last executing test programs: 5m0.945365664s ago: executing program 3 (id=788): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 4m59.632676991s ago: executing program 3 (id=794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x6, 0x4, 0x1, 0x81, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 4m59.25487335s ago: executing program 3 (id=796): mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x40084146, 0x40944f9c780000) 4m59.021428363s ago: executing program 3 (id=798): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x1b}, 0x0) 4m55.604907541s ago: executing program 3 (id=803): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) r1 = syz_clone(0x2180100, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000005700)=r1, 0x12) 4m55.601122324s ago: executing program 3 (id=807): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) 4m43.416875414s ago: executing program 32 (id=807): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) 3m17.856167336s ago: executing program 2 (id=1841): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) write(r0, 0x0, 0x0) 3m17.732313091s ago: executing program 2 (id=1845): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m17.246608022s ago: executing program 2 (id=1852): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000080)={0x10, 0x42, 0x200, 0x70bd2c, 0x7}, 0x10}], 0x1, 0x0, 0x0, 0x4040014}, 0x2000c011) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4) 3m17.095236878s ago: executing program 2 (id=1854): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000024c0)={0x90, 0xffffffffffffffda, r2, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xc75b, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r3, r4, 0x3, 0x5}}}, 0x90) 3m16.141950237s ago: executing program 2 (id=1867): memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xffffffffffffffc3, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 3m15.894937914s ago: executing program 2 (id=1870): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002b00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) 3m0.792753676s ago: executing program 33 (id=1870): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002b00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) 1m31.744798767s ago: executing program 6 (id=3073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 1m31.550436283s ago: executing program 6 (id=3075): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m31.391779708s ago: executing program 6 (id=3076): syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r1) 1m30.464737214s ago: executing program 6 (id=3091): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 1m30.377826502s ago: executing program 6 (id=3093): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000005cc0)) recvmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000005800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000005680)=""/157, 0x9d}], 0x6}}], 0x1, 0x40010000, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m30.065330973s ago: executing program 6 (id=3096): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000380)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000240)={0xffffffffffffffff, r1}) 1m29.911002827s ago: executing program 34 (id=3096): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000380)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000240)={0xffffffffffffffff, r1}) 46.46614495s ago: executing program 5 (id=3627): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) 46.313847215s ago: executing program 5 (id=3628): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8804}, 0x0) 45.923959805s ago: executing program 5 (id=3632): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r0, 0x2) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r1) 44.985190891s ago: executing program 5 (id=3643): creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x166) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') creat(&(0x7f0000000140)='./file0\x00', 0x49) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f00000001c0)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 44.82980287s ago: executing program 5 (id=3644): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0xae) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x1, 0x154) syz_clone(0x8080100, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 44.551259096s ago: executing program 5 (id=3645): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = getpid() process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 29.446298068s ago: executing program 35 (id=3645): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = getpid() process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 4.173446374s ago: executing program 1 (id=4053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000217000/0x1000)=nil, 0x1000, 0x4) 3.49624546s ago: executing program 8 (id=4059): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 3.296822867s ago: executing program 8 (id=4061): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x1a}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0xfffffffe, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x1, 0x0, 0x4}, 0x4, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20048844) 3.1624146s ago: executing program 1 (id=4063): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) close(r2) 3.081828678s ago: executing program 8 (id=4064): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x3e, 0x0, 0x20, 0x20, 0x6, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{}]}, @struct]}, {0x0, [0x0, 0x0, 0x2e, 0x25]}}, &(0x7f0000002200)=""/4110, 0x3e, 0x100e, 0x1}, 0x20) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x1, 0x1, {0x1000, 0x8, 0x3, 0x7, 0x7}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40081d4}, 0x8840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newtaction={0x78, 0x1e, 0x109, 0x100, 0x25dfdbfd, {}, [{0x64, 0x1, [@m_vlan={0x34, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x9, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x78}, 0x1, 0x2b1e, 0x0, 0x40}, 0x40408d4) 2.994384054s ago: executing program 7 (id=4065): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20040405) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) 2.724325951s ago: executing program 8 (id=4068): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000090) 2.718951602s ago: executing program 7 (id=4069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000206010200000000006000000300000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e200001060004404e2100000500010007000000050004"], 0x5c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) 2.567855387s ago: executing program 1 (id=4070): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.320695032s ago: executing program 4 (id=4072): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x48}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}]}, 0x2c}}, 0x0) 2.320344654s ago: executing program 8 (id=4073): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f00000b3000/0x4000)=nil, 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) 2.267627265s ago: executing program 0 (id=4074): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.211668932s ago: executing program 7 (id=4075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.054344359s ago: executing program 1 (id=4076): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.036628867s ago: executing program 4 (id=4077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a0002"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 1.82639916s ago: executing program 0 (id=4078): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101042, 0x33) fsetxattr(r0, &(0x7f0000000080)=@random={'trusted.', 'nl80211\x00'}, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) 1.689192359s ago: executing program 7 (id=4079): syz_open_dev$vim2m(&(0x7f0000000180), 0x40, 0x2) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000400)={0x0, 0x30b5, 0x400, 0x2, 0x154}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r6}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f41, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffe97d, 0x4001f, 0x10001, 0x149}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x0, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x2, 0x1f5}}], 0x1, &(0x7f0000000340)={0x2e, 0x2b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1.544983493s ago: executing program 0 (id=4080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r2, 0x2, 0x6, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 1.511330102s ago: executing program 4 (id=4081): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.258665082s ago: executing program 8 (id=4082): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x205}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb70}, 0x94) syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) 1.256647237s ago: executing program 1 (id=4083): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 1.162660228s ago: executing program 4 (id=4084): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000200)=0x54) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x358, '\x00'/856}, &(0x7f0000000400)=0x380) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000500)={'raw\x00'}, &(0x7f0000000600)=0x54) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000700)={'raw\x00', 0x288, '\x00'/648}, &(0x7f0000000a00)=0x2b0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000b00)={'mangle\x00'}, &(0x7f0000000c00)=0x54) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000d00)={'mangle\x00', 0x4f8, '\x00'/1272}, &(0x7f0000001200)=0x520) 1.03309575s ago: executing program 0 (id=4085): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x464380, 0x78d6fd44144b8169, 0x2}, 0x18) socket$inet6(0xa, 0x2, 0x0) setrlimit(0x2, &(0x7f0000000000)={0x0, 0x2400000}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204032, 0xffffffffffffffff, 0xec776000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 873.866157ms ago: executing program 1 (id=4086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e00c681337", @ANYRES32=r0], 0x1000f) 824.354449ms ago: executing program 4 (id=4087): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000180)='d', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="9a9f", 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000002c0)={r2}) 702.498319ms ago: executing program 7 (id=4088): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 596.301173ms ago: executing program 0 (id=4089): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60c}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 324.040343ms ago: executing program 7 (id=4090): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 249.962026ms ago: executing program 0 (id=4091): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1000, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 0s ago: executing program 4 (id=4092): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x2100080, 0x1, 0x41, 0x9, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x1, 0x7fffffffffffffff, 0x0, 0x1000, 0x11, 0xfffffffffffffffd, 0x1009ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): ffffffffffffffda RBX: 00007ffa6fc25fa0 RCX: 00007ffa6f99e159 [ 371.923893][T14116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008020480 [ 371.923906][T14116] RBP: 00007ffa6fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 371.923919][T14116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.923931][T14116] R13: 00007ffa6fc26038 R14: 00007ffa6fc25fa0 R15: 00007ffefca49138 [ 371.923960][T14116] [ 372.270969][T14121] 8021q: adding VLAN 0 to HW filter on device eth0 [ 372.295973][T14121] 8021q: adding VLAN 0 to HW filter on device eth1 [ 372.319345][T14121] 8021q: adding VLAN 0 to HW filter on device eth2 [ 372.321798][T14121] 8021q: adding VLAN 0 to HW filter on device eth3 [ 372.324200][T14121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 372.527999][T14130] SELinux: DCCP has been removed, pid=14130 comm=syz.7.3176 [ 372.528816][T14130] netlink: 'syz.7.3176': attribute type 12 has an invalid length. [ 372.528837][T14130] netlink: 'syz.7.3176': attribute type 29 has an invalid length. [ 372.528851][T14130] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3176'. [ 372.768323][ T32] audit: type=1804 audit(2000000008.289:7511): pid=14139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.3178" name="/newroot/2/proc/sys/net/core/rps_default_mask" dev="proc" ino=45215 res=1 errno=0 [ 372.971843][T14148] netlink: 'syz.4.3185': attribute type 1 has an invalid length. [ 373.002887][T14148] 8021q: adding VLAN 0 to HW filter on device bond5 [ 373.114775][T14155] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 373.511551][ T32] audit: type=1400 audit(2000000009.029:7512): avc: denied { mounton } for pid=14166 comm="syz.1.3192" path="/" dev="ramfs" ino=43672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 373.566830][T14159] syz.5.3189 (14159): drop_caches: 2 [ 373.594562][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033ea0c00: rx timeout, send abort [ 373.594779][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033ea0c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 373.603156][ T32] audit: type=1400 audit(2000000009.119:7513): avc: denied { read } for pid=4954 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 373.717877][ T32] audit: type=1800 audit(2000000009.239:7514): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31396 res=0 errno=0 [ 373.719706][ T32] audit: type=1800 audit(2000000009.239:7515): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31419 res=0 errno=0 [ 373.916215][ T5710] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 373.993141][T14183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3199'. [ 373.993170][T14183] netlink: 'syz.1.3199': attribute type 1 has an invalid length. [ 373.993183][T14183] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3199'. [ 374.069311][ T5710] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.071522][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.071554][ T5710] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 374.089227][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.089254][ T5710] usb 6-1: Product: syz [ 374.089269][ T5710] usb 6-1: Manufacturer: syz [ 374.089286][ T5710] usb 6-1: SerialNumber: syz [ 374.103418][ T32] audit: type=1800 audit(2000000009.619:7516): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179109 res=0 errno=0 [ 374.118916][ T5710] cdc_mbim 6-1:1.0: skipping garbage [ 374.125186][ T32] audit: type=1800 audit(2000000009.639:7517): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=179141 res=0 errno=0 [ 374.136770][ T32] audit: type=1800 audit(2000000009.659:7518): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=179116 res=0 errno=0 [ 374.149438][ T32] audit: type=1800 audit(2000000009.669:7519): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=179117 res=0 errno=0 [ 374.343685][T14171] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 374.847529][T14212] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3209'. [ 374.963689][T14171] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 374.968146][ T5710] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 374.970146][ T5710] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 375.022190][ T5710] wwan wwan0: port wwan0mbim0 attached [ 375.066265][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3215'. [ 375.070329][ T5710] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, d6:96:f7:e8:6d:8c [ 375.224103][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 375.224140][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 375.224361][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 375.224385][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 375.224588][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 375.224610][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 375.224814][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 375.224837][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 375.225049][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 375.225073][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 375.225277][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 375.225300][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 375.225517][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 375.225539][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 375.225755][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 375.225778][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 375.226818][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 375.226842][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 375.227040][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 375.227061][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 375.257137][ T5710] usb 6-1: USB disconnect, device number 35 [ 375.258536][ T5710] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 375.356998][ T5710] wwan wwan0: port wwan0mbim0 disconnected [ 376.567272][T14305] ip_tables: iptables: counters copy to user failed while replacing table [ 377.283066][ T32] kauditd_printk_skb: 20 callbacks suppressed [ 377.283085][ T32] audit: type=1400 audit(2000000012.799:7540): avc: denied { write } for pid=14289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.383381][ T32] audit: type=1800 audit(2000000012.899:7541): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4787 res=0 errno=0 [ 377.563655][ T5710] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 377.580149][ T32] audit: type=1400 audit(2000000013.099:7542): avc: denied { write } for pid=14338 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.719558][ T5710] usb 6-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 377.720469][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 377.722254][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.722287][ T5710] usb 6-1: Product: syz [ 377.722308][ T5710] usb 6-1: Manufacturer: syz [ 377.722330][ T5710] usb 6-1: SerialNumber: syz [ 377.798714][ T5710] kaweth 6-1:1.0: couldn't find required endpoints [ 377.806859][ T32] audit: type=1800 audit(2000000013.329:7543): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180214 res=0 errno=0 [ 377.839044][ T32] audit: type=1800 audit(2000000013.359:7544): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=180246 res=0 errno=0 [ 377.843333][ T32] audit: type=1800 audit(2000000013.359:7545): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=180221 res=0 errno=0 [ 377.851393][ T32] audit: type=1800 audit(2000000013.369:7546): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=180222 res=0 errno=0 [ 377.854206][ T32] audit: type=1800 audit(2000000013.369:7547): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=180243 res=0 errno=0 [ 377.864635][ T32] audit: type=1800 audit(2000000013.369:7548): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=180244 res=0 errno=0 [ 377.873161][ T32] audit: type=1800 audit(2000000013.399:7549): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=180223 res=0 errno=0 [ 378.023599][ T191] usb 6-1: USB disconnect, device number 36 [ 378.117158][T14356] netlink: 'syz.0.3247': attribute type 3 has an invalid length. [ 378.117188][T14356] netlink: 'syz.0.3247': attribute type 3 has an invalid length. [ 378.311716][T14335] netlink: 'syz.1.3238': attribute type 4 has an invalid length. [ 378.684112][T14377] smc: net device lo applied user defined pnetid SYZ0 [ 378.873150][T14392] xt_hashlimit: size too large, truncated to 1048576 [ 379.533836][T14417] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 379.533886][T14417] device-mapper: ioctl: error adding target to table [ 379.754886][T14434] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3280'. [ 379.970079][T14445] smpboot: CPU 1 is now offline [ 380.083074][T14447] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 380.660253][T14479] jffs2: notice: (14479) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 380.970237][T14494] overlayfs: failed to clone upperpath [ 381.221621][T14512] ip_tables: iptables: counters copy to user failed while replacing table [ 381.570715][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.700037][ T32] kauditd_printk_skb: 25 callbacks suppressed [ 382.700059][ T32] audit: type=1400 audit(2000000018.219:7575): avc: denied { write } for pid=14559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.889125][ T32] audit: type=1400 audit(2000000018.409:7576): avc: denied { write } for pid=14582 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.128414][T14593] FAULT_INJECTION: forcing a failure. [ 383.128414][T14593] name failslab, interval 1, probability 0, space 0, times 0 [ 383.128455][T14593] CPU: 1 UID: 0 PID: 14593 Comm: syz.5.3332 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.128486][T14593] Tainted: [L]=SOFTLOCKUP [ 383.128495][T14593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 383.128508][T14593] Call Trace: [ 383.128517][T14593] [ 383.128527][T14593] dump_stack_lvl+0x100/0x190 [ 383.128571][T14593] should_fail_ex.cold+0x5/0xa [ 383.128602][T14593] should_failslab+0xc2/0x120 [ 383.128636][T14593] __kmalloc_cache_noprof+0x91/0x6d0 [ 383.128655][T14593] ? alloc_fs_context+0x57/0xf40 [ 383.128685][T14593] alloc_fs_context+0x57/0xf40 [ 383.128717][T14593] __x64_sys_fspick+0x253/0x3a0 [ 383.128743][T14593] ? __pfx___x64_sys_fspick+0x10/0x10 [ 383.128785][T14593] do_syscall_64+0x123/0x790 [ 383.128818][T14593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.128846][T14593] RIP: 0033:0x7ffa6f99e159 [ 383.128865][T14593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.128890][T14593] RSP: 002b:00007ffa6dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 383.128915][T14593] RAX: ffffffffffffffda RBX: 00007ffa6fc25fa0 RCX: 00007ffa6f99e159 [ 383.128934][T14593] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 383.128949][T14593] RBP: 00007ffa6fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 383.128963][T14593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.128976][T14593] R13: 00007ffa6fc26038 R14: 00007ffa6fc25fa0 R15: 00007ffefca49138 [ 383.129005][T14593] [ 383.433374][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'. [ 383.505372][ T32] audit: type=1400 audit(2000000019.019:7577): avc: denied { write } for pid=14589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.555965][ T2236] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 383.643938][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3339'. [ 383.644153][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3339'. [ 383.692814][ T32] audit: type=1400 audit(2000000019.209:7578): avc: denied { write } for pid=14620 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.718522][ T2236] usb 6-1: Using ep0 maxpacket: 8 [ 383.724248][ T2236] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 383.725377][ T2236] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.725406][ T2236] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.725432][ T2236] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.725454][ T2236] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.725492][ T2236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.794607][ T32] audit: type=1800 audit(2000000019.319:7579): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180727 res=0 errno=0 [ 383.829211][ T32] audit: type=1800 audit(2000000019.349:7580): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=180756 res=0 errno=0 [ 383.829303][ T32] audit: type=1800 audit(2000000019.349:7581): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=180734 res=0 errno=0 [ 383.829345][ T32] audit: type=1800 audit(2000000019.349:7582): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=180735 res=0 errno=0 [ 383.829386][ T32] audit: type=1800 audit(2000000019.349:7583): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=180736 res=0 errno=0 [ 383.840494][T14626] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3341'. [ 383.847320][ T32] audit: type=1800 audit(2000000019.359:7584): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180776 res=0 errno=0 [ 384.008456][ T2236] usb 6-1: GET_CAPABILITIES returned 0 [ 384.008511][ T2236] usbtmc 6-1:16.0: can't read capabilities [ 384.187923][T14642] VFS: file-max limit 0 reached [ 384.233635][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.233700][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.233751][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.233800][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.234008][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.234057][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.234104][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.234151][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.234359][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.234410][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.276935][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.277053][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.277344][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.277414][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.277748][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.277847][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 384.288795][ T5697] usb 6-1: USB disconnect, device number 37 [ 384.881965][T14674] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3356'. [ 384.882027][T14674] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3356'. [ 385.182558][T14677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.713114][T14713] input: syz1 as /devices/virtual/input/input36 [ 387.082911][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3385'. [ 387.375666][ T5697] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 387.420462][T14768] jffs2: notice: (14768) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 387.558460][ T5697] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 387.562107][ T5697] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 387.562141][ T5697] usb 6-1: Product: syz [ 387.562168][ T5697] usb 6-1: Manufacturer: syz [ 387.562184][ T5697] usb 6-1: SerialNumber: syz [ 387.566316][ T5697] usb 6-1: config 0 descriptor?? [ 387.579585][ T5697] ch341 6-1:0.0: ch341-uart converter detected [ 387.653095][T14767] can0: slcan on pts0. [ 387.801452][T14778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.808095][ T32] kauditd_printk_skb: 34 callbacks suppressed [ 387.808116][ T32] audit: type=1800 audit(2000000023.319:7619): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181400 res=0 errno=0 [ 388.226364][T14766] can0 (unregistered): slcan off pts0. [ 388.355643][ T32] audit: type=1400 audit(2000000023.869:7620): avc: denied { append } for pid=14794 comm="syz.0.3400" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 388.571623][ T32] audit: type=1400 audit(2000000024.079:7621): avc: denied { write } for pid=14792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.606643][ T5697] ch341-uart ttyUSB0: break control not supported, using simulated break [ 388.616766][ T5697] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 388.629176][ T32] audit: type=1800 audit(2000000024.139:7622): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=181330 res=0 errno=0 [ 388.637755][ T5697] usb 6-1: USB disconnect, device number 38 [ 388.659179][ T32] audit: type=1800 audit(2000000024.179:7623): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=181331 res=0 errno=0 [ 388.690621][ T5697] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 388.690961][ T5697] ch341 6-1:0.0: device disconnected [ 388.705938][ T32] audit: type=1800 audit(2000000024.219:7624): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=181310 res=0 errno=0 [ 388.712863][ T32] audit: type=1800 audit(2000000024.239:7625): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=181332 res=0 errno=0 [ 388.771521][ T32] audit: type=1800 audit(2000000024.289:7626): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31196 res=0 errno=0 [ 388.772949][ T32] audit: type=1800 audit(2000000024.289:7627): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26975 res=0 errno=0 [ 388.786889][ T32] audit: type=1800 audit(2000000024.299:7628): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31219 res=0 errno=0 [ 388.871394][T14818] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3406'. [ 389.005690][ T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 389.157721][ T31] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 389.159006][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 389.159036][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 389.159076][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.184555][ T31] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 389.243739][ T31] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 389.480398][T14845] ip_tables: iptables: counters copy to user failed while replacing table [ 389.693983][T14814] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 389.695424][T14814] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 389.712245][T14814] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 389.812315][T14814] SPCP8x5 ttyUSB0: Set UART format 0x1 failed (error = -32) [ 390.643880][T14881] FAULT_INJECTION: forcing a failure. [ 390.643880][T14881] name failslab, interval 1, probability 0, space 0, times 0 [ 390.643924][T14881] CPU: 1 UID: 0 PID: 14881 Comm: syz.0.3428 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.643956][T14881] Tainted: [L]=SOFTLOCKUP [ 390.643964][T14881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 390.643978][T14881] Call Trace: [ 390.643987][T14881] [ 390.643996][T14881] dump_stack_lvl+0x100/0x190 [ 390.644040][T14881] should_fail_ex.cold+0x5/0xa [ 390.644072][T14881] should_failslab+0xc2/0x120 [ 390.644105][T14881] __kmalloc_noprof+0xfc/0x840 [ 390.644134][T14881] ? rcu_is_watching+0x13/0xc0 [ 390.644166][T14881] ? tomoyo_realpath_from_path+0xb6/0x690 [ 390.644210][T14881] tomoyo_realpath_from_path+0xb6/0x690 [ 390.644247][T14881] tomoyo_path_number_perm+0x23c/0x580 [ 390.644273][T14881] ? tomoyo_path_number_perm+0x22e/0x580 [ 390.644301][T14881] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 390.644340][T14881] ? __pfx_futex_wait+0x10/0x10 [ 390.644375][T14881] ? __lock_acquire+0x5c0/0x1f40 [ 390.644418][T14881] ? __fget_files+0x34/0x3d0 [ 390.644451][T14881] ? find_held_lock+0x2b/0x80 [ 390.644482][T14881] ? hook_file_ioctl_common+0x140/0x440 [ 390.644522][T14881] ? __fget_files+0x21f/0x3d0 [ 390.644555][T14881] security_file_ioctl+0xd3/0x230 [ 390.644584][T14881] __x64_sys_ioctl+0xb7/0x210 [ 390.644613][T14881] do_syscall_64+0x123/0x790 [ 390.644643][T14881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.644669][T14881] RIP: 0033:0x7f5b0df9e159 [ 390.644690][T14881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.644714][T14881] RSP: 002b:00007f5b0ef23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.644738][T14881] RAX: ffffffffffffffda RBX: 00007f5b0e225fa0 RCX: 00007f5b0df9e159 [ 390.644754][T14881] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003 [ 390.644767][T14881] RBP: 00007f5b0e03506b R08: 0000000000000000 R09: 0000000000000000 [ 390.644780][T14881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.644793][T14881] R13: 00007f5b0e226038 R14: 00007f5b0e225fa0 R15: 00007ffc0ad59a48 [ 390.644821][T14881] [ 390.644851][T14881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 391.678572][ T31] usb 2-1: USB disconnect, device number 26 [ 391.702641][ T31] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 391.703268][ T31] spcp8x5 2-1:1.0: device disconnected [ 392.311788][T14929] FAULT_INJECTION: forcing a failure. [ 392.311788][T14929] name failslab, interval 1, probability 0, space 0, times 0 [ 392.311829][T14929] CPU: 0 UID: 0 PID: 14929 Comm: syz.5.3448 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.311860][T14929] Tainted: [L]=SOFTLOCKUP [ 392.311868][T14929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 392.311883][T14929] Call Trace: [ 392.311892][T14929] [ 392.311901][T14929] dump_stack_lvl+0x100/0x190 [ 392.311946][T14929] should_fail_ex.cold+0x5/0xa [ 392.311977][T14929] should_failslab+0xc2/0x120 [ 392.312008][T14929] __kmalloc_cache_noprof+0x91/0x6d0 [ 392.312032][T14929] ? __lock_acquire+0x5c0/0x1f40 [ 392.312058][T14929] ? assoc_array_delete+0x101/0xd10 [ 392.312096][T14929] assoc_array_delete+0x101/0xd10 [ 392.312126][T14929] ? lock_acquire+0x1d1/0x380 [ 392.312151][T14929] ? __pfx_assoc_array_delete+0x10/0x10 [ 392.312189][T14929] ? __pfx_down_write+0x10/0x10 [ 392.312223][T14929] key_unlink+0xbc/0x310 [ 392.312267][T14929] ? __pfx_key_unlink+0x10/0x10 [ 392.312303][T14929] ? xfd_validate_state+0x129/0x190 [ 392.312333][T14929] keyctl_keyring_unlink+0xdc/0x1b0 [ 392.312358][T14929] __do_sys_keyctl+0x3dd/0x5a0 [ 392.312385][T14929] do_syscall_64+0x123/0x790 [ 392.312411][T14929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.312434][T14929] RIP: 0033:0x7ffa6f99e159 [ 392.312453][T14929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.312475][T14929] RSP: 002b:00007ffa6dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 392.312500][T14929] RAX: ffffffffffffffda RBX: 00007ffa6fc25fa0 RCX: 00007ffa6f99e159 [ 392.312519][T14929] RDX: 000000003a54e05d RSI: 000000003a54e05d RDI: 0000000000000009 [ 392.312533][T14929] RBP: 00007ffa6fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 392.312546][T14929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.312560][T14929] R13: 00007ffa6fc26038 R14: 00007ffa6fc25fa0 R15: 00007ffefca49138 [ 392.312592][T14929] [ 392.643807][T14943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3454'. [ 393.198821][ T32] kauditd_printk_skb: 19 callbacks suppressed [ 393.198841][ T32] audit: type=1800 audit(2000000028.719:7648): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181924 res=0 errno=0 [ 393.367705][ T32] audit: type=1400 audit(2000000028.889:7649): avc: denied { mounton } for pid=14972 comm="syz.5.3467" path="/456/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 393.367712][T14973] FAULT_INJECTION: forcing a failure. [ 393.367712][T14973] name failslab, interval 1, probability 0, space 0, times 0 [ 393.367749][T14973] CPU: 0 UID: 0 PID: 14973 Comm: syz.5.3467 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.367782][T14973] Tainted: [L]=SOFTLOCKUP [ 393.367790][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 393.367806][T14973] Call Trace: [ 393.367815][T14973] [ 393.367826][T14973] dump_stack_lvl+0x100/0x190 [ 393.367880][T14973] should_fail_ex.cold+0x5/0xa [ 393.367918][T14973] should_failslab+0xc2/0x120 [ 393.367954][T14973] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 393.367986][T14973] ? __d_alloc+0x35/0xa50 [ 393.368019][T14973] __d_alloc+0x35/0xa50 [ 393.368048][T14973] ? set_nlink+0xb4/0x190 [ 393.368079][T14973] d_make_root+0x3e/0x90 [ 393.368099][T14973] proc_fill_super+0x57f/0x870 [ 393.368127][T14973] ? __pfx_proc_fill_super+0x10/0x10 [ 393.368150][T14973] get_tree_nodev+0xdd/0x190 [ 393.368180][T14973] vfs_get_tree+0x92/0x320 [ 393.368201][T14973] path_mount+0x7d0/0x24c0 [ 393.368224][T14973] ? __pfx_path_mount+0x10/0x10 [ 393.368244][T14973] ? lockdep_hardirqs_on+0x7d/0x110 [ 393.368275][T14973] ? putname+0xb1/0x110 [ 393.368305][T14973] ? kmem_cache_free+0x127/0x6c0 [ 393.368334][T14973] ? __x64_sys_mount+0x293/0x310 [ 393.368353][T14973] __x64_sys_mount+0x293/0x310 [ 393.368374][T14973] ? __pfx___x64_sys_mount+0x10/0x10 [ 393.368404][T14973] do_syscall_64+0x123/0x790 [ 393.368429][T14973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.368452][T14973] RIP: 0033:0x7ffa6f99e159 [ 393.368471][T14973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.368495][T14973] RSP: 002b:00007ffa6dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 393.368518][T14973] RAX: ffffffffffffffda RBX: 00007ffa6fc25fa0 RCX: 00007ffa6f99e159 [ 393.368531][T14973] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 393.368544][T14973] RBP: 00007ffa6fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 393.368555][T14973] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 393.368568][T14973] R13: 00007ffa6fc26038 R14: 00007ffa6fc25fa0 R15: 00007ffefca49138 [ 393.368594][T14973] [ 393.372346][T14973] proc_fill_super: allocate dentry failed [ 393.587640][ T32] audit: type=1800 audit(2000000029.099:7650): pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3469" name="address" dev="sysfs" ino=171843 res=0 errno=0 [ 393.666297][ T32] audit: type=1800 audit(2000000029.189:7651): pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3469" name="broadcast" dev="sysfs" ino=171844 res=0 errno=0 [ 394.329912][T14999] SELinux: failed to load policy [ 394.864491][ T32] audit: type=1400 audit(2000000030.389:7652): avc: denied { audit_read } for pid=15016 comm="syz.4.3485" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 395.111922][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3490'. [ 395.111950][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3490'. [ 395.670429][ T32] audit: type=1800 audit(2000000031.189:7653): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183740 res=0 errno=0 [ 395.674144][ T32] audit: type=1800 audit(2000000031.189:7654): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183752 res=0 errno=0 [ 395.939506][T15051] netlink: 'syz.0.3495': attribute type 19 has an invalid length. [ 395.939537][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'. [ 395.988856][T15051] netlink: 'syz.0.3495': attribute type 19 has an invalid length. [ 395.988886][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'. [ 396.139611][T15036] ceph: No mds server is up or the cluster is laggy [ 396.145899][T15041] ceph: No mds server is up or the cluster is laggy [ 396.872586][T15072] FAULT_INJECTION: forcing a failure. [ 396.872586][T15072] name fail_futex, interval 1, probability 0, space 0, times 0 [ 396.872630][T15072] CPU: 1 UID: 0 PID: 15072 Comm: syz.7.3505 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.872665][T15072] Tainted: [L]=SOFTLOCKUP [ 396.872675][T15072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 396.872691][T15072] Call Trace: [ 396.872700][T15072] [ 396.872709][T15072] dump_stack_lvl+0x100/0x190 [ 396.872757][T15072] should_fail_ex.cold+0x5/0xa [ 396.872791][T15072] get_futex_key+0x1d0/0x14f0 [ 396.872829][T15072] ? __pfx_get_futex_key+0x10/0x10 [ 396.872858][T15072] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 396.872889][T15072] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 396.872923][T15072] futex_wait_setup+0x91/0x540 [ 396.872954][T15072] __futex_wait+0x19f/0x300 [ 396.872978][T15072] ? __pfx___futex_wait+0x10/0x10 [ 396.872998][T15072] ? __pfx_try_to_wake_up+0x10/0x10 [ 396.873033][T15072] ? futex_hash+0x311/0x400 [ 396.873065][T15072] ? __pfx_futex_wake_mark+0x10/0x10 [ 396.873091][T15072] ? find_held_lock+0x2b/0x80 [ 396.873123][T15072] ? futex_wake+0x4ea/0x5e0 [ 396.873152][T15072] futex_wait+0xe6/0x370 [ 396.873173][T15072] ? __pfx_futex_wait+0x10/0x10 [ 396.873197][T15072] ? putname+0xb1/0x110 [ 396.873224][T15072] ? kmem_cache_free+0x127/0x6c0 [ 396.873252][T15072] do_futex+0x265/0x440 [ 396.873281][T15072] ? __pfx_do_futex+0x10/0x10 [ 396.873308][T15072] ? __pfx_do_sys_openat2+0x10/0x10 [ 396.873342][T15072] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 396.873374][T15072] __x64_sys_futex+0x34f/0x4d0 [ 396.873407][T15072] ? __x64_sys_openat+0x12d/0x210 [ 396.873439][T15072] ? __pfx___x64_sys_futex+0x10/0x10 [ 396.873482][T15072] do_syscall_64+0x123/0x790 [ 396.873507][T15072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.873531][T15072] RIP: 0033:0x7fc7f279e159 [ 396.873550][T15072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.873575][T15072] RSP: 002b:00007fc7f35a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 396.873598][T15072] RAX: ffffffffffffffda RBX: 00007fc7f2a25fa8 RCX: 00007fc7f279e159 [ 396.873613][T15072] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc7f2a25fa8 [ 396.873626][T15072] RBP: 00007fc7f2a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 396.873640][T15072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.873652][T15072] R13: 00007fc7f2a26038 R14: 00007ffc6a2e2380 R15: 00007ffc6a2e2468 [ 396.873685][T15072] [ 397.602730][ T32] audit: type=1400 audit(2000000033.119:7655): avc: denied { setopt } for pid=15086 comm="syz.4.3512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 398.134055][ T32] audit: type=1400 audit(2000000033.649:7656): avc: denied { read } for pid=15108 comm="syz.4.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 398.479010][ T32] audit: type=1800 audit(2000000034.009:7657): pid=15097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3514" name="manufacturer" dev="sysfs" ino=26229 res=0 errno=0 [ 398.479066][ T32] audit: type=1800 audit(2000000034.009:7658): pid=15093 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3514" name="product" dev="sysfs" ino=26230 res=0 errno=0 [ 398.794593][ T32] audit: type=1326 audit(2000000034.309:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15130 comm="syz.4.3528" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4837d9e159 code=0x7ffc0000 [ 398.794727][ T32] audit: type=1326 audit(2000000034.309:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15130 comm="syz.4.3528" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4837d9e159 code=0x7ffc0000 [ 398.794898][ T32] audit: type=1326 audit(2000000034.309:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15130 comm="syz.4.3528" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4837d9e159 code=0x7ffc0000 [ 398.815770][ T32] audit: type=1326 audit(2000000034.319:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15130 comm="syz.4.3528" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4837d9e159 code=0x7ffc0000 [ 398.815845][ T32] audit: type=1326 audit(2000000034.319:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15130 comm="syz.4.3528" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4837d9e159 code=0x7ffc0000 [ 398.815890][ T32] audit: type=1326 audit(2000000034.319:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15130 comm="syz.4.3528" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4837d9e159 code=0x7ffc0000 [ 398.849071][ T32] audit: type=1326 audit(2000000034.369:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15130 comm="syz.4.3528" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4837d9e159 code=0x7ffc0000 [ 398.849373][ T32] audit: type=1326 audit(2000000034.369:7666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15130 comm="syz.4.3528" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4837d9e159 code=0x7ffc0000 [ 399.191281][T15139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.477202][T15156] ublk_ctrl_add_dev: dev id not match 4294967295 219 [ 401.395458][T15221] FAULT_INJECTION: forcing a failure. [ 401.395458][T15221] name failslab, interval 1, probability 0, space 0, times 0 [ 401.395503][T15221] CPU: 1 UID: 0 PID: 15221 Comm: syz.1.3564 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.395536][T15221] Tainted: [L]=SOFTLOCKUP [ 401.395545][T15221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 401.395557][T15221] Call Trace: [ 401.395564][T15221] [ 401.395573][T15221] dump_stack_lvl+0x100/0x190 [ 401.395619][T15221] should_fail_ex.cold+0x5/0xa [ 401.395655][T15221] should_failslab+0xc2/0x120 [ 401.395689][T15221] __kmalloc_cache_noprof+0x91/0x6d0 [ 401.395711][T15221] ? fuse_init_fs_context+0x43/0x1e0 [ 401.395752][T15221] fuse_init_fs_context+0x43/0x1e0 [ 401.395776][T15221] alloc_fs_context+0x60c/0xf40 [ 401.395801][T15221] __x64_sys_fsopen+0xed/0x220 [ 401.395834][T15221] do_syscall_64+0x123/0x790 [ 401.395868][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.395891][T15221] RIP: 0033:0x7ff2fbb9e159 [ 401.395908][T15221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.395929][T15221] RSP: 002b:00007ff2fca30028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 401.395953][T15221] RAX: ffffffffffffffda RBX: 00007ff2fbe25fa0 RCX: 00007ff2fbb9e159 [ 401.395969][T15221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 401.395982][T15221] RBP: 00007ff2fbc3506b R08: 0000000000000000 R09: 0000000000000000 [ 401.395995][T15221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.396007][T15221] R13: 00007ff2fbe26038 R14: 00007ff2fbe25fa0 R15: 00007ffc82260888 [ 401.396036][T15221] [ 401.790078][T15229] FAULT_INJECTION: forcing a failure. [ 401.790078][T15229] name failslab, interval 1, probability 0, space 0, times 0 [ 401.790120][T15229] CPU: 1 UID: 0 PID: 15229 Comm: syz.5.3567 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.790154][T15229] Tainted: [L]=SOFTLOCKUP [ 401.790163][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 401.790175][T15229] Call Trace: [ 401.790183][T15229] [ 401.790193][T15229] dump_stack_lvl+0x100/0x190 [ 401.790235][T15229] should_fail_ex.cold+0x5/0xa [ 401.790270][T15229] should_failslab+0xc2/0x120 [ 401.790301][T15229] kmem_cache_alloc_noprof+0x92/0x6a0 [ 401.790328][T15229] ? dup_fd+0x4d/0xd10 [ 401.790367][T15229] dup_fd+0x4d/0xd10 [ 401.790395][T15229] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 401.790430][T15229] __x64_sys_close_range+0x405/0x5d0 [ 401.790465][T15229] ? __pfx___x64_sys_close_range+0x10/0x10 [ 401.790511][T15229] do_syscall_64+0x123/0x790 [ 401.790539][T15229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.790558][T15229] RIP: 0033:0x7ffa6f99e159 [ 401.790578][T15229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.790603][T15229] RSP: 002b:00007ffa6dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 401.790627][T15229] RAX: ffffffffffffffda RBX: 00007ffa6fc25fa0 RCX: 00007ffa6f99e159 [ 401.790643][T15229] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 401.790659][T15229] RBP: 00007ffa6fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 401.790677][T15229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.790692][T15229] R13: 00007ffa6fc26038 R14: 00007ffa6fc25fa0 R15: 00007ffefca49138 [ 401.790732][T15229] [ 402.398773][T15253] jffs2: notice: (15253) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 402.607501][ T191] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 402.618349][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3583'. [ 402.656019][T15264] bond1: option ad_actor_sys_prio: invalid value (0) [ 402.656048][T15264] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 402.664519][T15264] bond1 (unregistering): Released all slaves [ 402.760084][ T191] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 402.761234][ T191] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.763593][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.763641][ T191] usb 2-1: Product: syz [ 402.763669][ T191] usb 2-1: Manufacturer: syz [ 402.763703][ T191] usb 2-1: SerialNumber: syz [ 402.802565][ T191] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 402.802759][ T191] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 402.809665][ T191] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 402.809749][ T191] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 402.809819][ T191] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 402.809886][ T191] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 402.809953][ T191] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 83 [ 402.810028][ T191] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 402.827035][ T191] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 403.400899][ T2236] usb 2-1: USB disconnect, device number 27 [ 403.404536][ T2236] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 403.408559][ T2236] keyspan 2-1:1.0: device disconnected [ 403.878117][T15299] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 403.905813][ T5735] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 403.925481][ T32] kauditd_printk_skb: 30 callbacks suppressed [ 403.925499][ T32] audit: type=1800 audit(2000000039.439:7697): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184590 res=0 errno=0 [ 403.946805][ T2236] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 404.058377][ T5735] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 404.060492][ T5735] usb 6-1: config 0 interface 0 has no altsetting 0 [ 404.060535][ T5735] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.065103][ T5735] usb 6-1: config 0 descriptor?? [ 404.067568][ T32] audit: type=1800 audit(2000000039.589:7698): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184609 res=0 errno=0 [ 404.103597][ T32] audit: type=1800 audit(2000000039.619:7699): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=184638 res=0 errno=0 [ 404.109387][ T32] audit: type=1800 audit(2000000039.629:7700): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=184616 res=0 errno=0 [ 404.118848][ T32] audit: type=1800 audit(2000000039.639:7701): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=184617 res=0 errno=0 [ 404.129734][ T32] audit: type=1800 audit(2000000039.649:7702): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=184618 res=0 errno=0 [ 404.203014][ T32] audit: type=1800 audit(2000000039.719:7703): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=184667 res=0 errno=0 [ 404.208522][ T2236] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 404.289023][T15307] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3599'. [ 404.289046][T15307] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3599'. [ 404.289087][T15307] netlink: 'syz.1.3599': attribute type 5 has an invalid length. [ 404.289097][T15307] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3599'. [ 404.302068][ T5735] usbhid 6-1:0.0: can't add hid device: -71 [ 404.302196][ T5735] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 404.319425][ T5735] usb 6-1: USB disconnect, device number 39 [ 404.449720][T15312] FAULT_INJECTION: forcing a failure. [ 404.449720][T15312] name failslab, interval 1, probability 0, space 0, times 0 [ 404.449760][T15312] CPU: 0 UID: 0 PID: 15312 Comm: syz.1.3600 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.449790][T15312] Tainted: [L]=SOFTLOCKUP [ 404.449799][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 404.449811][T15312] Call Trace: [ 404.449820][T15312] [ 404.449829][T15312] dump_stack_lvl+0x100/0x190 [ 404.449869][T15312] should_fail_ex.cold+0x5/0xa [ 404.449900][T15312] should_failslab+0xc2/0x120 [ 404.449931][T15312] kmem_cache_alloc_noprof+0x92/0x6a0 [ 404.449958][T15312] ? mas_preallocate+0xc22/0xee0 [ 404.449997][T15312] mas_preallocate+0xc22/0xee0 [ 404.450028][T15312] ? __pfx_mas_preallocate+0x10/0x10 [ 404.450061][T15312] ? __asan_memset+0x23/0x50 [ 404.450085][T15312] ? init_multi_vma_prep+0x33c/0x650 [ 404.450121][T15312] commit_merge+0x3cc/0x2150 [ 404.450145][T15312] ? __vma_start_write+0x1c6/0x280 [ 404.450177][T15312] ? __pfx_commit_merge+0x10/0x10 [ 404.450204][T15312] ? __pfx___vma_start_write+0x10/0x10 [ 404.450232][T15312] ? __pfx_mas_prev+0x10/0x10 [ 404.450261][T15312] ? dup_anon_vma+0x74/0x2f0 [ 404.450283][T15312] vma_modify+0xd81/0x29b0 [ 404.450316][T15312] ? __pfx_vma_modify+0x10/0x10 [ 404.450344][T15312] ? lock_acquire+0x1d1/0x380 [ 404.450377][T15312] vma_modify_flags+0x2c3/0x460 [ 404.450400][T15312] ? __pfx_vma_modify_flags+0x10/0x10 [ 404.450436][T15312] ? __pfx_futex_wake_mark+0x10/0x10 [ 404.450469][T15312] mlock_fixup+0x4a8/0xc60 [ 404.450500][T15312] ? __pfx_mlock_fixup+0x10/0x10 [ 404.450540][T15312] apply_mlockall_flags.isra.0+0x3b8/0x640 [ 404.450576][T15312] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 404.450616][T15312] ? __pfx___might_resched+0x10/0x10 [ 404.450648][T15312] ? down_write_killable+0x152/0x240 [ 404.450685][T15312] __do_sys_munlockall+0xc7/0x270 [ 404.450712][T15312] do_syscall_64+0x123/0x790 [ 404.450737][T15312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.450762][T15312] RIP: 0033:0x7ff2fbb9e159 [ 404.450782][T15312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.450802][T15312] RSP: 002b:00007ff2fca30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 404.450825][T15312] RAX: ffffffffffffffda RBX: 00007ff2fbe25fa0 RCX: 00007ff2fbb9e159 [ 404.450840][T15312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.450853][T15312] RBP: 00007ff2fbe25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 404.450867][T15312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.450880][T15312] R13: 00007ff2fbe26038 R14: 00007ff2fbe25fa0 R15: 00007ffc82260888 [ 404.450910][T15312] [ 404.716714][ T5735] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 404.811044][T15322] xt_hashlimit: size too large, truncated to 1048576 [ 404.996582][T15300] ceph: No mds server is up or the cluster is laggy [ 405.228326][ T32] audit: type=1400 audit(2000000040.749:7704): avc: denied { name_bind } for pid=15340 comm="syz.7.3612" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 405.313440][T13309] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 405.439102][ T32] audit: type=1400 audit(2000000040.959:7705): avc: denied { attach_queue } for pid=15348 comm="syz.1.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 405.540377][ T32] audit: type=1400 audit(2000000041.059:7706): avc: denied { read } for pid=15353 comm="syz.7.3618" path="socket:[48621]" dev="sockfs" ino=48621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 405.627504][T15356] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 405.762701][T15363] overlayfs: failed to resolve './cgroup': -2 [ 405.875759][ T5621] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 405.921015][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'. [ 405.921040][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'. [ 405.952067][T15370] FAULT_INJECTION: forcing a failure. [ 405.952067][T15370] name failslab, interval 1, probability 0, space 0, times 0 [ 405.952107][T15370] CPU: 0 UID: 0 PID: 15370 Comm: syz.5.3627 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.952138][T15370] Tainted: [L]=SOFTLOCKUP [ 405.952147][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 405.952160][T15370] Call Trace: [ 405.952169][T15370] [ 405.952179][T15370] dump_stack_lvl+0x100/0x190 [ 405.952226][T15370] should_fail_ex.cold+0x5/0xa [ 405.952259][T15370] should_failslab+0xc2/0x120 [ 405.952296][T15370] __kmalloc_noprof+0xfc/0x840 [ 405.952320][T15370] ? lsm_blob_alloc+0x68/0x90 [ 405.952346][T15370] lsm_blob_alloc+0x68/0x90 [ 405.952368][T15370] security_sb_alloc+0x25/0x240 [ 405.952389][T15370] sget_fc+0x3ce/0x1f70 [ 405.952420][T15370] ? __pfx_super_s_dev_test+0x10/0x10 [ 405.952463][T15370] ? __pfx_super_s_dev_set+0x10/0x10 [ 405.952486][T15370] ? __pfx_sget_fc+0x10/0x10 [ 405.952508][T15370] ? __mutex_unlock_slowpath+0x35d/0x930 [ 405.952535][T15370] ? _kstrtoull+0x144/0x200 [ 405.952567][T15370] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 405.952600][T15370] sget_dev+0x9b/0xe0 [ 405.952623][T15370] ? __pfx_sget_dev+0x10/0x10 [ 405.952647][T15370] ? get_mtd_device+0xde/0x1f0 [ 405.952678][T15370] ? __pfx_get_mtd_device+0x10/0x10 [ 405.952705][T15370] ? __pfx_jffs2_fill_super+0x10/0x10 [ 405.952734][T15370] mtd_get_sb+0x53/0x4c0 [ 405.952765][T15370] ? __pfx_jffs2_fill_super+0x10/0x10 [ 405.952791][T15370] get_tree_mtd+0x6f9/0x8a0 [ 405.952819][T15370] ? __pfx_get_tree_mtd+0x10/0x10 [ 405.952847][T15370] ? cap_capable+0x107/0x430 [ 405.952868][T15370] ? bpf_lsm_capable+0x9/0x10 [ 405.952890][T15370] ? security_capable+0x80/0x260 [ 405.952919][T15370] vfs_get_tree+0x92/0x320 [ 405.952937][T15370] path_mount+0x7d0/0x24c0 [ 405.952963][T15370] ? __pfx_path_mount+0x10/0x10 [ 405.952982][T15370] ? lockdep_hardirqs_on+0x7d/0x110 [ 405.953012][T15370] ? putname+0xb1/0x110 [ 405.953039][T15370] ? kmem_cache_free+0x127/0x6c0 [ 405.953069][T15370] ? __x64_sys_mount+0x293/0x310 [ 405.953088][T15370] __x64_sys_mount+0x293/0x310 [ 405.953110][T15370] ? __pfx___x64_sys_mount+0x10/0x10 [ 405.953139][T15370] do_syscall_64+0x123/0x790 [ 405.953165][T15370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.953187][T15370] RIP: 0033:0x7ffa6f99e159 [ 405.953207][T15370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.953231][T15370] RSP: 002b:00007ffa6dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.953255][T15370] RAX: ffffffffffffffda RBX: 00007ffa6fc25fa0 RCX: 00007ffa6f99e159 [ 405.953270][T15370] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 405.953286][T15370] RBP: 00007ffa6fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 405.953301][T15370] R10: 0000000000800040 R11: 0000000000000246 R12: 0000000000000000 [ 405.953316][T15370] R13: 00007ffa6fc26038 R14: 00007ffa6fc25fa0 R15: 00007ffefca49138 [ 405.953347][T15370] [ 408.161114][T15438] syz_tun: entered allmulticast mode [ 408.171901][T15436] syz_tun: left allmulticast mode [ 408.510117][T15445] pimreg: entered allmulticast mode [ 409.541171][T15468] kvm: emulating exchange as write [ 409.654267][ T32] kauditd_printk_skb: 3 callbacks suppressed [ 409.654287][ T32] audit: type=1800 audit(2000000045.169:7710): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186516 res=0 errno=0 [ 409.694888][ T32] audit: type=1800 audit(2000000045.209:7711): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=186520 res=0 errno=0 [ 409.763606][ T32] audit: type=1800 audit(2000000045.279:7712): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dhcpc_t op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=186548 res=0 errno=0 [ 410.737142][ T32] audit: type=1400 audit(2000000046.259:7713): avc: denied { write } for pid=15483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.991107][ T32] audit: type=1400 audit(2000000046.509:7714): avc: denied { write } for pid=15515 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.912209][ T32] audit: type=1400 audit(2000000047.429:7715): avc: denied { write } for pid=15519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.066685][ T32] audit: type=1400 audit(2000000047.589:7716): avc: denied { write } for pid=15557 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.113236][T15561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=15561 comm=syz.7.3683 [ 412.266914][ T5735] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 412.416462][ T5735] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 412.419683][ T5735] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.419708][ T5735] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.420982][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 412.421037][ T5735] usb 2-1: SerialNumber: syz [ 412.445812][ T32] audit: type=1800 audit(2000000047.969:7717): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186752 res=0 errno=0 [ 412.496168][ T32] audit: type=1800 audit(2000000048.019:7718): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=186782 res=0 errno=0 [ 412.497187][ T32] audit: type=1800 audit(2000000048.019:7719): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=186759 res=0 errno=0 [ 412.677565][ T5735] usb 2-1: 0:2 : does not exist [ 412.800874][ T5735] usb 2-1: USB disconnect, device number 28 [ 412.954933][ T7773] udevd[7773]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.950853][T15628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.205121][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3711'. [ 415.256125][T15636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.886874][ T32] kauditd_printk_skb: 11 callbacks suppressed [ 415.886894][ T32] audit: type=1800 audit(2000000051.399:7731): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187301 res=0 errno=0 [ 415.892986][ T32] audit: type=1800 audit(2000000051.409:7732): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=187316 res=0 errno=0 [ 415.893031][ T32] audit: type=1800 audit(2000000051.409:7733): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=187319 res=0 errno=0 [ 415.894084][ T32] audit: type=1800 audit(2000000051.409:7734): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=187318 res=0 errno=0 [ 415.894744][ T32] audit: type=1800 audit(2000000051.409:7735): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=187317 res=0 errno=0 [ 415.895481][ T32] audit: type=1800 audit(2000000051.409:7736): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=187308 res=0 errno=0 [ 415.948341][ T32] audit: type=1800 audit(2000000051.469:7737): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=187311 res=0 errno=0 [ 415.969350][ T32] audit: type=1800 audit(2000000051.469:7738): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=187304 res=0 errno=0 [ 415.999610][T15658] input: syz0 as /devices/virtual/input/input37 [ 416.005689][ T32] audit: type=1800 audit(2000000051.519:7739): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187332 res=0 errno=0 [ 416.059951][ T32] audit: type=1800 audit(2000000051.579:7740): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=187305 res=0 errno=0 [ 417.324343][T15695] netlink: 'syz.4.3730': attribute type 1 has an invalid length. [ 417.476583][T15695] 8021q: adding VLAN 0 to HW filter on device bond6 [ 417.554261][T15700] bond6: (slave erspan0): making interface the new active one [ 417.570101][T15700] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 417.658834][T15700] syz.4.3730 (15700) used greatest stack depth: 19872 bytes left [ 417.697202][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 417.858213][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 417.860430][ T31] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 417.861605][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.861643][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 417.861671][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 417.861715][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.864543][ T31] usb 2-1: config 0 descriptor?? [ 418.346280][ T31] nintendo 0003:057E:2019.0015: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 418.380318][T15743] udevd[15743]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 418.543774][T15748] input: syz0 as /devices/virtual/input/input38 [ 418.715214][ T31] nintendo 0003:057E:2019.0015: Failed to set baudrate (ret=-71), continuing anyway [ 418.736169][ T31] nintendo 0003:057E:2019.0015: Failed handshake; ret=-71 [ 418.736235][ T31] nintendo 0003:057E:2019.0015: Failed to initialize controller; ret=-71 [ 418.795640][ T31] nintendo 0003:057E:2019.0015: probe - fail = -71 [ 418.795851][ T31] nintendo 0003:057E:2019.0015: probe with driver nintendo failed with error -71 [ 418.802811][ T31] usb 2-1: USB disconnect, device number 29 [ 418.841965][ T2236] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 418.995966][ T2236] usb 1-1: Using ep0 maxpacket: 16 [ 418.996827][ T2236] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 418.998030][ T2236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.998063][ T2236] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 418.998110][ T2236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.000961][ T2236] usb 1-1: config 0 descriptor?? [ 419.553656][ T2236] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 419.553700][ T2236] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 419.553723][ T2236] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 419.553757][ T2236] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 419.553795][ T2236] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 419.553833][ T2236] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 419.553872][ T2236] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 419.553910][ T2236] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 419.553948][ T2236] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 419.553987][ T2236] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 419.635851][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 419.643566][ T2236] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0016/input/input39 [ 419.758432][ T2236] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 419.805635][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 419.806469][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 419.808319][ T31] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 419.808368][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.808394][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.808449][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.808485][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.808529][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.853345][T15772] udevd[15772]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 420.029343][ T31] usb 2-1: usb_control_msg returned -32 [ 420.029401][ T31] usbtmc 2-1:16.0: can't read capabilities [ 420.083903][T15774] af_packet: packet size is too long (4294967085 > 1518) [ 420.131610][ T31] usb 1-1: USB disconnect, device number 34 [ 420.860111][T15792] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 420.987394][T15800] netlink: 'syz.0.3769': attribute type 4 has an invalid length. [ 421.064039][ T2236] usb 2-1: USB disconnect, device number 30 [ 421.337268][T15809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3773'. [ 422.003912][T15828] batadv_slave_1: entered promiscuous mode [ 422.005368][T15827] batadv_slave_1: left promiscuous mode [ 422.099749][T15835] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3781'. [ 422.469059][T15840] batman_adv: batadv0: Adding interface: syzkaller0 [ 422.469079][T15840] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.469111][T15840] batman_adv: batadv0: Interface activated: syzkaller0 [ 422.527238][T15839] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 422.562895][T15844] CIFS: Attempting to mount //127.0.0.1/share [ 422.583742][T15844] CIFS: VFS: Error connecting to socket. Aborting operation. [ 422.583942][T15844] CIFS: VFS: cifs_mount failed w/return code = -22 [ 422.607274][T15839] batman_adv: batadv0: Removing interface: syzkaller0 [ 422.835402][T15849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.945677][ T32] kauditd_printk_skb: 51 callbacks suppressed [ 422.945697][ T32] audit: type=1400 audit(2000000058.459:7792): avc: denied { write } for pid=15850 comm="syz.0.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 422.982950][T15854] xt_TPROXY: Can be used only with -p tcp or -p udp [ 423.307187][ T32] audit: type=1800 audit(2000000058.819:7793): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188527 res=0 errno=0 [ 423.346151][ T32] audit: type=1800 audit(2000000058.839:7794): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188538 res=0 errno=0 [ 423.368256][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 423.381345][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 423.392907][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 423.409540][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 423.410149][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 423.463642][ T32] audit: type=1800 audit(2000000058.979:7795): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188557 res=0 errno=0 [ 423.486973][ T32] audit: type=1800 audit(2000000058.989:7796): pid=10069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188568 res=0 errno=0 [ 424.102545][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3801'. [ 424.124633][T15884] netlink: 'syz.7.3802': attribute type 1 has an invalid length. [ 424.205751][ T5853] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 424.385616][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 424.386882][ T5853] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 424.387882][ T5853] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.387910][ T5853] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 424.387950][ T5853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 424.387968][ T5853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 424.387995][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.394604][ T32] audit: type=1800 audit(2000000059.909:7797): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188661 res=0 errno=0 [ 424.459736][ T5853] hub 2-1:1.0: bad descriptor, ignoring hub [ 424.459767][ T5853] hub 2-1:1.0: probe with driver hub failed with error -5 [ 424.460274][ T5853] cdc_wdm 2-1:1.0: skipping garbage [ 424.460289][ T5853] cdc_wdm 2-1:1.0: skipping garbage [ 424.489592][ T5853] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 424.489618][ T5853] cdc_wdm 2-1:1.0: Unknown control protocol [ 424.500287][ T32] audit: type=1800 audit(2000000060.009:7798): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=188690 res=0 errno=0 [ 424.500337][ T32] audit: type=1800 audit(2000000060.009:7799): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=188668 res=0 errno=0 [ 424.511786][ T32] audit: type=1800 audit(2000000060.039:7800): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=188669 res=0 errno=0 [ 424.518550][ T32] audit: type=1800 audit(2000000060.039:7801): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=188670 res=0 errno=0 [ 424.686224][T15884] bond1: entered promiscuous mode [ 424.686310][T15884] bond1: entered allmulticast mode [ 424.688208][T15884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.766863][T15886] erspan1: entered allmulticast mode [ 424.786015][T15886] bond1: (slave erspan1): making interface the new active one [ 424.786039][T15886] erspan1: entered promiscuous mode [ 424.787461][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3801'. [ 424.818015][T15886] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 425.475707][ T5605] Bluetooth: hci3: command tx timeout [ 425.496081][ T5853] usb 2-1: USB disconnect, device number 31 [ 425.595255][T15905] overlayfs: failed to clone upperpath [ 426.039175][T15859] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.039586][T15859] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.039722][T15859] bridge_slave_0: entered allmulticast mode [ 426.041657][T15859] bridge_slave_0: entered promiscuous mode [ 426.071351][T15859] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.071469][T15859] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.071804][T15859] bridge_slave_1: entered allmulticast mode [ 426.073388][T15859] bridge_slave_1: entered promiscuous mode [ 426.129466][T15859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.152918][T15859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.239639][T15859] team0: Port device team_slave_0 added [ 426.242946][T15859] team0: Port device team_slave_1 added [ 426.285620][T15859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.285638][T15859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.285661][T15859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.288241][T15859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.288254][T15859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.288376][T15859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.428721][T15859] hsr_slave_0: entered promiscuous mode [ 426.429744][T15859] hsr_slave_1: entered promiscuous mode [ 426.430355][T15859] debugfs: 'hsr0' already exists in 'hsr' [ 426.430374][T15859] Cannot create hsr debugfs directory [ 426.886662][T15932] ceph: No mds server is up or the cluster is laggy [ 427.022750][T15946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.335469][T15955] batman_adv: batadv0: Adding interface: syzkaller0 [ 427.335490][T15955] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.338458][T15955] batman_adv: batadv0: Interface activated: syzkaller0 [ 427.524943][T15965] FAULT_INJECTION: forcing a failure. [ 427.524943][T15965] name failslab, interval 1, probability 0, space 0, times 0 [ 427.524984][T15965] CPU: 1 UID: 0 PID: 15965 Comm: syz.7.3826 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.525013][T15965] Tainted: [L]=SOFTLOCKUP [ 427.525021][T15965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 427.525034][T15965] Call Trace: [ 427.525043][T15965] [ 427.525052][T15965] dump_stack_lvl+0x100/0x190 [ 427.525095][T15965] should_fail_ex.cold+0x5/0xa [ 427.525138][T15965] should_failslab+0xc2/0x120 [ 427.525172][T15965] __kmalloc_cache_noprof+0x91/0x6d0 [ 427.525199][T15965] ? copy_mount_options+0x55/0x190 [ 427.525228][T15965] copy_mount_options+0x55/0x190 [ 427.525255][T15965] __x64_sys_mount+0x1ab/0x310 [ 427.525280][T15965] ? __pfx___x64_sys_mount+0x10/0x10 [ 427.525310][T15965] do_syscall_64+0x123/0x790 [ 427.525343][T15965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.525365][T15965] RIP: 0033:0x7fc7f279e159 [ 427.525394][T15965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.525418][T15965] RSP: 002b:00007fc7f3584028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 427.525441][T15965] RAX: ffffffffffffffda RBX: 00007fc7f2a26090 RCX: 00007fc7f279e159 [ 427.525459][T15965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.525473][T15965] RBP: 00007fc7f283506b R08: 0000200000000100 R09: 0000000000000000 [ 427.525488][T15965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.525502][T15965] R13: 00007fc7f2a26128 R14: 00007fc7f2a26090 R15: 00007ffc6a2e2468 [ 427.525533][T15965] [ 427.748631][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.756379][ T5605] Bluetooth: hci3: command tx timeout [ 427.781215][T15859] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 427.794548][T15859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.795474][T15859] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 427.822511][T15859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.834220][T15859] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 427.846298][T15859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.847483][T15859] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 427.907148][T15859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.910559][T15952] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 427.996927][T15952] batman_adv: batadv0: Removing interface: syzkaller0 [ 428.122383][T15859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.152246][T15859] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.177515][T14242] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.177597][T14242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.191675][T14242] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.191769][T14242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.214719][ T32] kauditd_printk_skb: 8 callbacks suppressed [ 428.214737][ T32] audit: type=1800 audit(2000000063.729:7810): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195512 res=0 errno=0 [ 428.252692][ T32] audit: type=1800 audit(2000000063.769:7811): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195527 res=0 errno=0 [ 428.330857][ T32] audit: type=1800 audit(2000000063.849:7812): pid=15988 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3835" name="modalias" dev="sysfs" ino=5871 res=0 errno=0 [ 429.065695][ T5791] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 429.138252][T15859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.226455][ T5791] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 429.227593][ T5791] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.227627][ T5791] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 429.227665][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.281643][ T32] audit: type=1800 audit(2000000064.799:7813): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195749 res=0 errno=0 [ 429.308325][ T32] audit: type=1800 audit(2000000064.829:7814): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=195778 res=0 errno=0 [ 429.309224][ T32] audit: type=1800 audit(2000000064.829:7815): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=195756 res=0 errno=0 [ 429.309394][ T5791] opticon 2-1:1.0: opticon converter detected [ 429.312219][ T32] audit: type=1800 audit(2000000064.829:7816): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=195757 res=0 errno=0 [ 429.314640][ T5791] usb 2-1: opticon converter now attached to ttyUSB0 [ 429.337209][ T32] audit: type=1800 audit(2000000064.849:7817): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=195758 res=0 errno=0 [ 429.357436][ T32] audit: type=1800 audit(2000000064.869:7818): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195798 res=0 errno=0 [ 429.367476][ T32] audit: type=1800 audit(2000000064.889:7819): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195814 res=0 errno=0 [ 429.567661][ T5735] usb 2-1: USB disconnect, device number 32 [ 429.653924][ T5735] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 429.654509][ T5735] opticon 2-1:1.0: device disconnected [ 429.800130][ T5605] Bluetooth: hci3: command tx timeout [ 429.851552][T16040] FAULT_INJECTION: forcing a failure. [ 429.851552][T16040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 429.851590][T16040] CPU: 0 UID: 0 PID: 16040 Comm: syz.0.3849 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.851615][T16040] Tainted: [L]=SOFTLOCKUP [ 429.851622][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 429.851635][T16040] Call Trace: [ 429.851643][T16040] [ 429.851652][T16040] dump_stack_lvl+0x100/0x190 [ 429.851699][T16040] should_fail_ex.cold+0x5/0xa [ 429.851729][T16040] ? prepare_alloc_pages+0x16d/0x5b0 [ 429.851767][T16040] should_fail_alloc_page+0xeb/0x140 [ 429.851796][T16040] prepare_alloc_pages+0x1f0/0x5b0 [ 429.851825][T16040] ? is_bpf_text_address+0x8a/0x1a0 [ 429.851857][T16040] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 429.851884][T16040] ? kernel_text_address+0x8d/0x100 [ 429.851919][T16040] ? __kernel_text_address+0xd/0x30 [ 429.851940][T16040] ? unwind_get_return_address+0x59/0xa0 [ 429.851969][T16040] ? arch_stack_walk+0xa6/0xf0 [ 429.852003][T16040] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 429.852025][T16040] ? stack_trace_save+0x8e/0xc0 [ 429.852047][T16040] ? __pfx_stack_trace_save+0x10/0x10 [ 429.852064][T16040] ? process_measurement+0x10d0/0x2350 [ 429.852098][T16040] ? stack_depot_save_flags+0x27/0x9f0 [ 429.852134][T16040] ? stack_trace_save+0x8e/0xc0 [ 429.852155][T16040] ? __pfx_stack_trace_save+0x10/0x10 [ 429.852178][T16040] ? kasan_save_stack+0x3f/0x50 [ 429.852203][T16040] ? kasan_save_stack+0x30/0x50 [ 429.852227][T16040] ? kasan_save_track+0x14/0x30 [ 429.852249][T16040] ? __kasan_slab_alloc+0x89/0x90 [ 429.852275][T16040] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 429.852302][T16040] ? asm_exc_page_fault+0x26/0x30 [ 429.852323][T16040] ? rep_movs_alternative+0x11/0xa0 [ 429.852354][T16040] ? _copy_to_user+0xa4/0xd0 [ 429.852389][T16040] ? do_pages_stat+0x5a9/0x850 [ 429.852415][T16040] ? kernel_move_pages+0x1013/0x1560 [ 429.852433][T16040] ? __x64_sys_move_pages+0xe0/0x1c0 [ 429.852450][T16040] ? do_syscall_64+0x123/0x790 [ 429.852468][T16040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.852500][T16040] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 429.852532][T16040] ? policy_nodemask+0xed/0x4f0 [ 429.852569][T16040] alloc_pages_mpol+0x201/0x550 [ 429.852601][T16040] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 429.852628][T16040] ? vma_is_special_huge+0x23f/0x2d0 [ 429.852655][T16040] ? __pfx_vma_is_special_huge+0x10/0x10 [ 429.852689][T16040] alloc_pages_noprof+0x1a/0x160 [ 429.852710][T16040] pte_alloc_one+0x1c/0x3d0 [ 429.852741][T16040] __do_fault+0x26c/0x440 [ 429.852770][T16040] do_fault+0x585/0x1830 [ 429.852794][T16040] ? __pfx_filemap_map_pages+0x10/0x10 [ 429.852823][T16040] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 429.852849][T16040] ? __pfx_do_fault+0x10/0x10 [ 429.852873][T16040] ? do_raw_spin_unlock+0x145/0x1e0 [ 429.852903][T16040] ? _raw_spin_unlock+0x28/0x50 [ 429.852931][T16040] ? __pmd_alloc+0x3fb/0x950 [ 429.852961][T16040] __handle_mm_fault+0x150b/0x2f60 [ 429.853004][T16040] ? __pfx___handle_mm_fault+0x10/0x10 [ 429.853037][T16040] ? __pfx_mt_find+0x10/0x10 [ 429.853074][T16040] ? find_vma+0xbf/0x140 [ 429.853097][T16040] ? __pfx_find_vma+0x10/0x10 [ 429.853124][T16040] handle_mm_fault+0x363/0xa20 [ 429.853160][T16040] do_user_addr_fault+0x745/0x12f0 [ 429.853196][T16040] exc_page_fault+0x6f/0xd0 [ 429.853219][T16040] asm_exc_page_fault+0x26/0x30 [ 429.853241][T16040] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 429.853274][T16040] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f [ 429.853295][T16040] RSP: 0018:ffffc90006befa98 EFLAGS: 00050202 [ 429.853313][T16040] RAX: 00000000000000fe RBX: 0000000000000004 RCX: 0000000000000004 [ 429.853328][T16040] RDX: 0000000000000001 RSI: ffffc90006befbe8 RDI: 0000000000000000 [ 429.853342][T16040] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000d7df7d [ 429.853356][T16040] R10: ffffc90006befbeb R11: 0000000000000000 R12: ffffc90006befbe8 [ 429.853371][T16040] R13: 0000000000000004 R14: 00007ffffffff000 R15: 0000000000000000 [ 429.853400][T16040] _copy_to_user+0xa4/0xd0 [ 429.853431][T16040] do_pages_stat+0x5a9/0x850 [ 429.853474][T16040] ? __pfx_do_pages_stat+0x10/0x10 [ 429.853523][T16040] ? find_held_lock+0x2b/0x80 [ 429.853574][T16040] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 429.853610][T16040] ? lockdep_hardirqs_on+0x7d/0x110 [ 429.853632][T16040] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 429.853667][T16040] kernel_move_pages+0x1013/0x1560 [ 429.853694][T16040] ? __pfx_do_futex+0x10/0x10 [ 429.853725][T16040] ? __pfx_kernel_move_pages+0x10/0x10 [ 429.853752][T16040] ? __x64_sys_futex+0x34f/0x4d0 [ 429.853780][T16040] ? __x64_sys_futex+0x358/0x4d0 [ 429.853810][T16040] ? xfd_validate_state+0x129/0x190 [ 429.853840][T16040] __x64_sys_move_pages+0xe0/0x1c0 [ 429.853863][T16040] ? do_syscall_64+0xae/0x790 [ 429.853887][T16040] ? lockdep_hardirqs_on+0x7d/0x110 [ 429.853909][T16040] do_syscall_64+0x123/0x790 [ 429.853932][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.853955][T16040] RIP: 0033:0x7f5b0df9e159 [ 429.853970][T16040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.853995][T16040] RSP: 002b:00007f5b0ef23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 429.854018][T16040] RAX: ffffffffffffffda RBX: 00007f5b0e225fa0 RCX: 00007f5b0df9e159 [ 429.854033][T16040] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 429.854047][T16040] RBP: 00007f5b0e03506b R08: 0000000000000000 R09: 0000000000000000 [ 429.854062][T16040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.854074][T16040] R13: 00007f5b0e226038 R14: 00007f5b0e225fa0 R15: 00007ffc0ad59a48 [ 429.854098][T16040] [ 430.099106][T15859] veth0_vlan: entered promiscuous mode [ 430.154761][T15859] veth1_vlan: entered promiscuous mode [ 430.187650][T16046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3851'. [ 430.308571][T15859] veth0_macvtap: entered promiscuous mode [ 430.321570][T16046] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3851'. [ 430.321593][T16046] netlink: 'syz.0.3851': attribute type 6 has an invalid length. [ 430.321608][T16046] netlink: 'syz.0.3851': attribute type 5 has an invalid length. [ 430.321621][T16046] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3851'. [ 430.329176][T15859] veth1_macvtap: entered promiscuous mode [ 430.379652][T15859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.400850][T15859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.475244][T14243] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.480945][T11894] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.481030][T11894] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.481064][T11894] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.520911][T16050] xt_hashlimit: size too large, truncated to 1048576 [ 430.521381][T16050] xt_hashlimit: max too large, truncated to 1048576 [ 430.650729][ T3266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.650753][ T3266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.731016][ T3266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.731039][ T3266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.981459][T16062] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 431.506538][T16086] overlayfs: failed to clone upperpath [ 431.555718][ T5853] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 431.600499][T16088] overlayfs: failed to clone lowerpath [ 431.706306][ T5853] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.707495][ T5853] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.711124][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.711150][ T5853] usb 1-1: Product: syz [ 431.711167][ T5853] usb 1-1: Manufacturer: syz [ 431.711183][ T5853] usb 1-1: SerialNumber: syz [ 431.876114][ T5605] Bluetooth: hci3: command tx timeout [ 432.211990][T16113] overlayfs: failed to clone upperpath [ 432.427842][T16123] loop5: detected capacity change from 0 to 7 [ 432.433567][T16123] Dev loop5: unable to read RDB block 7 [ 432.433609][T16123] loop5: AHDI p1 p2 p3 [ 432.433630][T16123] loop5: partition table partially beyond EOD, truncated [ 432.460164][T16123] loop5: p1 start 1818582900 is beyond EOD, truncated [ 432.460194][T16123] loop5: p3 start 335544320 is beyond EOD, truncated [ 432.635211][T16128] bridge0: port 4(syzkaller0) entered blocking state [ 432.635388][T16128] bridge0: port 4(syzkaller0) entered disabled state [ 432.638278][T16128] syzkaller0: entered allmulticast mode [ 432.641881][T16128] syzkaller0: entered promiscuous mode [ 432.655757][ T1117] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.655797][ T1117] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.655829][ T1117] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.655861][ T1117] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.655893][ T1117] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.669909][ T1117] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.669947][ T1117] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.669980][ T1117] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.786013][T16132] xt_hashlimit: size too large, truncated to 1048576 [ 432.817370][ T5853] cdc_ncm 1-1:1.0: bind() failure [ 432.825177][ T5853] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 432.825221][ T5853] cdc_ncm 1-1:1.1: bind() failure [ 432.874395][ T5853] usb 1-1: USB disconnect, device number 35 [ 433.270627][T16142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.289164][ T32] kauditd_printk_skb: 22 callbacks suppressed [ 433.289183][ T32] audit: type=1800 audit(2000000068.809:7842): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196547 res=0 errno=0 [ 433.327849][T16144] fuse: fd is not a fuse device [ 433.525426][T16153] binder: 16152:16153 ioctl c0306201 200000000040 returned -22 [ 433.670609][T16164] KVM: debugfs: duplicate directory 16164-5 [ 434.087417][ T32] audit: type=1400 audit(2000000069.609:7843): avc: denied { write } for pid=16150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.372804][ T32] audit: type=1400 audit(2000000069.889:7844): avc: denied { write } for pid=16183 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.678201][ T32] audit: type=1326 audit(2000000070.209:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.8.3904" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6db9e159 code=0x7ffc0000 [ 434.678251][ T32] audit: type=1326 audit(2000000070.209:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.8.3904" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6db9e159 code=0x7ffc0000 [ 434.688611][ T32] audit: type=1326 audit(2000000070.209:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.8.3904" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6db9e159 code=0x7ffc0000 [ 434.689042][ T32] audit: type=1326 audit(2000000070.209:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.8.3904" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6db9e159 code=0x7ffc0000 [ 434.708824][ T32] audit: type=1326 audit(2000000070.229:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.8.3904" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3d6db9e159 code=0x7ffc0000 [ 434.708887][ T32] audit: type=1326 audit(2000000070.229:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.8.3904" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6db9e159 code=0x7ffc0000 [ 434.708928][ T32] audit: type=1326 audit(2000000070.229:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16196 comm="syz.8.3904" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6db9e159 code=0x7ffc0000 [ 435.076866][T16211] syzkaller0: left allmulticast mode [ 435.077017][T16211] syzkaller0: left promiscuous mode [ 435.077289][T16211] bridge0: port 4(syzkaller0) entered disabled state [ 435.144631][T16211] veth0: left allmulticast mode [ 435.144739][T16211] veth0: left promiscuous mode [ 435.144955][T16211] bridge0: port 3(veth0) entered disabled state [ 435.195387][T16211] bridge_slave_1: left allmulticast mode [ 435.195420][T16211] bridge_slave_1: left promiscuous mode [ 435.207246][T16211] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.227846][T16211] bridge_slave_0: left allmulticast mode [ 435.227876][T16211] bridge_slave_0: left promiscuous mode [ 435.228098][T16211] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.333285][T16226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3910'. [ 435.348323][T16225] netlink: 'syz.4.3911': attribute type 1 has an invalid length. [ 435.387395][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3910'. [ 435.573768][T16235] 9p: Bad value for 'wfdno' [ 435.674697][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3915'. [ 435.815910][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3915'. [ 435.826021][T11894] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.826068][T11894] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.826102][T11894] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.826134][T11894] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.484607][T16279] bridge0: port 3(syz_tun) entered blocking state [ 436.484788][T16279] bridge0: port 3(syz_tun) entered disabled state [ 436.486454][T16279] syz_tun: entered allmulticast mode [ 436.493955][T16279] syz_tun: entered promiscuous mode [ 436.511692][T16279] bridge0: port 3(syz_tun) entered blocking state [ 436.511841][T16279] bridge0: port 3(syz_tun) entered forwarding state [ 436.564948][T16279] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3926'. [ 436.564974][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3926'. [ 436.841248][T16284] ip_tables: iptables: counters copy to user failed while replacing table [ 437.058823][T16289] bridge0: port 3(syz_tun) entered disabled state [ 437.059392][T16289] syz_tun: left allmulticast mode [ 437.059417][T16289] syz_tun: left promiscuous mode [ 437.059628][T16289] bridge0: port 3(syz_tun) entered disabled state [ 437.146652][T16289] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 438.003291][T16327] jffs2: notice: (16327) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 438.985119][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3949'. [ 439.422993][T16367] FAULT_INJECTION: forcing a failure. [ 439.422993][T16367] name failslab, interval 1, probability 0, space 0, times 0 [ 439.423044][T16367] CPU: 1 UID: 0 PID: 16367 Comm: syz.1.3954 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.423077][T16367] Tainted: [L]=SOFTLOCKUP [ 439.423086][T16367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 439.423103][T16367] Call Trace: [ 439.423113][T16367] [ 439.423122][T16367] dump_stack_lvl+0x100/0x190 [ 439.423171][T16367] should_fail_ex.cold+0x5/0xa [ 439.423204][T16367] should_failslab+0xc2/0x120 [ 439.423236][T16367] __kvmalloc_node_noprof+0x113/0x9b0 [ 439.423270][T16367] ? bucket_table_alloc.isra.0+0x88/0x460 [ 439.423305][T16367] bucket_table_alloc.isra.0+0x88/0x460 [ 439.423335][T16367] __rhashtable_init_noprof+0x43a/0x890 [ 439.423365][T16367] __rhltable_init_noprof+0x28/0x70 [ 439.423389][T16367] nf_tables_newtable+0xf30/0x1a90 [ 439.423433][T16367] ? __pfx_nf_tables_newtable+0x10/0x10 [ 439.423463][T16367] ? net_generic+0x25/0x2a0 [ 439.423501][T16367] ? __nla_parse+0x40/0x60 [ 439.423528][T16367] nfnetlink_rcv_batch+0x1410/0x2880 [ 439.423569][T16367] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 439.423589][T16367] ? __pfx___handle_mm_fault+0x10/0x10 [ 439.423623][T16367] ? lock_acquire+0x1d1/0x380 [ 439.423646][T16367] ? avc_has_perm_noaudit+0x56/0x470 [ 439.423695][T16367] ? avc_has_perm_noaudit+0x145/0x470 [ 439.423765][T16367] ? __nla_parse+0x40/0x60 [ 439.423794][T16367] nfnetlink_rcv+0x3bd/0x440 [ 439.423816][T16367] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 439.423846][T16367] netlink_unicast+0x585/0x850 [ 439.423878][T16367] ? __pfx_netlink_unicast+0x10/0x10 [ 439.423914][T16367] netlink_sendmsg+0x8b0/0xda0 [ 439.423947][T16367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.423978][T16367] ? selinux_socket_sendmsg+0x198/0x2f0 [ 439.424010][T16367] ____sys_sendmsg+0xa4d/0xbe0 [ 439.424041][T16367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.424076][T16367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.424117][T16367] ___sys_sendmsg+0x190/0x1e0 [ 439.424148][T16367] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.424173][T16367] ? futex_wait+0x11e/0x370 [ 439.424209][T16367] ? find_held_lock+0x2b/0x80 [ 439.424259][T16367] __sys_sendmsg+0x160/0x210 [ 439.424295][T16367] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.424342][T16367] do_syscall_64+0x123/0x790 [ 439.424371][T16367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.424394][T16367] RIP: 0033:0x7ff2fbb9e159 [ 439.424414][T16367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.424436][T16367] RSP: 002b:00007ff2fca30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.424460][T16367] RAX: ffffffffffffffda RBX: 00007ff2fbe25fa0 RCX: 00007ff2fbb9e159 [ 439.424479][T16367] RDX: 000000000000c860 RSI: 0000200000007dc0 RDI: 0000000000000004 [ 439.424494][T16367] RBP: 00007ff2fbc3506b R08: 0000000000000000 R09: 0000000000000000 [ 439.424510][T16367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.424523][T16367] R13: 00007ff2fbe26038 R14: 00007ff2fbe25fa0 R15: 00007ffc82260888 [ 439.424554][T16367] [ 439.496016][ T32] kauditd_printk_skb: 34 callbacks suppressed [ 439.496036][ T32] audit: type=1800 audit(2000000075.009:7886): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196960 res=0 errno=0 [ 440.202960][T16383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3960'. [ 440.331812][T16391] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 440.381349][T16388] IPVS: stopping backup sync thread 16391 ... [ 440.550658][T16392] syzkaller1: entered promiscuous mode [ 440.550686][T16392] syzkaller1: entered allmulticast mode [ 440.706304][T14103] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 440.759348][T16404] FAULT_INJECTION: forcing a failure. [ 440.759348][T16404] name failslab, interval 1, probability 0, space 0, times 0 [ 440.759390][T16404] CPU: 1 UID: 0 PID: 16404 Comm: syz.8.3969 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.759421][T16404] Tainted: [L]=SOFTLOCKUP [ 440.759429][T16404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 440.759443][T16404] Call Trace: [ 440.759452][T16404] [ 440.759461][T16404] dump_stack_lvl+0x100/0x190 [ 440.759503][T16404] should_fail_ex.cold+0x5/0xa [ 440.759534][T16404] should_failslab+0xc2/0x120 [ 440.759565][T16404] kmem_cache_alloc_noprof+0x92/0x6a0 [ 440.759594][T16404] ? alloc_empty_file+0x5b/0x1c0 [ 440.759631][T16404] alloc_empty_file+0x5b/0x1c0 [ 440.759663][T16404] alloc_file_pseudo+0x183/0x290 [ 440.759695][T16404] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 440.759724][T16404] ? alloc_fd+0x471/0x7a0 [ 440.759755][T16404] ? do_raw_spin_unlock+0x145/0x1e0 [ 440.759787][T16404] __anon_inode_getfile+0xe8/0x280 [ 440.759816][T16404] anon_inode_getfile_fmode+0x37/0xa0 [ 440.759842][T16404] do_eventfd+0x159/0x2b0 [ 440.759871][T16404] __x64_sys_eventfd2+0x53/0x80 [ 440.759900][T16404] do_syscall_64+0x123/0x790 [ 440.759927][T16404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.759949][T16404] RIP: 0033:0x7f3d6db9e159 [ 440.759970][T16404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.759987][T16404] RSP: 002b:00007f3d6ea1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 440.760006][T16404] RAX: ffffffffffffffda RBX: 00007f3d6de25fa0 RCX: 00007f3d6db9e159 [ 440.760018][T16404] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 00000000fffffffe [ 440.760030][T16404] RBP: 00007f3d6dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 440.760043][T16404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.760056][T16404] R13: 00007f3d6de26038 R14: 00007f3d6de25fa0 R15: 00007fff468d0628 [ 440.760083][T16404] [ 440.856509][T14103] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 440.857613][T14103] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 440.857655][T14103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.857684][T14103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.857708][T14103] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 440.863988][T14103] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 440.864019][T14103] usb 2-1: Manufacturer: syz [ 440.873334][T14103] usb 2-1: config 0 descriptor?? [ 440.876856][ T32] audit: type=1800 audit(2000000076.399:7887): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197064 res=0 errno=0 [ 440.931035][ T32] audit: type=1800 audit(2000000076.459:7888): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=197094 res=0 errno=0 [ 440.942640][ T32] audit: type=1800 audit(2000000076.459:7889): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=197071 res=0 errno=0 [ 440.960809][ T32] audit: type=1800 audit(2000000076.479:7890): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=197072 res=0 errno=0 [ 441.340145][T14103] appleir 0003:05AC:8243.0017: item fetching failed at offset 0/1 [ 441.343621][T14103] appleir 0003:05AC:8243.0017: parse failed [ 441.343732][T14103] appleir 0003:05AC:8243.0017: probe with driver appleir failed with error -22 [ 441.349844][ T32] audit: type=1800 audit(2000000076.869:7891): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=197093 res=0 errno=0 [ 441.354554][ T32] audit: type=1800 audit(2000000076.869:7892): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=197073 res=0 errno=0 [ 441.394177][ T32] audit: type=1800 audit(2000000076.909:7893): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197114 res=0 errno=0 [ 441.403431][ T32] audit: type=1800 audit(2000000076.919:7894): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197132 res=0 errno=0 [ 441.631855][T14103] usb 2-1: USB disconnect, device number 33 [ 442.301821][ T32] audit: type=1326 audit(2000000077.819:7895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.0.3981" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b0df9e159 code=0x0 [ 442.525903][ T5697] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 442.685643][ T5697] usb 2-1: Using ep0 maxpacket: 32 [ 442.686718][ T5697] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 442.690661][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.695092][ T5697] usb 2-1: config 0 descriptor?? [ 442.929306][ T5697] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 442.963242][ T5697] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 442.964298][ T5697] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 442.964351][ T5697] usb 2-1: media controller created [ 443.002170][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.014275][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.307248][T14103] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 443.467164][T14103] usb 9-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 443.472298][T14103] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.472353][T14103] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.518222][ T5697] az6027: usb out operation failed. (-71) [ 443.518568][ T5697] az6027: usb out operation failed. (-71) [ 443.518582][ T5697] stb0899_attach: Driver disabled by Kconfig [ 443.518594][ T5697] az6027: no front-end attached [ 443.518594][ T5697] [ 443.520335][ T5697] az6027: usb out operation failed. (-71) [ 443.520353][ T5697] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 443.589491][ T5697] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 443.608489][ T5697] dvb-usb: schedule remote query interval to 400 msecs. [ 443.608512][ T5697] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 443.644599][ T5697] usb 2-1: USB disconnect, device number 34 [ 443.778662][ T5697] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 443.880999][T16479] netlink: 'syz.0.3994': attribute type 1 has an invalid length. [ 443.925239][T16479] bond2: entered promiscuous mode [ 443.928034][T16479] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.942106][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3997'. [ 443.947398][T14103] wacom 0003:056A:033B.0018: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 443.980341][T14103] wacom 0003:056A:033B.0018: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.8-1/input0 [ 443.993812][T14103] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/0003:056A:033B.0018/input/input41 [ 444.052260][T16479] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.052639][T16479] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 444.052662][T16479] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 444.089672][T16485] udevd[16485]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 444.096523][T16479] bond2: (slave ip6gre1): making interface the new active one [ 444.114219][T16479] ip6gre1: entered promiscuous mode [ 444.124447][T16479] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 444.395204][ T5735] usb 9-1: USB disconnect, device number 2 [ 444.570743][ T32] kauditd_printk_skb: 46 callbacks suppressed [ 444.570764][ T32] audit: type=1800 audit(2000000080.089:7942): pid=10069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=27440 res=0 errno=0 [ 445.125508][T16522] FAULT_INJECTION: forcing a failure. [ 445.125508][T16522] name failslab, interval 1, probability 0, space 0, times 0 [ 445.125930][T16522] CPU: 0 UID: 0 PID: 16522 Comm: syz.7.4011 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.125966][T16522] Tainted: [L]=SOFTLOCKUP [ 445.125975][T16522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 445.125990][T16522] Call Trace: [ 445.125998][T16522] [ 445.126007][T16522] dump_stack_lvl+0x100/0x190 [ 445.126053][T16522] should_fail_ex.cold+0x5/0xa [ 445.126093][T16522] should_failslab+0xc2/0x120 [ 445.126129][T16522] __kmalloc_noprof+0xfc/0x840 [ 445.126156][T16522] ? x509_fabricate_name.isra.0+0x5ea/0xa10 [ 445.126191][T16522] x509_fabricate_name.isra.0+0x5ea/0xa10 [ 445.126230][T16522] x509_note_issuer+0xf9/0x210 [ 445.126257][T16522] asn1_ber_decoder+0xd0c/0x2170 [ 445.126316][T16522] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 445.126357][T16522] ? kasan_save_track+0x14/0x30 [ 445.126383][T16522] ? __kasan_kmalloc+0xaa/0xb0 [ 445.126410][T16522] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 445.126433][T16522] ? x509_cert_parse+0x162/0x910 [ 445.126461][T16522] x509_cert_parse+0x1c9/0x910 [ 445.126488][T16522] x509_key_preparse+0x65/0x9c0 [ 445.126518][T16522] asymmetric_key_preparse+0xce/0x1d0 [ 445.126562][T16522] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 445.126589][T16522] __key_create_or_update+0x463/0xe30 [ 445.126628][T16522] ? __pfx___key_create_or_update+0x10/0x10 [ 445.126659][T16522] ? lookup_user_key+0x3f3/0x1300 [ 445.126703][T16522] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 445.126737][T16522] key_create_or_update+0x42/0x60 [ 445.126769][T16522] __do_sys_add_key+0x2e8/0x460 [ 445.126795][T16522] ? __pfx___do_sys_add_key+0x10/0x10 [ 445.126814][T16522] ? ksys_write+0x1ac/0x250 [ 445.126856][T16522] do_syscall_64+0x123/0x790 [ 445.126888][T16522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.126914][T16522] RIP: 0033:0x7fc7f279e159 [ 445.126935][T16522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.126962][T16522] RSP: 002b:00007fc7f35a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 445.126986][T16522] RAX: ffffffffffffffda RBX: 00007fc7f2a25fa0 RCX: 00007fc7f279e159 [ 445.127004][T16522] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 445.127020][T16522] RBP: 00007fc7f283506b R08: ffffffffffffffff R09: 0000000000000000 [ 445.127035][T16522] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 445.127049][T16522] R13: 00007fc7f2a26038 R14: 00007fc7f2a25fa0 R15: 00007ffc6a2e2468 [ 445.127080][T16522] [ 445.458146][T16532] netlink: 'syz.1.4017': attribute type 3 has an invalid length. [ 445.458167][T16532] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4017'. [ 446.056013][ T5735] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 446.143013][T16550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4025'. [ 446.206514][ T5735] usb 1-1: Using ep0 maxpacket: 16 [ 446.208862][ T5735] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 446.211379][ T5735] usb 1-1: config 0 has no interfaces? [ 446.213943][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.213970][ T5735] usb 1-1: Product: syz [ 446.213987][ T5735] usb 1-1: Manufacturer: syz [ 446.214013][ T5735] usb 1-1: SerialNumber: syz [ 446.238625][ T5735] usb 1-1: config 0 descriptor?? [ 446.241976][ T32] audit: type=1800 audit(2000000081.759:7943): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198076 res=0 errno=0 [ 446.260194][ T32] audit: type=1800 audit(2000000081.779:7944): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=198108 res=0 errno=0 [ 446.272372][ T32] audit: type=1800 audit(2000000081.779:7945): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=198083 res=0 errno=0 [ 446.279424][ T32] audit: type=1800 audit(2000000081.789:7946): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=198084 res=0 errno=0 [ 446.292396][ T32] audit: type=1800 audit(2000000081.809:7947): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=198105 res=0 errno=0 [ 446.304308][ T32] audit: type=1800 audit(2000000081.819:7948): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=198106 res=0 errno=0 [ 446.304356][ T32] audit: type=1800 audit(2000000081.819:7949): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=198085 res=0 errno=0 [ 446.309311][ T32] audit: type=1800 audit(2000000081.829:7950): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=198107 res=0 errno=0 [ 446.479085][T11894] tipc: Subscription rejected, illegal request [ 446.492788][ T5697] usb 1-1: USB disconnect, device number 36 [ 447.594461][ T32] audit: type=1800 audit(2000000083.109:7951): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198374 res=0 errno=0 [ 447.624142][T16612] X25: received unknown 00 with LCI 000 [ 448.965780][T16665] input: syz0 as /devices/virtual/input/input44 [ 449.175012][T16669] netlink: 'syz.8.4061': attribute type 3 has an invalid length. [ 449.266915][T16672] FAULT_INJECTION: forcing a failure. [ 449.266915][T16672] name failslab, interval 1, probability 0, space 0, times 0 [ 449.266961][T16672] CPU: 0 UID: 0 PID: 16672 Comm: syz.7.4062 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.266997][T16672] Tainted: [L]=SOFTLOCKUP [ 449.267005][T16672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 449.267022][T16672] Call Trace: [ 449.267037][T16672] [ 449.267048][T16672] dump_stack_lvl+0x100/0x190 [ 449.267095][T16672] should_fail_ex.cold+0x5/0xa [ 449.267128][T16672] should_failslab+0xc2/0x120 [ 449.267161][T16672] __kvmalloc_node_noprof+0x113/0x9b0 [ 449.267194][T16672] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 449.267227][T16672] v4l2_ctrl_new+0x4a6/0x23a0 [ 449.267260][T16672] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 449.267299][T16672] v4l2_ctrl_new_std+0x1bb/0x290 [ 449.267331][T16672] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 449.267359][T16672] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 449.267393][T16672] ? media_request_object_init+0x105/0x180 [ 449.267431][T16672] vicodec_open+0x2a6/0xf70 [ 449.267457][T16672] ? kobject_get_unless_zero+0xe0/0x200 [ 449.267494][T16672] v4l2_open+0x1d2/0x490 [ 449.267516][T16672] ? __pfx_v4l2_open+0x10/0x10 [ 449.267536][T16672] chrdev_open+0x234/0x6a0 [ 449.267566][T16672] ? __pfx_chrdev_open+0x10/0x10 [ 449.267595][T16672] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 449.267624][T16672] do_dentry_open+0x6ab/0x14d0 [ 449.267648][T16672] ? __pfx_chrdev_open+0x10/0x10 [ 449.267682][T16672] vfs_open+0x82/0x3f0 [ 449.267715][T16672] path_openat+0x19fa/0x2440 [ 449.267749][T16672] ? __pfx_path_openat+0x10/0x10 [ 449.267786][T16672] do_file_open+0x20e/0x430 [ 449.267816][T16672] ? __pfx_do_file_open+0x10/0x10 [ 449.267863][T16672] ? _raw_spin_unlock+0x28/0x50 [ 449.267894][T16672] ? alloc_fd+0x471/0x7a0 [ 449.267931][T16672] do_sys_openat2+0x10f/0x1e0 [ 449.267962][T16672] ? __pfx_do_sys_openat2+0x10/0x10 [ 449.267991][T16672] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 449.268036][T16672] __x64_sys_openat+0x12d/0x210 [ 449.268075][T16672] ? __pfx___x64_sys_openat+0x10/0x10 [ 449.268124][T16672] do_syscall_64+0x123/0x790 [ 449.268154][T16672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.268177][T16672] RIP: 0033:0x7fc7f275e98e [ 449.268196][T16672] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 449.268218][T16672] RSP: 002b:00007fc7f35a4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 449.268243][T16672] RAX: ffffffffffffffda RBX: 00007fc7f35a56c0 RCX: 00007fc7f275e98e [ 449.268259][T16672] RDX: 0000000000000002 RSI: 00007fc7f35a4c00 RDI: ffffffffffffff9c [ 449.268275][T16672] RBP: 00007fc7f35a4c00 R08: 0000000000000000 R09: 0000000000000000 [ 449.268290][T16672] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 449.268304][T16672] R13: 00007fc7f2a26038 R14: 00007fc7f2a25fa0 R15: 00007ffc6a2e2468 [ 449.268334][T16672] [ 449.534484][T16680] netlink: 'syz.8.4064': attribute type 7 has an invalid length. [ 449.534507][T16680] netlink: 'syz.8.4064': attribute type 8 has an invalid length. [ 449.534522][T16680] netlink: 'syz.8.4064': attribute type 9 has an invalid length. [ 449.677547][T16682] FAULT_INJECTION: forcing a failure. [ 449.677547][T16682] name failslab, interval 1, probability 0, space 0, times 0 [ 449.677596][T16682] CPU: 0 UID: 0 PID: 16682 Comm: syz.0.4066 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.677634][T16682] Tainted: [L]=SOFTLOCKUP [ 449.677644][T16682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 449.677659][T16682] Call Trace: [ 449.677668][T16682] [ 449.677677][T16682] dump_stack_lvl+0x100/0x190 [ 449.677724][T16682] should_fail_ex.cold+0x5/0xa [ 449.677756][T16682] should_failslab+0xc2/0x120 [ 449.677792][T16682] kmem_cache_alloc_noprof+0x92/0x6a0 [ 449.677821][T16682] ? anon_vma_clone+0x2b3/0xca0 [ 449.677859][T16682] anon_vma_clone+0x2b3/0xca0 [ 449.677892][T16682] __split_vma+0x750/0x1de0 [ 449.677918][T16682] ? __pfx___split_vma+0x10/0x10 [ 449.677938][T16682] ? mas_next_slot+0xc05/0x13a0 [ 449.677982][T16682] vms_gather_munmap_vmas+0x3a5/0x1720 [ 449.678012][T16682] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 449.678038][T16682] ? __lock_acquire+0x5c0/0x1f40 [ 449.678066][T16682] ? do_raw_spin_unlock+0x145/0x1e0 [ 449.678096][T16682] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 449.678131][T16682] ? rcu_is_watching+0x13/0xc0 [ 449.678162][T16682] ? trace_hrtimer_start+0x77/0x220 [ 449.678197][T16682] do_vmi_align_munmap+0x287/0x5f0 [ 449.678224][T16682] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 449.678246][T16682] ? find_held_lock+0x2b/0x80 [ 449.678275][T16682] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 449.678309][T16682] ? lockdep_hardirqs_on+0x7d/0x110 [ 449.678332][T16682] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 449.678382][T16682] ? mas_walk+0x260/0x310 [ 449.678409][T16682] do_vmi_munmap+0x1f8/0x3e0 [ 449.678437][T16682] do_munmap+0xba/0x100 [ 449.678465][T16682] ? __pfx_do_munmap+0x10/0x10 [ 449.678515][T16682] ? check_prep_vma+0x2d5/0x1080 [ 449.678545][T16682] mremap_to+0x2b3/0x4c0 [ 449.678571][T16682] ? __pfx_mremap_to+0x10/0x10 [ 449.678595][T16682] ? __pfx_down_write_killable+0x10/0x10 [ 449.678633][T16682] __do_sys_mremap+0xc70/0x1780 [ 449.678654][T16682] ? futex_wait+0x11e/0x370 [ 449.678677][T16682] ? __pfx_futex_wait+0x10/0x10 [ 449.678706][T16682] ? __pfx___do_sys_mremap+0x10/0x10 [ 449.678733][T16682] ? rcu_read_lock_any_held+0x6a/0x90 [ 449.678766][T16682] ? ksys_write+0x190/0x250 [ 449.678793][T16682] ? do_futex+0x190/0x440 [ 449.678819][T16682] ? __pfx_do_futex+0x10/0x10 [ 449.678860][T16682] ? xfd_validate_state+0x129/0x190 [ 449.678896][T16682] do_syscall_64+0x123/0x790 [ 449.678921][T16682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.678942][T16682] RIP: 0033:0x7f5b0df9e159 [ 449.678965][T16682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.678992][T16682] RSP: 002b:00007f5b0ef23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 449.679013][T16682] RAX: ffffffffffffffda RBX: 00007f5b0e225fa0 RCX: 00007f5b0df9e159 [ 449.679027][T16682] RDX: 0000000000001000 RSI: 0000000000003000 RDI: 000020000046b000 [ 449.679043][T16682] RBP: 00007f5b0e03506b R08: 0000200000769000 R09: 0000000000000000 [ 449.679055][T16682] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 449.679068][T16682] R13: 00007f5b0e226038 R14: 00007f5b0e225fa0 R15: 00007ffc0ad59a48 [ 449.679092][T16682] [ 449.799731][T16687] ip_tables: iptables: counters copy to user failed while replacing table [ 449.802357][T16687] tipc: Started in network mode [ 449.802387][T16687] tipc: Node identity 7f000001, cluster identity 4711 [ 450.032302][T16687] tipc: Enabled bearer , priority 10 [ 450.059206][T16695] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 450.489501][ T32] kauditd_printk_skb: 15 callbacks suppressed [ 450.489522][ T32] audit: type=1400 audit(2000000086.009:7967): avc: denied { write } for pid=16679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.580156][T16715] tipc: Started in network mode [ 450.580194][T16715] tipc: Node identity ac1414aa, cluster identity 4711 [ 450.598999][ T32] audit: type=1800 audit(2000000086.119:7968): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198624 res=0 errno=0 [ 450.632264][T16715] tipc: New replicast peer: 172.20.20.187 [ 450.722479][T16715] tipc: Enabled bearer , priority 10 [ 450.875777][ T32] audit: type=1400 audit(2000000086.399:7969): avc: denied { write } for pid=16723 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.042683][T16733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4081'. [ 451.152990][T14103] tipc: Node number set to 2130706433 [ 451.300245][ T32] audit: type=1400 audit(2000000086.819:7970): avc: denied { write } for pid=16735 comm="syz.8.4082" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 451.752704][T14103] tipc: Node number set to 2886997162 [ 451.834455][T16764] syz_tun: entered allmulticast mode [ 451.965734][T16763] syz_tun: left allmulticast mode [ 452.282354][ T32] audit: type=1400 audit(2000000087.799:7971): avc: denied { write } for pid=16736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.380381][T16772] [ 452.382749][T16772] ====================================================== [ 452.389771][T16772] WARNING: possible circular locking dependency detected [ 452.396781][T16772] syzkaller #0 Tainted: G L [ 452.402743][T16772] ------------------------------------------------------ [ 452.409740][T16772] syz.7.4090/16772 is trying to acquire lock: [ 452.415793][T16772] ffffffff8efcb2a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 [ 452.425197][T16772] [ 452.425197][T16772] but task is already holding lock: [ 452.432550][T16772] ffff8880287e0d30 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 452.441629][T16772] [ 452.441629][T16772] which lock already depends on the new lock. [ 452.441629][T16772] [ 452.452050][T16772] [ 452.452050][T16772] the existing dependency chain (in reverse order) is: [ 452.461048][T16772] [ 452.461048][T16772] -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: [ 452.468703][T16772] lock_acquire+0x1d1/0x380 [ 452.473724][T16772] __mutex_lock+0x1a4/0x1bd0 [ 452.478818][T16772] blkcg_activate_policy+0x34f/0xbf0 [ 452.484608][T16772] blk_throtl_init+0x39a/0x5b0 [ 452.489880][T16772] tg_set_conf.isra.0+0x252/0x500 [ 452.495425][T16772] cgroup_file_write+0x1e6/0x8a0 [ 452.500884][T16772] kernfs_fop_write_iter+0x3e0/0x5f0 [ 452.506681][T16772] vfs_write+0x6af/0x1050 [ 452.511518][T16772] ksys_write+0x12a/0x250 [ 452.516367][T16772] do_syscall_64+0x123/0x790 [ 452.521467][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.527863][T16772] [ 452.527863][T16772] -> #1 (&q->q_usage_counter(io)#73){++++}-{0:0}: [ 452.536457][T16772] lock_acquire+0x1d1/0x380 [ 452.541474][T16772] blk_alloc_queue+0x610/0x790 [ 452.546746][T16772] blk_mq_alloc_queue+0x174/0x290 [ 452.552290][T16772] __blk_mq_alloc_disk+0x29/0x120 [ 452.557836][T16772] loop_add+0x498/0xb60 [ 452.562503][T16772] loop_probe+0x70/0xa0 [ 452.567161][T16772] blk_probe_dev+0x149/0x1e0 [ 452.572257][T16772] blk_request_module+0x16/0xc0 [ 452.577606][T16772] blkdev_get_no_open+0x9b/0xf0 [ 452.582962][T16772] bdev_file_open_by_dev+0x70/0x210 [ 452.588663][T16772] dm_get_table_device+0x3dc/0x830 [ 452.594280][T16772] dm_get_device+0x525/0x7e0 [ 452.599374][T16772] multipath_ctr+0x1f50/0x2470 [ 452.604650][T16772] dm_table_add_target+0x58b/0xee0 [ 452.610267][T16772] table_load+0x3b9/0x7b0 [ 452.615114][T16772] ctl_ioctl+0x4d2/0xcc0 [ 452.619861][T16772] dm_ctl_ioctl+0x22/0x30 [ 452.624703][T16772] __x64_sys_ioctl+0x18e/0x210 [ 452.629973][T16772] do_syscall_64+0x123/0x790 [ 452.635066][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.641466][T16772] [ 452.641466][T16772] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 452.648660][T16772] check_prev_add+0xeb/0xe60 [ 452.653755][T16772] __lock_acquire+0x1528/0x1f40 [ 452.659108][T16772] lock_acquire+0x1d1/0x380 [ 452.664147][T16772] fs_reclaim_acquire+0xc4/0x100 [ 452.669605][T16772] kmem_cache_alloc_noprof+0x63/0x6a0 [ 452.675490][T16772] __radix_tree_preload+0x333/0x820 [ 452.681212][T16772] blkg_conf_prep+0x489/0xf10 [ 452.686417][T16772] tg_set_conf.isra.0+0x1ed/0x500 [ 452.691952][T16772] cgroup_file_write+0x1e6/0x8a0 [ 452.697400][T16772] kernfs_fop_write_iter+0x3e0/0x5f0 [ 452.703197][T16772] vfs_write+0x6af/0x1050 [ 452.708036][T16772] ksys_write+0x12a/0x250 [ 452.712877][T16772] do_syscall_64+0x123/0x790 [ 452.717971][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.724383][T16772] [ 452.724383][T16772] other info that might help us debug this: [ 452.724383][T16772] [ 452.734614][T16772] Chain exists of: [ 452.734614][T16772] fs_reclaim --> &q->q_usage_counter(io)#73 --> &q->blkcg_mutex [ 452.734614][T16772] [ 452.748159][T16772] Possible unsafe locking scenario: [ 452.748159][T16772] [ 452.755590][T16772] CPU0 CPU1 [ 452.760944][T16772] ---- ---- [ 452.766286][T16772] lock(&q->blkcg_mutex); [ 452.770682][T16772] lock(&q->q_usage_counter(io)#73); [ 452.778568][T16772] lock(&q->blkcg_mutex); [ 452.785494][T16772] lock(fs_reclaim); [ 452.789466][T16772] [ 452.789466][T16772] *** DEADLOCK *** [ 452.789466][T16772] [ 452.797589][T16772] locks held by syz.7.4090/16772: 6, last CPU#0: [ 452.803917][T16772] #0: ffff888032f77270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 452.812980][T16772] #1: ffff88802c384460 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 452.822019][T16772] #2: ffff888056d69080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 452.831752][T16772] #3: ffff88805ab9eb48 (kn->active#101){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 452.841835][T16772] #4: ffff8880287e0bb0 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 [ 452.851929][T16772] #5: ffff8880287e0d30 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 452.861414][T16772] [ 452.861414][T16772] stack backtrace: [ 452.867290][T16772] CPU: 0 UID: 0 PID: 16772 Comm: syz.7.4090 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.878211][T16772] Tainted: [L]=SOFTLOCKUP [ 452.882524][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 452.892562][T16772] Call Trace: [ 452.895854][T16772] [ 452.898770][T16772] dump_stack_lvl+0x100/0x190 [ 452.903440][T16772] print_circular_bug.cold+0x178/0x1be [ 452.908891][T16772] check_noncircular+0x146/0x160 [ 452.913816][T16772] check_prev_add+0xeb/0xe60 [ 452.918389][T16772] ? check_noncircular+0x97/0x160 [ 452.923396][T16772] __lock_acquire+0x1528/0x1f40 [ 452.928234][T16772] lock_acquire+0x1d1/0x380 [ 452.932720][T16772] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 452.938255][T16772] fs_reclaim_acquire+0xc4/0x100 [ 452.943179][T16772] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 452.948720][T16772] kmem_cache_alloc_noprof+0x63/0x6a0 [ 452.954077][T16772] ? __radix_tree_preload+0x2f4/0x820 [ 452.959456][T16772] ? __radix_tree_preload+0x333/0x820 [ 452.964816][T16772] __radix_tree_preload+0x333/0x820 [ 452.970105][T16772] blkg_conf_prep+0x489/0xf10 [ 452.974787][T16772] tg_set_conf.isra.0+0x1ed/0x500 [ 452.979802][T16772] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 452.985351][T16772] ? kernfs_root+0xf8/0x2a0 [ 452.989846][T16772] cgroup_file_write+0x1e6/0x8a0 [ 452.994773][T16772] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 453.000132][T16772] ? __pfx_cgroup_file_write+0x10/0x10 [ 453.005577][T16772] ? __kmalloc_noprof+0x350/0x840 [ 453.010592][T16772] kernfs_fop_write_iter+0x3e0/0x5f0 [ 453.015880][T16772] ? __pfx_cgroup_file_write+0x10/0x10 [ 453.021326][T16772] vfs_write+0x6af/0x1050 [ 453.025652][T16772] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 453.031446][T16772] ? __pfx_vfs_write+0x10/0x10 [ 453.036209][T16772] ? find_held_lock+0x2b/0x80 [ 453.040882][T16772] ksys_write+0x12a/0x250 [ 453.045193][T16772] ? __pfx_ksys_write+0x10/0x10 [ 453.050028][T16772] do_syscall_64+0x123/0x790 [ 453.054608][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.060498][T16772] RIP: 0033:0x7fc7f279e159 [ 453.064897][T16772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.084485][T16772] RSP: 002b:00007fc7f35a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.092894][T16772] RAX: ffffffffffffffda RBX: 00007fc7f2a25fa0 RCX: 00007fc7f279e159 [ 453.100848][T16772] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000005 [ 453.108814][T16772] RBP: 00007fc7f283506b R08: 0000000000000000 R09: 0000000000000000 [ 453.116764][T16772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.124714][T16772] R13: 00007fc7f2a26038 R14: 00007fc7f2a25fa0 R15: 00007ffc6a2e2468 [ 453.132686][T16772] [ 453.144663][T16787] fuse: fd is not a fuse device [ 453.170549][ T32] audit: type=1804 audit(2000000088.659:7972): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4092" name="file0" dev="tmpfs" ino=5814 res=1 errno=0 [ 453.253812][ T32] audit: type=1400 audit(2000000088.769:7973): avc: denied { write } for pid=16788 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1