last executing test programs: 4m22.610326552s ago: executing program 4 (id=2317): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount(&(0x7f0000000600)=@filename='mtd0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='jffs2\x00', 0x800000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) chdir(&(0x7f0000000780)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000007c0)='proc\x00', 0x804040, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9c000014", @ANYRES16=r2, @ANYBLOB="10002abd7000fbdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x8084) sendmsg$nl_generic(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0c260000280029002dbd7000f9ffffff05000000041004"], 0x260c}, 0x1, 0x0, 0x0, 0x8c811}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="18010000310009002abd70000000000004000000040111800001f0800800ad00", @ANYRES32=r3, @ANYBLOB="1400220000000000000100000000000000000000c472bb53453ea085e4d531e2c81b3055e57438227851f85c09309d5226b0d5147afdb0cf799ce672c68c74ef73e2668380f550e21aadad9fae0af96cbc8798aaa00f6f4383a32d6044d4e3dbe80cebb24e1409f314924a08b5b0e8e192a65044b155db8d5d343c00d511a41a8403e78f909193406589a8ef3babf01b4a91a647fe8a04f25c41811bafb2fd639d2ac7c71eac72bc7ecf47080e927c174ffa74d9b70b47921a91cc10ae37391417dc43e7cd117578af9d7dcbda1a67f9d2fd86f4c09309fc4a1e295141711d2b788d3170dce4b61e0fae5ce0ffc0fbe211bea2d7"], 0x118}, 0x1, 0x0, 0x0, 0x42804}, 0x84) rt_sigprocmask(0x0, &(0x7f0000000c40)={[0xffffffffffffffff]}, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000c80)={0x0, 0x5, 0x30, 0x8, 0x3}, 0x0) getpgrp(0x0) gettid() read(0xffffffffffffffff, &(0x7f0000000dc0)=""/384, 0x200008c0) socket$inet_udp(0x2, 0x2, 0x0) 4m21.750814968s ago: executing program 4 (id=2328): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000000b40)=""/102392, 0x18ff8) sendmsg$tipc(r0, &(0x7f0000019e00)={0x0, 0x0, &(0x7f0000019e80)=[{&(0x7f0000019ec0)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee93", 0x56}, {&(0x7f0000019fc0)="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", 0x5b2}, {&(0x7f000001afc0)}], 0x3, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f000001b000), 0x4) sendmmsg(r1, &(0x7f000001b040), 0x4000000000001cd, 0x1008c811) 4m20.579640266s ago: executing program 4 (id=2329): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000b40)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f000001b000), 0x4) sendmmsg(r0, &(0x7f000001b040), 0x4000000000001cd, 0x1008c811) 4m20.05673022s ago: executing program 3 (id=2335): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000006c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x21}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 4m18.772365353s ago: executing program 3 (id=2339): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount(&(0x7f0000000600)=@filename='mtd0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='jffs2\x00', 0x800000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) chdir(&(0x7f0000000780)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000007c0)='proc\x00', 0x804040, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9c000014", @ANYRES16=r2, @ANYBLOB="10002abd7000fbdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x8084) sendmsg$nl_generic(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0c260000280029002dbd7000f9ffffff05000000041004"], 0x260c}, 0x1, 0x0, 0x0, 0x8c811}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="18010000310009002abd70000000000004000000040111800001f0800800ad00", @ANYRES32=r3, @ANYBLOB="1400220000000000000100000000000000000000c472bb53453ea085e4d531e2c81b3055e57438227851f85c09309d5226b0d5147afdb0cf799ce672c68c74ef73e2668380f550e21aadad9fae0af96cbc8798aaa00f6f4383a32d6044d4e3dbe80cebb24e1409f314924a08b5b0e8e192a65044b155db8d5d343c00d511a41a8403e78f909193406589a8ef3babf01b4a91a647fe8a04f25c41811bafb2fd639d2ac7c71eac72bc7ecf47080e927c174ffa74d9b70b47921a91cc10ae37391417dc43e7cd117578af9d7dcbda1a67f9d2fd86f4c09309fc4a1e295141711d2b788d3170dce4b61e0fae5ce0ffc0fbe211bea2d7"], 0x118}, 0x1, 0x0, 0x0, 0x42804}, 0x84) rt_sigprocmask(0x0, &(0x7f0000000c40)={[0xffffffffffffffff]}, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000c80)={0x0, 0x5, 0x30, 0x8, 0x3}, 0x0) getpgrp(0x0) gettid() read(0xffffffffffffffff, &(0x7f0000000dc0)=""/384, 0x200008c0) socket$inet_udp(0x2, 0x2, 0x0) 4m18.76391741s ago: executing program 4 (id=2340): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000004700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000004740)='./dev\x00', &(0x7f0000004780)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000047c0)='./mnt\x00', 0x0) mount(&(0x7f0000004800)=@filename='./dev/sda1\x00', &(0x7f0000004840)='./mnt\x00', &(0x7f0000004880)='ext4\x00', 0x8410, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000048c0)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000004900)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0xd1, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x8001}]}) write$FUSE_INIT(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000004440)=ANY=[@ANYBLOB="1201100395e341203c41c2814bc90102030109021b00020e06d003090408d8008effff080904000500ff"], &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0}) write$FUSE_OPEN(r4, &(0x7f00000049c0)={0x20, 0xffffffffffffffda, r1, {0x0, 0x10}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000044c0)='./debug\x00', 0x1ff) mount(&(0x7f0000004500)=@filename='none\x00', &(0x7f0000004540)='./debug\x00', &(0x7f0000004580)='debugfs\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, 0x0, &(0x7f0000004a40)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000004ac0)=@new_dev={0x3, 0x32c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x191}}}, &(0x7f0000004b00)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000004b40)={0x0, 0x1, 0x1000, 0xffffffee, 0x2f6}, &(0x7f0000004bc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x93, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x100, 0x3, 0x1f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x282f, 0x40, 0x40000003, 0x327}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80000, 0x20000001, 0xffffffff}}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000045c0)='./debug/ieee80211/phy0/aqm\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002280)='./file0/file0\x00', 0xda) syz_fuse_handle_req(r0, &(0x7f00000022c0)="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", 0x2000, &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x90, 0x0, 0xffffffffdffffffd, {0xffffffffffffffff, 0x2, 0xfffffffffffffffd, 0x0, 0x3fe, 0x0, {0xfffffffffffffffe, 0xfffffffffffffffd, 0xe1, 0xffffffffffffff28, 0x3, 0x8, 0x0, 0x0, 0x1ff, 0x6000, 0x1, r2, r3, 0x7fffffff, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m16.735504067s ago: executing program 3 (id=2350): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_setup(0x356e, &(0x7f0000000180)={0x0, 0x7be7, 0x40, 0x2, 0x1c}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000280)) close_range(r1, 0xffffffffffffffff, 0x0) 4m16.514704673s ago: executing program 3 (id=2352): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000022c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0, 0xba) syz_fuse_handle_req(r0, &(0x7f0000002380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004440)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004480)="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", 0x2000, &(0x7f0000006480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006540)={0x170, 0x0, 0xfd, [{{0x1, 0x2, 0x3, 0x8, 0x9, 0x8, {0x204, 0x6, 0xfffffffffffff534, 0x7, 0x8000000000000000, 0x1, 0x3, 0x4, 0x7fff, 0xc000, 0xfffff843, 0x0, 0x0, 0x6, 0x200003}}, {0x0, 0xc7b, 0x1, 0x6, '.'}}, {{0x6, 0x0, 0x79, 0xfff, 0x6, 0x3, {0x83, 0x4, 0x2b6a, 0x3, 0x4, 0x5, 0x7, 0x100, 0x5, 0x8000, 0x4, 0x0, 0x0, 0x6, 0x6}}, {0x1, 0x2b96, 0x25, 0x4, '(\\\xab\x12(>D=t\v\x92\b\x9f\x8a\xf5\a\xa5\xdf\x80\xaf\x84\x83\x14(ouv\xab6\x1e\xe3\x92i\xf06\xbc!'}}]}, 0x0, 0x0, 0x0}) getdents64(r1, &(0x7f00000066c0)=""/134, 0x86) 4m16.373755618s ago: executing program 2 (id=2353): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) 4m16.08614064s ago: executing program 2 (id=2355): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x7}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x32082, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000240)={0x0, 0xc8a1, 0xc000, 0x8, 0xc5}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1f0000000400000060b8b31722bf0000000000", @ANYRES32, @ANYBLOB="0200000000"], 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f00000003c0)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) brk(0x3) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000500)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000580)='l', 0x1, 0x0, &(0x7f00000005c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4m15.687082357s ago: executing program 0 (id=2359): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect$midi(0x2, 0x50, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x5, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xbe, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x1a, 0x4}, @midi_out_jack={0xf, 0x24, 0x3, 0x3, 0xfa, 0x4, [{0xf5, 0x6}, {0x5}, {0x2, 0x81}, {0xa1, 0x1}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x7359, 0x7}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x5, 0x7f, 0x4, {0x7, 0x25, 0x1, 0x3, "d3c593"}}}]}}}}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 4m15.57715056s ago: executing program 3 (id=2361): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount(&(0x7f0000000600)=@filename='mtd0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='jffs2\x00', 0x800000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) chdir(&(0x7f0000000780)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000007c0)='proc\x00', 0x804040, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9c000014", @ANYRES16=r2, @ANYBLOB="10002abd7000fbdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x8084) sendmsg$nl_generic(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0c260000280029002dbd7000f9ffffff05000000041004"], 0x260c}, 0x1, 0x0, 0x0, 0x8c811}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="18010000310009002abd70000000000004000000040111800001f0800800ad00", @ANYRES32=r3, @ANYBLOB="1400220000000000000100000000000000000000c472bb53453ea085e4d531e2c81b3055e57438227851f85c09309d5226b0d5147afdb0cf799ce672c68c74ef73e2668380f550e21aadad9fae0af96cbc8798aaa00f6f4383a32d6044d4e3dbe80cebb24e1409f314924a08b5b0e8e192a65044b155db8d5d343c00d511a41a8403e78f909193406589a8ef3babf01b4a91a647fe8a04f25c41811bafb2fd639d2ac7c71eac72bc7ecf47080e927c174ffa74d9b70b47921a91cc10ae37391417dc43e7cd117578af9d7dcbda1a67f9d2fd86f4c09309fc4a1e295141711d2b788d3170dce4b61e0fae5ce0ffc0fbe211bea2d7"], 0x118}, 0x1, 0x0, 0x0, 0x42804}, 0x84) rt_sigprocmask(0x0, &(0x7f0000000c40)={[0xffffffffffffffff]}, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000c80)={0x0, 0x5, 0x30, 0x8, 0x3}, &(0x7f0000000cc0)=0x18) getpgrp(0x0) gettid() read(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4m14.873600501s ago: executing program 2 (id=2362): mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000002380)='./trace\x00', &(0x7f00000023c0)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='lock'], 0xa) 4m8.591703715s ago: executing program 3 (id=2364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 4m8.401244628s ago: executing program 2 (id=2365): mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) write(r0, &(0x7f0000000a40)='7', 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 4m8.219526002s ago: executing program 0 (id=2366): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f00", 0x2a}, {&(0x7f0000000500)="010000ff000000009fdab1b654ad1a88ff4f0949", 0x14}], 0x2) 4m7.514185485s ago: executing program 4 (id=2367): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x5) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x8, 0xfffffffffffffffe, 0xfffffffc}, 0x0) pipe2(&(0x7f0000000240), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 4m0.692352639s ago: executing program 2 (id=2369): prlimit64(0x0, 0xa, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(0x0, 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) write$P9_RSETATTR(r1, 0x0, 0x0) 4m0.529373748s ago: executing program 0 (id=2370): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x5, 0x2, @scatter={0x0, 0xdd, &(0x7f0000000140)}, &(0x7f0000000180)="eded501ef6", 0x0, 0x840802, 0x10030, 0x1000, 0x0}) 3m56.423047956s ago: executing program 0 (id=2372): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000600)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x10000839, r0, 0x0) 3m53.897751921s ago: executing program 4 (id=2373): syz_open_dev$usbmon(0x0, 0xcef, 0x20200) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000000640), 0x40000000000017d, 0x888) 3m53.451283031s ago: executing program 2 (id=2374): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "56dc02d7"}]}}, 0x0}, 0x0) 3m51.804932498s ago: executing program 32 (id=2364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 3m47.498844828s ago: executing program 0 (id=2377): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x3631, &(0x7f0000000040)={0x0, 0x30b8, 0x1, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) 3m35.392090592s ago: executing program 33 (id=2373): syz_open_dev$usbmon(0x0, 0xcef, 0x20200) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000000640), 0x40000000000017d, 0x888) 3m34.799708861s ago: executing program 0 (id=2380): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/sda\x00', 0x101042, 0x5) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x8, 0xfffffffffffffffe, 0xfffffffc}, 0x0) pipe2(0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 3m33.090270007s ago: executing program 34 (id=2374): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "56dc02d7"}]}}, 0x0}, 0x0) 3m16.602739644s ago: executing program 35 (id=2380): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/sda\x00', 0x101042, 0x5) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x8, 0xfffffffffffffffe, 0xfffffffc}, 0x0) pipe2(0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1m3.877840968s ago: executing program 1 (id=2397): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000580), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000005c0)={&(0x7f0000000600)=[{0x8001, 0x0, 0x0, 0x0}, {0x200, 0x2811, 0x0, 0x0}], 0x2}) 55.073600035s ago: executing program 1 (id=2398): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x3631, &(0x7f0000000040)={0x0, 0x30b8, 0x1, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) sendto$inet6(r5, &(0x7f0000000140)='J', 0x1, 0x4800, 0x0, 0x0) shutdown(r5, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) 42.211197722s ago: executing program 1 (id=2399): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x3631, &(0x7f0000000040)={0x0, 0x30b8, 0x1, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) sendto$inet6(r5, &(0x7f0000000140)='J', 0x1, 0x4800, 0x0, 0x0) shutdown(r5, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) 32.951534972s ago: executing program 1 (id=2400): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24008080) 25.23024209s ago: executing program 1 (id=2401): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f000001b000), 0x4) sendmmsg(r0, &(0x7f000001b040), 0x4000000000001cd, 0x1008c811) 16.97023034s ago: executing program 1 (id=2402): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xa6) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x4}}, 0x20) mount(0x0, &(0x7f0000019c00)='./file0\x00', &(0x7f0000019c40)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000019c80)='./file0\x00', &(0x7f0000019cc0), 0x0, &(0x7f0000019d00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000019d40)='./file0\x00', 0x0, 0xd5) setreuid(0x0, 0xee00) openat$cgroup_ro(r4, &(0x7f0000019d80)='cpu.stat\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 36 (id=2402): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xa6) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x4}}, 0x20) mount(0x0, &(0x7f0000019c00)='./file0\x00', &(0x7f0000019c40)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000019c80)='./file0\x00', &(0x7f0000019cc0), 0x0, &(0x7f0000019d00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000019d40)='./file0\x00', 0x0, 0xd5) setreuid(0x0, 0xee00) openat$cgroup_ro(r4, &(0x7f0000019d80)='cpu.stat\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): " dev="sda1" ino=2048 res=0 errno=-4 [ 538.782689][ T30] audit: type=1800 audit(1792778508.654:436): pid=11800 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1724" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 539.953205][ T30] audit: type=1800 audit(1792778509.814:437): pid=11815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1727" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 539.957771][ T195] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 540.108031][ T195] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 540.109112][ T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.109157][ T195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.114366][ T195] usb 2-1: config 0 descriptor?? [ 540.376187][ T195] usbhid 2-1:0.0: can't add hid device: -71 [ 540.376280][ T195] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 540.382326][ T195] usb 2-1: USB disconnect, device number 39 [ 541.865947][ T5772] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 541.967434][T11852] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 542.366781][ T30] audit: type=1400 audit(1792778512.214:438): avc: denied { write } for pid=11851 comm="syz.4.1738" name="c.1" dev="configfs" ino=10391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 542.367079][ T30] audit: type=1400 audit(1792778512.224:439): avc: denied { write } for pid=11851 comm="syz.4.1738" name="c.1" dev="configfs" ino=10391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 542.912470][ T5772] usb 2-1: device descriptor read/all, error -71 [ 544.313286][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1746'. [ 544.841788][ T30] audit: type=1400 audit(1792778514.704:440): avc: denied { create } for pid=11887 comm="syz.0.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 545.367846][ T30] audit: type=1400 audit(1792778515.234:441): avc: denied { ioctl } for pid=11887 comm="syz.0.1748" path="socket:[48164]" dev="sockfs" ino=48164 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 545.418104][ T30] audit: type=1400 audit(1792778515.294:442): avc: denied { listen } for pid=11887 comm="syz.0.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 545.418417][ T30] audit: type=1400 audit(1792778515.294:443): avc: denied { setopt } for pid=11887 comm="syz.0.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 545.720966][T11902] fuse: Bad value for 'fd' [ 546.130971][ T195] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 546.212415][T11911] FAULT_INJECTION: forcing a failure. [ 546.212415][T11911] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 546.212447][T11911] CPU: 1 UID: 0 PID: 11911 Comm: syz.0.1754 Not tainted syzkaller #0 PREEMPT(full) [ 546.212472][T11911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 546.212485][T11911] Call Trace: [ 546.212492][T11911] [ 546.212501][T11911] dump_stack_lvl+0x100/0x190 [ 546.212540][T11911] should_fail_ex.cold+0x5/0xa [ 546.212568][T11911] ? prepare_alloc_pages+0x16d/0x5b0 [ 546.212604][T11911] should_fail_alloc_page+0xeb/0x140 [ 546.212640][T11911] prepare_alloc_pages+0x1f0/0x5b0 [ 546.212673][T11911] ? is_bpf_text_address+0x25/0x1a0 [ 546.212710][T11911] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 546.212746][T11911] ? bpf_ksym_find+0x61/0x1c0 [ 546.212771][T11911] ? is_bpf_text_address+0x94/0x1a0 [ 546.212805][T11911] ? kernel_text_address+0x8d/0x100 [ 546.212838][T11911] ? __kernel_text_address+0xd/0x30 [ 546.212875][T11911] ? unwind_get_return_address+0x59/0xa0 [ 546.212911][T11911] ? __lock_acquire+0x5c0/0x1f40 [ 546.212936][T11911] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 546.212976][T11911] ? __lock_acquire+0x5c0/0x1f40 [ 546.213001][T11911] ? __lock_acquire+0x5c0/0x1f40 [ 546.213027][T11911] ? __css_rstat_updated+0x1ce/0x590 [ 546.213064][T11911] ? lock_acquire+0x1d1/0x380 [ 546.213086][T11911] ? page_table_check_set+0x11d/0x580 [ 546.213121][T11911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 546.213152][T11911] ? policy_nodemask+0xed/0x4f0 [ 546.213188][T11911] alloc_pages_mpol+0x201/0x550 [ 546.213223][T11911] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 546.213257][T11911] ? __page_table_check_ptes_set+0x1d5/0x530 [ 546.213298][T11911] folio_alloc_mpol_noprof+0x36/0x260 [ 546.213325][T11911] vma_alloc_folio_noprof+0xed/0x1d0 [ 546.213349][T11911] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 546.213374][T11911] ? rcu_read_unlock+0x2d/0xb0 [ 546.213404][T11911] do_anonymous_page+0xac9/0x2050 [ 546.213436][T11911] ? __pfx_do_anonymous_page+0x10/0x10 [ 546.213458][T11911] ? rcu_read_unlock+0x2d/0xb0 [ 546.213480][T11911] ? rcu_read_unlock+0x2d/0xb0 [ 546.213503][T11911] ? __pte_offset_map+0x179/0x310 [ 546.213537][T11911] __handle_mm_fault+0x1ff3/0x2f60 [ 546.213567][T11911] ? __pfx___handle_mm_fault+0x10/0x10 [ 546.213589][T11911] ? pte_offset_map_lock+0x174/0x320 [ 546.213619][T11911] ? find_held_lock+0x2b/0x80 [ 546.213649][T11911] ? find_held_lock+0x2b/0x80 [ 546.213678][T11911] ? follow_page_pte+0x536/0x1050 [ 546.213733][T11911] handle_mm_fault+0x363/0xa20 [ 546.213763][T11911] __get_user_pages+0x8a9/0x2c20 [ 546.213806][T11911] ? __pfx___get_user_pages+0x10/0x10 [ 546.213850][T11911] faultin_page_range+0x1f1/0x9e0 [ 546.213884][T11911] ? lock_acquire+0x1d1/0x380 [ 546.213911][T11911] madvise_do_behavior+0x354/0x510 [ 546.213937][T11911] ? __pfx_madvise_do_behavior+0x10/0x10 [ 546.213961][T11911] ? down_read+0x136/0x4c0 [ 546.214001][T11911] do_madvise+0x238/0x290 [ 546.214022][T11911] ? __pfx_do_madvise+0x10/0x10 [ 546.214043][T11911] ? do_futex+0x190/0x440 [ 546.214080][T11911] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 546.214127][T11911] __x64_sys_madvise+0xa9/0x110 [ 546.214148][T11911] ? lockdep_hardirqs_on+0x7d/0x110 [ 546.214170][T11911] do_syscall_64+0x123/0x790 [ 546.214196][T11911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.214218][T11911] RIP: 0033:0x7f3b18b9f559 [ 546.214236][T11911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.214265][T11911] RSP: 002b:00007f3b19a3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 546.214288][T11911] RAX: ffffffffffffffda RBX: 00007f3b18e25fa0 RCX: 00007f3b18b9f559 [ 546.214304][T11911] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 546.214317][T11911] RBP: 00007f3b18c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 546.214331][T11911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.214345][T11911] R13: 00007f3b18e26038 R14: 00007f3b18e25fa0 R15: 00007fffe67ee758 [ 546.214378][T11911] [ 546.933744][ T195] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 546.960169][ T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.960206][ T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.960244][ T195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.963161][ T195] usb 2-1: config 0 descriptor?? [ 547.019747][T11921] syzkaller0: entered promiscuous mode [ 547.019770][T11921] syzkaller0: entered allmulticast mode [ 547.137385][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1759'. [ 547.190278][ T195] usbhid 2-1:0.0: can't add hid device: -71 [ 547.190374][ T195] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 547.202953][ T195] usb 2-1: USB disconnect, device number 42 [ 548.338786][ T30] audit: type=1800 audit(1792778518.184:444): pid=11927 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1760" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 548.338843][ T30] audit: type=1800 audit(1792778518.184:445): pid=11935 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1760" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 548.408138][ T195] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 549.238884][ T195] usb 2-1: device descriptor read/all, error -71 [ 550.579109][T11966] FAULT_INJECTION: forcing a failure. [ 550.579109][T11966] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 550.579146][T11966] CPU: 1 UID: 0 PID: 11966 Comm: syz.3.1770 Not tainted syzkaller #0 PREEMPT(full) [ 550.579174][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 550.579189][T11966] Call Trace: [ 550.579197][T11966] [ 550.579207][T11966] dump_stack_lvl+0x100/0x190 [ 550.579247][T11966] should_fail_ex.cold+0x5/0xa [ 550.579276][T11966] ? prepare_alloc_pages+0x16d/0x5b0 [ 550.579314][T11966] should_fail_alloc_page+0xeb/0x140 [ 550.579351][T11966] prepare_alloc_pages+0x1f0/0x5b0 [ 550.579387][T11966] ? is_bpf_text_address+0x25/0x1a0 [ 550.579424][T11966] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 550.579455][T11966] ? bpf_ksym_find+0x61/0x1c0 [ 550.579481][T11966] ? is_bpf_text_address+0x94/0x1a0 [ 550.579514][T11966] ? kernel_text_address+0x8d/0x100 [ 550.579548][T11966] ? __kernel_text_address+0xd/0x30 [ 550.579581][T11966] ? unwind_get_return_address+0x59/0xa0 [ 550.579618][T11966] ? __lock_acquire+0x5c0/0x1f40 [ 550.579643][T11966] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 550.579685][T11966] ? __lock_acquire+0x5c0/0x1f40 [ 550.579711][T11966] ? __lock_acquire+0x5c0/0x1f40 [ 550.579743][T11966] ? __css_rstat_updated+0x1ce/0x590 [ 550.579785][T11966] ? lock_acquire+0x1d1/0x380 [ 550.579810][T11966] ? page_table_check_set+0x11d/0x580 [ 550.579849][T11966] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 550.579883][T11966] ? policy_nodemask+0xed/0x4f0 [ 550.579921][T11966] alloc_pages_mpol+0x201/0x550 [ 550.579958][T11966] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 550.579997][T11966] ? __page_table_check_ptes_set+0x1d5/0x530 [ 550.580039][T11966] folio_alloc_mpol_noprof+0x36/0x260 [ 550.580068][T11966] vma_alloc_folio_noprof+0xed/0x1d0 [ 550.580093][T11966] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 550.580120][T11966] ? rcu_read_unlock+0x2d/0xb0 [ 550.580153][T11966] do_anonymous_page+0xac9/0x2050 [ 550.580187][T11966] ? __pfx_do_anonymous_page+0x10/0x10 [ 550.580209][T11966] ? rcu_read_unlock+0x2d/0xb0 [ 550.580233][T11966] ? rcu_read_unlock+0x2d/0xb0 [ 550.580257][T11966] ? __pte_offset_map+0x179/0x310 [ 550.580293][T11966] __handle_mm_fault+0x1ff3/0x2f60 [ 550.580325][T11966] ? __pfx___handle_mm_fault+0x10/0x10 [ 550.580349][T11966] ? pte_offset_map_lock+0x174/0x320 [ 550.580380][T11966] ? find_held_lock+0x2b/0x80 [ 550.580412][T11966] ? find_held_lock+0x2b/0x80 [ 550.580443][T11966] ? follow_page_pte+0x536/0x1050 [ 550.580494][T11966] handle_mm_fault+0x363/0xa20 [ 550.580526][T11966] __get_user_pages+0x8a9/0x2c20 [ 550.580570][T11966] ? __pfx___get_user_pages+0x10/0x10 [ 550.580615][T11966] faultin_page_range+0x1f1/0x9e0 [ 550.580648][T11966] ? lock_acquire+0x1d1/0x380 [ 550.580677][T11966] madvise_do_behavior+0x354/0x510 [ 550.580705][T11966] ? __pfx_madvise_do_behavior+0x10/0x10 [ 550.580736][T11966] ? down_read+0x136/0x4c0 [ 550.580782][T11966] do_madvise+0x238/0x290 [ 550.580805][T11966] ? __pfx_do_madvise+0x10/0x10 [ 550.580828][T11966] ? do_futex+0x190/0x440 [ 550.580870][T11966] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 550.580921][T11966] __x64_sys_madvise+0xa9/0x110 [ 550.580945][T11966] ? lockdep_hardirqs_on+0x7d/0x110 [ 550.580969][T11966] do_syscall_64+0x123/0x790 [ 550.580996][T11966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.581021][T11966] RIP: 0033:0x7ff77a99f559 [ 550.581041][T11966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.581065][T11966] RSP: 002b:00007ff77b7b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 550.581090][T11966] RAX: ffffffffffffffda RBX: 00007ff77ac25fa0 RCX: 00007ff77a99f559 [ 550.581105][T11966] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 550.581120][T11966] RBP: 00007ff77aa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 550.581135][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.581149][T11966] R13: 00007ff77ac26038 R14: 00007ff77ac25fa0 R15: 00007ffd99999a38 [ 550.581184][T11966] [ 550.704439][T11968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'. [ 550.839856][T11970] syzkaller0: entered promiscuous mode [ 550.839878][T11970] syzkaller0: entered allmulticast mode [ 553.104462][T11988] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 554.373248][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1781'. [ 554.843718][T12032] syzkaller0: entered promiscuous mode [ 554.843732][T12032] syzkaller0: entered allmulticast mode [ 554.981145][ T5772] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 555.182889][ T5772] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 555.215793][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.216434][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.298685][ T5772] usb 4-1: config 0 descriptor?? [ 555.415319][T12039] FAULT_INJECTION: forcing a failure. [ 555.415319][T12039] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 555.415362][T12039] CPU: 0 UID: 0 PID: 12039 Comm: syz.4.1788 Not tainted syzkaller #0 PREEMPT(full) [ 555.415389][T12039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 555.415402][T12039] Call Trace: [ 555.415410][T12039] [ 555.415419][T12039] dump_stack_lvl+0x100/0x190 [ 555.415457][T12039] should_fail_ex.cold+0x5/0xa [ 555.415484][T12039] ? prepare_alloc_pages+0x16d/0x5b0 [ 555.415521][T12039] should_fail_alloc_page+0xeb/0x140 [ 555.415561][T12039] prepare_alloc_pages+0x1f0/0x5b0 [ 555.415596][T12039] ? is_bpf_text_address+0x25/0x1a0 [ 555.415634][T12039] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 555.415663][T12039] ? bpf_ksym_find+0x61/0x1c0 [ 555.415688][T12039] ? is_bpf_text_address+0x94/0x1a0 [ 555.415719][T12039] ? kernel_text_address+0x8d/0x100 [ 555.415751][T12039] ? __kernel_text_address+0xd/0x30 [ 555.415783][T12039] ? unwind_get_return_address+0x59/0xa0 [ 555.415820][T12039] ? __lock_acquire+0x5c0/0x1f40 [ 555.415844][T12039] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 555.415884][T12039] ? __lock_acquire+0x5c0/0x1f40 [ 555.415910][T12039] ? __lock_acquire+0x5c0/0x1f40 [ 555.415934][T12039] ? __css_rstat_updated+0x1ce/0x590 [ 555.415972][T12039] ? lock_acquire+0x1d1/0x380 [ 555.415995][T12039] ? page_table_check_set+0x11d/0x580 [ 555.416031][T12039] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 555.416063][T12039] ? policy_nodemask+0xed/0x4f0 [ 555.416100][T12039] alloc_pages_mpol+0x201/0x550 [ 555.416136][T12039] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 555.416172][T12039] ? __page_table_check_ptes_set+0x1d5/0x530 [ 555.416214][T12039] folio_alloc_mpol_noprof+0x36/0x260 [ 555.416242][T12039] vma_alloc_folio_noprof+0xed/0x1d0 [ 555.416268][T12039] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 555.416294][T12039] ? rcu_read_unlock+0x2d/0xb0 [ 555.416326][T12039] do_anonymous_page+0xac9/0x2050 [ 555.416369][T12039] ? __pfx_do_anonymous_page+0x10/0x10 [ 555.416392][T12039] ? rcu_read_unlock+0x2d/0xb0 [ 555.416416][T12039] ? rcu_read_unlock+0x2d/0xb0 [ 555.416441][T12039] ? __pte_offset_map+0x179/0x310 [ 555.416477][T12039] __handle_mm_fault+0x1ff3/0x2f60 [ 555.416508][T12039] ? __pfx___handle_mm_fault+0x10/0x10 [ 555.416532][T12039] ? pte_offset_map_lock+0x174/0x320 [ 555.416564][T12039] ? find_held_lock+0x2b/0x80 [ 555.416595][T12039] ? find_held_lock+0x2b/0x80 [ 555.416626][T12039] ? follow_page_pte+0x536/0x1050 [ 555.416671][T12039] handle_mm_fault+0x363/0xa20 [ 555.416701][T12039] __get_user_pages+0x8a9/0x2c20 [ 555.416743][T12039] ? __pfx___get_user_pages+0x10/0x10 [ 555.416785][T12039] faultin_page_range+0x1f1/0x9e0 [ 555.416818][T12039] ? lock_acquire+0x1d1/0x380 [ 555.416846][T12039] madvise_do_behavior+0x354/0x510 [ 555.416873][T12039] ? __pfx_madvise_do_behavior+0x10/0x10 [ 555.416896][T12039] ? down_read+0x136/0x4c0 [ 555.416939][T12039] do_madvise+0x238/0x290 [ 555.416963][T12039] ? __pfx_do_madvise+0x10/0x10 [ 555.416985][T12039] ? do_futex+0x190/0x440 [ 555.417024][T12039] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 555.417073][T12039] __x64_sys_madvise+0xa9/0x110 [ 555.417095][T12039] ? lockdep_hardirqs_on+0x7d/0x110 [ 555.417119][T12039] do_syscall_64+0x123/0x790 [ 555.417146][T12039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.417170][T12039] RIP: 0033:0x7f61b499f559 [ 555.417188][T12039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.417209][T12039] RSP: 002b:00007f61b58c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 555.417233][T12039] RAX: ffffffffffffffda RBX: 00007f61b4c25fa0 RCX: 00007f61b499f559 [ 555.417249][T12039] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 555.417263][T12039] RBP: 00007f61b4a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 555.417277][T12039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.417291][T12039] R13: 00007f61b4c26038 R14: 00007f61b4c25fa0 R15: 00007fff15bbbce8 [ 555.417324][T12039] [ 555.627872][ T5772] usbhid 4-1:0.0: can't add hid device: -71 [ 555.628017][ T5772] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 555.652835][ T5772] usb 4-1: USB disconnect, device number 66 [ 557.186745][ T5772] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 557.327742][T12058] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 557.346124][ T5772] usb 4-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 557.356474][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.356520][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.379302][ T5772] usb 4-1: config 0 descriptor?? [ 557.485970][T12061] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 557.486000][T12061] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 557.598625][T12028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.599111][T12028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.632155][T12067] jffs2: notice: (12067) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 557.745967][T12070] netlink: 'syz.4.1796': attribute type 4 has an invalid length. [ 557.745991][T12070] netlink: 5620 bytes leftover after parsing attributes in process `syz.4.1796'. [ 558.031591][T12066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.466742][ T2288] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 558.616719][ T2288] usb 2-1: Using ep0 maxpacket: 32 [ 558.622243][ T2288] usb 2-1: unable to get BOS descriptor or descriptor too short [ 558.622310][ T2288] usb 2-1: New USB device found, idVendor=413c, idProduct=81c2, bcdDevice=c9.4b [ 558.623571][ T2288] usb 2-1: config 14 has an invalid interface number: 8 but max is 1 [ 558.623599][ T2288] usb 2-1: config 14 has no interface number 1 [ 558.623636][ T2288] usb 2-1: config 14 interface 8 has no altsetting 0 [ 558.623657][ T2288] usb 2-1: config 14 interface 0 has no altsetting 0 [ 558.630886][ T2288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.630912][ T2288] usb 2-1: Product: syz [ 558.630927][ T2288] usb 2-1: Manufacturer: syz [ 558.630942][ T2288] usb 2-1: SerialNumber: syz [ 558.904711][ T5772] usbhid 4-1:0.0: can't add hid device: -71 [ 558.904805][ T5772] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 558.929827][ T5772] usb 4-1: USB disconnect, device number 67 [ 560.639692][ T5772] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 560.816994][ T5772] usb 1-1: Using ep0 maxpacket: 32 [ 560.825303][ T5772] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 560.859040][ T5772] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 560.861618][ T5772] usb 1-1: config 0 has no interface number 0 [ 560.864163][ T5772] usb 1-1: config 0 interface 184 has no altsetting 0 [ 560.927043][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.927559][ T5772] usb 1-1: Product: syz [ 560.928062][ T5772] usb 1-1: Manufacturer: syz [ 560.928646][ T5772] usb 1-1: SerialNumber: syz [ 561.102293][ T5772] usb 1-1: config 0 descriptor?? [ 561.252486][ T2288] usb 2-1: selecting invalid altsetting 0 [ 561.252512][ T2288] usb 2-1: Could not set interface, error -22 [ 561.272356][ T2288] usb 2-1: USB disconnect, device number 45 [ 562.151680][ T5772] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 562.151714][ T5772] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 562.678277][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.678332][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.453721][ T5772] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 563.453991][ T5772] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 563.454175][ T5772] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 563.460011][ T5772] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 564.045633][T12138] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 564.925148][ T2288] usb 1-1: USB disconnect, device number 47 [ 565.852845][T12157] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 565.949818][ T2288] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 566.599075][ T2288] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 566.600209][ T2288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.600258][ T2288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.603688][ T2288] usb 1-1: config 0 descriptor?? [ 566.681931][T12174] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 567.385024][ T2288] usbhid 1-1:0.0: can't add hid device: -71 [ 567.385117][ T2288] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 567.433131][ T2288] usb 1-1: USB disconnect, device number 48 [ 568.294635][ T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 568.600410][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 568.601065][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 568.603433][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 568.603459][ T10] usb 5-1: config 0 has no interface number 0 [ 568.603496][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 568.605510][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.605536][ T10] usb 5-1: Product: syz [ 568.605554][ T10] usb 5-1: Manufacturer: syz [ 568.605570][ T10] usb 5-1: SerialNumber: syz [ 568.610058][ T10] usb 5-1: config 0 descriptor?? [ 568.658301][ T2288] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 569.425329][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 569.425556][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 571.157136][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 571.157179][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 571.157201][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 571.157416][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 572.690764][ T5732] usb 5-1: USB disconnect, device number 63 [ 573.903452][ T2288] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 574.048963][ T2288] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 574.053541][ T2288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.053903][ T2288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.899278][ T2288] usb 5-1: config 0 descriptor?? [ 575.133696][ T2288] usbhid 5-1:0.0: can't add hid device: -71 [ 575.133801][ T2288] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 575.190327][ T2288] usb 5-1: USB disconnect, device number 64 [ 575.274161][T12267] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 575.314961][T12266] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 575.877486][ T2288] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 576.040316][ T2288] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 576.041384][ T2288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.041429][ T2288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.045132][ T2288] usb 5-1: config 0 descriptor?? [ 577.016895][ T2288] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 577.024171][ T2288] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 577.212143][ T2288] usb 5-1: USB disconnect, device number 65 [ 577.212261][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 580.239990][ T30] audit: type=1800 audit(1792778550.114:446): pid=12303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1854" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 580.279896][T12307] ptrace attach of ""[12311] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12307] [ 581.789138][ T2288] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 581.964551][ T2288] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 581.991801][ T2288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.992467][ T2288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.142717][ T2288] usb 1-1: config 0 descriptor?? [ 582.378317][ T2288] usbhid 1-1:0.0: can't add hid device: -71 [ 582.380366][ T2288] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 582.408488][ T2288] usb 1-1: USB disconnect, device number 50 [ 583.494282][T12349] 9p: Bad value for 'rfdno' [ 583.522915][T12354] jffs2: notice: (12354) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 583.532466][T12354] netlink: 'syz.3.1867': attribute type 4 has an invalid length. [ 583.532485][T12354] netlink: 5620 bytes leftover after parsing attributes in process `syz.3.1867'. [ 583.535400][T12352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.662473][T12359] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 584.223427][ T5772] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 585.335062][ T5772] usb 1-1: device descriptor read/all, error -71 [ 585.492726][T12376] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 585.599959][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1871'. [ 586.707962][T12389] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 5 (only 8 groups) [ 587.156899][T12389] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 587.423455][T12401] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 587.907166][T12400] jffs2: notice: (12400) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 588.457051][T12400] netlink: 'syz.0.1878': attribute type 4 has an invalid length. [ 588.457075][T12400] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.1878'. [ 588.510513][T12398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.171892][ T2288] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 590.234002][T12430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1885'. [ 590.317474][ T2288] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 590.319509][ T2288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.319553][ T2288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.323270][ T2288] usb 3-1: config 0 descriptor?? [ 591.001476][T12435] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 5 (only 8 groups) [ 591.034660][T12435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.338441][ T2288] usbhid 3-1:0.0: can't add hid device: -71 [ 591.338531][ T2288] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 591.340814][ T2288] usb 3-1: USB disconnect, device number 52 [ 593.130871][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'. [ 593.787999][T12470] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 5 (only 8 groups) [ 593.810842][T12470] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 595.013746][T12482] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 5 (only 8 groups) [ 595.066566][T12482] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 595.750055][T12490] fuse: Bad value for 'fd' [ 596.143423][T12495] jffs2: notice: (12495) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 596.167586][T12495] netlink: 'syz.1.1905': attribute type 4 has an invalid length. [ 596.167607][T12495] netlink: 5620 bytes leftover after parsing attributes in process `syz.1.1905'. [ 596.174803][T12494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.416064][T12501] FAULT_INJECTION: forcing a failure. [ 596.416064][T12501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 596.416376][T12501] CPU: 0 UID: 0 PID: 12501 Comm: syz.2.1907 Not tainted syzkaller #0 PREEMPT(full) [ 596.416405][T12501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 596.416420][T12501] Call Trace: [ 596.416429][T12501] [ 596.416439][T12501] dump_stack_lvl+0x100/0x190 [ 596.416479][T12501] should_fail_ex.cold+0x5/0xa [ 596.416516][T12501] ? prepare_alloc_pages+0x16d/0x5b0 [ 596.416555][T12501] should_fail_alloc_page+0xeb/0x140 [ 596.416592][T12501] prepare_alloc_pages+0x1f0/0x5b0 [ 596.416630][T12501] ? is_bpf_text_address+0x25/0x1a0 [ 596.416662][T12501] __alloc_frozen_pages_noprof+0x1e8/0x32e0 [ 596.416692][T12501] ? bpf_ksym_find+0x61/0x1c0 [ 596.416718][T12501] ? is_bpf_text_address+0x94/0x1a0 [ 596.416752][T12501] ? kernel_text_address+0x8d/0x100 [ 596.416785][T12501] ? __kernel_text_address+0xd/0x30 [ 596.416818][T12501] ? unwind_get_return_address+0x59/0xa0 [ 596.416854][T12501] ? __lock_acquire+0x5c0/0x1f40 [ 596.416880][T12501] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 596.416922][T12501] ? __lock_acquire+0x5c0/0x1f40 [ 596.416948][T12501] ? __lock_acquire+0x5c0/0x1f40 [ 596.416972][T12501] ? __css_rstat_updated+0x1ce/0x590 [ 596.417011][T12501] ? lock_acquire+0x1d1/0x380 [ 596.417034][T12501] ? page_table_check_set+0x11d/0x580 [ 596.417071][T12501] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 596.417102][T12501] ? policy_nodemask+0xed/0x4f0 [ 596.417141][T12501] alloc_pages_mpol+0x201/0x550 [ 596.417177][T12501] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 596.417213][T12501] ? __page_table_check_ptes_set+0x1d5/0x530 [ 596.417256][T12501] folio_alloc_mpol_noprof+0x36/0x260 [ 596.417284][T12501] vma_alloc_folio_noprof+0xed/0x1d0 [ 596.417310][T12501] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 596.417336][T12501] ? rcu_read_unlock+0x2d/0xb0 [ 596.417368][T12501] do_anonymous_page+0xac9/0x2050 [ 596.417402][T12501] ? __pfx_do_anonymous_page+0x10/0x10 [ 596.417424][T12501] ? rcu_read_unlock+0x2d/0xb0 [ 596.417447][T12501] ? rcu_read_unlock+0x2d/0xb0 [ 596.417471][T12501] ? __pte_offset_map+0x179/0x310 [ 596.417513][T12501] __handle_mm_fault+0x1ff3/0x2f60 [ 596.417546][T12501] ? __pfx___handle_mm_fault+0x10/0x10 [ 596.417571][T12501] ? pte_offset_map_lock+0x174/0x320 [ 596.417605][T12501] ? find_held_lock+0x2b/0x80 [ 596.417638][T12501] ? find_held_lock+0x2b/0x80 [ 596.417671][T12501] ? follow_page_pte+0x536/0x1050 [ 596.417724][T12501] handle_mm_fault+0x363/0xa20 [ 596.417755][T12501] __get_user_pages+0x8a9/0x2c20 [ 596.417799][T12501] ? __pfx___get_user_pages+0x10/0x10 [ 596.417844][T12501] faultin_page_range+0x1f1/0x9e0 [ 596.417877][T12501] ? lock_acquire+0x1d1/0x380 [ 596.417906][T12501] madvise_do_behavior+0x354/0x510 [ 596.417934][T12501] ? __pfx_madvise_do_behavior+0x10/0x10 [ 596.417959][T12501] ? down_read+0x136/0x4c0 [ 596.418002][T12501] do_madvise+0x238/0x290 [ 596.418025][T12501] ? __pfx_do_madvise+0x10/0x10 [ 596.418048][T12501] ? do_futex+0x190/0x440 [ 596.418090][T12501] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 596.418142][T12501] __x64_sys_madvise+0xa9/0x110 [ 596.418165][T12501] ? lockdep_hardirqs_on+0x7d/0x110 [ 596.418189][T12501] do_syscall_64+0x123/0x790 [ 596.418216][T12501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.418240][T12501] RIP: 0033:0x7f68d5b9f559 [ 596.418260][T12501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.418282][T12501] RSP: 002b:00007f68d6a10028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 596.418306][T12501] RAX: ffffffffffffffda RBX: 00007f68d5e25fa0 RCX: 00007f68d5b9f559 [ 596.418322][T12501] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 596.418336][T12501] RBP: 00007f68d5c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 596.418349][T12501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.418363][T12501] R13: 00007f68d5e26038 R14: 00007f68d5e25fa0 R15: 00007ffccab95278 [ 596.418398][T12501] [ 597.040400][T12513] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 5 (only 8 groups) [ 597.088373][T12513] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 597.124431][T12515] 9p: Bad value for 'rfdno' [ 599.462553][ T2288] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 599.606741][ T2288] usb 5-1: Using ep0 maxpacket: 32 [ 599.610164][ T2288] usb 5-1: unable to get BOS descriptor or descriptor too short [ 599.610205][ T2288] usb 5-1: New USB device found, idVendor=413c, idProduct=81c2, bcdDevice=c9.4b [ 599.611164][ T2288] usb 5-1: config 14 has an invalid interface number: 8 but max is 1 [ 599.611188][ T2288] usb 5-1: config 14 has no interface number 1 [ 599.611223][ T2288] usb 5-1: config 14 interface 8 has no altsetting 0 [ 599.611242][ T2288] usb 5-1: config 14 interface 0 has no altsetting 0 [ 599.613127][ T2288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.613150][ T2288] usb 5-1: Product: syz [ 599.613165][ T2288] usb 5-1: Manufacturer: syz [ 599.613180][ T2288] usb 5-1: SerialNumber: syz [ 599.960584][ T2288] usb 5-1: selecting invalid altsetting 0 [ 599.960601][ T2288] usb 5-1: Could not set interface, error -22 [ 599.964068][ T2288] usb 5-1: USB disconnect, device number 66 [ 601.225106][ T30] audit: type=1800 audit(1792778571.094:447): pid=12563 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1921" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 602.413139][T12591] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 5 (only 8 groups) [ 602.431286][T12591] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 604.448475][ T30] audit: type=1800 audit(1792778574.324:448): pid=12609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1932" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 604.448914][ T30] audit: type=1800 audit(1792778574.324:449): pid=12618 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1932" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 604.804731][ T30] audit: type=1400 audit(1792778574.674:450): avc: denied { mounton } for pid=12626 comm="syz.0.1937" path="/397/file0" dev="tmpfs" ino=2214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 604.957213][ T30] audit: type=1804 audit(1792778574.824:451): pid=12627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1937" name="/newroot/397/file0" dev="fuse" ino=1 res=1 errno=0 [ 605.165419][T12631] fuse: Invalid rootmode [ 605.224167][T12631] FAULT_INJECTION: forcing a failure. [ 605.224167][T12631] name failslab, interval 1, probability 0, space 0, times 0 [ 605.224200][T12631] CPU: 1 UID: 0 PID: 12631 Comm: syz.4.1938 Not tainted syzkaller #0 PREEMPT(full) [ 605.224225][T12631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 605.224238][T12631] Call Trace: [ 605.224245][T12631] [ 605.224253][T12631] dump_stack_lvl+0x100/0x190 [ 605.224291][T12631] should_fail_ex.cold+0x5/0xa [ 605.224320][T12631] should_failslab+0xc2/0x120 [ 605.224353][T12631] kmem_cache_alloc_noprof+0x92/0x6a0 [ 605.224384][T12631] ? __send_signal_locked+0x1d1/0x1420 [ 605.224420][T12631] __send_signal_locked+0x1d1/0x1420 [ 605.224453][T12631] do_notify_parent+0xf15/0x10c0 [ 605.224487][T12631] ? __pfx_do_notify_parent+0x10/0x10 [ 605.224516][T12631] ? do_raw_spin_lock+0x128/0x260 [ 605.224544][T12631] ? __wake_up+0x3f/0x60 [ 605.224578][T12631] ? release_task+0xc27/0x1ca0 [ 605.224610][T12631] release_task+0x14ea/0x1ca0 [ 605.224646][T12631] ? __pfx_release_task+0x10/0x10 [ 605.224670][T12631] ? do_raw_spin_lock+0x128/0x260 [ 605.224700][T12631] ? find_held_lock+0x2b/0x80 [ 605.224729][T12631] ? __wake_up+0x3f/0x60 [ 605.224760][T12631] ? __wake_up+0x3f/0x60 [ 605.224796][T12631] ? rcu_is_watching+0x13/0xc0 [ 605.224833][T12631] do_exit+0x1300/0x2a00 [ 605.224863][T12631] ? __pfx_do_exit+0x10/0x10 [ 605.224888][T12631] ? do_raw_spin_lock+0x128/0x260 [ 605.224915][T12631] ? find_held_lock+0x2b/0x80 [ 605.224944][T12631] ? get_signal+0x7db/0x21d0 [ 605.224968][T12631] do_group_exit+0xd5/0x2a0 [ 605.224995][T12631] get_signal+0x1ebd/0x21d0 [ 605.225015][T12631] ? __pfx_futex_wake+0x10/0x10 [ 605.225048][T12631] ? __pfx_get_signal+0x10/0x10 [ 605.225077][T12631] ? do_futex+0x190/0x440 [ 605.225111][T12631] arch_do_signal_or_restart+0x91/0x7e0 [ 605.225145][T12631] ? lockdep_hardirqs_on+0x7d/0x110 [ 605.225168][T12631] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 605.225219][T12631] exit_to_user_mode_loop+0x139/0x700 [ 605.225249][T12631] ? rcu_is_watching+0x13/0xc0 [ 605.225282][T12631] do_syscall_64+0x661/0x790 [ 605.225309][T12631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.225331][T12631] RIP: 0033:0x7f61b499f559 [ 605.225350][T12631] Code: Unable to access opcode bytes at 0x7f61b499f52f. [ 605.225360][T12631] RSP: 002b:00007f61b58c80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 605.225382][T12631] RAX: 0000000000000001 RBX: 00007f61b4c25fa8 RCX: 00007f61b499f559 [ 605.225396][T12631] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f61b4c25fac [ 605.225410][T12631] RBP: 00007f61b4c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 605.225424][T12631] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 605.225438][T12631] R13: 00007f61b4c26038 R14: 00007fff15bbbc00 R15: 00007fff15bbbce8 [ 605.225471][T12631] [ 606.727021][ T2288] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 607.446741][ T2288] usb 2-1: Using ep0 maxpacket: 32 [ 607.447410][ T2288] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 607.448350][ T2288] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 607.448384][ T2288] usb 2-1: config 0 has no interface number 0 [ 607.448423][ T2288] usb 2-1: config 0 interface 184 has no altsetting 0 [ 607.451562][ T2288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.451588][ T2288] usb 2-1: Product: syz [ 607.451604][ T2288] usb 2-1: Manufacturer: syz [ 607.451620][ T2288] usb 2-1: SerialNumber: syz [ 607.459464][ T2288] usb 2-1: config 0 descriptor?? [ 607.537433][ T30] audit: type=1800 audit(1792778577.404:452): pid=12664 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1947" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 608.331350][T12683] fuse: Invalid rootmode [ 609.813857][ T2288] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 609.813889][ T2288] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 609.827176][ T2288] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 609.827208][ T2288] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 609.827231][ T2288] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 609.827251][ T2288] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 609.827458][ T2288] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 609.895147][ T2288] usb 2-1: USB disconnect, device number 46 [ 614.456786][ T5732] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 614.617612][ T5732] usb 2-1: Using ep0 maxpacket: 32 [ 614.623714][ T5732] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 614.657472][ T5732] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 614.657838][ T5732] usb 2-1: config 0 has no interface number 0 [ 614.658739][ T5732] usb 2-1: config 0 interface 184 has no altsetting 0 [ 614.725543][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.726086][ T5732] usb 2-1: Product: syz [ 614.726267][ T5732] usb 2-1: Manufacturer: syz [ 614.737995][ T5732] usb 2-1: SerialNumber: syz [ 614.844668][ T5732] usb 2-1: config 0 descriptor?? [ 615.625704][ T5732] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 615.625741][ T5732] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 616.626948][ T5772] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 616.655901][T12775] syzkaller0: entered promiscuous mode [ 616.655923][T12775] syzkaller0: entered allmulticast mode [ 616.790904][ T5772] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 616.792336][T12781] kvm: pic: non byte write [ 616.792975][ T5772] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 616.793006][ T5772] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 616.793054][ T5772] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 616.793083][ T5772] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 616.793119][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.804113][T12761] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 616.804252][T12761] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 616.808310][ T5772] pl2303 3-1:1.0: pl2303 converter detected [ 616.826496][ T5772] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 617.136981][T12761] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 617.137311][T12761] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 617.137781][T12761] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 617.138549][T12761] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 617.138606][T12761] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 617.142275][ T5772] usb 3-1: USB disconnect, device number 53 [ 617.158540][ T5772] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 617.160423][ T5772] pl2303 3-1:1.0: device disconnected [ 617.368952][T12792] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 617.368970][T12792] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 617.401610][ T5732] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 617.401632][ T5732] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 617.401645][ T5732] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 617.401774][ T5732] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 618.021425][T12811] syzkaller0: entered promiscuous mode [ 618.021741][T12811] syzkaller0: entered allmulticast mode [ 618.666567][ T2288] usb 2-1: USB disconnect, device number 47 [ 620.097661][ T5716] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 620.248469][ T5716] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 620.250816][ T5716] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 620.250837][ T5716] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 620.250851][ T5716] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 620.250866][ T5716] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 620.250887][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.255995][T12840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 620.256119][T12840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 620.260733][ T5716] pl2303 5-1:1.0: pl2303 converter detected [ 620.277352][ T5716] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 620.580068][T12840] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 620.593172][T12840] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 620.594656][T12840] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 620.594955][T12840] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 620.595010][T12840] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 620.610494][ T5716] usb 5-1: USB disconnect, device number 67 [ 620.640838][ T5716] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 620.641221][ T5716] pl2303 5-1:1.0: device disconnected [ 620.956793][ T2288] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 621.109091][ T2288] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 621.123429][ T2288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.123475][ T2288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.129889][ T2288] usb 2-1: config 0 descriptor?? [ 621.357325][ T2288] usbhid 2-1:0.0: can't add hid device: -71 [ 621.357421][ T2288] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 621.364988][ T2288] usb 2-1: USB disconnect, device number 48 [ 621.937168][ T2288] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 622.171356][ T2288] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 622.174890][ T2288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.174918][ T2288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.204119][ T2288] usb 2-1: config 0 descriptor?? [ 622.256218][T12879] smpboot: CPU 1 is now offline [ 622.434083][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.434362][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.111522][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.111557][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.547516][ T2288] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 623.548604][ T2288] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 623.585574][ T30] audit: type=1800 audit(1792778593.454:453): pid=12881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2011" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 623.609317][ T30] audit: type=1800 audit(1792778593.484:454): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2011" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 623.909070][ T2288] usb 2-1: USB disconnect, device number 49 [ 623.909170][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 624.541475][ T30] audit: type=1800 audit(1792778594.414:455): pid=12895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2016" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 624.541767][ T30] audit: type=1800 audit(1792778594.414:456): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2016" name="file1" dev="sda1" ino=2048 res=0 errno=-4 [ 624.822549][T12908] device-mapper: table: 248:4: ram8 too small for target: start=0, len=10368, dev_size=8192 [ 624.822582][T12908] device-mapper: core: Cannot calculate initial queue limits [ 624.822595][T12908] device-mapper: ioctl: unable to set up device queue for new table. [ 625.214614][ T5612] cgroup: fork rejected by pids controller in /syz3 [ 625.277812][ T30] audit: type=1400 audit(1792778595.154:457): avc: denied { append } for pid=12919 comm="syz.2.2022" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 626.002222][T12935] device-mapper: table: 248:5: multipath: error getting device (-EBUSY) [ 626.002238][T12935] device-mapper: ioctl: error adding target to table [ 626.005874][T12936] device-mapper: table: 248:6: multipath: not enough priority group arguments (-EINVAL) [ 626.005889][T12936] device-mapper: ioctl: error adding target to table [ 626.044197][ T2288] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 626.063013][ T30] audit: type=1400 audit(1792778595.934:458): avc: denied { audit_write } for pid=12922 comm="syz.1.2025" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 626.188988][T12942] ip_tables: iptables: counters copy to user failed while replacing table [ 626.201172][ T2288] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 626.201988][ T2288] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 626.202005][ T2288] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 626.202019][ T2288] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 626.202034][ T2288] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 626.202053][ T2288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.215259][T12930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 626.215317][T12930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 626.286753][ T2288] pl2303 3-1:1.0: pl2303 converter detected [ 626.311092][ T2288] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 626.394485][T12946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 626.405779][T12946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 626.407436][T12946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 626.422957][T12946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 626.423273][T12946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 626.465487][ T30] audit: type=1400 audit(1792778596.334:459): avc: denied { mounton } for pid=12944 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 626.518154][T12948] device-mapper: table: 248:7: multipath: not enough priority group arguments (-EINVAL) [ 626.518170][T12948] device-mapper: ioctl: error adding target to table [ 626.607794][T12930] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 626.608425][T12930] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 626.608701][T12930] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 626.608928][T12930] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 626.608957][T12930] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 626.613214][ T2288] usb 3-1: USB disconnect, device number 54 [ 626.664486][T12957] 9p: Bad value for 'rfdno' [ 626.683792][ T2288] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 626.685270][ T2288] pl2303 3-1:1.0: device disconnected [ 626.934355][ T30] audit: type=1400 audit(1792778596.804:460): avc: denied { node_bind } for pid=12963 comm="syz.1.2036" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 627.052175][T12944] rxe_eth0 speed is unknown, defaulting to 1000 [ 627.131429][T12969] device-mapper: table: 248:7: multipath: not enough priority group arguments (-EINVAL) [ 627.131446][T12969] device-mapper: ioctl: error adding target to table [ 628.492953][ T5617] Bluetooth: hci2: command tx timeout [ 630.467534][T12944] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.467589][T12944] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.467800][T12944] bridge_slave_0: entered allmulticast mode [ 630.499641][T12944] bridge_slave_0: entered promiscuous mode [ 630.506751][ T5617] Bluetooth: hci2: command tx timeout [ 630.521454][T12944] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.521505][T12944] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.521605][T12944] bridge_slave_1: entered allmulticast mode [ 630.548616][T12944] bridge_slave_1: entered promiscuous mode [ 630.653602][T12944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.672489][T12944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.757542][T12944] team0: Port device team_slave_0 added [ 630.773907][T12944] team0: Port device team_slave_1 added [ 630.863063][T12944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.863082][T12944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.863096][T12944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.914297][T12944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.914308][T12944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.914322][T12944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.087446][T12944] hsr_slave_0: entered promiscuous mode [ 631.087995][T12944] hsr_slave_1: entered promiscuous mode [ 631.108691][T12944] debugfs: 'hsr0' already exists in 'hsr' [ 631.108709][T12944] Cannot create hsr debugfs directory [ 631.256313][T13014] device-mapper: table: 248:6: multipath: not enough priority group arguments (-EINVAL) [ 631.256330][T13014] device-mapper: ioctl: error adding target to table [ 631.406556][T13017] device-mapper: table: 248:8: multipath: not enough priority group arguments (-EINVAL) [ 631.406573][T13017] device-mapper: ioctl: error adding target to table [ 631.479157][ T2288] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 631.633835][ T2288] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 631.644717][ T2288] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 631.644737][ T2288] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 631.644751][ T2288] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 631.644766][ T2288] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 631.644786][ T2288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.703315][T13012] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 631.703390][T13012] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 631.715521][ T2288] pl2303 2-1:1.0: pl2303 converter detected [ 631.737492][T12944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.739484][ T2288] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 631.981779][T12944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.050446][T13012] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 632.059000][T13012] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 632.066384][T13012] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 632.074858][T13012] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 632.074895][T13012] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 632.087076][ T2288] usb 2-1: USB disconnect, device number 50 [ 632.124869][T12944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.139645][ T2288] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 632.140102][ T2288] pl2303 2-1:1.0: device disconnected [ 632.233048][T12944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.924639][ T5617] Bluetooth: hci2: command tx timeout [ 633.108064][T12944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 633.131162][T12944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 633.131675][T12944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 633.161154][T12944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 633.162127][T12944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 633.185173][T12944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 633.186330][T12944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 633.223793][T12944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 633.265512][T13047] device-mapper: table: 248:7: multipath: not enough priority group arguments (-EINVAL) [ 633.265529][T13047] device-mapper: ioctl: error adding target to table [ 633.457243][T13060] device-mapper: table: 248:5: multipath: error getting device (-EBUSY) [ 633.457259][T13060] device-mapper: ioctl: error adding target to table [ 633.571359][T12944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.623014][T12944] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.643166][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.643225][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.675703][T11552] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.675760][T11552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.542458][ T5617] Bluetooth: hci2: command tx timeout [ 635.838522][T13073] 9p: Bad value for 'wfdno' [ 635.873192][T12944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.958835][T12944] veth0_vlan: entered promiscuous mode [ 635.980605][T12944] veth1_vlan: entered promiscuous mode [ 636.034503][T12944] veth0_macvtap: entered promiscuous mode [ 636.049724][T12944] veth1_macvtap: entered promiscuous mode [ 636.067013][ T2288] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 636.074823][ T30] audit: type=1400 audit(1792778605.934:461): avc: denied { mount } for pid=13096 comm="syz.4.2070" name="/" dev="ramfs" ino=54865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 636.119521][T12944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.150474][T12944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.217832][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.217860][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.217886][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.217904][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.218952][ T2288] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 636.221270][ T2288] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 636.221289][ T2288] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 636.221303][ T2288] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 636.221317][ T2288] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 636.221346][ T2288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.235931][T13094] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 636.236023][T13094] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 636.314211][ T2288] pl2303 1-1:1.0: pl2303 converter detected [ 636.365550][ T2288] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 636.566237][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.566251][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.676130][T13111] device-mapper: table: 248:8: multipath: not enough priority group arguments (-EINVAL) [ 636.676148][T13111] device-mapper: ioctl: error adding target to table [ 636.706931][T13094] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 636.708767][T13094] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 636.709002][T13094] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 636.709228][T13094] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 636.709257][T13094] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 636.714651][ T5716] usb 1-1: USB disconnect, device number 53 [ 636.775334][ T5716] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 636.775708][ T5716] pl2303 1-1:1.0: device disconnected [ 636.812531][T12052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.812546][T12052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.884172][ T30] audit: type=1400 audit(1792778606.754:462): avc: denied { mounton } for pid=12944 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 637.502974][ T30] audit: type=1400 audit(1792778607.374:463): avc: denied { ioctl } for pid=13125 comm="syz.4.2077" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=55280 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 637.535628][ T30] audit: type=1400 audit(1792778607.404:464): avc: denied { mounton } for pid=13126 comm="syz.1.2078" path="/430/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 637.570092][ T30] audit: type=1800 audit(1792778607.444:465): pid=13128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2078" name=08 dev="sda1" ino=2051 res=0 errno=-22 [ 638.849701][ T30] audit: type=1400 audit(1792778608.724:466): avc: denied { write } for pid=13137 comm="syz.2.2081" name="sda" dev="devtmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.971067][ T30] audit: type=1400 audit(1792778608.844:467): avc: denied { map } for pid=13137 comm="syz.2.2081" path="/400/dev/sda" dev="devtmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 639.069444][T13153] 9p: Bad value for 'rfdno' [ 639.098484][T13152] syzkaller0: entered promiscuous mode [ 639.098497][T13152] syzkaller0: entered allmulticast mode [ 639.186976][T13156] cgroup: fork rejected by pids controller in /syz4 [ 639.354320][ T30] audit: type=1800 audit(1792778609.224:468): pid=13160 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2090" name=08 dev="sda1" ino=2051 res=0 errno=-22 [ 639.616144][ T30] audit: type=1400 audit(1792778609.484:469): avc: denied { shutdown } for pid=13162 comm="syz.2.2091" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 639.690566][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.908426][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.035687][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.142061][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.274568][T12946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 641.288529][T12946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 641.289111][T12946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 641.290375][T12946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 641.290691][T12946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 641.776409][ T43] bridge_slave_1: left allmulticast mode [ 641.776443][ T43] bridge_slave_1: left promiscuous mode [ 641.777365][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.840525][ T43] bridge_slave_0: left allmulticast mode [ 641.840543][ T43] bridge_slave_0: left promiscuous mode [ 641.840667][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.211109][ T43] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 642.211404][ T43] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 642.211634][ T43] ip6gretap1 (unregistering): left allmulticast mode [ 642.572190][ T30] audit: type=1400 audit(1792778612.444:470): avc: denied { write } for pid=13188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.975107][ T30] audit: type=1400 audit(1792778612.844:471): avc: denied { write } for pid=13235 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.069190][ T43] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 643.069704][ T43] macvlan2: left allmulticast mode [ 643.069716][ T43] bond0 (unregistering): left allmulticast mode [ 643.072073][ T43] bond1 (unregistering): Released all slaves [ 643.156006][ T43] bond0 (unregistering): Released all slaves [ 643.189078][ T43] bond2 (unregistering): Released all slaves [ 643.222131][ T43] bond3 (unregistering): Released all slaves [ 643.387298][ T5617] Bluetooth: hci0: command tx timeout [ 643.522017][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 643.863902][T13174] rxe_eth0 speed is unknown, defaulting to 1000 [ 644.618988][ T30] audit: type=1400 audit(1792778614.494:472): avc: denied { write } for pid=13251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.149341][ T30] audit: type=1400 audit(1792778615.024:473): avc: denied { write } for pid=13268 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.427909][ T43] hsr_slave_0: left promiscuous mode [ 645.428341][ T43] hsr_slave_1: left promiscuous mode [ 645.444409][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.444434][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.462807][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.462820][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.474479][ T5617] Bluetooth: hci0: command tx timeout [ 645.540517][ T43] veth1_macvtap: left promiscuous mode [ 645.540593][ T43] veth0_macvtap: left promiscuous mode [ 645.540646][ T43] veth1_vlan: left promiscuous mode [ 645.540687][ T43] veth0_vlan: left promiscuous mode [ 645.781294][T13263] 9p: Bad value for 'rfdno' [ 646.115084][ T30] audit: type=1400 audit(1792778615.984:474): avc: denied { read } for pid=13279 comm="syz.0.2111" name="sg0" dev="devtmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 646.146198][ T30] audit: type=1400 audit(1792778616.014:475): avc: denied { ioctl } for pid=13279 comm="syz.0.2111" path="/dev/sg0" dev="devtmpfs" ino=905 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 646.196972][T13284] fuse: Unknown parameter 'user_i00000000000000000000' [ 646.257973][ T30] audit: type=1804 audit(1792778616.124:476): pid=13283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2112" name="/newroot/9/bus/file0" dev="overlay" ino=73 res=1 errno=0 [ 646.387936][ T43] team0 (unregistering): Port device team_slave_1 removed [ 646.444772][ T43] team0 (unregistering): Port device team_slave_0 removed [ 646.541581][T13291] 9p: Bad value for 'rfdno' [ 646.660364][T13295] jffs2: notice: (13295) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 646.695583][T13295] netlink: 'syz.2.2117': attribute type 4 has an invalid length. [ 646.695596][T13295] netlink: 5620 bytes leftover after parsing attributes in process `syz.2.2117'. [ 646.751245][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 646.899266][T13294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.224333][T13174] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.224433][T13174] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.224498][T13174] bridge_slave_0: entered allmulticast mode [ 647.247653][T13174] bridge_slave_0: entered promiscuous mode [ 647.258405][T13312] FAULT_INJECTION: forcing a failure. [ 647.258405][T13312] name failslab, interval 1, probability 0, space 0, times 0 [ 647.258426][T13312] CPU: 0 UID: 0 PID: 13312 Comm: syz.1.2119 Not tainted syzkaller #0 PREEMPT(full) [ 647.258441][T13312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 647.258449][T13312] Call Trace: [ 647.258454][T13312] [ 647.258459][T13312] dump_stack_lvl+0x100/0x190 [ 647.258482][T13312] should_fail_ex.cold+0x5/0xa [ 647.258502][T13312] should_failslab+0xc2/0x120 [ 647.258521][T13312] __kmalloc_node_noprof+0xff/0x870 [ 647.258537][T13312] ? fifo_init+0x393/0x710 [ 647.258555][T13312] ? qdisc_alloc+0xbb/0xb30 [ 647.258571][T13312] qdisc_alloc+0xbb/0xb30 [ 647.258585][T13312] qdisc_create_dflt+0x93/0x490 [ 647.258602][T13312] prio_tune+0x29a/0xdd0 [ 647.258620][T13312] ? up_write+0x2dc/0x5b0 [ 647.258635][T13312] ? __pfx_prio_tune+0x10/0x10 [ 647.258649][T13312] ? tcf_block_get_ext+0xe43/0x1950 [ 647.258679][T13312] prio_init+0x5d/0x80 [ 647.258693][T13312] ? __pfx_prio_init+0x10/0x10 [ 647.258707][T13312] qdisc_create+0x47d/0x1430 [ 647.258730][T13312] tc_modify_qdisc+0xdcf/0x2120 [ 647.258751][T13312] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 647.258782][T13312] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 647.258799][T13312] rtnetlink_rcv_msg+0x3c9/0xe90 [ 647.258819][T13312] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 647.258845][T13312] netlink_rcv_skb+0x159/0x420 [ 647.258861][T13312] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 647.258880][T13312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 647.258902][T13312] ? rcu_is_watching+0x13/0xc0 [ 647.258923][T13312] netlink_unicast+0x668/0x950 [ 647.258942][T13312] ? __pfx_netlink_unicast+0x10/0x10 [ 647.258962][T13312] netlink_sendmsg+0x9ac/0x10c0 [ 647.258981][T13312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.259002][T13312] ? selinux_socket_sendmsg+0x198/0x2f0 [ 647.259021][T13312] ? ____sys_sendmsg+0xa99/0xc30 [ 647.259039][T13312] ____sys_sendmsg+0xa99/0xc30 [ 647.259056][T13312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.259074][T13312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.259101][T13312] ___sys_sendmsg+0x190/0x1e0 [ 647.259114][T13312] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.259126][T13312] ? futex_wait+0x11e/0x370 [ 647.259146][T13312] ? find_held_lock+0x2b/0x80 [ 647.259174][T13312] __sys_sendmsg+0x160/0x210 [ 647.259190][T13312] ? __pfx___sys_sendmsg+0x10/0x10 [ 647.259215][T13312] do_syscall_64+0x123/0x790 [ 647.259230][T13312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.259243][T13312] RIP: 0033:0x7fb671f9f559 [ 647.259254][T13312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.259266][T13312] RSP: 002b:00007fb672ea0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.259279][T13312] RAX: ffffffffffffffda RBX: 00007fb672225fa0 RCX: 00007fb671f9f559 [ 647.259287][T13312] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 647.259295][T13312] RBP: 00007fb672036b20 R08: 0000000000000000 R09: 0000000000000000 [ 647.259303][T13312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.259310][T13312] R13: 00007fb672226038 R14: 00007fb672225fa0 R15: 00007ffd749e82e8 [ 647.259328][T13312] [ 647.527551][T13174] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.527604][T13174] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.527707][T13174] bridge_slave_1: entered allmulticast mode [ 647.528533][T13174] bridge_slave_1: entered promiscuous mode [ 647.560730][ T5617] Bluetooth: hci0: command tx timeout [ 647.777805][T13174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.797271][T13174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.900904][T13174] team0: Port device team_slave_0 added [ 647.914387][T13174] team0: Port device team_slave_1 added [ 647.992461][T13174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.992473][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.992487][T13174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.993478][T13174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.993487][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.993500][T13174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.213058][T13174] hsr_slave_0: entered promiscuous mode [ 648.224855][T13174] hsr_slave_1: entered promiscuous mode [ 648.225201][T13174] debugfs: 'hsr0' already exists in 'hsr' [ 648.225212][T13174] Cannot create hsr debugfs directory [ 648.283383][ T30] audit: type=1400 audit(1792778618.154:477): avc: denied { write } for pid=13305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.409085][T13337] fuse: Unknown parameter 'user_i00000000000000000000' [ 648.551618][ T30] audit: type=1400 audit(1792778618.424:478): avc: denied { write } for pid=13339 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.756296][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 649.626849][ T5617] Bluetooth: hci0: command tx timeout [ 649.837437][ T30] audit: type=1400 audit(1792778619.704:479): avc: denied { write } for pid=13349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.897626][T13174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 650.014456][T13174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.016592][T13174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 650.047429][T13174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.047905][T13174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 650.241782][T13174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.242299][T13174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 650.267075][T13174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 650.444877][ T30] audit: type=1400 audit(1792778620.314:480): avc: denied { write } for pid=13380 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.519955][T13174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.539908][T13385] 9p: Bad value for 'rfdno' [ 650.570170][T13174] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.589860][T11552] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.589917][T11552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.629588][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.629645][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.778295][T13174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.854074][T13391] fuse: Unknown parameter 'user_i00000000000000000000' [ 651.014301][T13397] FAULT_INJECTION: forcing a failure. [ 651.014301][T13397] name failslab, interval 1, probability 0, space 0, times 0 [ 651.014325][T13397] CPU: 0 UID: 0 PID: 13397 Comm: syz.3.2139 Not tainted syzkaller #0 PREEMPT(full) [ 651.014340][T13397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 651.014348][T13397] Call Trace: [ 651.014353][T13397] [ 651.014358][T13397] dump_stack_lvl+0x100/0x190 [ 651.014382][T13397] should_fail_ex.cold+0x5/0xa [ 651.014403][T13397] should_failslab+0xc2/0x120 [ 651.014422][T13397] __kmalloc_node_noprof+0xff/0x870 [ 651.014438][T13397] ? fifo_init+0x393/0x710 [ 651.014456][T13397] ? qdisc_alloc+0xbb/0xb30 [ 651.014471][T13397] qdisc_alloc+0xbb/0xb30 [ 651.014485][T13397] qdisc_create_dflt+0x93/0x490 [ 651.014499][T13397] prio_tune+0x29a/0xdd0 [ 651.014516][T13397] ? up_write+0x2dc/0x5b0 [ 651.014531][T13397] ? __pfx_prio_tune+0x10/0x10 [ 651.014546][T13397] ? tcf_block_get_ext+0xe43/0x1950 [ 651.014586][T13397] prio_init+0x5d/0x80 [ 651.014600][T13397] ? __pfx_prio_init+0x10/0x10 [ 651.014614][T13397] qdisc_create+0x47d/0x1430 [ 651.014636][T13397] tc_modify_qdisc+0xdcf/0x2120 [ 651.014659][T13397] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 651.014691][T13397] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 651.014711][T13397] rtnetlink_rcv_msg+0x3c9/0xe90 [ 651.014731][T13397] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 651.014757][T13397] netlink_rcv_skb+0x159/0x420 [ 651.014773][T13397] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 651.014792][T13397] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.014807][T13397] ? __asan_memcpy+0x3c/0x60 [ 651.014827][T13397] ? netlink_deliver_tap+0x1ae/0xb50 [ 651.014845][T13397] netlink_unicast+0x668/0x950 [ 651.014863][T13397] ? __pfx_netlink_unicast+0x10/0x10 [ 651.014884][T13397] netlink_sendmsg+0x9ac/0x10c0 [ 651.014909][T13397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.014931][T13397] ? selinux_socket_sendmsg+0x198/0x2f0 [ 651.014952][T13397] ? ____sys_sendmsg+0xa99/0xc30 [ 651.014971][T13397] ____sys_sendmsg+0xa99/0xc30 [ 651.014988][T13397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.015007][T13397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.015035][T13397] ___sys_sendmsg+0x190/0x1e0 [ 651.015049][T13397] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.015061][T13397] ? futex_wait+0x11e/0x370 [ 651.015081][T13397] ? find_held_lock+0x2b/0x80 [ 651.015109][T13397] __sys_sendmsg+0x160/0x210 [ 651.015125][T13397] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.015150][T13397] do_syscall_64+0x123/0x790 [ 651.015165][T13397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.015178][T13397] RIP: 0033:0x7f9a6339f559 [ 651.015189][T13397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.015200][T13397] RSP: 002b:00007f9a64196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.015213][T13397] RAX: ffffffffffffffda RBX: 00007f9a63625fa0 RCX: 00007f9a6339f559 [ 651.015221][T13397] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 651.015229][T13397] RBP: 00007f9a63436b20 R08: 0000000000000000 R09: 0000000000000000 [ 651.015236][T13397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.015244][T13397] R13: 00007f9a63626038 R14: 00007f9a63625fa0 R15: 00007ffe113e2b58 [ 651.015262][T13397] [ 651.561080][T13408] jffs2: notice: (13408) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 651.615921][T13408] netlink: 'syz.3.2141': attribute type 4 has an invalid length. [ 651.615935][T13408] netlink: 5620 bytes leftover after parsing attributes in process `syz.3.2141'. [ 651.773151][T13407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.937079][ T30] audit: type=1400 audit(1792778621.804:481): avc: denied { write } for pid=13394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.085944][T13174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.086301][ T30] audit: type=1400 audit(1792778621.954:482): avc: denied { write } for pid=13428 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.424120][T13441] syzkaller0: entered promiscuous mode [ 652.424134][T13441] syzkaller0: entered allmulticast mode [ 652.564513][T13445] device-mapper: table: 248:7: multipath: not enough priority group arguments (-EINVAL) [ 652.564529][T13445] device-mapper: ioctl: error adding target to table [ 652.617925][T13174] veth0_vlan: entered promiscuous mode [ 652.641328][T13174] veth1_vlan: entered promiscuous mode [ 652.722269][T13174] veth0_macvtap: entered promiscuous mode [ 652.741883][T13174] veth1_macvtap: entered promiscuous mode [ 652.783121][ T30] audit: type=1400 audit(1792778622.654:483): avc: denied { write } for pid=13432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.823356][T13174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.847646][T13174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.230886][T12052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.242919][T12052] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.243216][T12052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.298900][T11552] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.421968][ T30] audit: type=1400 audit(1792778623.294:484): avc: denied { write } for pid=13465 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.515384][T12574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.515399][T12574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.668349][T11552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.668363][T11552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.537021][T13496] fuse: Unknown parameter 'user_id00000000000000000000' [ 654.555343][ T30] audit: type=1400 audit(1792778624.424:485): avc: denied { write } for pid=13472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.879469][ T30] audit: type=1400 audit(1792778624.744:486): avc: denied { write } for pid=13504 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.830244][T13530] fuse: Unknown parameter 'user_id00000000000000000000' [ 655.955627][T13534] FAULT_INJECTION: forcing a failure. [ 655.955627][T13534] name failslab, interval 1, probability 0, space 0, times 0 [ 655.955650][T13534] CPU: 0 UID: 0 PID: 13534 Comm: syz.3.2170 Not tainted syzkaller #0 PREEMPT(full) [ 655.955665][T13534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 655.955673][T13534] Call Trace: [ 655.955677][T13534] [ 655.955683][T13534] dump_stack_lvl+0x100/0x190 [ 655.955706][T13534] should_fail_ex.cold+0x5/0xa [ 655.955726][T13534] should_failslab+0xc2/0x120 [ 655.955745][T13534] __kmalloc_node_noprof+0xff/0x870 [ 655.955761][T13534] ? tcf_block_setup+0x6b/0x9f0 [ 655.955777][T13534] ? qdisc_alloc+0xbb/0xb30 [ 655.955792][T13534] qdisc_alloc+0xbb/0xb30 [ 655.955803][T13534] ? tcf_block_offload_cmd.isra.0+0x1fc/0x310 [ 655.955821][T13534] qdisc_create_dflt+0x93/0x490 [ 655.955836][T13534] prio_tune+0x29a/0xdd0 [ 655.955854][T13534] ? up_write+0x2dc/0x5b0 [ 655.955869][T13534] ? __pfx_prio_tune+0x10/0x10 [ 655.955883][T13534] ? tcf_block_get_ext+0xe43/0x1950 [ 655.955911][T13534] prio_init+0x5d/0x80 [ 655.955924][T13534] ? __pfx_prio_init+0x10/0x10 [ 655.955937][T13534] qdisc_create+0x47d/0x1430 [ 655.955958][T13534] tc_modify_qdisc+0xdcf/0x2120 [ 655.955979][T13534] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 655.956010][T13534] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 655.956027][T13534] rtnetlink_rcv_msg+0x3c9/0xe90 [ 655.956047][T13534] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 655.956072][T13534] netlink_rcv_skb+0x159/0x420 [ 655.956089][T13534] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 655.956108][T13534] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 655.956122][T13534] ? __asan_memcpy+0x3c/0x60 [ 655.956143][T13534] ? netlink_deliver_tap+0x1ae/0xb50 [ 655.956161][T13534] netlink_unicast+0x668/0x950 [ 655.956179][T13534] ? __pfx_netlink_unicast+0x10/0x10 [ 655.956200][T13534] netlink_sendmsg+0x9ac/0x10c0 [ 655.956219][T13534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.956239][T13534] ? selinux_socket_sendmsg+0x198/0x2f0 [ 655.956259][T13534] ? ____sys_sendmsg+0xa99/0xc30 [ 655.956277][T13534] ____sys_sendmsg+0xa99/0xc30 [ 655.956295][T13534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.956322][T13534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.956352][T13534] ___sys_sendmsg+0x190/0x1e0 [ 655.956366][T13534] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.956380][T13534] ? futex_wait+0x11e/0x370 [ 655.956401][T13534] ? find_held_lock+0x2b/0x80 [ 655.956429][T13534] __sys_sendmsg+0x160/0x210 [ 655.956446][T13534] ? __pfx___sys_sendmsg+0x10/0x10 [ 655.956471][T13534] do_syscall_64+0x123/0x790 [ 655.956485][T13534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.956498][T13534] RIP: 0033:0x7f9a6339f559 [ 655.956510][T13534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.956522][T13534] RSP: 002b:00007f9a64196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.956534][T13534] RAX: ffffffffffffffda RBX: 00007f9a63625fa0 RCX: 00007f9a6339f559 [ 655.956543][T13534] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 655.956551][T13534] RBP: 00007f9a63436b20 R08: 0000000000000000 R09: 0000000000000000 [ 655.956558][T13534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.956566][T13534] R13: 00007f9a63626038 R14: 00007f9a63625fa0 R15: 00007ffe113e2b58 [ 655.956584][T13534] [ 656.366592][T13535] macvtap1: entered promiscuous mode [ 656.439645][T13538] jffs2: notice: (13538) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 656.477435][T13538] netlink: 'syz.2.2171': attribute type 4 has an invalid length. [ 656.477449][T13538] netlink: 5620 bytes leftover after parsing attributes in process `syz.2.2171'. [ 656.673095][T13544] syzkaller0: entered promiscuous mode [ 656.673111][T13544] syzkaller0: entered allmulticast mode [ 656.693636][T13536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.260347][T13559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2179'. [ 657.297803][T13562] fuse: Bad value for 'fd' [ 658.032445][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2186'. [ 658.699448][T13590] macvtap1: entered promiscuous mode [ 658.703932][T13590] vlan0: entered promiscuous mode [ 658.712913][T13590] team0: Device macvtap1 failed to register rx_handler [ 658.727325][T13590] vlan0: left promiscuous mode [ 658.749307][T13593] fuse: Bad value for 'fd' [ 658.843821][T13591] syzkaller0: entered promiscuous mode [ 658.843836][T13591] syzkaller0: entered allmulticast mode [ 660.467149][ T30] audit: type=1400 audit(1792778630.344:487): avc: denied { mount } for pid=13622 comm="syz.2.2203" name="/" dev="ramfs" ino=58988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 660.521834][T13625] fuse: Bad value for 'fd' [ 660.814368][T13637] syzkaller0: entered promiscuous mode [ 660.814384][T13637] syzkaller0: entered allmulticast mode [ 662.268648][T13658] fuse: Unknown parameter '00000000000000000000004' [ 662.779224][T13669] syzkaller0: entered promiscuous mode [ 662.779239][T13669] syzkaller0: entered allmulticast mode [ 664.248503][T13691] fuse: Unknown parameter '00000000000000000000004' [ 664.461915][T13704] jffs2: notice: (13704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 664.493337][T13704] netlink: 'syz.0.2237': attribute type 4 has an invalid length. [ 664.493350][T13704] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.2237'. [ 664.583148][T13702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.273962][ T30] audit: type=1400 audit(1792778636.144:488): avc: denied { write } for pid=13737 comm="syz.0.2249" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 666.340988][T13740] cfg80211: Invalid regulatory domain detected: BB [ 666.789146][T13752] 9p: Bad value for 'rfdno' [ 666.793370][T13758] jffs2: notice: (13758) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 666.825054][T13758] netlink: 'syz.0.2259': attribute type 4 has an invalid length. [ 666.825066][T13758] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.2259'. [ 667.108766][T13756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.466794][T12193] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 668.666954][T12193] usb 5-1: Using ep0 maxpacket: 32 [ 668.668723][T12193] usb 5-1: unable to get BOS descriptor or descriptor too short [ 668.668752][T12193] usb 5-1: New USB device found, idVendor=413c, idProduct=81c2, bcdDevice=c9.4b [ 668.669493][T12193] usb 5-1: config 14 has an invalid interface number: 8 but max is 1 [ 668.669509][T12193] usb 5-1: config 14 has no interface number 1 [ 668.669529][T12193] usb 5-1: config 14 interface 8 has no altsetting 0 [ 668.669540][T12193] usb 5-1: config 14 interface 0 has no altsetting 0 [ 668.673115][T12193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.673130][T12193] usb 5-1: Product: syz [ 668.673139][T12193] usb 5-1: Manufacturer: syz [ 668.673148][T12193] usb 5-1: SerialNumber: syz [ 668.877738][ T30] audit: type=1400 audit(1792778638.744:489): avc: denied { name_bind } for pid=13780 comm="syz.3.2267" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 669.436217][T13800] fuse: Unknown parameter '00000000000000000000004' [ 669.506576][ T30] audit: type=1400 audit(1792778639.374:490): avc: denied { ioctl } for pid=13801 comm="syz.2.2273" path="socket:[59940]" dev="sockfs" ino=59940 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 669.593471][T13804] macvtap1: entered promiscuous mode [ 669.603690][T13804] vlan0: entered promiscuous mode [ 669.618687][T13804] team0: Device macvtap1 failed to register rx_handler [ 669.623998][T13804] vlan0: left promiscuous mode [ 669.839776][T13812] jffs2: notice: (13812) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 669.915340][T13812] netlink: 'syz.2.2278': attribute type 4 has an invalid length. [ 669.915355][T13812] netlink: 5620 bytes leftover after parsing attributes in process `syz.2.2278'. [ 669.935980][T12193] usb 5-1: selecting invalid altsetting 0 [ 669.935994][T12193] usb 5-1: Could not set interface, error -22 [ 669.966439][T12193] usb 5-1: USB disconnect, device number 68 [ 670.102400][T13811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.169588][T13819] overlayfs: missing 'lowerdir' [ 670.625194][T13834] fuse: Unknown parameter '00000000000000000000004' [ 673.518343][T13869] jffs2: notice: (13869) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 673.552337][T13870] fuse: Unknown parameter 'fd00000000000000000000004' [ 673.572092][T13869] netlink: 'syz.3.2299': attribute type 4 has an invalid length. [ 673.572106][T13869] netlink: 5620 bytes leftover after parsing attributes in process `syz.3.2299'. [ 673.646867][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 673.701876][T13868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.796806][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 673.804585][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 673.804612][ T10] usb 3-1: New USB device found, idVendor=413c, idProduct=81c2, bcdDevice=c9.4b [ 673.805368][ T10] usb 3-1: config 14 has an invalid interface number: 8 but max is 1 [ 673.805383][ T10] usb 3-1: config 14 has no interface number 1 [ 673.805403][ T10] usb 3-1: config 14 interface 8 has no altsetting 0 [ 673.805414][ T10] usb 3-1: config 14 interface 0 has no altsetting 0 [ 673.814618][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.814633][ T10] usb 3-1: Product: syz [ 673.814642][ T10] usb 3-1: Manufacturer: syz [ 673.814655][ T10] usb 3-1: SerialNumber: syz [ 674.039250][ T30] audit: type=1400 audit(1792778643.914:491): avc: denied { create } for pid=13879 comm="syz.0.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 674.069520][ T30] audit: type=1400 audit(1792778643.914:492): avc: denied { write } for pid=13879 comm="syz.0.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 674.100246][ T30] audit: type=1400 audit(1792778643.974:493): avc: denied { setopt } for pid=13879 comm="syz.0.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 674.212375][ T30] audit: type=1400 audit(1792778644.084:494): avc: denied { unmount } for pid=13884 comm="syz.1.2302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 674.252261][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2305'. [ 674.623780][T13908] fuse: Unknown parameter 'fd00000000000000000000004' [ 674.691984][T13911] FAULT_INJECTION: forcing a failure. [ 674.691984][T13911] name failslab, interval 1, probability 0, space 0, times 0 [ 674.692007][T13911] CPU: 0 UID: 0 PID: 13911 Comm: syz.4.2312 Not tainted syzkaller #0 PREEMPT(full) [ 674.692023][T13911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 674.692033][T13911] Call Trace: [ 674.692037][T13911] [ 674.692042][T13911] dump_stack_lvl+0x100/0x190 [ 674.692066][T13911] should_fail_ex.cold+0x5/0xa [ 674.692084][T13911] should_failslab+0xc2/0x120 [ 674.692117][T13911] __kmalloc_cache_noprof+0x91/0x6d0 [ 674.692133][T13911] ? kvm_dev_ioctl+0x13ee/0x1b50 [ 674.692150][T13911] kvm_dev_ioctl+0x13ee/0x1b50 [ 674.692171][T13911] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 674.692188][T13911] ? selinux_file_ioctl+0x1e0/0x290 [ 674.692200][T13911] ? selinux_file_ioctl+0x1e7/0x290 [ 674.692212][T13911] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 674.692227][T13911] __x64_sys_ioctl+0x18e/0x210 [ 674.692244][T13911] do_syscall_64+0x123/0x790 [ 674.692259][T13911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.692271][T13911] RIP: 0033:0x7f0a2899f559 [ 674.692282][T13911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.692294][T13911] RSP: 002b:00007f0a297f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.692307][T13911] RAX: ffffffffffffffda RBX: 00007f0a28c25fa0 RCX: 00007f0a2899f559 [ 674.692315][T13911] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 674.692323][T13911] RBP: 00007f0a28a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 674.692330][T13911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.692337][T13911] R13: 00007f0a28c26038 R14: 00007f0a28c25fa0 R15: 00007fff34d2b8f8 [ 674.692354][T13911] [ 675.030294][T13921] jffs2: notice: (13921) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 675.091906][T13921] netlink: 'syz.4.2317': attribute type 4 has an invalid length. [ 675.091921][T13921] netlink: 5620 bytes leftover after parsing attributes in process `syz.4.2317'. [ 675.241330][T13919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.480044][ T30] audit: type=1400 audit(1792778645.354:495): avc: denied { mount } for pid=13934 comm="syz.0.2322" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 675.487940][ T30] audit: type=1400 audit(1792778645.354:496): avc: denied { search } for pid=13934 comm="syz.0.2322" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 675.487976][ T30] audit: type=1400 audit(1792778645.364:497): avc: denied { read write } for pid=13934 comm="syz.0.2322" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 675.488000][ T30] audit: type=1400 audit(1792778645.364:498): avc: denied { open } for pid=13934 comm="syz.0.2322" path="/489/nfsd/threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 675.628866][ T30] audit: type=1400 audit(1792778645.504:499): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 675.751925][T13942] fuse: Unknown parameter 'fd00000000000000000000003' [ 677.010583][T13944] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 677.010602][T13944] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 677.081524][ T10] usb 3-1: selecting invalid altsetting 0 [ 677.081541][ T10] usb 3-1: Could not set interface, error -22 [ 677.120790][ T10] usb 3-1: USB disconnect, device number 55 [ 678.785706][ T2288] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 678.853191][T13979] jffs2: notice: (13979) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 678.890915][T13979] netlink: 'syz.3.2339': attribute type 4 has an invalid length. [ 678.890928][T13979] netlink: 5620 bytes leftover after parsing attributes in process `syz.3.2339'. [ 678.949043][ T2288] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 678.951453][ T2288] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.951469][ T2288] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 678.951491][ T2288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.005549][ T2288] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 679.104586][T13978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.235075][ T30] audit: type=1400 audit(1792778649.104:500): avc: denied { read write } for pid=13970 comm="syz.2.2337" name="idmouse0" dev="devtmpfs" ino=3562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 679.235110][ T30] audit: type=1400 audit(1792778649.104:501): avc: denied { open } for pid=13970 comm="syz.2.2337" path="/dev/idmouse0" dev="devtmpfs" ino=3562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 680.846017][ T2288] usb 3-1: USB disconnect, device number 56 [ 680.867350][ T2288] idmouse 3-1:1.0: disconnected [ 681.487243][T13101] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 681.637276][T13101] usb 5-1: Using ep0 maxpacket: 32 [ 681.649141][T13101] usb 5-1: unable to get BOS descriptor or descriptor too short [ 681.649169][T13101] usb 5-1: New USB device found, idVendor=413c, idProduct=81c2, bcdDevice=c9.4b [ 681.668870][T13101] usb 5-1: config 14 has an invalid interface number: 8 but max is 1 [ 681.668886][T13101] usb 5-1: config 14 has no interface number 1 [ 681.668908][T13101] usb 5-1: config 14 interface 8 has no altsetting 0 [ 681.668919][T13101] usb 5-1: config 14 interface 0 has no altsetting 0 [ 681.702108][T13101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.702124][T13101] usb 5-1: Product: syz [ 681.702133][T13101] usb 5-1: Manufacturer: syz [ 681.702142][T13101] usb 5-1: SerialNumber: syz [ 682.146544][T14047] jffs2: notice: (14047) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 682.376548][ T2288] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 682.391717][T14045] netlink: 'syz.3.2361': attribute type 4 has an invalid length. [ 682.391730][T14045] netlink: 5620 bytes leftover after parsing attributes in process `syz.3.2361'. [ 682.499154][T14044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.537149][ T2288] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 682.537985][ T2288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.538012][ T2288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.541056][ T2288] usb 1-1: config 0 descriptor?? [ 685.584574][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.585448][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.731735][ T2288] usbhid 1-1:0.0: can't add hid device: -32 [ 687.732406][ T2288] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 687.911968][T13101] usb 5-1: selecting invalid altsetting 0 [ 687.911988][T13101] usb 5-1: Could not set interface, error -22 [ 688.995601][T13101] usb 1-1: USB disconnect, device number 54 [ 689.492483][ T10] usb 5-1: USB disconnect, device number 69 [ 697.110258][T14063] macvtap1: entered promiscuous mode [ 697.230606][T14063] vlan0: entered promiscuous mode [ 697.592523][T14063] team0: Device macvtap1 failed to register rx_handler [ 700.135535][ T30] audit: type=1800 audit(1792778670.004:502): pid=14077 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2369" name=08 dev="sda1" ino=2051 res=0 errno=-22 [ 700.686163][T14063] vlan0: left promiscuous mode [ 715.479752][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 715.573644][ T30] audit: type=1400 audit(1792778685.444:503): avc: denied { read write } for pid=14097 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 715.665785][ T30] audit: type=1400 audit(1792778685.524:504): avc: denied { open } for pid=14097 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 715.896890][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 715.934045][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 716.056416][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.056444][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.083220][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.445741][T12946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 716.479400][T12946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 716.505948][T12946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 716.574277][T12946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 716.618575][T12946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 716.645732][ T10] usb 3-1: config 0 descriptor?? [ 718.907597][ T5617] Bluetooth: hci5: command tx timeout [ 720.989767][ T5617] Bluetooth: hci5: command tx timeout [ 721.023883][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 721.024313][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 721.510130][ T10] usb 3-1: USB disconnect, device number 57 [ 723.066863][ T5617] Bluetooth: hci5: command tx timeout [ 725.146802][ T5617] Bluetooth: hci5: command tx timeout [ 736.648100][T12946] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 736.667305][T12946] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 736.707382][T12946] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 736.741834][T12946] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 736.785143][T12946] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 738.987335][T12946] Bluetooth: hci6: command tx timeout [ 739.079099][T12946] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 739.096150][T12946] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 739.145800][T12946] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 739.204871][T12946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 739.251962][T12946] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 741.068175][ T5617] Bluetooth: hci6: command tx timeout [ 741.470925][ T5617] Bluetooth: hci7: command tx timeout [ 743.162718][ T5617] Bluetooth: hci6: command tx timeout [ 743.548990][ T5617] Bluetooth: hci7: command tx timeout [ 745.228241][ T5617] Bluetooth: hci6: command tx timeout [ 745.628061][ T5617] Bluetooth: hci7: command tx timeout [ 746.683191][ T5849] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.009895][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.010193][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.713161][ T5617] Bluetooth: hci7: command tx timeout [ 750.634480][ T5849] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.733923][ T5849] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.672957][ T5849] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.399396][T12946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 756.417705][T12946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 756.450924][T12946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 756.518162][T12946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 756.560812][T12946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 757.166342][T14097] rxe_eth0 speed is unknown, defaulting to 1000 [ 758.747134][T12946] Bluetooth: hci2: command tx timeout [ 760.833460][T12946] Bluetooth: hci2: command tx timeout [ 762.907442][T12946] Bluetooth: hci2: command tx timeout [ 764.987267][T12946] Bluetooth: hci2: command tx timeout [ 771.247944][ T5849] bridge_slave_1: left allmulticast mode [ 771.247987][ T5849] bridge_slave_1: left promiscuous mode [ 771.290358][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.883939][ T5849] bridge_slave_0: left allmulticast mode [ 771.883984][ T5849] bridge_slave_0: left promiscuous mode [ 771.885236][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.414503][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 781.445458][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 781.468806][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 781.507009][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 781.562352][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 783.716324][T12946] Bluetooth: hci0: command tx timeout [ 785.789381][T12946] Bluetooth: hci0: command tx timeout [ 787.868930][T12946] Bluetooth: hci0: command tx timeout [ 789.947738][T12946] Bluetooth: hci0: command tx timeout [ 791.941098][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.248239][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.478456][ T5849] bond0 (unregistering): Released all slaves [ 798.855589][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 798.887958][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 798.911001][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 798.973586][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 799.006517][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 801.230252][T12946] Bluetooth: hci1: command tx timeout [ 801.721391][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 801.765457][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 801.787594][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 801.827968][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 801.865016][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 803.308867][T12946] Bluetooth: hci1: command tx timeout [ 804.107491][T12946] Bluetooth: hci3: command tx timeout [ 804.677936][ T30] audit: type=1400 audit(1792778774.334:505): avc: denied { write } for pid=14180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.386932][T12946] Bluetooth: hci1: command tx timeout [ 806.187804][T12946] Bluetooth: hci3: command tx timeout [ 807.466809][T12946] Bluetooth: hci1: command tx timeout [ 808.276043][T12946] Bluetooth: hci3: command tx timeout [ 808.460939][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.475354][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.348313][T12946] Bluetooth: hci3: command tx timeout [ 816.243606][ T30] audit: type=1400 audit(1792778786.084:506): avc: denied { write } for pid=14235 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.444247][ T30] audit: type=1400 audit(1792778792.304:507): avc: denied { create } for pid=14241 comm="syz.1.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 822.915153][ T5617] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 822.941052][ T5617] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 822.983220][ T5617] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 823.037102][ T5617] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 823.075356][ T5617] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 825.799519][T12946] Bluetooth: hci8: command tx timeout [ 827.869082][T12946] Bluetooth: hci8: command tx timeout [ 829.039463][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 829.956771][T12946] Bluetooth: hci8: command tx timeout [ 832.029167][T12946] Bluetooth: hci8: command tx timeout [ 836.773987][T14187] rxe_eth0 speed is unknown, defaulting to 1000 [ 841.233155][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 847.712195][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 847.744715][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 847.769740][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 847.834544][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 847.865969][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 850.188671][T12946] Bluetooth: hci6: command tx timeout [ 852.268112][T12946] Bluetooth: hci6: command tx timeout [ 854.353861][T12946] Bluetooth: hci6: command tx timeout [ 856.428430][T12946] Bluetooth: hci6: command tx timeout [ 861.431532][T12946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 861.453226][T12946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 861.487847][T12946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 861.567952][T12946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 861.602064][T12946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 863.787807][ T5617] Bluetooth: hci2: command tx timeout [ 864.195161][T12946] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 864.219740][T12946] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 864.240112][T12946] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 864.281733][T12946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 864.323264][T12946] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 865.867586][T12946] Bluetooth: hci2: command tx timeout [ 866.510904][T12946] Bluetooth: hci7: command tx timeout [ 867.950519][T12946] Bluetooth: hci2: command tx timeout [ 868.591250][T12946] Bluetooth: hci7: command tx timeout [ 869.150512][ T30] audit: type=1400 audit(1792778839.024:508): avc: denied { allowed } for pid=14306 comm="syz.1.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 869.889539][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.892046][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.031626][T12946] Bluetooth: hci2: command tx timeout [ 870.669177][T12946] Bluetooth: hci7: command tx timeout [ 872.749413][T12946] Bluetooth: hci7: command tx timeout [ 876.290566][ T30] audit: type=1400 audit(1792778846.164:509): avc: denied { write } for pid=14271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 881.422689][ T5617] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 881.458891][ T5617] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 881.482731][ T5617] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 881.532465][ T5617] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 881.566722][ T5617] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 881.857015][T14216] rxe_eth0 speed is unknown, defaulting to 1000 [ 883.708675][T12946] Bluetooth: hci9: command tx timeout [ 885.787066][T12946] Bluetooth: hci9: command tx timeout [ 886.047812][ T30] audit: type=1400 audit(1792778855.874:510): avc: denied { write } for pid=14332 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.866733][T12946] Bluetooth: hci9: command tx timeout [ 889.947153][T12946] Bluetooth: hci9: command tx timeout [ 895.976935][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 906.270424][T14362] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 906.305869][T14362] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 906.328642][T14362] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 906.395712][T14362] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 906.419844][T14362] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 907.790964][T14362] Bluetooth: hci0: command 0x0406 tx timeout [ 908.669525][T12946] Bluetooth: hci5: command tx timeout [ 910.751654][T12946] Bluetooth: hci5: command tx timeout [ 912.826768][T12946] Bluetooth: hci5: command tx timeout [ 913.504887][ T5849] hsr_slave_0: left promiscuous mode [ 913.596224][ T5849] hsr_slave_1: left promiscuous mode [ 913.785841][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.785893][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.952871][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.952920][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.611743][ T5849] veth1_macvtap: left promiscuous mode [ 914.611883][ T5849] veth0_macvtap: left promiscuous mode [ 914.643330][ T5849] veth1_vlan: left promiscuous mode [ 914.643786][ T5849] veth0_vlan: left promiscuous mode [ 914.907073][T12946] Bluetooth: hci5: command tx timeout [ 923.152653][T14362] Bluetooth: hci1: command 0x0406 tx timeout [ 926.273826][ T5617] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 926.292837][ T5617] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 926.295584][ T5617] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 926.370486][ T5617] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 926.394593][ T5617] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 927.978852][T12946] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 928.001008][T12946] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 928.050829][T12946] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 928.100320][T12946] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 928.133472][T12946] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 928.273819][T12946] Bluetooth: hci3: command 0x0406 tx timeout [ 928.594098][T14362] Bluetooth: hci10: command tx timeout [ 930.428505][T14362] Bluetooth: hci11: command tx timeout [ 930.673582][T14362] Bluetooth: hci10: command tx timeout [ 931.342305][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.342621][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.510459][T14362] Bluetooth: hci11: command tx timeout [ 932.753745][T14362] Bluetooth: hci10: command tx timeout [ 934.586910][T14362] Bluetooth: hci11: command tx timeout [ 934.838426][T14362] Bluetooth: hci10: command tx timeout [ 936.668510][T14362] Bluetooth: hci11: command tx timeout [ 944.220008][T14402] overlayfs: failed to clone lowerpath [ 948.852991][T14362] Bluetooth: hci8: command 0x0406 tx timeout [ 951.015938][T14362] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 951.041303][T14362] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 951.071447][T14362] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 951.105553][T14362] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 951.125896][T14362] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 953.309476][T14362] Bluetooth: hci12: command tx timeout [ 954.550728][ T30] audit: type=1400 audit(1792778924.414:511): avc: denied { write } for pid=14376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.396068][T14362] Bluetooth: hci12: command tx timeout [ 956.133457][ T5849] team0 (unregistering): Port device team_slave_1 removed [ 957.470457][T14362] Bluetooth: hci12: command tx timeout [ 957.773259][ T5849] team0 (unregistering): Port device team_slave_0 removed [ 959.269987][ T5617] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 959.277850][ T5617] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 959.357287][ T5617] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 959.409292][ T5617] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 959.441787][ T5617] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 959.549049][T14362] Bluetooth: hci12: command tx timeout [ 961.635213][ T5617] Bluetooth: hci13: command tx timeout [ 962.606110][ T30] audit: type=1400 audit(1792778932.474:512): avc: denied { write } for pid=14419 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.711463][ T5617] Bluetooth: hci13: command tx timeout [ 965.788173][ T5617] Bluetooth: hci13: command tx timeout [ 967.868842][ T5617] Bluetooth: hci13: command tx timeout [ 968.529131][T14362] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 968.559636][T14362] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 968.575931][T14362] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 968.616038][T14362] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 968.648000][T14362] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 970.754574][T14362] Bluetooth: hci14: command tx timeout [ 972.834143][ T5617] Bluetooth: hci14: command tx timeout [ 973.084688][T14211] rxe_eth0 speed is unknown, defaulting to 1000 [ 974.356240][ T5617] Bluetooth: hci6: command 0x0406 tx timeout [ 974.910195][T14362] Bluetooth: hci14: command tx timeout [ 976.799172][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 976.987676][T14362] Bluetooth: hci14: command tx timeout [ 984.587646][T14362] Bluetooth: hci2: command 0x0406 tx timeout [ 989.416097][T12946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 989.462398][T12946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 989.489517][T12946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 989.534585][T12946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 989.571960][T12946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 989.710931][T12946] Bluetooth: hci7: command 0x0406 tx timeout [ 991.872258][ T5617] Bluetooth: hci4: command tx timeout [ 992.793223][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.793516][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.864289][T12946] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 992.914977][T12946] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 992.934368][T12946] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 993.001920][T12946] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 993.054112][T12946] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 993.950486][ T5617] Bluetooth: hci4: command tx timeout [ 995.227944][ T5617] Bluetooth: hci15: command tx timeout [ 996.036117][ T5617] Bluetooth: hci4: command tx timeout [ 997.307895][ T5617] Bluetooth: hci15: command tx timeout [ 998.108375][ T5617] Bluetooth: hci4: command tx timeout [ 999.388763][ T5617] Bluetooth: hci15: command tx timeout [ 1001.475113][ T5617] Bluetooth: hci15: command tx timeout [ 1001.777567][ T5849] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.067989][T12946] Bluetooth: hci9: command 0x0406 tx timeout [ 1007.423335][ T5849] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.251415][ T5849] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.171441][ T5849] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.724370][T12946] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1016.748491][T12946] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1016.753199][T12946] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1016.850576][T12946] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1016.883941][T12946] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1019.070050][ T5617] Bluetooth: hci16: command tx timeout [ 1021.149288][ T5617] Bluetooth: hci16: command tx timeout [ 1022.881743][T12946] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1022.929726][T12946] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1022.952904][T12946] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1023.036170][T12946] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1023.082025][T12946] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1023.227452][ T5617] Bluetooth: hci16: command tx timeout [ 1025.308748][ T5617] Bluetooth: hci16: command tx timeout [ 1025.388900][ T5617] Bluetooth: hci17: command tx timeout [ 1025.391976][ T32] INFO: task syz-executor:14244 blocked for more than 144 seconds. [ 1025.392007][ T32] Not tainted syzkaller #0 [ 1025.392023][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1025.392037][ T32] task:syz-executor state:D stack:24728 pid:14244 tgid:14244 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1025.392085][ T32] Call Trace: [ 1025.392092][ T32] [ 1025.392144][ T32] __schedule+0x125e/0x6990 [ 1025.392375][ T32] ? __pfx_trace_event_raw_event_lock+0x10/0x10 SYZFAIL: failed to recv rpc [ 1025.392540][ T32] ? __pfx___schedule+0x10/0x10 [ 1025.392580][ T32] ? find_held_lock+0x2b/0x80 [ 1025.392671][ T32] ? schedule+0x225/0x2c0 [ 1025.392777][ T32] schedule+0xdd/0x2c0 [ 1025.392856][ T32] schedule_preempt_disabled+0x13/0x30 [ 1025.392904][ T32] __mutex_lock+0xcca/0x1c10 [ 1025.392982][ T32] ? add_one_compat_dev+0x112/0x820 [ 1025.393107][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1025.393191][ T32] ? lock_acquire+0x1d1/0x380 [ 1025.570415][ T32] ? add_one_compat_dev+0x112/0x820 [ 1025.570457][ T32] add_one_compat_dev+0x112/0x820 [ 1025.570607][ T32] rdma_dev_init_net+0x305/0x580 [ 1025.570688][ T32] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1025.570731][ T32] ? __kmalloc_noprof+0x350/0x840 [ 1025.570846][ T32] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1025.570908][ T32] ops_init+0x1e2/0x5f0 [ 1025.571056][ T32] setup_net+0x118/0x3a0 [ 1025.571125][ T32] ? __pfx_setup_net+0x10/0x10 [ 1025.571216][ T32] ? bpf_lsm_namespace_init+0x9/0x10 [ 1025.571366][ T32] copy_net_ns+0x340/0x7a0 [ 1025.571460][ T32] create_new_namespaces+0x3ea/0xac0 [ 1025.571653][ T32] unshare_nsproxy_namespaces+0xf6/0x210 [ 1025.571723][ T32] ksys_unshare+0x44f/0x980 [ 1025.571781][ T32] ? __pfx_ksys_unshare+0x10/0x10 [ 1025.571905][ T32] ? __pfx_do_faccessat+0x10/0x10 [ 1025.743091][ T32] __x64_sys_unshare+0x31/0x40 [ 1025.743137][ T32] do_syscall_64+0x123/0x790 [ 1025.743230][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.743270][ T32] RIP: 0033:0x7f4f29fa0827 [ 1025.743332][ T32] RSP: 002b:00007ffc5d2f7328 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1025.743361][ T32] RAX: ffffffffffffffda RBX: 00007f4f2a225f40 RCX: 00007f4f29fa0827 [ 1025.743378][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1025.743395][ T32] RBP: 00007f4f2a2267b8 R08: 0000000000000000 R09: 0000000000000000 [ 1025.743411][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1025.743428][ T32] R13: 0000000000000003 R14: 00007ffc5d2f7568 R15: 0000000000000000 [ 1025.743709][ T32] [ 1025.743756][ T32] [ 1025.743756][ T32] Showing all locks held in the system: [ 1025.743769][ T32] locks held by kworker/0:1/10: 2, last CPU#0: [ 1025.743782][ T32] #0: ffff88813ff29d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1025.743846][ T32] #1: ffffc900000f7d08 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1025.743918][ T32] locks held by kworker/u8:1/13: 2, on CPU#0: [ 1025.743932][ T32] #0: ffff88813ff64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1025.744018][ T32] #1: ffffc90000127d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1025.744112][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1025.744128][ T32] #0: ffffffff8ffec4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1025.744228][ T32] locks held by kworker/u8:2/43: 3, last CPU#0: [ 1025.744239][ T32] #0: ffff88813ff64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1025.744296][ T32] #1: ffffc90000b37d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1025.744363][ T32] #2: ffff8880451ac258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1025.744447][ T32] locks held by kworker/u8:3/50: 3, last CPU#0: [ 1025.744462][ T32] #0: ffff88813ff64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1025.744551][ T32] #1: ffffc90000ba7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1025.744651][ T32] #2: ffff88804f3a0258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1025.744726][ T32] locks held by kworker/u8:5/88: 3, last CPU#0: [ 1025.744738][ T32] #0: ffff88813ff64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1026.023876][ T32] #1: ffffc900024bfd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1026.023982][ T32] #2: ffff88802be7e258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1026.024076][ T32] locks held by syslogd/4958: 1, last CPU#0: [ 1026.024089][ T32] #0: ffff88807e9b8e78 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x298/0xd40 [ 1026.024150][ T32] locks held by klogd/4965: 1, last CPU#0: [ 1026.024163][ T32] #0: ffffffff8ffec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1026.024238][ T32] locks held by udevd/4976: 1, last CPU#0: [ 1026.024252][ T32] #0: ffffffff8ffec4a0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0x90/0x600 [ 1026.024336][ T32] locks held by getty/5362: 2, on CPU#0: [ 1026.024352][ T32] #0: ffff88803a1770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1026.024448][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 1026.024520][ T32] locks held by syz-executor/5593: 2, last CPU#0: [ 1026.024532][ T32] #0: ffff88802f5c9bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1026.024593][ T32] #1: ffffffff8ffec4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1026.024662][ T32] locks held by syz-executor/5613: 1, last CPU#0: [ 1026.024676][ T32] #0: ffff88802854c0e8 (&type->s_umount_key#35){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1026.024771][ T32] locks held by kworker/u8:9/5760: 3, last CPU#0: [ 1026.024786][ T32] #0: ffff88813ff64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1026.024881][ T32] #1: ffffc9000306fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1026.024973][ T32] #2: ffff888027be0258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1026.025027][ T32] locks held by kworker/u8:10/5847: 2, on CPU#0: [ 1026.025040][ T32] #0: ffff88813ff64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1026.025108][ T32] #1: ffffc90002ebfd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1026.025186][ T32] locks held by kworker/u8:11/5849: 8, last CPU#0: [ 1026.025241][ T32] #0: ffff88801dec0948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1026.025338][ T32] #1: ffffc90002e9fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1026.025417][ T32] #2: ffffffff91efb468 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1026.025476][ T32] #3: ffff88807bdec128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x440 [ 1026.208727][ T32] #4: ffff88807bdeb258 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x13f/0x440 [ 1026.208826][ T32] #5: ffffffff91f146a0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x8b5/0x12f0 [ 1026.208922][ T32] #6: ffff888035804e98 (&dev->lock){+.+.}-{4:4}, at: register_netdevice+0x16d5/0x26b0 [ 1026.209729][ T32] #7: ffffffff8ffec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1026.209816][ T32] locks held by kworker/u8:12/5851: 3, last CPU#0: [ 1026.209833][ T32] #0: ffff88813ff64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1026.209928][ T32] #1: ffffc90002e6fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1026.210018][ T32] #2: ffff8880451ac258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1026.402555][ T32] locks held by kworker/u8:14/5858: 3, last CPU#0: [ 1026.402574][ T32] #0: ffff88813ff64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1026.402651][ T32] #1: ffffc90002defd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1026.402732][ T32] #2: ffff88802be7e258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1026.402830][ T32] locks held by kworker/u8:15/5864: 3, last CPU#0: [ 1026.402847][ T32] #0: ffff88813ff64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1026.402953][ T32] #1: ffffc90002f1fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1026.403007][ T32] #2: ffff88807f2f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1026.403078][ T32] locks held by kworker/u8:6/11552: 2, last CPU#0: [ 1026.403091][ T32] #0: ffff8880358a5148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1026.403166][ T32] #1: ffffc90005717d08 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1026.403252][ T32] locks held by kworker/u8:7/12052: 2, on CPU#0: [ 1026.403268][ T32] #0: ffff88813ff64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1026.403364][ T32] #1: ffffc90003ab7d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1026.403445][ T32] locks held by syz-executor/14187: 2, on CPU#0: [ 1026.403457][ T32] #0: ffffffff91efb468 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 1026.403518][ T32] #1: ffffffff91b1b9a8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1026.403587][ T32] locks held by syz-executor/14211: 4, last CPU#0: [ 1026.403601][ T32] #0: ffffffff91efb468 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 1026.403682][ T32] #1: ffffffff91b1bc28 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 1026.403772][ T32] #2: ffffffff91b1b9a8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 1026.403872][ T32] #3: ffff88807a345020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 1026.403929][ T32] locks held by syz-executor/14216: 2, on CPU#0: [ 1026.403941][ T32] #0: ffffffff91efb468 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 1026.404005][ T32] #1: ffffffff91b1b9a8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x174/0x6b0 [ 1026.404080][ T32] locks held by syz-executor/14244: 4, on CPU#0: [ 1026.404094][ T32] #0: ffffffff91efb468 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 1026.404180][ T32] #1: ffffffff91b1bc28 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 1026.656045][ T32] #2: ffffffff91b1b9a8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 1026.656120][ T32] #3: ffff88807a345020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 1026.656206][ T32] locks held by syz-executor/14275: 4, on CPU#0: [ 1026.656223][ T32] #0: ffffffff91efb468 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 1026.656320][ T32] #1: ffffffff91b1bc28 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 1026.656394][ T32] #2: ffffffff91b1b9a8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 1026.656453][ T32] #3: ffff88807a345020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 1026.657090][ T32] locks held by syz-executor/14294: 4, on CPU#0: [ 1026.657102][ T32] #0: ffffffff91efb468 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 1026.657161][ T32] #1: ffffffff91b1bc28 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 1026.657229][ T32] #2: ffffffff91b1b9a8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 1026.657308][ T32] #3: ffff88807a345020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 1026.657396][ T32] locks held by syz-executor/14299: 3, on CPU#0: [ 1026.657413][ T32] #0: ffffffff91efb468 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 1026.664307][ T32] #1: ffffffff91b1bc28 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 1026.664374][ T32] #2: ffffffff91b1b9a8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 1026.664449][ T32] locks held by syz-executor/14385: 1, on CPU#0: [ 1026.664464][ T32] #0: ffffffff8fff89a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1026.664549][ T32] locks held by kworker/u8:16/14405: 2, on CPU#0: [ 1026.664565][ T32] #0: ffff88813ff64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1026.664664][ T32] #1: ffffc900034dfd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1026.840234][ T32] locks held by syz-executor/14426: 3, on CPU#0: [ 1026.840246][ T32] #0: ffffffff91efb468 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x31e/0x7a0 [ 1026.840306][ T32] #1: ffffffff91b1bc28 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x287/0x580 [ 1026.840372][ T32] #2: ffffffff91b1b9a8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2fa/0x580 [ 1026.840450][ T32] locks held by udevd/14482: 4, last CPU#0: [ 1026.840465][ T32] #0: ffff88807a743e18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1026.840554][ T32] #1: ffff888055358880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1026.840664][ T32] #2: ffff888072b20698 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1026.840758][ T32] #3: ffffffff8ffec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1026.840829][ T32] locks held by modprobe/14483: 1, last CPU#0: [ 1026.840843][ T32] #0: ffffffff8ffec4a0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x25/0x1a0 [ 1026.840929][ T32] locks held by udevd/14485: 2, last CPU#0: [ 1026.840945][ T32] #0: ffff88807e428460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 1026.841043][ T32] #1: ffff88807e40e308 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x262/0x730 [ 1026.841139][ T32] locks held by syz-executor/14486: 2, last CPU#0: [ 1026.841150][ T32] #0: ffff88807d4bd900 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1026.841209][ T32] #1: ffff888058a808b0 (&anon_vma->rwsem){++++}-{4:4}, at: validate_mm+0x1f1/0x4e0 [ 1026.841275][ T32] locks held by modprobe/14488: 1, last CPU#0: [ 1026.841290][ T32] #0: ffffffff8ffec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1026.841371][ T32] locks held by modprobe/14492: 1, last CPU#0: [ 1026.841386][ T32] #0: ffff88813ff53440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1026.841477][ T32] locks held by modprobe/14493: 1, last CPU#0: [ 1026.841493][ T32] #0: ffff888027dd6540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1027.037265][ T32] [ 1027.037280][ T32] ============================================= [ 1027.037280][ T32] [ 1027.037309][ T32] NMI backtrace for cpu 0 [ 1027.037326][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1027.037347][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1027.037364][ T32] Call Trace: [ 1027.037389][ T32] [ 1027.037417][ T32] dump_stack_lvl+0x100/0x190 [ 1027.037534][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1027.037593][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1027.037642][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1027.037753][ T32] sys_info+0x141/0x190 [ 1027.037833][ T32] watchdog+0xcb1/0x1030 [ 1027.037963][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1027.038025][ T32] ? __pfx_watchdog+0x10/0x10 [ 1027.038124][ T32] ? __kthread_parkme+0x18f/0x230 [ 1027.038219][ T32] ? kthread+0x13a/0x450 [ 1027.038247][ T32] ? __pfx_watchdog+0x10/0x10 [ 1027.038276][ T32] kthread+0x373/0x450 [ 1027.038325][ T32] ? __pfx_kthread+0x10/0x10 [ 1027.038436][ T32] ret_from_fork+0x730/0xd60 [ 1027.038513][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1027.038577][ T32] ? __switch_to+0x800/0x10e0 [ 1027.038647][ T32] ? __pfx_kthread+0x10/0x10 [ 1027.038758][ T32] ret_from_fork_asm+0x1a/0x30 [ 1027.039066][ T32] [ 1027.345997][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1027.764780][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1027.773865][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1027.783896][ T32] Call Trace: [ 1027.787160][ T32] [ 1027.790078][ T32] dump_stack_lvl+0x100/0x190 [ 1027.794805][ T32] vpanic+0x553/0x970 [ 1027.798824][ T32] ? __pfx_vpanic+0x10/0x10 [ 1027.803475][ T32] panic+0xd1/0xe0 [ 1027.807213][ T32] ? __pfx_panic+0x10/0x10 [ 1027.811752][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1027.817909][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1027.824050][ T32] ? watchdog.cold+0x1ec/0x234 [ 1027.828883][ T32] watchdog.cold+0x1fd/0x234 [ 1027.833604][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1027.839423][ T32] ? __pfx_watchdog+0x10/0x10 [ 1027.844139][ T32] ? __kthread_parkme+0x18f/0x230 [ 1027.849277][ T32] ? kthread+0x13a/0x450 [ 1027.853499][ T32] ? __pfx_watchdog+0x10/0x10 [ 1027.858158][ T32] kthread+0x373/0x450 [ 1027.862227][ T32] ? __pfx_kthread+0x10/0x10 [ 1027.866862][ T32] ret_from_fork+0x730/0xd60 [ 1027.871510][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1027.876673][ T32] ? __switch_to+0x800/0x10e0 [ 1027.881362][ T32] ? __pfx_kthread+0x10/0x10 [ 1027.885998][ T32] ret_from_fork_asm+0x1a/0x30 [ 1027.891016][ T32] [ 1027.894088][ T32] Kernel Offset: disabled [ 1027.898445][ T32] Rebooting in 86400 seconds..