: type=1800 audit(1700000280.436:11612): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1347.453728][ T31] audit: type=1800 audit(1700000280.526:11613): pid=30875 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.10088" name="new_id" dev="sysfs" ino=12631 res=0 errno=0 [ 1347.566204][ T31] audit: type=1800 audit(1700000280.646:11614): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1347.693184][ T31] audit: type=1800 audit(1700000280.766:11615): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1347.775574][ T31] audit: type=1800 audit(1700000280.856:11616): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1347.980841][ T31] audit: type=1800 audit(1700000281.056:11617): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1348.250257][ T31] audit: type=1800 audit(1700000281.326:11618): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1348.341980][T30889] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10094'. [ 1348.436780][T30891] fuse: fd is not a fuse device [ 1348.496599][ T31] audit: type=1800 audit(1700000281.576:11619): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1350.054764][T17723] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1350.204183][T17723] usb 6-1: Using ep0 maxpacket: 16 [ 1350.205624][T17723] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1350.207191][T17723] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.207213][T17723] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1350.210407][T17723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.210430][T17723] usb 6-1: Product: syz [ 1350.210449][T17723] usb 6-1: Manufacturer: syz [ 1350.210468][T17723] usb 6-1: SerialNumber: syz [ 1350.288639][T17723] usb 6-1: 0:2 : does not exist [ 1350.293236][T30922] profile_transition: unconfined exec no attachment [ 1350.453171][T30926] profile_transition: unconfined exec no attachment [ 1350.482987][T17723] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1350.618280][T17723] usb 6-1: USB disconnect, device number 32 [ 1350.752261][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1350.866387][T30929] FAULT_INJECTION: forcing a failure. [ 1350.866387][T30929] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.866419][T30929] CPU: 1 UID: 0 PID: 30929 Comm: syz.3.10109 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1350.866450][T30929] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1350.866459][T30929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1350.866473][T30929] Call Trace: [ 1350.866482][T30929] [ 1350.866491][T30929] dump_stack_lvl+0xe8/0x150 [ 1350.866524][T30929] should_fail_ex+0x3eb/0x540 [ 1350.866554][T30929] should_failslab+0xa8/0x100 [ 1350.866577][T30929] ? security_inode_alloc+0x39/0x310 [ 1350.866603][T30929] kmem_cache_alloc_noprof+0x9c/0x600 [ 1350.866632][T30929] ? __pfx_make_kgid+0x10/0x10 [ 1350.866660][T30929] ? security_inode_alloc+0x39/0x310 [ 1350.866690][T30929] security_inode_alloc+0x39/0x310 [ 1350.866717][T30929] inode_init_always_gfp+0x97e/0xd30 [ 1350.866747][T30929] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 1350.866776][T30929] alloc_inode+0x82/0x1b0 [ 1350.866800][T30929] new_inode+0x1f/0x170 [ 1350.866828][T30929] hugetlbfs_get_inode+0x73/0x660 [ 1350.866860][T30929] hugetlb_file_setup+0x28f/0x630 [ 1350.866889][T30929] newseg+0x467/0xc70 [ 1350.866928][T30929] ? __pfx_newseg+0x10/0x10 [ 1350.866960][T30929] ipcget+0x1db/0xf20 [ 1350.866984][T30929] ? do_futex+0x3e7/0x4e0 [ 1350.867012][T30929] ? __pfx_do_futex+0x10/0x10 [ 1350.867034][T30929] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1350.867058][T30929] ? __pfx_ipcget+0x10/0x10 [ 1350.867085][T30929] ? __se_sys_futex+0x3a8/0x450 [ 1350.867111][T30929] __x64_sys_shmget+0x140/0x190 [ 1350.867137][T30929] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1350.867171][T30929] do_syscall_64+0x166/0x520 [ 1350.867190][T30929] ? trace_irq_disable+0x3b/0x140 [ 1350.867218][T30929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.867239][T30929] ? clear_bhb_loop+0x70/0xc0 [ 1350.867264][T30929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.867284][T30929] RIP: 0033:0x7fc4fe39e159 [ 1350.867302][T30929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.867320][T30929] RSP: 002b:00007fc4ff236028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1350.867343][T30929] RAX: ffffffffffffffda RBX: 00007fc4fe625fa0 RCX: 00007fc4fe39e159 [ 1350.867358][T30929] RDX: 0000000054001800 RSI: 0000000000003000 RDI: 0000000000000000 [ 1350.867372][T30929] RBP: 00007fc4fe43506b R08: 0000000000000000 R09: 0000000000000000 [ 1350.867386][T30929] R10: 000020000010d000 R11: 0000000000000246 R12: 0000000000000000 [ 1350.867400][T30929] R13: 00007fc4fe626038 R14: 00007fc4fe625fa0 R15: 00007fff7ba69968 [ 1350.867431][T30929] [ 1351.271992][T30939] profile_transition: unconfined exec no attachment [ 1351.433272][T30945] profile_transition: unconfined exec no attachment [ 1352.051437][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 1352.051457][ T31] audit: type=1800 audit(1700000285.126:11643): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1352.367643][ T31] audit: type=1800 audit(1700000285.446:11644): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1352.538424][T30962] FAULT_INJECTION: forcing a failure. [ 1352.538424][T30962] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.538459][T30962] CPU: 0 UID: 0 PID: 30962 Comm: syz.3.10123 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1352.538490][T30962] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1352.538499][T30962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1352.538511][T30962] Call Trace: [ 1352.538520][T30962] [ 1352.538530][T30962] dump_stack_lvl+0xe8/0x150 [ 1352.538563][T30962] should_fail_ex+0x3eb/0x540 [ 1352.538595][T30962] should_failslab+0xa8/0x100 [ 1352.538619][T30962] __kmalloc_noprof+0xf9/0x710 [ 1352.538651][T30962] ? tomoyo_encode+0x2ad/0x570 [ 1352.538676][T30962] ? tomoyo_encode+0x2ad/0x570 [ 1352.538709][T30962] tomoyo_encode+0x2ad/0x570 [ 1352.538754][T30962] tomoyo_realpath_from_path+0x5fa/0x640 [ 1352.538790][T30962] ? tomoyo_mkdev_perm+0x209/0x5d0 [ 1352.538814][T30962] tomoyo_mkdev_perm+0x235/0x5d0 [ 1352.538839][T30962] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 1352.538894][T30962] ? __pfx_current_check_access_path+0x10/0x10 [ 1352.539029][T30962] ? d_splice_alias+0x12/0x30 [ 1352.539064][T30962] tomoyo_path_mknod+0xfb/0x1a0 [ 1352.539121][T30962] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1352.539153][T30962] ? __pfx_filename_create+0x10/0x10 [ 1352.539190][T30962] security_path_mknod+0x176/0x370 [ 1352.539220][T30962] filename_mknodat+0x2be/0x660 [ 1352.539260][T30962] ? __pfx_filename_mknodat+0x10/0x10 [ 1352.539296][T30962] ? do_getname+0x151/0x250 [ 1352.539322][T30962] __se_sys_mknodat+0x3b/0x150 [ 1352.539355][T30962] do_syscall_64+0x166/0x520 [ 1352.539376][T30962] ? trace_irq_disable+0x3b/0x140 [ 1352.539411][T30962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.539433][T30962] ? clear_bhb_loop+0x70/0xc0 [ 1352.539458][T30962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.539479][T30962] RIP: 0033:0x7fc4fe39e159 [ 1352.539499][T30962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.539517][T30962] RSP: 002b:00007fc4ff236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1352.539540][T30962] RAX: ffffffffffffffda RBX: 00007fc4fe625fa0 RCX: 00007fc4fe39e159 [ 1352.539557][T30962] RDX: 00000000000021c0 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1352.539572][T30962] RBP: 00007fc4fe43506b R08: 0000000000000000 R09: 0000000000000000 [ 1352.539586][T30962] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000000 [ 1352.539599][T30962] R13: 00007fc4fe626038 R14: 00007fc4fe625fa0 R15: 00007fff7ba69968 [ 1352.539631][T30962] [ 1352.539693][T30962] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1352.843897][T30966] 9p: Bad value for 'wfdno' [ 1352.939922][ T31] audit: type=1800 audit(1700000286.016:11645): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1353.025678][ T31] audit: type=1800 audit(1700000286.106:11646): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1353.133848][ T31] audit: type=1800 audit(1700000286.206:11647): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1353.218410][ T31] audit: type=1800 audit(1700000286.296:11648): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1353.358040][ T31] audit: type=1800 audit(1700000286.436:11649): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1353.628511][ T31] audit: type=1800 audit(1700000286.706:11650): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1354.128081][ T31] audit: type=1800 audit(1700000287.206:11651): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1354.252613][ T31] audit: type=1800 audit(1700000287.326:11652): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1354.544906][T31001] profile_transition: unconfined exec no attachment [ 1354.653506][T31006] profile_transition: unconfined exec no attachment [ 1354.800734][T31010] syzkaller1: entered promiscuous mode [ 1354.800757][T31010] syzkaller1: entered allmulticast mode [ 1355.484223][ T1226] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1355.635635][ T1226] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1355.637390][ T1226] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1355.637419][ T1226] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1355.637460][ T1226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.907785][ T1226] usb 6-1: usb_control_msg returned -32 [ 1355.907834][ T1226] usbtmc 6-1:16.0: can't read capabilities [ 1356.270541][T31028] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1356.271612][ T1226] usb 6-1: USB disconnect, device number 33 [ 1358.358159][T31061] profile_transition: unconfined exec no attachment [ 1358.459038][T31063] profile_transition: unconfined exec no attachment [ 1358.750792][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 1358.750811][ T31] audit: type=1800 audit(1700000291.826:11674): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1359.125082][ T31] audit: type=1800 audit(1700000292.206:11675): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1359.319362][ T31] audit: type=1800 audit(1700000292.396:11676): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1359.370695][T31071] batadv_slave_1: entered promiscuous mode [ 1359.373293][T31070] batadv_slave_1: left promiscuous mode [ 1359.860345][ T31] audit: type=1800 audit(1700000292.936:11677): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1360.149084][ T31] audit: type=1800 audit(1700000293.226:11678): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1361.132102][T31080] profile_transition: unconfined exec no attachment [ 1361.138839][T31078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1361.142852][ T31] audit: type=1800 audit(1700000294.216:11679): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=295860 res=0 errno=0 [ 1361.271860][ T31] audit: type=1800 audit(1700000294.346:11680): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1361.351467][T31083] profile_transition: unconfined exec no attachment [ 1361.478496][ T31] audit: type=1800 audit(1700000294.556:11681): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 1361.549598][ T31] audit: type=1800 audit(1700000294.626:11682): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1361.580579][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.580625][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.597761][ T31] audit: type=1800 audit(1700000294.676:11683): pid=31087 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.10175" name="console" dev="sysfs" ino=12379 res=0 errno=0 [ 1361.983063][T31094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10178'. [ 1362.704290][ T5694] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1362.864576][ T5694] usb 6-1: Using ep0 maxpacket: 32 [ 1362.868444][ T5694] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1362.881355][ T5694] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1362.881381][ T5694] usb 6-1: config 0 has no interface number 0 [ 1362.881419][ T5694] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1362.881445][ T5694] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1362.889601][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.889635][ T5694] usb 6-1: Product: syz [ 1362.889649][ T5694] usb 6-1: Manufacturer: syz [ 1362.889663][ T5694] usb 6-1: SerialNumber: syz [ 1362.912939][ T5694] usb 6-1: config 0 descriptor?? [ 1363.546733][ T5694] appletouch 6-1:0.85: Geyser mode initialized. [ 1363.549696][ T5694] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input133 [ 1363.752698][ T5694] usb 6-1: USB disconnect, device number 34 [ 1363.813315][ T5694] appletouch 6-1:0.85: input: appletouch disconnected [ 1364.007485][T31123] profile_transition: unconfined exec no attachment [ 1364.059784][T31124] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10192'. [ 1364.085454][T31125] profile_transition: unconfined exec no attachment [ 1364.397150][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 1364.397171][ T31] audit: type=1800 audit(1700000297.476:11712): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1364.517405][ T31] audit: type=1800 audit(1700000297.596:11713): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1365.220510][ T31] audit: type=1800 audit(1700000298.296:11714): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1365.328707][T31136] profile_transition: unconfined exec no attachment [ 1365.330254][ T31] audit: type=1800 audit(1700000298.406:11715): pid=31134 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.10196" name="current_governor" dev="sysfs" ino=1506 res=0 errno=0 [ 1365.435576][T31138] profile_transition: unconfined exec no attachment [ 1365.567433][ T31] audit: type=1800 audit(1700000298.646:11716): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1365.637187][ T31] audit: type=1800 audit(1700000298.716:11717): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1365.764558][T31142] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1365.936945][ T31] audit: type=1800 audit(1700000299.016:11718): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1366.008661][ T31] audit: type=1800 audit(1700000299.086:11719): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1366.219998][ T31] audit: type=1800 audit(1700000299.296:11720): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1366.345183][ T31] audit: type=1800 audit(1700000299.426:11721): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1366.653121][T31160] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10208'. [ 1377.244741][T31165] profile_transition: unconfined exec no attachment [ 1377.323683][T31168] profile_transition: unconfined exec no attachment [ 1377.416414][ T5694] kernel read not supported for file /trace_pipe (pid: 5694 comm: kworker/1:5) [ 1377.474317][T31174] profile_transition: unconfined exec no attachment [ 1377.625005][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1377.625027][ T31] audit: type=1800 audit(1700000310.696:11728): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1377.703291][T31173] Process accounting paused [ 1377.758764][ T31] audit: type=1800 audit(1700000310.836:11729): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1377.806755][T31177] rust_binder: Write failure EINVAL in pid:878 [ 1377.959887][ T31] audit: type=1800 audit(1700000311.036:11730): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1378.046997][ T5615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1378.070036][ T5615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1378.087159][ T5615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1378.089070][ T5615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1378.089643][ T5615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1378.124512][ T31] audit: type=1800 audit(1700000311.206:11731): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1378.137956][ T31] audit: type=1800 audit(1700000311.216:11732): pid=31180 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296151 res=0 errno=0 [ 1378.187710][T31190] profile_transition: unconfined exec no attachment [ 1378.200419][T31192] profile_transition: unconfined exec no attachment [ 1378.238876][ T31] audit: type=1800 audit(1700000311.316:11733): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15831 res=0 errno=0 [ 1378.276159][ T31] audit: type=1800 audit(1700000311.356:11734): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296162 res=0 errno=0 [ 1378.294663][ T31] audit: type=1800 audit(1700000311.366:11735): pid=31180 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296181 res=0 errno=0 [ 1378.361870][ T31] audit: type=1800 audit(1700000311.436:11736): pid=31196 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296192 res=0 errno=0 [ 1378.408655][T31197] profile_transition: unconfined exec no attachment [ 1378.453447][T31198] profile_transition: unconfined exec no attachment [ 1378.615949][ T31] audit: type=1800 audit(1700000311.696:11737): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 1378.697262][T31200] profile_transition: unconfined exec no attachment [ 1378.878850][T31204] profile_transition: unconfined exec no attachment [ 1379.010314][T31209] FAULT_INJECTION: forcing a failure. [ 1379.010314][T31209] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.010350][T31209] CPU: 1 UID: 0 PID: 31209 Comm: syz.7.10224 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1379.010379][T31209] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1379.010389][T31209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1379.010402][T31209] Call Trace: [ 1379.010412][T31209] [ 1379.010421][T31209] dump_stack_lvl+0xe8/0x150 [ 1379.010458][T31209] should_fail_ex+0x3eb/0x540 [ 1379.010487][T31209] should_failslab+0xa8/0x100 [ 1379.010510][T31209] ? do_set_mempolicy+0x214/0x630 [ 1379.010534][T31209] kmem_cache_alloc_noprof+0x9c/0x600 [ 1379.010564][T31209] ? do_set_mempolicy+0x214/0x630 [ 1379.010588][T31209] ? do_futex+0x3e7/0x4e0 [ 1379.010614][T31209] do_set_mempolicy+0x214/0x630 [ 1379.010641][T31209] ? __pfx_do_set_mempolicy+0x10/0x10 [ 1379.010674][T31209] __se_sys_set_mempolicy+0x1b8/0x4e0 [ 1379.010699][T31209] ? __pfx___se_sys_set_mempolicy+0x10/0x10 [ 1379.010720][T31209] ? rcu_is_watching+0x16/0xb0 [ 1379.010751][T31209] do_syscall_64+0x166/0x520 [ 1379.010771][T31209] ? trace_irq_disable+0x3b/0x140 [ 1379.010799][T31209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.010832][T31209] ? clear_bhb_loop+0x70/0xc0 [ 1379.010857][T31209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.010877][T31209] RIP: 0033:0x7f4e5a79e159 [ 1379.010897][T31209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.010915][T31209] RSP: 002b:00007f4e5b6aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 1379.010938][T31209] RAX: ffffffffffffffda RBX: 00007f4e5aa25fa0 RCX: 00007f4e5a79e159 [ 1379.010954][T31209] RDX: 0000000000000047 RSI: 0000000000000000 RDI: 0000000000000001 [ 1379.010967][T31209] RBP: 00007f4e5a83506b R08: 0000000000000000 R09: 0000000000000000 [ 1379.010980][T31209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1379.010993][T31209] R13: 00007f4e5aa26038 R14: 00007f4e5aa25fa0 R15: 00007ffd8da6e758 [ 1379.011024][T31209] [ 1379.068496][T31211] profile_transition: unconfined exec no attachment [ 1380.124196][ T5764] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1380.215032][ T5615] Bluetooth: hci7: command tx timeout [ 1380.279913][ T5764] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1380.295662][ T5764] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1380.295690][ T5764] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1380.303435][ T5764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.303462][ T5764] usb 6-1: Product: syz [ 1380.303476][ T5764] usb 6-1: Manufacturer: syz [ 1380.303491][ T5764] usb 6-1: SerialNumber: syz [ 1380.606619][ T5764] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1380.777788][T31243] netlink: 'syz.4.10234': attribute type 26 has an invalid length. [ 1381.175690][ T5764] usb 6-1: USB disconnect, device number 35 [ 1381.192755][ T5764] usblp0: removed [ 1381.380691][T31183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.383584][T31183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.383811][T31183] bridge_slave_0: entered allmulticast mode [ 1381.391027][T31183] bridge_slave_0: entered promiscuous mode [ 1381.403250][T31183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.403437][T31183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.403592][T31183] bridge_slave_1: entered allmulticast mode [ 1381.412542][T31183] bridge_slave_1: entered promiscuous mode [ 1381.582317][T31183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1381.603274][T31183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.795051][T31183] team0: Port device team_slave_0 added [ 1381.807568][T31183] team0: Port device team_slave_1 added [ 1381.958215][T31183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1381.958234][T31183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1381.958259][T31183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1382.057898][T31183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1382.057917][T31183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.057945][T31183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.064673][ T32] INFO: task kworker/1:4:28607 blocked for more than 143 seconds. [ 1382.064699][ T32] Tainted: G S L syzkaller #0 [ 1382.064711][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1382.064721][ T32] task:kworker/1:4 state:D stack:22816 pid:28607 tgid:28607 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1382.064778][ T32] Workqueue: usb_hub_wq hub_event [ 1382.064907][ T32] Call Trace: [ 1382.064915][ T32] [ 1382.064928][ T32] __schedule+0x17dd/0x5940 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1382.064959][ T32] ? __lock_acquire+0x747/0x2de0 [ 1382.064996][ T32] ? unwind_next_frame+0x1baf/0x2550 [ 1382.065057][ T32] ? __pfx___schedule+0x10/0x10 [ 1382.065094][ ** replaying previous printk message ** [ 1382.065094][ T32] ? schedule+0x90/0x2b0 [ 1382.065125][ T32] schedule+0x164/0x2b0 [ 1382.065155][ T32] schedule_timeout+0xc0/0x2c0 [ 1382.065181][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1382.065207][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1382.065247][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1382.065271][ T32] ? wait_for_completion+0x26d/0x5d0 [ 1382.065299][ T32] wait_for_completion+0x2c5/0x5d0 [ 1382.065339][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 1382.065374][ T32] ? __flush_work+0x101/0xca0 [ 1382.065404][ T32] __flush_work+0xa63/0xca0 [ 1382.065429][ T32] ? __flush_work+0x101/0xca0 [ 1382.065488][ T32] ? __pfx___flush_work+0x10/0x10 [ 1382.065516][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 1382.065558][ T32] ? cancel_delayed_work_sync+0x5a/0xf0 [ 1382.065587][ T32] cancel_delayed_work_sync+0xb8/0xf0 [ 1382.065614][ T32] mmc_stop_host+0xd9/0x460 [ 1382.065739][ T32] mmc_remove_host+0x15/0x60 [ 1382.065763][ T32] vub300_disconnect+0x154/0x2f0 [ 1382.065820][ T32] usb_unbind_interface+0x295/0x9f0 [ 1382.065856][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1382.065884][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1382.065905][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1382.104250][ T32] device_release_driver_internal+0x4f5/0x880 [ 1382.104446][ T32] bus_remove_device+0x444/0x560 [ 1382.104474][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 1382.104500][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1382.104570][ T32] device_del+0x524/0x8f0 [ 1382.104602][ T32] ? __pfx_device_del+0x10/0x10 [ 1382.104626][ T32] ? kobject_put+0x516/0x550 [ 1382.104658][ T32] usb_disable_device+0x3d4/0x8d0 [ 1382.104697][ T32] usb_disconnect+0x346/0x9a0 [ 1382.104733][ T32] hub_event+0x1bbb/0x4d30 [ 1382.104760][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1382.104797][ T32] ? register_lock_class+0x31/0x2e0 [ 1382.104854][ T32] ? __pfx_hub_event+0x10/0x10 [ 1382.104881][ T32] ? rcu_is_watching+0x16/0xb0 [ 1382.104902][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1382.104926][ T32] process_scheduled_works+0xc3d/0x1630 [ 1382.104977][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1382.105006][ T32] ? assign_work+0x3cf/0x5d0 [ 1382.105032][ T32] worker_thread+0xa47/0xfb0 [ 1382.105068][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1382.105102][ T32] kthread+0x38b/0x480 [ 1382.105129][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1382.105151][ T32] ? __pfx_kthread+0x10/0x10 [ 1382.105178][ T32] ret_from_fork+0x514/0xb70 [ 1382.105210][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1382.105236][ T32] ? __switch_to+0xc89/0x1420 [ 1382.105272][ T32] ? __pfx_kthread+0x10/0x10 [ 1382.105301][ T32] ret_from_fork_asm+0x1a/0x30 [ 1382.105341][ T32] [ 1382.105381][ T32] [ 1382.105381][ T32] Showing all locks held in the system: [ 1382.105393][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1382.105482][ T32] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1382.105650][ T32] locks held by kworker/u8:9/3368: 5, last CPU#0: [ 1382.105664][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1382.105714][ T32] #1: ffffc9000e1dfc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1382.105770][ T32] #2: ffffffff8ede9970 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 1382.105849][ T32] #3: ffffffff8f038d60 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 1382.105904][ T32] #4: ffffffff8edff7a0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1382.105965][ T32] locks held by syz-executor/6135: 4, last CPU#0: [ 1382.105979][ T32] #0: ffffffff8f0367f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x470 [ 1382.106026][ T32] #1: ffff888029a05cf8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1382.106078][ T32] #2: ffff88807e2736b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1382.106164][ T32] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1382.106215][ T32] locks held by pr/ttyS0/6377: 2, last CPU#1: [ 1382.106228][ T32] #0: ffffffff8ee363b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1382.106291][ T32] #1: ffffffff9afb0538 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1382.136222][ T32] locks held by syz.3.2944/12582: 1, last CPU#0: [ 1382.136242][ T32] #0: ffff8880594c5ed0 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 1382.136379][ T32] locks held by getty/12988: 2, on CPU#0: [ 1382.136393][ T32] #0: ffff8880281960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1382.136451][ T32] #1: ffffc9000208a2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1382.136507][ T32] locks held by syz.9.5583/19230: 1, last CPU#0: [ 1382.136521][ T32] #0: ffff8880575ad690 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 1382.136583][ T32] locks held by syz.2.8516/26390: 1, last CPU#0: [ 1382.136597][ T32] #0: ffff888061cd6ab0 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 1382.136657][ T32] locks held by kworker/u8:0/27774: 4, last CPU#0: [ 1382.136671][ T32] #0: ffff88801bedb140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1382.136720][ T32] #1: ffffc9000426fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1382.136777][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: blk_mq_run_hw_queue+0x236/0x4e0 [ 1382.136893][ T32] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1382.136992][ T32] locks held by kworker/1:0/27858: 2, on CPU#1: [ 1382.137005][ T32] #0: ffff88813ff42140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1382.137055][ T32] #1: ffffc900042b7c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1382.137108][ T32] locks held by kworker/1:4/28607: 5, on CPU#1: [ 1382.137121][ T32] #0: ffff88801c29f140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1382.137169][ T32] #1: ffffc9000fd3fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1382.137217][ T32] #2: ffff8880299861d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1382.137260][ T32] #3: ffff88807ba031d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 1382.137310][ T32] #4: ffff88805540f1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1382.137367][ T32] locks held by syz.3.10186/31097: 3, on CPU#1: [ 1382.137380][ T32] #0: ffff888034540630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1382.137429][ T32] #1: ffffffff8fd19620 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 [ 1382.137509][ T32] #2: ffff8880299861d8 (&dev->mutex){....}-{4:4}, at: usb_device_read+0x17c/0x2c0 [ 1382.137554][ T32] locks held by syz.3.10186/31098: 1, on CPU#1: [ 1382.137569][ T32] #0: ffff888034540630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1382.137618][ T32] locks held by syz-executor/31183: 4, last CPU#0: [ 1382.137632][ T32] #0: ffffffff909d4b98 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1382.153725][ T32] #1: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1382.153793][ T32] #2: ffff8880b843bd60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1382.153846][ T32] #3: ffff8880b8424408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1382.153894][ T32] locks held by syz.5.10237/31255: 2, last CPU#0: [ 1382.153909][ T32] #0: ffff888060254378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1382.153957][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1382.154226][ T32] [ 1382.154232][ T32] ============================================= [ 1382.154232][ T32] [ 1382.154241][ T32] NMI backtrace for cpu 0 [ 1382.154256][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G S L syzkaller #0 PREEMPT(full) [ 1382.154283][ T32] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1382.154291][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1382.154303][ T32] Call Trace: [ 1382.154311][ T32] [ 1382.154320][ T32] dump_stack_lvl+0xe8/0x150 [ 1382.154346][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1382.154372][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1382.154401][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1382.154428][ T32] sys_info+0x135/0x170 [ 1382.154515][ T32] watchdog+0x1058/0x10d0 [ 1382.154550][ T32] ? watchdog+0x209/0x10d0 [ 1382.154581][ T32] kthread+0x38b/0x480 [ 1382.154607][ T32] ? __pfx_watchdog+0x10/0x10 [ 1382.154632][ T32] ? __pfx_kthread+0x10/0x10 [ 1382.154659][ T32] ret_from_fork+0x514/0xb70 [ 1382.154688][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1382.154714][ T32] ? __switch_to+0xc89/0x1420 [ 1382.154746][ T32] ? __pfx_kthread+0x10/0x10 [ 1382.154774][ T32] ret_from_fork_asm+0x1a/0x30 [ 1382.154812][ T32] [ 1382.154821][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1382.154856][ C1] NMI backtrace for cpu 1 [ 1382.154873][ C1] CPU: 1 UID: 0 PID: 6377 Comm: pr/ttyS0 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1382.154902][ C1] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1382.154910][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1382.154922][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1382.154989][ C1] Code: e8 1e a3 4a fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f cc ba fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a ff 7b 06 cc 44 89 f9 80 e1 07 [ 1382.155005][ C1] RSP: 0018:ffffc9000464f8b8 EFLAGS: 00000002 [ 1382.155022][ C1] RAX: 1ffffffff35f6000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1382.155036][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1382.155048][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1382.155061][ C1] R10: dffffc0000000000 R11: ffffffff857d6180 R12: dffffc0000000000 [ 1382.155075][ C1] R13: 0000000000000000 R14: ffffffff9afb0560 R15: 0000000000000000 [ 1382.155159][ C1] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 1382.155176][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1382.155189][ C1] CR2: 00007f4775d556c8 CR3: 000000007a060000 CR4: 00000000003526f0 [ 1382.155206][ C1] Call Trace: [ 1382.155213][ C1] [ 1382.155222][ C1] wait_for_lsr+0x184/0x2f0 [ 1382.155255][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1382.155285][ C1] serial8250_console_write+0xaa1/0x1200 [ 1382.155310][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1382.155329][ C1] ? __schedule+0x17f3/0x5940 [ 1382.155354][ C1] ? rcu_is_watching+0x16/0xb0 [ 1382.155378][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1382.155411][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1382.155440][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1382.155473][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1382.155498][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 1382.155528][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 1382.155552][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1382.155580][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1382.155603][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1382.155627][ C1] kthread+0x38b/0x480 [ 1382.155650][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1382.155674][ C1] ? __pfx_kthread+0x10/0x10 [ 1382.155698][ C1] ret_from_fork+0x514/0xb70 [ 1382.155723][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1382.155746][ C1] ? __switch_to+0xc89/0x1420 [ 1382.155767][ C1] ? __pfx_kthread+0x10/0x10 [ 1382.155791][ C1] ret_from_fork_asm+0x1a/0x30 [ 1382.155821][ C1] [ 1382.182271][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1383.316240][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G S L syzkaller #0 PREEMPT(full) [ 1383.326914][ T32] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1383.333052][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1383.343096][ T32] Call Trace: [ 1383.346368][ T32] [ 1383.349296][ T32] vpanic+0x56d/0xa70 [ 1383.353282][ T32] ? __pfx___schedule+0x10/0x10 [ 1383.358132][ T32] ? __pfx_vpanic+0x10/0x10 [ 1383.362642][ T32] panic+0xc5/0xd0 [ 1383.366361][ T32] ? __pfx_panic+0x10/0x10 [ 1383.370775][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1383.376232][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1383.381602][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1383.387753][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1383.393906][ T32] watchdog+0x10cc/0x10d0 [ 1383.398240][ T32] ? watchdog+0x209/0x10d0 [ 1383.402657][ T32] kthread+0x38b/0x480 [ 1383.406722][ T32] ? __pfx_watchdog+0x10/0x10 [ 1383.411402][ T32] ? __pfx_kthread+0x10/0x10 [ 1383.415990][ T32] ret_from_fork+0x514/0xb70 [ 1383.420584][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1383.425688][ T32] ? __switch_to+0xc89/0x1420 [ 1383.430361][ T32] ? __pfx_kthread+0x10/0x10 [ 1383.434953][ T32] ret_from_fork_asm+0x1a/0x30 [ 1383.439724][ T32] [ 1383.443701][ T32] Kernel Offset: disabled [ 1383.448026][ T32] Rebooting in 86400 seconds..