last executing test programs: 2m46.798278293s ago: executing program 1 (id=895): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x3}, 0x1c) writev(r1, &(0x7f0000001880)=[{&(0x7f00000006c0)="06a5a79131de6f1a0ddfe406f176b8712be745e9f48a530f2ca6c2394424ae12e10b7f6670233caf48b16ff7e649ec1fd4a191e53460efdcffe7bdff806d71b5c596ca7dc79233e98464a1cb5866f707ad7b4d59a393414898f76da18a96d8992a1e895ec0b75bb4523390b825640b4bb9", 0x71}, {&(0x7f0000000740)="ee993abf99d826c3107b1259f25b162e724318d5d0c450141df0608f0f4f51cef8c8e8a49edb5af15fc39f35bbd0157324e55b9cd5f17e0a310913b385f189d13027c20b60d962cf7548082713069833a794bcffcd5f6daba24f91232f678cd091bcae6ec94991775faffbaf2645fd5a38a66a85eaac7006c9feee4f0f1ae0eb6374378f0acf90b6cc9e04c4c5bc5875bcdf80f18879ffd4a823bed96903405e4ac629733e48576a6e28e775fa1bd30190342fc3ea2fa690f84c78cd494d7ea7d50dbff1f362f3ed52cd7ae86e10efc957f23a0dd5cbc7ce0edbf2eb0c7dd53cf1f1cf10dd42790050f0e38d51a822e303802eeeaf8fa3875b7943f61f4530262b8775b7d31a2c3aa2ac6fe44e614e9d4c2abd00ea17142e7216632baca316fe7731dee60a8847b5d1207edf990bf254c5695ca9f2e35933864ded45bc6b109b5d2db3a19af0066d07798b044c2c228d3ce5c5f2b40499580a6a5dbd15f90bcf4ef8126cd4b818c84d27ca3bed4ee9d149afca7bc927b9df102e98a49add9a9c52ec950d679e4f40726736d974a2c4e9118c36238fe7aa057dee0f4433d587d4f3fb2cc39c8f9578eb80a4c5f3150d7a0f7aefa4eb8aecc70560880b0a7c6a835251427613c57dabddda6c8d407b1f2785f2a18918d5d5184c2156889d8c9be6c8e6e979a4987375d9566c1bf23d9b262fc4532c79afc3f1ae57bc3f8c838564ca2ea50ae26a6b9fa977f47bd2dbfebfc15dc602028520e37166c31adad67d17227963b970128477b107e5c4aaccc3d2feceaadecc3b1186765b52c72e9f70afa268a6213bd78d283f643f7b3769ad9a518336a79c45e9500887c469efea14102777a55ecbdac7aad31cc44f192b287e1366cee23125cd35b9adb7da8b3e1ce29931536957231818a2af645375b050bf82ad896afee5a98149861abbcbfe74f411d39897fcf2b61f4d8616224bcc082f68b0faf923093b38c87ca4d42d80e69f37bde9b8ed7c014c77010fae5007d7a229bcd72d2283cb47aacc2a7ca72066839bbd81ab58a98ba1b751e61c44f60157c549d872f3a36c1b99982fd51f329be6ed59379275d01a311a95cdb65b5f851699f9f2903a88fa63eb22453ec95082d3cd804fba64f67272b0ec4e322bcaa0d40a5d86398438e09352a3f2f2428009b5c4cede8720463c61765ae9a46f51827430d05755b1de5ee8a1835b5ec06890d921c63b0ac1c97f8bfc786c13cb3d88603ae5779076e0083ac0374870f32f299faff14cd86b78da9f56388d50e57d92e24bf6db454cb1579e6590f520be854baded354f235b0452b0fad58a67e8ed8cb0dad6c64c9b964ac18aab442b1c579b56287a1cceb23bd2885f93b8912217522f4e0139b2e0a65c117a0fa6aa8beba3298fbeca3ecc72c43eafe0a59e1e6c0a7810d2e0119203ae0990c69519f1cccaf553f20d7401881b579c3d5d23eb2cadab61dcfe231c62982091a2a1d733c5e2d768dc700655b834d83e58af85b9e87808c66e0a67903a0fbe940774ecbec6b069bbf4d72ad1f7adbae9bfbfe52fdea6397918fb5736e338ebb9329a7528f5b54ca3d5db39bf1c7e086096ff2d3abf275137e8c83e8fe1acf1f1bf9247e94855abd99d9ee8a2fa57b942a5fcf23db702286d5acf19147cfe51faa9ffbbf0562d344af117161ddad99603a50c2c896c1f9c3123dcec6844555b38bf3e7a52fcfe", 0x4bf}], 0x2) 2m46.697889002s ago: executing program 1 (id=896): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 2m46.427179701s ago: executing program 1 (id=898): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) 2m42.988818872s ago: executing program 1 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001700000008000300", @ANYRES32=r2], 0x34}}, 0x0) 2m42.672158876s ago: executing program 1 (id=913): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e1', 0x2) 2m42.350099322s ago: executing program 1 (id=914): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x2000970, 0x1f480, 0x0, 0x39d}) syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) 2m27.243093606s ago: executing program 32 (id=914): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x2000970, 0x1f480, 0x0, 0x39d}) syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) 7.602002572s ago: executing program 3 (id=2255): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001006269747769736500240002"], 0x108}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 7.290032703s ago: executing program 3 (id=2260): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.999038591s ago: executing program 0 (id=2262): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xca71d000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4.656022486s ago: executing program 3 (id=2274): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f0000002200)='.\x00', 0x0, 0x199c65, 0x0) 4.241737515s ago: executing program 3 (id=2277): r0 = io_uring_setup(0x664b, &(0x7f0000000500)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/81, 0x51}], 0x1, 0x10000, 0x77) close_range(r0, 0xffffffffffffffff, 0x0) 4.240749192s ago: executing program 0 (id=2287): r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x641, 0x1028, r1, 0x0) fanotify_mark(r0, 0x1, 0x48000038, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) 4.17471168s ago: executing program 4 (id=2278): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read @etc/passwd /xec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 4.015989313s ago: executing program 0 (id=2279): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) 3.989117288s ago: executing program 4 (id=2281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000004c0)={r2, 0x7}) 3.875731915s ago: executing program 3 (id=2282): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40440, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e1f0a"], 0x22) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.676824787s ago: executing program 0 (id=2283): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001ffffff40460801100001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001f00)={0x34, &(0x7f0000001cc0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.186898469s ago: executing program 4 (id=2289): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0xffff1000, 0x317000, 0x8}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.64478233s ago: executing program 4 (id=2294): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 2.550186555s ago: executing program 2 (id=2295): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503, 0x70bd2b}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x37c}, {&(0x7f0000000dc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee172000", 0x5f}, {&(0x7f0000002200)="f610", 0x2}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.496661529s ago: executing program 3 (id=2296): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.357832666s ago: executing program 5 (id=2297): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x11, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 2.325810941s ago: executing program 4 (id=2298): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.190965762s ago: executing program 2 (id=2299): listen(0xffffffffffffffff, 0x8) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={0x0}) 1.989896294s ago: executing program 2 (id=2300): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}], 0xffffffffffffff03}, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 1.94797012s ago: executing program 5 (id=2301): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) semget(0x2, 0x3, 0x39c) 1.782371769s ago: executing program 2 (id=2302): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000e00)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1.311039282s ago: executing program 5 (id=2303): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x4}) 1.153449939s ago: executing program 4 (id=2304): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b0b, 0x0) 948.761982ms ago: executing program 5 (id=2305): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x88, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2bef7c0b4452e43e69aa108690000093f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94df97f6296b9bc0a0aa770b5588c5", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x4c) r0 = syz_open_dev$sg(&(0x7f0000000740), 0x6f5e, 0x8240) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x5319) 785.711048ms ago: executing program 2 (id=2306): socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x8, 0x4e}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000000)="10") 656.598018ms ago: executing program 0 (id=2307): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x28, 0x801, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 594.472811ms ago: executing program 5 (id=2308): setns(0xc9, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) 166.178993ms ago: executing program 0 (id=2309): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x8000) 71.343588ms ago: executing program 2 (id=2310): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) mkdirat(r0, &(0x7f0000000000)='./tracing\x00', 0x0) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='counter', 0x7) 0s ago: executing program 5 (id=2311): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0xb508, 0x6c000000, 0x7, 0x1, 0x3, 0xf}, 0x1c) kernel console output (not intermixed with test programs): btmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 230.753426][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 230.753465][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 230.956673][ T10] usb 6-1: USB disconnect, device number 2 [ 231.013214][ T5735] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 231.046318][ T5735] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 231.262975][ C0] blk_print_req_error: 151 callbacks suppressed [ 231.262990][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.263042][ C0] buffer_io_error: 150 callbacks suppressed [ 231.263050][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.263067][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.263098][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 231.263109][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.263139][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 231.263150][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.263181][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 231.263192][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.263222][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 231.263233][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.263263][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 231.263274][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.263304][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 231.263451][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.263485][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.263497][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.263527][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 231.263538][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.263568][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 231.265273][ T4974] ldm_validate_partition_table(): Disk read failed. [ 231.266708][ T4974] Dev loop6: unable to read RDB block 0 [ 231.268103][ T4974] loop6: unable to read partition table [ 231.268212][ T4974] loop6: partition table beyond EOD, truncated [ 231.311132][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 231.819953][ T5735] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 231.860729][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 232.025698][ T9700] dlm: non-version read from control device 92 [ 232.040965][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 232.056846][ T9665] ceph: No mds server is up or the cluster is laggy [ 232.060884][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 232.109800][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.109823][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.109844][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.111283][ T10] usb 3-1: config 0 descriptor?? [ 232.351325][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.351559][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.610307][ T9717] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 232.610334][ T9717] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 232.610357][ T9717] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 232.612420][ T9717] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 232.689045][ T9717] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 232.697228][ T10] hid_parser_main: 455 callbacks suppressed [ 232.697243][ T10] apple 0003:05AC:024B.000C: unknown main item tag 0x0 [ 232.697260][ T10] apple 0003:05AC:024B.000C: unknown main item tag 0x4 [ 232.697298][ T10] apple 0003:05AC:024B.000C: unknown main item tag 0x0 [ 232.697313][ T10] apple 0003:05AC:024B.000C: unknown main item tag 0x4 [ 232.697327][ T10] apple 0003:05AC:024B.000C: unknown main item tag 0x0 [ 232.697341][ T10] apple 0003:05AC:024B.000C: unknown main item tag 0x0 [ 232.697355][ T10] apple 0003:05AC:024B.000C: unknown main item tag 0x0 [ 232.697369][ T10] apple 0003:05AC:024B.000C: unknown main item tag 0x0 [ 232.697383][ T10] apple 0003:05AC:024B.000C: unknown main item tag 0x0 [ 232.697405][ T10] apple 0003:05AC:024B.000C: unknown main item tag 0x0 [ 232.701314][ T10] apple 0003:05AC:024B.000C: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.2-1/input0 [ 232.948392][ T5735] usb 3-1: USB disconnect, device number 15 [ 233.003541][ T9724] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1505'. [ 233.126551][ T30] audit: type=1400 audit(1790712565.001:688): avc: denied { map } for pid=9723 comm="syz.5.1507" path="/dev/ublkc0" dev="devtmpfs" ino=3330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.326847][ T1105] smbdirect: ib_dev[syz2] removed [ 233.376823][ T9717] siw: device registration error -19 [ 233.534402][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1514'. [ 233.727485][ T9744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48400 [ 233.727506][ T9744] head: order:4 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 233.727516][ T9744] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 233.727529][ T9744] page_type: f8(unknown) [ 233.783641][ T9744] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 233.783674][ T9744] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 233.783686][ T9744] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 233.783697][ T9744] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 233.783708][ T9744] head: 00fff00000000004 fffffffffffffc01 00000000ffffffff 00000000ffffffff [ 233.783719][ T9744] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000010 [ 233.783726][ T9744] page dumped because: unmovable page [ 233.783733][ T9744] page_owner tracks the page as allocated [ 233.783738][ T9744] page last allocated via order 4, migratetype Unmovable, gfp_mask 0x429c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_ZERO|__GFP_COMP), pid 8212, tgid 8212 (syz-executor), ts 172686904730 [ 233.783761][ T9744] post_alloc_hook+0xfd/0x120 [ 233.783777][ T9744] get_page_from_freelist+0x110d/0x35d0 [ 233.783790][ T9744] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 233.783803][ T9744] alloc_pages_mpol+0x201/0x550 [ 233.783820][ T9744] ___kmalloc_large_node+0xe8/0x130 [ 233.783836][ T9744] __kmalloc_large_node_noprof+0x1c/0x70 [ 233.783852][ T9744] __kvmalloc_node_noprof+0x5d9/0x9b0 [ 233.783865][ T9744] nf_conncount_init+0x6c/0x370 [ 233.783882][ T9744] ovs_ct_init+0x1f1/0x420 [ 233.783896][ T9744] ovs_init_net+0x2ff/0x5a0 [ 233.783914][ T9744] ops_init+0x1e2/0x5f0 [ 233.783930][ T9744] setup_net+0x118/0x3a0 [ 233.783946][ T9744] copy_net_ns+0x345/0x7a0 [ 233.783956][ T9744] create_new_namespaces+0x3ea/0xac0 [ 233.783969][ T9744] unshare_nsproxy_namespaces+0xf2/0x220 [ 233.783982][ T9744] ksys_unshare+0x4a2/0xa70 [ 233.783996][ T9744] page last free pid 1 tgid 1 ts 18737639388 stack trace: [ 233.784003][ T9744] free_pages_prepare+0x586/0xe00 [ 233.784020][ T9744] __free_contig_range_common+0x14f/0x250 [ 233.784037][ T9744] destroy_args+0xa8/0x7a0 [ 233.784050][ T9744] debug_vm_pgtable+0x1d69/0x3490 [ 233.784063][ T9744] do_one_initcall+0x11c/0x6f0 [ 233.784075][ T9744] kernel_init_freeable+0x6ea/0x7b0 [ 233.784088][ T9744] kernel_init+0x21/0x1e0 [ 233.784103][ T9744] ret_from_fork+0x730/0xd60 [ 233.784115][ T9744] ret_from_fork_asm+0x1a/0x30 [ 234.430963][ T5735] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 234.517120][ T8546] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 234.629149][ T5735] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 234.629177][ T5735] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 234.671701][ T5735] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.671734][ T5735] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.671749][ T5735] usb 1-1: config 0 interface 0 has no altsetting 0 [ 234.718669][ T5735] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.718700][ T5735] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.718715][ T5735] usb 1-1: config 0 interface 0 has no altsetting 0 [ 234.730142][ T8546] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 234.779293][ T5735] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.779552][ T5735] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.779568][ T5735] usb 1-1: config 0 interface 0 has no altsetting 0 [ 234.791901][ T8546] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.791930][ T8546] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 234.791944][ T8546] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.839547][ T5735] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.839584][ T5735] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.839600][ T5735] usb 1-1: config 0 interface 0 has no altsetting 0 [ 234.884727][ T8546] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 234.884766][ T8546] usb 6-1: Product: syz [ 234.884775][ T8546] usb 6-1: Manufacturer: syz [ 234.898551][ T9758] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 234.898655][ T5735] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.898683][ T5735] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.898700][ T5735] usb 1-1: config 0 interface 0 has no altsetting 0 [ 234.909905][ T8546] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 234.951289][ T5735] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.951322][ T5735] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.951338][ T5735] usb 1-1: config 0 interface 0 has no altsetting 0 [ 234.951674][ T8546] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 235.012616][ T5735] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.012646][ T5735] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.012670][ T5735] usb 1-1: config 0 interface 0 has no altsetting 0 [ 235.066736][ T5735] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.066766][ T5735] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.066782][ T5735] usb 1-1: config 0 interface 0 has no altsetting 0 [ 235.152359][ T5735] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 235.152379][ T5735] usb 1-1: Product: syz [ 235.152387][ T5735] usb 1-1: Manufacturer: syz [ 235.152396][ T5735] usb 1-1: SerialNumber: syz [ 235.154187][ T5735] usb 1-1: config 0 descriptor?? [ 235.159781][ T5716] usb 6-1: USB disconnect, device number 3 [ 235.207482][ T5735] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 235.213636][ T5716] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 235.251776][ T5716] garmin_gps 6-1:1.0: device disconnected [ 235.501844][ T5716] usb 1-1: USB disconnect, device number 8 [ 235.506150][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 235.526076][ T9755] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 235.529367][ T5716] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 236.090688][ T9798] all (unregistering): Released all slaves [ 236.457235][ T30] audit: type=1400 audit(1790712568.331:689): avc: denied { bind } for pid=9818 comm="syz.0.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 237.127593][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 237.147164][ T5716] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 237.308147][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 237.327952][ T10] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 237.328093][ T5716] usb 5-1: Using ep0 maxpacket: 16 [ 237.351288][ T5716] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 237.379404][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.379485][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 237.379502][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 237.379556][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.381223][ T10] usb 6-1: config 0 descriptor?? [ 237.502575][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.502594][ T5716] usb 5-1: Product: syz [ 237.502602][ T5716] usb 5-1: Manufacturer: syz [ 237.502611][ T5716] usb 5-1: SerialNumber: syz [ 237.739185][ T5716] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 237.740867][ T5716] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 237.741028][ T5716] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 237.741055][ T5716] usb 5-1: media controller created [ 237.748197][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.866909][ T10] nintendo 0003:057E:2019.000D: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.5-1/input0 [ 237.900581][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 237.902263][ T5604] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 238.074419][ T5716] zl10353_read_register: readreg error (reg=127, ret==-110) [ 238.165446][ T5716] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 238.220219][ T5716] usb 5-1: USB disconnect, device number 12 [ 238.307927][ T10] nintendo 0003:057E:2019.000D: Failed to get joycon info; ret=-71 [ 238.307945][ T10] nintendo 0003:057E:2019.000D: Failed to retrieve controller info; ret=-71 [ 238.307958][ T10] nintendo 0003:057E:2019.000D: Failed to initialize controller; ret=-71 [ 238.362489][ T10] nintendo 0003:057E:2019.000D: probe - fail = -71 [ 238.362610][ T10] nintendo 0003:057E:2019.000D: probe with driver nintendo failed with error -71 [ 238.458210][ T10] usb 6-1: USB disconnect, device number 4 [ 238.531812][ T9848] fido_id[9848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 238.579282][ T9850] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 238.863270][ T9850] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 238.863394][ T9850] overlayfs: failed to look up (tracing) for ino (-66) [ 239.008375][ T30] audit: type=1326 audit(1790712570.881:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.3.1562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80bcb9e159 code=0x0 [ 239.057547][ T9857] FAULT_INJECTION: forcing a failure. [ 239.057547][ T9857] name fail_futex, interval 1, probability 0, space 0, times 1 [ 239.057574][ T9857] CPU: 0 UID: 0 PID: 9857 Comm: syz.0.1563 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.057592][ T9857] Tainted: [L]=SOFTLOCKUP [ 239.057596][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 239.057604][ T9857] Call Trace: [ 239.057608][ T9857] [ 239.057613][ T9857] dump_stack_lvl+0x100/0x190 [ 239.057637][ T9857] should_fail_ex.cold+0x5/0xa [ 239.057656][ T9857] should_fail_futex+0x4c/0x60 [ 239.057672][ T9857] futex_lock_pi_atomic+0xea/0xb80 [ 239.057688][ T9857] futex_lock_pi+0x278/0x7e0 [ 239.057702][ T9857] ? __pfx_futex_lock_pi+0x10/0x10 [ 239.057715][ T9857] ? __pfx___futex_wait+0x10/0x10 [ 239.057727][ T9857] ? __pfx_try_to_wake_up+0x10/0x10 [ 239.057755][ T9857] ? __pfx_futex_wake_mark+0x10/0x10 [ 239.057771][ T9857] ? rcu_read_lock_any_held+0x6a/0x90 [ 239.057794][ T9857] ? find_held_lock+0x2b/0x80 [ 239.057811][ T9857] ? ksys_write+0x190/0x250 [ 239.057828][ T9857] do_futex+0x31d/0x440 [ 239.057846][ T9857] ? __pfx_do_futex+0x10/0x10 [ 239.057864][ T9857] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.057880][ T9857] __x64_sys_futex+0x34f/0x4d0 [ 239.057899][ T9857] ? __pfx___x64_sys_futex+0x10/0x10 [ 239.057922][ T9857] do_syscall_64+0x123/0x790 [ 239.057935][ T9857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.057948][ T9857] RIP: 0033:0x7f1069d9e159 [ 239.057959][ T9857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.057970][ T9857] RSP: 002b:00007f106abd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 239.057982][ T9857] RAX: ffffffffffffffda RBX: 00007f106a025fa0 RCX: 00007f1069d9e159 [ 239.057989][ T9857] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000200 [ 239.057996][ T9857] RBP: 00007f1069e3506b R08: 0000000000000000 R09: 0000000034fffffd [ 239.058003][ T9857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.058010][ T9857] R13: 00007f106a026038 R14: 00007f106a025fa0 R15: 00007ffcbd07e558 [ 239.058025][ T9857] [ 239.590379][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1568'. [ 239.590402][ T9870] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1568'. [ 239.779068][ T30] audit: type=1400 audit(1790712571.661:691): avc: denied { append } for pid=9880 comm="syz.0.1574" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 240.302080][ T9900] netlink: zone id is out of range [ 240.302092][ T9900] netlink: zone id is out of range [ 240.302096][ T9900] netlink: zone id is out of range [ 240.302100][ T9900] netlink: zone id is out of range [ 240.302104][ T9900] netlink: zone id is out of range [ 240.302108][ T9900] netlink: zone id is out of range [ 240.302112][ T9900] netlink: zone id is out of range [ 240.302115][ T9900] netlink: zone id is out of range [ 240.302119][ T9900] netlink: zone id is out of range [ 240.302123][ T9900] netlink: zone id is out of range [ 240.885785][ T9909] ftl_cs: FTL header not found. [ 241.144577][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 241.167147][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 241.332603][ T9909] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 241.677504][ T9941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.807308][ T9946] geneve2: entered promiscuous mode [ 241.816459][ T41] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 34726 - 0 [ 241.833520][ T1399] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 34726 - 0 [ 241.833953][ T1399] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 34726 - 0 [ 241.833973][ T1399] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 34726 - 0 [ 241.902644][ T30] audit: type=1400 audit(1790712573.781:692): avc: denied { mount } for pid=9947 comm="syz.4.1603" name="/" dev="ramfs" ino=30171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 242.519648][ T9973] FAULT_INJECTION: forcing a failure. [ 242.519648][ T9973] name failslab, interval 1, probability 0, space 0, times 0 [ 242.519670][ T9973] CPU: 0 UID: 0 PID: 9973 Comm: syz.4.1613 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.519686][ T9973] Tainted: [L]=SOFTLOCKUP [ 242.519690][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.519697][ T9973] Call Trace: [ 242.519701][ T9973] [ 242.519705][ T9973] dump_stack_lvl+0x100/0x190 [ 242.519728][ T9973] should_fail_ex.cold+0x5/0xa [ 242.519746][ T9973] should_failslab+0xc2/0x120 [ 242.519762][ T9973] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 242.519777][ T9973] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 242.519796][ T9973] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 242.519810][ T9973] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 242.519824][ T9973] alloc_inode+0x68/0x250 [ 242.519837][ T9973] new_inode+0x22/0x1c0 [ 242.519850][ T9973] hugetlbfs_get_inode+0x39a/0x700 [ 242.519864][ T9973] ? security_capable+0x80/0x260 [ 242.519878][ T9973] hugetlb_file_setup+0x3cc/0x5b0 [ 242.519895][ T9973] newseg+0xaf0/0xed0 [ 242.519913][ T9973] ? __pfx_newseg+0x10/0x10 [ 242.519927][ T9973] ? down_write+0x146/0x1f0 [ 242.519942][ T9973] ? ksys_write+0x190/0x250 [ 242.519957][ T9973] ipcget+0xee/0xf50 [ 242.519973][ T9973] ? __pfx_do_futex+0x10/0x10 [ 242.519991][ T9973] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 242.520005][ T9973] ? __pfx_ipcget+0x10/0x10 [ 242.520020][ T9973] ? __x64_sys_futex+0x34f/0x4d0 [ 242.520036][ T9973] ? __x64_sys_futex+0x358/0x4d0 [ 242.520054][ T9973] __x64_sys_shmget+0x13b/0x1b0 [ 242.520079][ T9973] ? __pfx___x64_sys_shmget+0x10/0x10 [ 242.520101][ T9973] do_syscall_64+0x123/0x790 [ 242.520116][ T9973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.520128][ T9973] RIP: 0033:0x7fda7919e159 [ 242.520138][ T9973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.520149][ T9973] RSP: 002b:00007fda79f93028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 242.520161][ T9973] RAX: ffffffffffffffda RBX: 00007fda79425fa0 RCX: 00007fda7919e159 [ 242.520168][ T9973] RDX: 0000000054003f00 RSI: 0000000000800000 RDI: 0000000000000000 [ 242.520175][ T9973] RBP: 00007fda7923506b R08: 0000000000000000 R09: 0000000000000000 [ 242.520182][ T9973] R10: 0000200000800000 R11: 0000000000000246 R12: 0000000000000000 [ 242.520189][ T9973] R13: 00007fda79426038 R14: 00007fda79425fa0 R15: 00007fff3368fae8 [ 242.520205][ T9973] [ 242.930641][ T9975] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 242.930672][ T9975] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 243.012884][ T9975] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 243.017646][ T9975] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 243.187154][ T1105] smbdirect: ib_dev[syz2] removed [ 243.218696][ T9975] siw: device registration error -19 [ 243.748597][ T30] audit: type=1400 audit(1790712575.621:693): avc: denied { open } for pid=10009 comm="syz.2.1627" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 243.815039][ T30] audit: type=1400 audit(1790712575.691:694): avc: denied { ioctl } for pid=10009 comm="syz.2.1627" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 243.994335][T10021] FAULT_INJECTION: forcing a failure. [ 243.994335][T10021] name failslab, interval 1, probability 0, space 0, times 0 [ 243.994360][T10021] CPU: 0 UID: 0 PID: 10021 Comm: syz.5.1630 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.994378][T10021] Tainted: [L]=SOFTLOCKUP [ 243.994382][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.994390][T10021] Call Trace: [ 243.994394][T10021] [ 243.994399][T10021] dump_stack_lvl+0x100/0x190 [ 243.994423][T10021] should_fail_ex.cold+0x5/0xa [ 243.994441][T10021] should_failslab+0xc2/0x120 [ 243.994457][T10021] __kmalloc_cache_noprof+0x91/0x6d0 [ 243.994469][T10021] ? __kasan_kmalloc+0xaa/0xb0 [ 243.994482][T10021] ? nci_allocate_device+0x105/0x410 [ 243.994502][T10021] nci_allocate_device+0x105/0x410 [ 243.994519][T10021] virtual_ncidev_open+0x6f/0x220 [ 243.994538][T10021] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 243.994555][T10021] misc_open+0x26d/0x450 [ 243.994569][T10021] ? __pfx_misc_open+0x10/0x10 [ 243.994582][T10021] chrdev_open+0x234/0x6a0 [ 243.994599][T10021] ? __pfx_chrdev_open+0x10/0x10 [ 243.994615][T10021] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 243.994629][T10021] do_dentry_open+0x6ab/0x14d0 [ 243.994642][T10021] ? __pfx_chrdev_open+0x10/0x10 [ 243.994661][T10021] vfs_open+0x82/0x3f0 [ 243.994679][T10021] path_openat+0x19fa/0x2440 [ 243.994697][T10021] ? __pfx_path_openat+0x10/0x10 [ 243.994717][T10021] do_file_open+0x20e/0x430 [ 243.994734][T10021] ? __pfx_do_file_open+0x10/0x10 [ 243.994760][T10021] ? _raw_spin_unlock+0x28/0x50 [ 243.994776][T10021] ? alloc_fd+0x471/0x7a0 [ 243.994797][T10021] do_sys_openat2+0x10f/0x1e0 [ 243.994813][T10021] ? __pfx_do_sys_openat2+0x10/0x10 [ 243.994831][T10021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 243.994848][T10021] __x64_sys_openat+0x12d/0x210 [ 243.994875][T10021] ? __pfx___x64_sys_openat+0x10/0x10 [ 243.994899][T10021] do_syscall_64+0x123/0x790 [ 243.994914][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.994925][T10021] RIP: 0033:0x7f4f1879e159 [ 243.994936][T10021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.994946][T10021] RSP: 002b:00007f4f1974e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 243.994959][T10021] RAX: ffffffffffffffda RBX: 00007f4f18a25fa0 RCX: 00007f4f1879e159 [ 243.994966][T10021] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 243.994973][T10021] RBP: 00007f4f1883506b R08: 0000000000000000 R09: 0000000000000000 [ 243.994980][T10021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.994987][T10021] R13: 00007f4f18a26038 R14: 00007f4f18a25fa0 R15: 00007ffe4a720388 [ 243.995004][T10021] [ 243.998332][T10022] syzkaller1: entered promiscuous mode [ 243.998346][T10022] syzkaller1: entered allmulticast mode [ 244.945972][T10049] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 245.017930][ T30] audit: type=1400 audit(1790712576.901:695): avc: denied { bind } for pid=10051 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.276964][T10062] team0 (unregistering): Port device team_slave_0 removed [ 245.306595][T10062] team0 (unregistering): Port device team_slave_1 removed [ 245.394794][T10065] block nbd2: Cannot add socket to a running device [ 245.414660][T10067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1650'. [ 245.494721][ T5716] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 245.529136][T10071] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 245.648224][ T30] audit: type=1400 audit(1790712577.521:696): avc: denied { map } for pid=10074 comm="syz.0.1654" path="socket:[30818]" dev="sockfs" ino=30818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.707276][ T5716] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.748424][ T5716] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.748445][ T5716] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.748468][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.988658][ T5716] usb 6-1: usb_control_msg returned -32 [ 245.988687][ T5716] usbtmc 6-1:16.0: can't read capabilities [ 245.995257][ T5604] block nbd2: Receive control failed (result -32) [ 246.024495][T10060] block nbd2: shutting down sockets [ 246.104270][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 246.300904][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 246.342678][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.426076][ T30] audit: type=1400 audit(1790712578.301:697): avc: denied { write } for pid=10097 comm="syz.2.1664" name="nullb" dev="configfs" ino=3155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.428975][ T30] audit: type=1400 audit(1790712578.301:698): avc: denied { read } for pid=10097 comm="syz.2.1664" name="zoned" dev="configfs" ino=30890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 246.718122][ T5735] usb 6-1: USB disconnect, device number 5 [ 246.764570][ T5716] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 246.809056][T10107] block2mtd: device name too long [ 246.963741][ T5716] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 246.996906][ T10] cxacru 4-1:1.0: wrong cm 0xa0 in response to cm 0x91 [ 246.996950][ T10] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 246.996961][ T10] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 246.998949][ T10] cxacru 4-1:1.0: probe with driver cxacru failed with error -5 [ 247.064674][ T10] usb 4-1: USB disconnect, device number 10 [ 247.102421][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.102441][ T5716] usb 5-1: Product: syz [ 247.102450][ T5716] usb 5-1: Manufacturer: syz [ 247.102459][ T5716] usb 5-1: SerialNumber: syz [ 247.103947][ T5716] usb 5-1: config 0 descriptor?? [ 247.120285][ T5716] hub 5-1:0.0: bad descriptor, ignoring hub [ 247.120302][ T5716] hub 5-1:0.0: probe with driver hub failed with error -5 [ 247.334573][ T5716] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 247.336149][ T5716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.341653][ T5716] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 247.341694][ T5716] usb 5-1: media controller created [ 247.347558][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.504804][ T5716] DVB: Unable to find symbol dib7000p_attach() [ 247.504819][ T5716] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 247.506637][T10121] bond0: invalid NS target ff00:: specified for addition [ 247.506657][T10121] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 247.585106][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'. [ 247.698738][ T5716] rc_core: IR keymap rc-dib0700-rc5 not found [ 247.698753][ T5716] Registered IR keymap rc-empty [ 247.698888][ T5716] dvb-usb: could not initialize remote control. [ 247.698893][ T5716] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 247.712552][ T5716] usb 5-1: USB disconnect, device number 13 [ 247.912950][ T5716] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 247.938974][T10133] tipc: Started in network mode [ 247.938990][T10133] tipc: Node identity 4, cluster identity 4711 [ 247.938999][T10133] tipc: Node number set to 4 [ 248.058252][T10139] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1676'. [ 248.917259][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 248.919897][T10174] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 249.102919][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 249.122675][ T10] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 249.164630][ T10] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 249.164661][ T10] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 249.164677][ T10] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.164692][ T10] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 249.268258][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.268278][ T10] usb 6-1: Product: syz [ 249.268287][ T10] usb 6-1: Manufacturer: syz [ 249.268296][ T10] usb 6-1: SerialNumber: syz [ 249.307891][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input17 [ 249.311691][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 249.540961][ T10] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 249.540976][ T10] (id 0x00) [ 249.632961][ T10] rc_core: IR keymap rc-imon-pad not found [ 249.632976][ T10] Registered IR keymap rc-empty [ 249.633022][ T10] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 249.633047][ T10] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 249.716373][ T5735] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 249.758666][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 249.760154][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input18 [ 249.808525][ T10] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:6> initialized [ 249.890179][ T5735] usb 1-1: Using ep0 maxpacket: 8 [ 249.909697][ T5735] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.951166][ T5735] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 249.951190][ T5735] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 249.951246][ T5735] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 249.951262][ T5735] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.951276][ T5735] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.951290][ T5735] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.951306][ T5735] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 249.951321][ T5735] usb 1-1: config 168 interface 0 has no altsetting 0 [ 250.013639][ T5735] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 250.013663][ T5735] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 250.013684][ T5735] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 250.013699][ T5735] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.013714][ T5735] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.013728][ T5735] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 250.013743][ T5735] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 250.013758][ T5735] usb 1-1: config 168 interface 0 has no altsetting 0 [ 250.078622][ T5735] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 250.078647][ T5735] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 250.078669][ T5735] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 250.078685][ T5735] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.078698][ T5735] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.078711][ T5735] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 250.078725][ T5735] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 250.078740][ T5735] usb 1-1: config 168 interface 0 has no altsetting 0 [ 250.267956][ T5735] usb 1-1: string descriptor 0 read error: -22 [ 250.268033][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.383449][ T5735] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 250.412521][T10166] imon:vfd_write: invalid payload size [ 250.415655][ T10] usb 6-1: USB disconnect, device number 6 [ 250.691199][ T5735] usb 1-1: USB disconnect, device number 9 [ 250.849806][T10200] FAULT_INJECTION: forcing a failure. [ 250.849806][T10200] name failslab, interval 1, probability 0, space 0, times 0 [ 250.849833][T10200] CPU: 0 UID: 0 PID: 10200 Comm: syz.4.1703 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.849851][T10200] Tainted: [L]=SOFTLOCKUP [ 250.849855][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 250.849863][T10200] Call Trace: [ 250.849868][T10200] [ 250.849873][T10200] dump_stack_lvl+0x100/0x190 [ 250.849897][T10200] should_fail_ex.cold+0x5/0xa [ 250.849915][T10200] should_failslab+0xc2/0x120 [ 250.849932][T10200] __kmalloc_cache_noprof+0x91/0x6d0 [ 250.849943][T10200] ? xfd_validate_state+0x129/0x190 [ 250.849957][T10200] ? __do_sys_memfd_create+0x170/0x3d0 [ 250.849977][T10200] __do_sys_memfd_create+0x170/0x3d0 [ 250.849996][T10200] do_syscall_64+0x123/0x790 [ 250.850010][T10200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.850022][T10200] RIP: 0033:0x7fda7919e159 [ 250.850033][T10200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.850044][T10200] RSP: 002b:00007fda79f93028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 250.850058][T10200] RAX: ffffffffffffffda RBX: 00007fda79425fa0 RCX: 00007fda7919e159 [ 250.850066][T10200] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 250.850073][T10200] RBP: 00007fda7923506b R08: 0000000000000000 R09: 0000000000000000 [ 250.850080][T10200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.850095][T10200] R13: 00007fda79426038 R14: 00007fda79425fa0 R15: 00007fff3368fae8 [ 250.850112][T10200] [ 251.157782][T10204] Invalid argument reading file caps for ./file0 [ 251.347812][ T30] audit: type=1400 audit(1790712583.221:699): avc: denied { append } for pid=10207 comm="syz.3.1707" name="demux0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 251.386182][T10210] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 251.387891][ T30] audit: type=1400 audit(1790712583.261:700): avc: denied { setattr } for pid=10211 comm="syz.2.1709" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 252.451051][T10240] evm: overlay not supported [ 252.619050][T10244] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 252.866857][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1721'. [ 253.245345][ T5735] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 253.283498][ T1399] Bluetooth: hci4: Frame reassembly failed (-84) [ 253.302105][T10273] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19 [ 253.386285][T10277] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 253.452938][ T5735] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 253.494453][ T5735] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 253.494473][ T5735] usb 4-1: config 127 has no interface number 0 [ 253.494495][ T5735] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 253.557072][ T30] audit: type=1400 audit(1790712585.441:701): avc: denied { read } for pid=10280 comm="syz.2.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.599349][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.599367][ T5735] usb 4-1: Product: syz [ 253.599376][ T5735] usb 4-1: Manufacturer: syz [ 253.599385][ T5735] usb 4-1: SerialNumber: syz [ 253.608759][T10259] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 253.968948][ T52] Bluetooth: hci3: link tx timeout [ 253.969059][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.971699][ T52] Bluetooth: hci3: link tx timeout [ 253.971712][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.971765][ T52] Bluetooth: hci3: link tx timeout [ 253.971771][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.971828][ T52] Bluetooth: hci3: link tx timeout [ 253.971835][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.971882][ T52] Bluetooth: hci3: link tx timeout [ 253.971889][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.971935][ T52] Bluetooth: hci3: link tx timeout [ 253.971942][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.971988][ T52] Bluetooth: hci3: link tx timeout [ 253.971995][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972041][ T52] Bluetooth: hci3: link tx timeout [ 253.972047][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972093][ T52] Bluetooth: hci3: link tx timeout [ 253.972100][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972147][ T52] Bluetooth: hci3: link tx timeout [ 253.972153][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972199][ T52] Bluetooth: hci3: link tx timeout [ 253.972205][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972251][ T52] Bluetooth: hci3: link tx timeout [ 253.972258][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972303][ T52] Bluetooth: hci3: link tx timeout [ 253.972310][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972355][ T52] Bluetooth: hci3: link tx timeout [ 253.972362][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972408][ T52] Bluetooth: hci3: link tx timeout [ 253.972414][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972460][ T52] Bluetooth: hci3: link tx timeout [ 253.972466][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972512][ T52] Bluetooth: hci3: link tx timeout [ 253.972518][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972564][ T52] Bluetooth: hci3: link tx timeout [ 253.972570][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972616][ T52] Bluetooth: hci3: link tx timeout [ 253.972622][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972673][ T52] Bluetooth: hci3: link tx timeout [ 253.972679][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972725][ T52] Bluetooth: hci3: link tx timeout [ 253.972732][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972813][ T52] Bluetooth: hci3: link tx timeout [ 253.972819][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972866][ T52] Bluetooth: hci3: link tx timeout [ 253.972872][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972919][ T52] Bluetooth: hci3: link tx timeout [ 253.972925][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.972971][ T52] Bluetooth: hci3: link tx timeout [ 253.972977][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973023][ T52] Bluetooth: hci3: link tx timeout [ 253.973030][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973077][ T52] Bluetooth: hci3: link tx timeout [ 253.973083][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973129][ T52] Bluetooth: hci3: link tx timeout [ 253.973136][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973184][ T52] Bluetooth: hci3: link tx timeout [ 253.973190][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973237][ T52] Bluetooth: hci3: link tx timeout [ 253.973243][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973328][ T52] Bluetooth: hci3: link tx timeout [ 253.973335][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973382][ T52] Bluetooth: hci3: link tx timeout [ 253.973388][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973435][ T52] Bluetooth: hci3: link tx timeout [ 253.973441][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973487][ T52] Bluetooth: hci3: link tx timeout [ 253.973494][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973540][ T52] Bluetooth: hci3: link tx timeout [ 253.973547][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973594][ T52] Bluetooth: hci3: link tx timeout [ 253.973600][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973647][ T52] Bluetooth: hci3: link tx timeout [ 253.973653][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973699][ T52] Bluetooth: hci3: link tx timeout [ 253.973706][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973753][ T52] Bluetooth: hci3: link tx timeout [ 253.973759][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973812][ T52] Bluetooth: hci3: link tx timeout [ 253.973818][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973865][ T52] Bluetooth: hci3: link tx timeout [ 253.973872][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973919][ T52] Bluetooth: hci3: link tx timeout [ 253.973925][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.973971][ T52] Bluetooth: hci3: link tx timeout [ 253.973978][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974024][ T52] Bluetooth: hci3: link tx timeout [ 253.974031][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974077][ T52] Bluetooth: hci3: link tx timeout [ 253.974083][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974129][ T52] Bluetooth: hci3: link tx timeout [ 253.974136][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974182][ T52] Bluetooth: hci3: link tx timeout [ 253.974188][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974252][ T52] Bluetooth: hci3: link tx timeout [ 253.974259][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974305][ T52] Bluetooth: hci3: link tx timeout [ 253.974312][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974358][ T52] Bluetooth: hci3: link tx timeout [ 253.974364][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974411][ T52] Bluetooth: hci3: link tx timeout [ 253.974417][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974463][ T52] Bluetooth: hci3: link tx timeout [ 253.974469][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974516][ T52] Bluetooth: hci3: link tx timeout [ 253.974522][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974568][ T52] Bluetooth: hci3: link tx timeout [ 253.974575][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974621][ T52] Bluetooth: hci3: link tx timeout [ 253.974627][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974673][ T52] Bluetooth: hci3: link tx timeout [ 253.974680][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974726][ T52] Bluetooth: hci3: link tx timeout [ 253.974732][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974783][ T52] Bluetooth: hci3: link tx timeout [ 253.974789][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974854][ T52] Bluetooth: hci3: link tx timeout [ 253.974861][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.974924][ T52] Bluetooth: hci3: link tx timeout [ 253.974930][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.975080][ T52] Bluetooth: hci3: link tx timeout [ 253.975087][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.975134][ T52] Bluetooth: hci3: link tx timeout [ 253.975141][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.975187][ T52] Bluetooth: hci3: link tx timeout [ 253.975194][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.975240][ T52] Bluetooth: hci3: link tx timeout [ 253.975247][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 253.975294][ T52] Bluetooth: hci3: link tx timeout [ 253.975301][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 254.111001][T10259] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 254.358612][ T5735] asix 4-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 254.798620][ T5735] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 254.798640][ T5735] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 254.991029][ T5735] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 254.991049][ T5735] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 255.249149][ T5735] asix 4-1:127.57 eth5: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, 66:38:d0:60:3a:45 [ 255.251039][ T5735] usb 4-1: USB disconnect, device number 11 [ 255.252548][ T5735] asix 4-1:127.57 eth5: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 255.330535][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 255.330605][ T5604] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 255.509616][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.509688][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.973353][ T5604] Bluetooth: hci3: command 0x0405 tx timeout [ 256.223317][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 256.307670][T10324] serio: Serial port ptm0 [ 256.335032][ T30] audit: type=1400 audit(1790712588.211:702): avc: denied { execute } for pid=10332 comm="syz.2.1761" path="/360/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=2006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 256.398747][T10338] net_ratelimit: 3 callbacks suppressed [ 256.398761][T10338] IPVS: dh: FWM 3 0x00000003 - no destination available [ 256.448596][ T50] IPVS: starting estimator thread 0... [ 256.554460][T10340] IPVS: using max 65 ests per chain, 156000 per kthread [ 256.646643][T10346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.733618][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 256.834536][ T5716] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 257.033698][ T5716] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 257.033727][ T5716] usb 5-1: too many configurations: 97, using maximum allowed: 8 [ 257.174571][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 257.306575][T10375] ip6gretap1: entered allmulticast mode [ 257.322068][T10375] batman_adv: batadv0: Adding interface: ip6gretap1 [ 257.322081][T10375] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.322098][T10375] batman_adv: batadv0: Interface activated: ip6gretap1 [ 257.459210][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.459229][ T5716] usb 5-1: Product: syz [ 257.459239][ T5716] usb 5-1: Manufacturer: syz [ 257.459247][ T5716] usb 5-1: SerialNumber: syz [ 257.507500][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 257.669638][ T30] audit: type=1400 audit(1790712589.551:703): avc: denied { setopt } for pid=10390 comm="syz.0.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 257.700576][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 257.720616][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 257.732801][ T5716] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 257.732848][ T5716] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 257.732864][ T5716] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 257.776897][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 257.776931][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.776943][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.776957][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 257.776971][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.776993][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.887550][ T5716] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 257.907139][ T5716] usb 5-1: USB disconnect, device number 14 [ 258.012799][ T10] usb 6-1: usb_control_msg returned -32 [ 258.012827][ T10] usbtmc 6-1:16.0: can't read capabilities [ 258.092227][T10397] kvm: user requested TSC rate below hardware speed [ 258.272564][ C0] blk_print_req_error: 203 callbacks suppressed [ 258.272579][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.272620][ C0] buffer_io_error: 200 callbacks suppressed [ 258.272627][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.272644][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.272674][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 258.272685][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.272715][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 258.272726][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.272756][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 258.272766][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.272796][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 258.272807][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.272836][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 258.272847][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.272877][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 258.273063][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.273096][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.273107][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.274770][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 258.274783][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 258.274813][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 258.421479][ T4974] ldm_validate_partition_table(): Disk read failed. [ 258.434760][ T4974] Dev loop6: unable to read RDB block 0 [ 258.445727][ T4974] loop6: unable to read partition table [ 258.445853][ T4974] loop6: partition table beyond EOD, truncated [ 258.620041][T10404] usbtmc 6-1:16.0: control status returned 0 [ 258.678116][T10408] ALSA: mixer_oss: invalid OSS volume '' [ 258.787054][T10411] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 258.808268][ T5735] usb 6-1: USB disconnect, device number 7 [ 259.010672][T10415] IPVS: persistence engine module ip_vs_pe_À not found [ 259.269294][T10436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1802'. [ 259.269822][T10436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1802'. [ 259.496050][ T30] audit: type=1400 audit(1790712591.371:704): avc: denied { map } for pid=10443 comm="syz.5.1808" path="socket:[32740]" dev="sockfs" ino=32740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 259.847661][T10458] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1812'. [ 259.849103][T10458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.885750][T10460] netlink: 'syz.5.1814': attribute type 12 has an invalid length. [ 259.885763][T10460] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1814'. [ 259.886410][T10460] netlink: 'syz.5.1814': attribute type 12 has an invalid length. [ 259.886420][T10460] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1814'. [ 260.101374][ T30] audit: type=1400 audit(1790712591.981:705): avc: denied { write } for pid=10464 comm="syz.4.1817" name="subsystems" dev="configfs" ino=1469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 261.225229][T10509] netlink: 'syz.5.1834': attribute type 2 has an invalid length. [ 261.747345][T10529] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5602] was attempted by ""[10529] [ 261.829027][ T8546] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 262.009280][ T8546] usb 6-1: Using ep0 maxpacket: 16 [ 262.030254][ T8546] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 262.068930][ T8546] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 262.068949][ T8546] usb 6-1: config 0 has no interface number 0 [ 262.068971][ T8546] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 262.068987][ T8546] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 262.170274][ T8546] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.170294][ T8546] usb 6-1: Product: syz [ 262.170302][ T8546] usb 6-1: Manufacturer: syz [ 262.170311][ T8546] usb 6-1: SerialNumber: syz [ 262.172200][ T8546] usb 6-1: config 0 descriptor?? [ 262.180584][T10524] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 262.180644][T10524] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 262.401557][T10524] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 262.401619][T10524] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 262.624875][ T8546] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 263.066013][T10544] FAULT_INJECTION: forcing a failure. [ 263.066013][T10544] name failslab, interval 1, probability 0, space 0, times 0 [ 263.066037][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.3.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.066054][T10544] Tainted: [L]=SOFTLOCKUP [ 263.066058][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.066066][T10544] Call Trace: [ 263.066072][T10544] [ 263.066077][T10544] dump_stack_lvl+0x100/0x190 [ 263.066100][T10544] should_fail_ex.cold+0x5/0xa [ 263.066125][T10544] should_failslab+0xc2/0x120 [ 263.066145][T10544] kmem_cache_alloc_noprof+0x92/0x6a0 [ 263.066159][T10544] ? find_held_lock+0x2b/0x80 [ 263.066178][T10544] ? mpol_new+0x11b/0x2d0 [ 263.066195][T10544] mpol_new+0x11b/0x2d0 [ 263.066210][T10544] do_mbind+0x210/0xfd0 [ 263.066226][T10544] ? __pfx_do_mbind+0x10/0x10 [ 263.066237][T10544] ? find_held_lock+0x2b/0x80 [ 263.066254][T10544] ? ksys_write+0x190/0x250 [ 263.066273][T10544] ? __pfx_get_nodes+0x10/0x10 [ 263.066292][T10544] kernel_mbind+0x1b7/0x200 [ 263.066305][T10544] ? __pfx_kernel_mbind+0x10/0x10 [ 263.066320][T10544] do_syscall_64+0x123/0x790 [ 263.066335][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.066347][T10544] RIP: 0033:0x7f80bcb9e159 [ 263.066357][T10544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.066368][T10544] RSP: 002b:00007f80bda18028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 263.066381][T10544] RAX: ffffffffffffffda RBX: 00007f80bce25fa0 RCX: 00007f80bcb9e159 [ 263.066389][T10544] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000001000 [ 263.066396][T10544] RBP: 00007f80bcc3506b R08: 0000000000000000 R09: 0000000000000000 [ 263.066403][T10544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.066409][T10544] R13: 00007f80bce26038 R14: 00007f80bce25fa0 R15: 00007ffdee3b5a08 [ 263.066425][T10544] [ 263.281228][ T8546] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 263.281248][ T8546] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 263.310821][ T8546] asix 6-1:0.34: probe with driver asix failed with error -71 [ 263.312885][ T8546] usb 6-1: USB disconnect, device number 8 [ 263.704937][T10554] veth0_to_bond: Caught tx_queue_len zero misconfig [ 263.787308][T10557] xt_hashlimit: size too large, truncated to 1048576 [ 264.212132][T10575] overlayfs: failed to decode file handle (len=8, type=248, flags=0, err=-22) [ 264.885744][T10599] Set syz1 is full, maxelem 256 reached [ 265.037342][ T30] audit: type=1400 audit(1790712596.911:706): avc: denied { read write } for pid=10603 comm="syz.0.1874" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 265.037376][ T30] audit: type=1400 audit(1790712596.911:707): avc: denied { open } for pid=10603 comm="syz.0.1874" path="/408/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 265.200760][T10611] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1886'. [ 265.428067][ T30] audit: type=1400 audit(1790712597.311:708): avc: denied { listen } for pid=10617 comm="syz.5.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 265.428388][ T30] audit: type=1400 audit(1790712597.311:709): avc: denied { read } for pid=10617 comm="syz.5.1878" path="socket:[33476]" dev="sockfs" ino=33476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 265.512760][ T30] audit: type=1400 audit(1790712597.391:710): avc: denied { write } for pid=10619 comm="syz.0.1879" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 265.875832][T10632] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 265.915296][ T5716] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 266.093432][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 266.113505][ T5716] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 266.161503][ T5716] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 266.161522][ T5716] usb 3-1: config 0 has no interface number 0 [ 266.161542][ T5716] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.161555][ T5716] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 266.161569][ T5716] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.161583][ T5716] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 266.161615][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.164229][ T5716] usb 3-1: config 0 descriptor?? [ 266.184177][ T5716] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 266.502551][T10645] tap0: tun_chr_ioctl cmd 2148553947 [ 266.502810][T10645] tap0: tun_chr_ioctl cmd 1074025677 [ 266.502887][T10645] tap0: linktype set to 270 [ 266.531125][ T8546] usb 3-1: USB disconnect, device number 16 [ 266.537469][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 266.595495][T10624] ldusb 3-1:0.55: Couldn't submit interrupt_out_urb -19 [ 266.617202][ T8546] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 266.812123][ T30] audit: type=1400 audit(1790712598.691:711): avc: denied { listen } for pid=10659 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 266.812500][ T30] audit: type=1400 audit(1790712598.691:712): avc: denied { accept } for pid=10659 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 266.941325][T10666] FAULT_INJECTION: forcing a failure. [ 266.941325][T10666] name failslab, interval 1, probability 0, space 0, times 0 [ 266.941347][T10666] CPU: 0 UID: 0 PID: 10666 Comm: syz.4.1900 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.941364][T10666] Tainted: [L]=SOFTLOCKUP [ 266.941368][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 266.941375][T10666] Call Trace: [ 266.941379][T10666] [ 266.941384][T10666] dump_stack_lvl+0x100/0x190 [ 266.941407][T10666] should_fail_ex.cold+0x5/0xa [ 266.941424][T10666] should_failslab+0xc2/0x120 [ 266.941440][T10666] __kmalloc_cache_noprof+0x91/0x6d0 [ 266.941453][T10666] ? kasan_save_track+0x14/0x30 [ 266.941467][T10666] ? nfs_init_fs_context+0x4f/0x1510 [ 266.941481][T10666] nfs_init_fs_context+0x4f/0x1510 [ 266.941495][T10666] alloc_fs_context+0x60c/0xf40 [ 266.941509][T10666] __x64_sys_fsopen+0xed/0x220 [ 266.941523][T10666] do_syscall_64+0x123/0x790 [ 266.941546][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.941559][T10666] RIP: 0033:0x7fda7919e159 [ 266.941570][T10666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.941581][T10666] RSP: 002b:00007fda79f93028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 266.941594][T10666] RAX: ffffffffffffffda RBX: 00007fda79425fa0 RCX: 00007fda7919e159 [ 266.941603][T10666] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000380 [ 266.941611][T10666] RBP: 00007fda7923506b R08: 0000000000000000 R09: 0000000000000000 [ 266.941618][T10666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.941625][T10666] R13: 00007fda79426038 R14: 00007fda79425fa0 R15: 00007fff3368fae8 [ 266.941641][T10666] [ 267.681115][T10688] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 267.814501][ T5604] Bluetooth: hci2: command 0x0406 tx timeout [ 267.840266][ T30] audit: type=1400 audit(1790712599.721:713): avc: denied { read } for pid=10691 comm="syz.4.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.112318][ T5735] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 268.291404][ T5735] usb 3-1: Using ep0 maxpacket: 8 [ 268.308465][ T5735] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 268.355391][ T5735] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.355409][ T5735] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 268.355441][ T5735] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.448436][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.448459][ T5735] usb 3-1: Product: syz [ 268.448467][ T5735] usb 3-1: Manufacturer: syz [ 268.448476][ T5735] usb 3-1: SerialNumber: syz [ 268.547309][ T30] audit: type=1400 audit(1790712600.431:714): avc: denied { override_creds } for pid=10712 comm="syz.0.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 269.181740][ T5607] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 269.181796][ T5607] Bluetooth: hci2: Injecting HCI hardware error event [ 269.208218][ T5607] Bluetooth: hci2: hardware error 0x00 [ 269.228592][ T8546] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 269.338610][ T5735] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 269.348830][ T5735] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 269.394165][ T5735] usb 3-1: USB disconnect, device number 17 [ 269.433854][ T8546] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 269.473772][ T9329] udevd[9329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.479721][ T8546] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.479751][ T8546] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.577979][ T8546] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.577997][ T8546] usb 5-1: Product: syz [ 269.578006][ T8546] usb 5-1: Manufacturer: syz [ 269.578014][ T8546] usb 5-1: SerialNumber: syz [ 269.604357][ T8546] usb 5-1: selecting invalid altsetting 1 [ 269.604381][ T8546] snd-usb-caiaq 5-1:1.0: can't set alt interface. [ 269.604389][ T8546] usb 5-1: unable to init card! (ret=-5) [ 269.604826][ T8546] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 269.757449][ T30] audit: type=1400 audit(1790712601.621:715): avc: denied { read write } for pid=10749 comm="syz.5.1937" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 269.824577][ T8546] usb 5-1: USB disconnect, device number 15 [ 270.093151][T10761] netlink: 'syz.3.1942': attribute type 2 has an invalid length. [ 270.093171][T10761] netlink: 'syz.3.1942': attribute type 2 has an invalid length. [ 270.431941][ T8546] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 270.611122][ T8546] usb 3-1: Using ep0 maxpacket: 8 [ 270.630949][ T8546] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 270.656270][T10786] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.1953' sets config #0 [ 270.676713][ T8546] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.676731][ T8546] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.752900][ T41] IPVS: starting estimator thread 0... [ 270.753171][T10787] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 270.762860][ T8546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.762878][ T8546] usb 3-1: Product: syz [ 270.762886][ T8546] usb 3-1: Manufacturer: syz [ 270.762895][ T8546] usb 3-1: SerialNumber: syz [ 270.763705][ T5735] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 270.766308][ T8546] usb 3-1: config 0 descriptor?? [ 270.838536][T10789] IPVS: using max 65 ests per chain, 156000 per kthread [ 270.940216][ T5735] usb 4-1: Using ep0 maxpacket: 16 [ 270.960000][ T5735] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 271.002556][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.002578][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.002591][ T5735] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 271.002614][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.004079][ T5735] usb 4-1: config 0 descriptor?? [ 271.080404][ T8546] usb 3-1: USB disconnect, device number 18 [ 271.125538][T10799] device-mapper: ioctl: Unable to rename non-existent device, to DUfwˆ™ª»ÌÝîÿ> [ 271.330151][ T5607] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 271.462664][ T5735] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000E/input/input21 [ 271.525844][ T5735] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 271.815074][ T5735] usb 4-1: USB disconnect, device number 12 [ 272.206474][T10832] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1971'. [ 272.638395][T10846] netlink: 'syz.2.1978': attribute type 23 has an invalid length. [ 272.681459][T10842] bond1 (unregistering): Released all slaves [ 273.427709][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 273.628093][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 273.673329][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.674855][ T10] usb 5-1: config 0 descriptor?? [ 273.821169][ T5735] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 273.910776][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 273.999899][ T5735] usb 6-1: Using ep0 maxpacket: 16 [ 274.019493][ T5735] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 274.060774][ T5735] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.060795][ T5735] usb 6-1: config 0 interface 0 has no altsetting 0 [ 274.130314][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 274.130331][ T10] [drm] Initialized udl on minor 1 [ 274.149753][ T5735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.149772][ T5735] usb 6-1: Product: syz [ 274.149789][ T5735] usb 6-1: Manufacturer: syz [ 274.149798][ T5735] usb 6-1: SerialNumber: syz [ 274.151540][ T5735] usb 6-1: config 0 descriptor?? [ 274.396334][ T5735] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input22 [ 274.658407][T10904] IPVS: Scheduler module ip_vs_sip not found [ 274.705878][ T5735] rc_core: IR keymap rc-imon-pad not found [ 274.705891][ T5735] Registered IR keymap rc-empty [ 274.705989][ T5735] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 274.706000][ T5735] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 274.764750][T10911] jffs2: notice: (10911) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 274.768815][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 274.768829][ T30] audit: type=1400 audit(1790712606.641:719): avc: denied { write } for pid=10910 comm="syz.2.2007" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.863735][ T5735] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 274.864684][ T5735] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 274.866605][ T5735] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:9> initialized [ 274.934339][T10914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2008'. [ 275.015824][ T30] audit: type=1400 audit(1790712606.891:720): avc: denied { add_name } for pid=10910 comm="syz.2.2007" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.015858][ T30] audit: type=1400 audit(1790712606.891:721): avc: denied { create } for pid=10910 comm="syz.2.2007" name="test" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 275.015881][ T30] audit: type=1400 audit(1790712606.891:722): avc: denied { read write open } for pid=10910 comm="syz.2.2007" path="/402/mnt/test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 275.331207][ T5716] usb 6-1: USB disconnect, device number 9 [ 275.576470][T10931] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 276.234440][T10954] binder: 10953:10954 ioctl c0306201 0 returned -14 [ 276.281941][ T30] audit: type=1400 audit(1790712608.151:723): avc: denied { write } for pid=10955 comm="syz.2.2025" name="instances" dev="tracefs" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 276.281984][ T30] audit: type=1400 audit(1790712608.151:724): avc: denied { add_name } for pid=10955 comm="syz.2.2025" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 276.282007][ T30] audit: type=1400 audit(1790712608.151:725): avc: denied { create } for pid=10955 comm="syz.2.2025" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 276.750270][ T5716] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 276.929419][ T5716] usb 6-1: Using ep0 maxpacket: 32 [ 276.951009][ T5716] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 276.989779][ T5716] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 276.989802][ T5716] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.989817][ T5716] usb 6-1: config 0 interface 0 has no altsetting 0 [ 276.989835][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.991298][ T5716] usb 6-1: config 0 descriptor?? [ 277.093347][T10974] netlink: 'syz.3.2032': attribute type 1 has an invalid length. [ 277.093363][T10974] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2032'. [ 277.093384][T10974] netlink: 'syz.3.2032': attribute type 1 has an invalid length. [ 277.093391][T10974] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.2032'. [ 277.389621][ T30] audit: type=1400 audit(1790712609.271:726): avc: denied { setopt } for pid=10981 comm="syz.3.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 277.446008][ T5716] input: HID 1e7d:2cf6 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1E7D:2CF6.000F/input/input24 [ 277.501083][T10987] netlink: 'syz.0.2037': attribute type 3 has an invalid length. [ 277.513665][ T5716] pyra 0003:1E7D:2CF6.000F: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 277.754349][ T5716] usb 6-1: USB disconnect, device number 10 [ 277.801129][T10997] lo: Caught tx_queue_len zero misconfig [ 278.014154][T11005] serio: Serial port ptm0 [ 278.016575][ T8546] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 278.220218][ T8546] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 278.262048][ T8546] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 278.262068][ T8546] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 278.351164][ T8546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.351183][ T8546] usb 3-1: Product: syz [ 278.351192][ T8546] usb 3-1: Manufacturer: syz [ 278.351201][ T8546] usb 3-1: SerialNumber: syz [ 278.371443][ T8546] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 278.403901][ T8546] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 278.403901][ T8546] Please send a copy of this message to and [ 279.176514][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 279.177019][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 279.199808][ T10] usb 5-1: USB disconnect, device number 16 [ 279.426052][ T8546] scsi host1: usb-storage 3-1:1.0 [ 279.446603][ T8546] usb 3-1: USB disconnect, device number 19 [ 279.970278][ T30] audit: type=1400 audit(1790712611.851:727): avc: denied { map } for pid=11046 comm="syz.4.2063" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.244517][T11050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.494467][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2067'. [ 280.533996][T11058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.580063][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2067'. [ 280.619189][ T1105] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.619268][ T1105] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.619328][ T1105] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.646698][ T1399] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.955420][T11066] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2071'. [ 281.000151][T11066] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2071'. [ 281.266749][T11068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2072'. [ 281.958394][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 282.009156][T11088] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 282.109085][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.114965][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.115001][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 282.115030][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 282.115058][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.115118][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.204815][ T10] usb 3-1: config 0 descriptor?? [ 282.327910][ T8546] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 282.483910][ T8546] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.485493][ T8546] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.485524][ T8546] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 282.485554][ T8546] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.485617][ T8546] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 282.485646][ T8546] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 282.585377][ T8546] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.585412][ T8546] usb 6-1: Product: syz [ 282.585453][ T8546] usb 6-1: Manufacturer: syz [ 282.625220][ T8546] cdc_wdm 6-1:1.0: skipping garbage [ 282.625250][ T8546] cdc_wdm 6-1:1.0: skipping garbage [ 282.656681][ T8546] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 282.656712][ T8546] cdc_wdm 6-1:1.0: Unknown control protocol [ 282.826631][ T10] hid_parser_main: 40 callbacks suppressed [ 282.826660][ T10] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 282.826693][ T10] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 282.826722][ T10] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 282.826752][ T10] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 282.826780][ T10] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 282.826795][ T10] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 282.826824][ T10] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 282.826852][ T10] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 282.826881][ T10] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 282.826895][ T10] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 282.967569][ T10] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 283.065059][T11105] jffs2: notice: (11105) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 283.134530][ T30] audit: type=1400 audit(1790712615.011:728): avc: denied { write } for pid=11102 comm="syz.3.2088" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.239009][ T30] audit: type=1400 audit(1790712615.121:729): avc: denied { read write } for pid=11091 comm="syz.5.2083" name="cdc-wdm0" dev="devtmpfs" ino=3597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 283.239451][ T30] audit: type=1400 audit(1790712615.121:730): avc: denied { open } for pid=11091 comm="syz.5.2083" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 283.342858][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 283.342960][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 283.343150][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 283.343162][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 283.343343][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 283.343355][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 283.343523][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 283.343534][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 283.343740][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 283.343754][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 283.343924][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 283.343935][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 283.344111][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 283.344124][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 283.344297][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 283.344308][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 283.344487][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 283.344500][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 283.344669][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 283.344680][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 283.345108][ T8546] usb 3-1: USB disconnect, device number 20 [ 283.350114][ T10] usb 6-1: USB disconnect, device number 11 [ 283.663602][T11108] fido_id[11108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 283.749985][ T30] audit: type=1400 audit(1790712615.631:731): avc: denied { getopt } for pid=11109 comm="syz.4.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 285.351997][ T30] audit: type=1400 audit(1790712617.231:732): avc: denied { write } for pid=11151 comm="syz.5.2105" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 285.549033][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 285.698466][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 285.701446][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.731477][ T10] usb 4-1: config 0 descriptor?? [ 285.995599][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 286.328954][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 286.328991][ T10] [drm] Initialized udl on minor 1 [ 286.776729][T11183] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2116'. [ 288.041493][T11206] Bluetooth: MGMT ver 1.23 [ 289.097765][T11222] netlink: 'syz.4.2131': attribute type 29 has an invalid length. [ 289.125616][T11222] netlink: 'syz.4.2131': attribute type 29 has an invalid length. [ 289.176364][T11222] netlink: 4432 bytes leftover after parsing attributes in process `syz.4.2131'. [ 289.211148][T11225] bridge0: port 3(veth0) entered blocking state [ 289.211275][T11225] bridge0: port 3(veth0) entered disabled state [ 289.211505][T11225] veth0: entered allmulticast mode [ 289.215895][T11225] veth0: entered promiscuous mode [ 289.216571][T11225] bridge0: port 3(veth0) entered blocking state [ 289.216650][T11225] bridge0: port 3(veth0) entered forwarding state [ 289.448805][T11229] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 289.472592][ T8546] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 289.815107][T11237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.005485][ T30] audit: type=1400 audit(1790712621.881:733): avc: denied { create } for pid=11240 comm="syz.2.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.082574][ T30] audit: type=1400 audit(1790712621.961:734): avc: denied { bind } for pid=11240 comm="syz.2.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.122485][ T30] audit: type=1400 audit(1790712622.001:735): avc: denied { write } for pid=11240 comm="syz.2.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.215283][ T30] audit: type=1400 audit(1790712622.091:736): avc: denied { getopt } for pid=11240 comm="syz.2.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.528003][ T5716] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 290.646054][T11251] iou-wrk-11250 (11251): drop_caches: 0 [ 291.422989][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 291.423360][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 291.472130][ T10] usb 4-1: USB disconnect, device number 13 [ 291.510304][ T5716] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 291.558578][ T5716] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 291.685516][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2148'. [ 291.722670][T11260] netlink: 'syz.0.2148': attribute type 9 has an invalid length. [ 291.722699][T11260] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2148'. [ 291.993935][T11264] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 291.993956][T11264] CPU: 0 UID: 0 PID: 11264 Comm: syz.3.2149 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.993974][T11264] Tainted: [L]=SOFTLOCKUP [ 291.993978][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 291.993986][T11264] Call Trace: [ 291.993990][T11264] [ 291.993995][T11264] dump_stack_lvl+0x100/0x190 [ 291.994019][T11264] sysfs_warn_dup.cold+0x1c/0x28 [ 291.994038][T11264] sysfs_create_dir_ns+0x24b/0x2b0 [ 291.994055][T11264] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 291.994070][T11264] ? find_held_lock+0x2b/0x80 [ 291.994089][T11264] ? kobject_add_internal+0x25f/0x930 [ 291.994104][T11264] ? kobject_add_internal+0x25f/0x930 [ 291.994120][T11264] ? class_dir_child_ns_type+0xd/0x60 [ 291.994141][T11264] kobject_add_internal+0x2c8/0x930 [ 291.994159][T11264] kobject_add+0x16a/0x1e0 [ 291.994173][T11264] ? __pfx_kobject_add+0x10/0x10 [ 291.994189][T11264] ? get_device_parent+0x1b3/0x4c0 [ 291.994206][T11264] ? kobject_put+0xb9/0x640 [ 291.994225][T11264] device_add+0x294/0x1970 [ 291.994253][T11264] ? lockdep_init_map_type+0x5c/0x250 [ 291.994268][T11264] ? __pfx_device_add+0x10/0x10 [ 291.994285][T11264] ? lockdep_init_map_type+0x5c/0x250 [ 291.994300][T11264] ? __init_waitqueue_head+0xca/0x150 [ 291.994320][T11264] tty_register_device_attr+0x388/0x7f0 [ 291.994337][T11264] ? lockdep_init_map_type+0x5c/0x250 [ 291.994351][T11264] ? __pfx_tty_register_device_attr+0x10/0x10 [ 291.994370][T11264] ? tty_port_init+0x156/0x1c0 [ 291.994387][T11264] gsm_activate_mux+0x155/0x2a0 [ 291.994403][T11264] gsmld_ioctl+0xbbc/0x15c0 [ 291.994417][T11264] ? kasan_quarantine_put+0x104/0x240 [ 291.994431][T11264] ? __pfx_gsmld_ioctl+0x10/0x10 [ 291.994454][T11264] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 291.994469][T11264] ? __pfx_gsmld_ioctl+0x10/0x10 [ 291.994478][T11264] tty_ioctl+0x11b4/0x1640 [ 291.994494][T11264] ? __pfx_tty_ioctl+0x10/0x10 [ 291.994507][T11264] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 291.994524][T11264] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 291.994542][T11264] ? __fget_files+0x34/0x3d0 [ 291.994564][T11264] ? selinux_file_ioctl+0x13b/0x290 [ 291.994578][T11264] ? selinux_file_ioctl+0xb6/0x290 [ 291.994593][T11264] ? __pfx_tty_ioctl+0x10/0x10 [ 291.994608][T11264] __x64_sys_ioctl+0x18e/0x210 [ 291.994622][T11264] do_syscall_64+0x123/0x790 [ 291.994636][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.994648][T11264] RIP: 0033:0x7f80bcb9e159 [ 291.994658][T11264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.994670][T11264] RSP: 002b:00007f80bd9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.994682][T11264] RAX: ffffffffffffffda RBX: 00007f80bce26090 RCX: 00007f80bcb9e159 [ 291.994690][T11264] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 291.994698][T11264] RBP: 00007f80bcc3506b R08: 0000000000000000 R09: 0000000000000000 [ 291.994706][T11264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.994713][T11264] R13: 00007f80bce26128 R14: 00007f80bce26090 R15: 00007ffdee3b5a08 [ 291.994730][T11264] [ 292.430237][T11264] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 292.571213][ T30] audit: type=1400 audit(1790712624.451:737): avc: denied { ioctl } for pid=11267 comm="syz.0.2151" path="socket:[37032]" dev="sockfs" ino=37032 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 294.607186][T11288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.413056][T11311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.667776][ T30] audit: type=1400 audit(1790712628.551:738): avc: denied { mount } for pid=11337 comm="syz.5.2179" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 296.742770][T11340] tipc: Started in network mode [ 296.742824][T11340] tipc: Node identity ac14142f, cluster identity 4711 [ 296.790172][ T30] audit: type=1807 audit(1790712628.671:739): action=measure func=FILE_CHECK res=1 [ 296.822610][T11339] ima: policy update completed [ 296.822817][ T30] audit: type=1802 audit(1790712628.701:740): pid=11339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.5.2179" res=1 errno=0 [ 296.860368][T11340] tipc: New replicast peer: 127.0.0.1 [ 296.930879][T11340] tipc: Enabled bearer , priority 10 [ 296.964148][ T30] audit: type=1400 audit(1790712628.841:741): avc: denied { unmount } for pid=8212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 297.023169][T11347] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2181'. [ 297.050846][T11346] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2180'. [ 297.162083][T11349] loop5: detected capacity change from 0 to 4095 [ 297.204801][ T30] audit: type=1800 audit(1790712629.081:742): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15500 res=0 errno=0 [ 297.425872][ T30] audit: type=1800 audit(1790712629.301:743): pid=11357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2186" name="target" dev="sysfs" ino=4884 res=0 errno=0 [ 297.787014][T11349] buffer_io_error: 130 callbacks suppressed [ 297.787045][T11349] Buffer I/O error on dev loop5, logical block 511, async page read [ 297.840541][ T9326] Buffer I/O error on dev loop5, logical block 511, async page read [ 297.933089][ T30] audit: type=1800 audit(1790712629.811:744): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4787 res=0 errno=0 [ 297.999024][ T5716] tipc: Node number set to 2886997039 [ 298.118940][ T30] audit: type=1800 audit(1790712630.001:745): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15500 res=0 errno=0 [ 298.416487][ T30] audit: type=1800 audit(1790712630.291:746): pid=11372 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2194" name="carrier" dev="sysfs" ino=91867 res=0 errno=0 [ 298.535501][ T5607] Bluetooth: hci5: command 0x0406 tx timeout [ 298.857939][ T30] audit: type=1800 audit(1790712630.741:747): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166814 res=0 errno=0 [ 298.907787][ T30] audit: type=1800 audit(1790712630.781:748): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166829 res=0 errno=0 [ 299.801584][ T30] audit: type=1400 audit(1790712631.681:749): avc: denied { bind } for pid=11391 comm="syz.2.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 299.835888][ T30] audit: type=1400 audit(1790712631.711:750): avc: denied { connect } for pid=11391 comm="syz.2.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 300.523585][ T30] audit: type=1400 audit(1790712632.401:751): avc: denied { execute } for pid=11406 comm="syz.0.2206" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.749545][ T30] audit: type=1800 audit(1790712632.631:752): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31346 res=0 errno=0 [ 300.789690][ T30] audit: type=1800 audit(1790712632.671:753): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31369 res=0 errno=0 [ 300.969712][ T5716] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 301.081622][T11422] input: syz1 as /devices/virtual/input/input25 [ 301.098694][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 301.125928][ T5716] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 301.126895][ T5716] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 301.126911][ T5716] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 301.151437][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.151499][ T5716] usb 5-1: Product: syz [ 301.151508][ T5716] usb 5-1: Manufacturer: syz [ 301.151531][ T5716] usb 5-1: SerialNumber: syz [ 301.223924][ T5716] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 301.252546][ T5716] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 301.252546][ T5716] Please send a copy of this message to and [ 301.301573][ T10] usb 1-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 301.306516][ T10] usb 1-1: config 253 has an invalid interface number: 130 but max is 0 [ 301.306549][ T10] usb 1-1: config 253 has no interface number 0 [ 301.306586][ T10] usb 1-1: config 253 interface 130 has no altsetting 0 [ 301.355065][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.355098][ T10] usb 1-1: Product: syz [ 301.355108][ T10] usb 1-1: Manufacturer: syz [ 301.355132][ T10] usb 1-1: SerialNumber: syz [ 301.768079][ T5716] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 302.131340][ T10] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 302.159665][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 302.162049][ T10] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 302.162097][ T10] usb 1-1: media controller created [ 302.251441][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.329865][ T8546] usb 5-1: USB disconnect, device number 17 [ 302.526067][ T10] DVB: Unable to find symbol dib8000_attach() [ 302.526099][ T10] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 302.598483][ T10] rc_core: IR keymap rc-dib0700-nec not found [ 302.598511][ T10] Registered IR keymap rc-empty [ 302.598783][ T10] dvb-usb: could not initialize remote control. [ 302.598788][ T10] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 302.600480][ T10] dib0700: There's no endpoint for remote controller [ 303.078186][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 303.078199][ T30] audit: type=1800 audit(1790712634.961:792): pid=11442 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2218" name="submit_queues" dev="configfs" ino=37775 res=0 errno=0 [ 303.140831][ T10] usb 1-1: USB disconnect, device number 10 [ 303.294382][ T10] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 303.356467][ T30] audit: type=1800 audit(1790712635.231:793): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=167288 res=0 errno=0 [ 303.412930][ T5735] libceph: connect (1)127.0.0.1:6789 error -101 [ 303.413132][ T5735] libceph: mon0 (1)127.0.0.1:6789 connect error [ 303.667788][ T10] libceph: connect (1)127.0.0.1:6789 error -101 [ 303.667966][ T10] libceph: mon0 (1)127.0.0.1:6789 connect error [ 304.103198][T11444] ceph: No mds server is up or the cluster is laggy [ 304.104547][T11469] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 304.300896][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 304.440303][ T30] audit: type=1800 audit(1790712636.321:794): pid=11474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2229" name="delay_use" dev="sysfs" ino=59671 res=0 errno=0 [ 304.473399][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 304.474847][ T10] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 304.476098][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.476133][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 304.476166][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 304.476201][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.551358][ T30] audit: type=1800 audit(1790712636.431:795): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168145 res=0 errno=0 [ 304.553449][ T10] usb 1-1: config 0 descriptor?? [ 304.597720][ T30] audit: type=1800 audit(1790712636.471:796): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=168174 res=0 errno=0 [ 304.637443][ T30] audit: type=1800 audit(1790712636.511:797): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=168152 res=0 errno=0 [ 304.674934][ T30] audit: type=1800 audit(1790712636.541:798): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=168153 res=0 errno=0 [ 304.675029][ T30] audit: type=1800 audit(1790712636.541:799): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=168154 res=0 errno=0 [ 304.747504][ T30] audit: type=1800 audit(1790712636.621:800): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168194 res=0 errno=0 [ 305.054658][ T30] audit: type=1800 audit(1790712636.931:801): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168212 res=0 errno=0 [ 305.116595][ T10] nintendo 0003:057E:2019.0011: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 305.692110][ T10] nintendo 0003:057E:2019.0011: Failed to get joycon info; ret=-71 [ 305.692143][ T10] nintendo 0003:057E:2019.0011: Failed to retrieve controller info; ret=-71 [ 305.692169][ T10] nintendo 0003:057E:2019.0011: Failed to initialize controller; ret=-71 [ 305.760425][ T10] nintendo 0003:057E:2019.0011: probe - fail = -71 [ 305.760634][ T10] nintendo 0003:057E:2019.0011: probe with driver nintendo failed with error -71 [ 305.816251][ T10] usb 1-1: USB disconnect, device number 11 [ 306.647615][T11506] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2241'. [ 306.647661][T11506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2241'. [ 306.833558][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 307.117519][ T5716] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 307.269233][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 307.274752][ T5716] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 307.294054][ T5716] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 307.294086][ T5716] usb 4-1: config 0 has no interface number 0 [ 307.318782][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.318813][ T5716] usb 4-1: Product: syz [ 307.318821][ T5716] usb 4-1: Manufacturer: syz [ 307.318844][ T5716] usb 4-1: SerialNumber: syz [ 307.325674][ T5716] usb 4-1: config 0 descriptor?? [ 307.369160][ T5716] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 307.547997][ T5716] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 307.577862][ T5716] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 307.974648][T11522] CacheFiles: Failed to register: -95 [ 308.003852][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 308.004248][ T5716] usb 4-1: USB disconnect, device number 14 [ 308.039017][ T5716] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 308.080122][ T5716] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 308.080758][ T5716] quatech2 4-1:0.51: device disconnected [ 308.667146][T11533] jffs2: notice: (11533) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 308.832028][T11539] netlink: 'syz.3.2255': attribute type 12 has an invalid length. [ 308.832058][T11539] netlink: 'syz.3.2255': attribute type 29 has an invalid length. [ 308.832078][T11539] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2255'. [ 308.832118][T11539] netlink: 'syz.3.2255': attribute type 1 has an invalid length. [ 308.832126][T11539] netlink: 'syz.3.2255': attribute type 2 has an invalid length. [ 308.832146][T11539] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2255'. [ 309.196420][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2258'. [ 309.359541][ T5716] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 309.509587][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 309.538912][ T5716] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 309.545905][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.589476][ T5716] usb 4-1: config 0 descriptor?? [ 309.606967][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 309.606980][ T30] audit: type=1800 audit(1790712641.481:823): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168592 res=0 errno=0 [ 309.653635][ T5716] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 309.664837][ T30] audit: type=1800 audit(1790712641.541:824): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=168621 res=0 errno=0 [ 309.665468][ T30] audit: type=1800 audit(1790712641.541:825): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=168599 res=0 errno=0 [ 309.681622][ T30] audit: type=1800 audit(1790712641.561:826): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=168600 res=0 errno=0 [ 309.776803][ T30] audit: type=1400 audit(1790712641.651:827): avc: denied { getopt } for pid=11558 comm="syz.4.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 309.811823][ T30] audit: type=1800 audit(1790712641.661:828): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=168601 res=0 errno=0 [ 309.877603][ T30] audit: type=1800 audit(1790712641.751:829): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168671 res=0 errno=0 [ 310.248200][ T30] audit: type=1400 audit(1790712642.131:830): avc: denied { write } for pid=11567 comm="syz.2.2269" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 310.248641][ T30] audit: type=1400 audit(1790712642.131:831): avc: denied { open } for pid=11567 comm="syz.2.2269" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 310.314549][ T30] audit: type=1400 audit(1790712642.191:832): avc: denied { ioctl } for pid=11567 comm="syz.2.2269" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 310.883970][ T5716] usb 4-1: USB disconnect, device number 15 [ 312.565736][T11604] Invalid logical block size (948) [ 312.792036][T11605] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 312.792164][T11605] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 312.821230][T11611] jffs2: notice: (11611) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 312.918956][T11605] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 312.919235][T11605] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 313.237918][ T5716] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 313.388232][ T5716] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 313.396670][ T5716] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 313.396705][ T5716] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 313.439564][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.439598][ T5716] usb 1-1: Product: syz [ 313.439623][ T5716] usb 1-1: Manufacturer: syz [ 313.439631][ T5716] usb 1-1: SerialNumber: syz [ 313.856121][ T5716] kaweth 1-1:1.0: Firmware present in device. [ 314.013641][ T5716] kaweth 1-1:1.0: Statistics collection: 0 [ 314.013657][ T5716] kaweth 1-1:1.0: Multicast filter limit: 0 [ 314.013682][ T5716] kaweth 1-1:1.0: MTU: 0 [ 314.013690][ T5716] kaweth 1-1:1.0: Read MAC address 00:00:00:00:00:00 [ 314.482588][T11646] FAULT_INJECTION: forcing a failure. [ 314.482588][T11646] name failslab, interval 1, probability 0, space 0, times 0 [ 314.482629][T11646] CPU: 0 UID: 0 PID: 11646 Comm: syz.5.2301 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.482646][T11646] Tainted: [L]=SOFTLOCKUP [ 314.482651][T11646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 314.482671][T11646] Call Trace: [ 314.482676][T11646] [ 314.482681][T11646] dump_stack_lvl+0x100/0x190 [ 314.482704][T11646] should_fail_ex.cold+0x5/0xa [ 314.482722][T11646] should_failslab+0xc2/0x120 [ 314.482738][T11646] __kvmalloc_node_noprof+0x113/0x9b0 [ 314.482755][T11646] ? newary+0x185/0xc30 [ 314.482769][T11646] newary+0x185/0xc30 [ 314.482780][T11646] ? ipcget+0x8aa/0xf50 [ 314.482794][T11646] ? ipcget+0x8aa/0xf50 [ 314.482811][T11646] ipcget+0x909/0xf50 [ 314.482828][T11646] ? __pfx_do_futex+0x10/0x10 [ 314.482846][T11646] ? __pfx_ipcget+0x10/0x10 [ 314.482873][T11646] ? __x64_sys_futex+0x34f/0x4d0 [ 314.482892][T11646] __x64_sys_semget+0x1cb/0x260 [ 314.482907][T11646] ? __pfx___x64_sys_semget+0x10/0x10 [ 314.482926][T11646] do_syscall_64+0x123/0x790 [ 314.482940][T11646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.482952][T11646] RIP: 0033:0x7f4f1879e159 [ 314.482963][T11646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.482974][T11646] RSP: 002b:00007f4f1974e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 314.482987][T11646] RAX: ffffffffffffffda RBX: 00007f4f18a25fa0 RCX: 00007f4f1879e159 [ 314.482995][T11646] RDX: 000000000000039c RSI: 0000000000000003 RDI: 00000000798e2649 [ 314.483003][T11646] RBP: 00007f4f1883506b R08: 0000000000000000 R09: 0000000000000000 [ 314.483010][T11646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.483017][T11646] R13: 00007f4f18a26038 R14: 00007f4f18a25fa0 R15: 00007ffe4a720388 [ 314.483033][T11646] [ 314.747063][ T5716] kaweth 1-1:1.0: Error setting receive filter [ 314.747302][ T5716] kaweth 1-1:1.0: probe with driver kaweth failed with error -5 [ 314.778895][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 314.778908][ T30] audit: type=1800 audit(1790712646.661:846): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=169345 res=0 errno=0 [ 314.831654][ T30] audit: type=1800 audit(1790712646.711:847): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=169346 res=0 errno=0 [ 314.863348][ T5604] Bluetooth: hci5: command 0x0406 tx timeout [ 314.877094][ T30] audit: type=1800 audit(1790712646.751:848): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=169325 res=0 errno=0 [ 314.906328][ T5716] usb 1-1: USB disconnect, device number 12 [ 314.928368][ T5604] Bluetooth: hci3: command 0x0405 tx timeout [ 315.027453][ T30] audit: type=1800 audit(1790712646.901:849): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=169347 res=0 errno=0 [ 315.442138][T11656] program syz.5.2305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.505269][T11657] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 315.518229][ T5716] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 315.670531][ T5716] usb 5-1: Using ep0 maxpacket: 8 [ 315.671250][ T5716] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 315.672390][ T5716] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 315.672433][ T5716] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.672465][ T5716] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.672495][ T5716] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.672524][ T5716] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.672562][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.800708][ T30] audit: type=1800 audit(1790712647.681:850): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169460 res=0 errno=0 [ 315.837577][ T30] audit: type=1800 audit(1790712647.711:851): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=169489 res=0 errno=0 [ 315.840843][ T30] audit: type=1800 audit(1790712647.711:852): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=169467 res=0 errno=0 [ 315.897657][ T30] audit: type=1800 audit(1790712647.711:853): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=169468 res=0 errno=0 [ 315.925537][ T30] audit: type=1800 audit(1790712647.801:854): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=169469 res=0 errno=0 [ 315.975069][ T30] audit: type=1800 audit(1790712647.851:855): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169509 res=0 errno=0 [ 316.042851][ T5716] usb 5-1: GET_CAPABILITIES returned 0 [ 316.042893][ T5716] usbtmc 5-1:16.0: can't read capabilities [ 316.370195][ T5735] usb 5-1: USB disconnect, device number 18 [ 316.418721][T11669] Ring buffer clock went backwards: 316427756434 -> 1 [ 316.418751][ C0] [CPU: 0]TIME DOES NOT MATCH expected:316427756435 actual:2 delta:1 before:1 after:1 context:s [ 316.418751][ C0] trace clock:trace_clock_counter+0x0/0x40 [ 316.418786][ C0] [316425131313] PAGE TIME STAMP [ 316.418793][ C0] 0x0: [316425131313] delta:0 .d [ 316.418802][ C0] 0x24: [316425154797] delta:23484 .d [ 316.418811][ C0] 0x48: [316425188271] delta:33474 .d [ 316.418820][ C0] 0x6c: [316425221999] delta:33728 .d [ 316.418829][ C0] 0x90: [316425256974] delta:34975 .d [ 316.418837][ C0] 0xb4: [316425291429] delta:34455 .d [ 316.418846][ C0] 0xd8: [316425323789] delta:32360 .d [ 316.418854][ C0] 0xfc: [316425357423] delta:33634 .d [ 316.418863][ C0] 0x120: [316425391174] delta:33751 .d [ 316.418872][ C0] 0x144: [316425424884] delta:33710 .d [ 316.418880][ C0] 0x168: [316425457865] delta:32981 .d [ 316.418889][ C0] 0x18c: [316425492796] delta:34931 .d [ 316.418898][ C0] 0x1b0: [316425525905] delta:33109 .d [ 316.418906][ C0] 0x1d4: [316425560318] delta:34413 .d [ 316.418915][ C0] 0x1f8: [316425592964] delta:32646 .d [ 316.418923][ C0] 0x21c: [316425626522] delta:33558 .d [ 316.418932][ C0] 0x240: [316425662813] delta:36291 .d [ 316.418941][ C0] 0x264: [316425694209] delta:31396 .d [ 316.418949][ C0] 0x288: [316425727759] delta:33550 .d [ 316.418957][ C0] 0x2ac: [316425762375] delta:34616 .d [ 316.418966][ C0] 0x2d0: [316425795788] delta:33413 .d [ 316.418974][ C0] 0x2f4: [316425829272] delta:33484 .d [ 316.418983][ C0] 0x318: [316425864678] delta:35406 .d [ 316.418991][ C0] 0x33c: [316425898817] delta:34139 .d [ 316.419000][ C0] 0x360: [316425932083] delta:33266 .d [ 316.419008][ C0] 0x384: [316425965605] delta:33522 .d [ 316.419017][ C0] 0x3a8: [316425999675] delta:34070 .d [ 316.419025][ C0] 0x3cc: [316426033295] delta:33620 .d [ 316.419034][ C0] 0x3f0: [316426066241] delta:32946 .d [ 316.419042][ C0] 0x414: [316426100552] delta:34311 .d [ 316.419051][ C0] 0x438: [316426133730] delta:33178 .d [ 316.419059][ C0] 0x45c: [316426167295] delta:33565 .d [ 316.419068][ C0] 0x480: [316426202142] delta:34847 .d [ 316.419076][ C0] 0x4a4: [316426235354] delta:33212 .d [ 316.419085][ C0] 0x4c8: [316426269525] delta:34171 .d [ 316.419093][ C0] 0x4ec: [316426303738] delta:34213 .d [ 316.419102][ C0] 0x510: [316426336345] delta:32607 .d [ 316.419110][ C0] 0x534: [316426370002] delta:33657 .d [ 316.419119][ C0] 0x558: [316426421353] delta:51351 .d [ 316.419127][ C0] 0x57c: [316426439714] delta:18361 sd [ 316.419136][ C0] 0x5a0: [316426472868] delta:33154 sd [ 316.419144][ C0] 0x5c4: [316426506519] delta:33651 sd [ 316.419153][ C0] 0x5e8: [316426540607] delta:34088 sd [ 316.419161][ C0] 0x60c: [316426573639] delta:33032 sd [ 316.419175][ C0] 0x630: [316426606798] delta:33159 sd [ 316.419183][ C0] 0x654: [316426645067] delta:38269 .d [ 316.419192][ C0] 0x678: [316426675594] delta:30527 sd [ 316.419201][ C0] 0x69c: [316426708288] delta:32694 sd [ 316.419209][ C0] 0x6c0: [316426741976] delta:33688 sd [ 316.419218][ C0] 0x6e4: [316426777147] delta:35171 sd [ 316.419226][ C0] 0x708: [316426810284] delta:33137 sd [ 316.419235][ C0] 0x72c: [316426843648] delta:33364 sd [ 316.419244][ C0] 0x750: [316426877513] delta:33865 sd [ 316.419253][ C0] 0x774: [316426910793] delta:33280 sd [ 316.419261][ C0] 0x798: [316426944854] delta:34061 sd [ 316.419270][ C0] 0x7bc: [316426978678] delta:33824 sd [ 316.419279][ C0] 0x7e0: [316427012316] delta:33638 sd [ 316.419287][ C0] 0x804: [316427046357] delta:34041 sd [ 316.419296][ C0] 0x828: [316427080455] delta:34098 sd [ 316.419305][ C0] 0x84c: [316427115340] delta:34885 .d [ 316.419313][ C0] 0x870: [316427148085] delta:32745 .d [ 316.419322][ C0] 0x894: [316427182728] delta:34643 .d [ 316.419331][ C0] 0x8b8: [316427216092] delta:33364 .d [ 316.419339][ C0] 0x8dc: [316427254967] delta:38875 .d [ 316.419348][ C0] 0x900: [316427282671] delta:27704 .d [ 316.419356][ C0] 0x924: [316427316303] delta:33632 .d [ 316.419365][ C0] 0x948: [316427350617] delta:34314 .d [ 316.419374][ C0] 0x96c: [316427383960] delta:33343 .d [ 316.419382][ C0] 0x990: [316427417600] delta:33640 .d [ 316.419391][ C0] 0x9b4: [316427451297] delta:33697 .d [ 316.419399][ C0] 0x9d8: [316427485200] delta:33903 .d [ 316.419408][ C0] 0x9fc: [316427518919] delta:33719 .d [ 316.419417][ C0] 0xa20: [316427553164] delta:34245 .d [ 316.419425][ C0] 0xa44: [316427586690] delta:33526 .d [ 316.419434][ C0] 0xa68: [316427621805] delta:35115 .d [ 316.419443][ C0] 0xa8c: [316427655149] delta:33344 .d [ 316.419451][ C0] 0xab0: [316427688134] delta:32985 .d [ 316.419460][ C0] 0xad4: [316427720839] delta:32705 .d [ 316.419469][ C0] 0xaf8: [316427732134] delta:11295 .d [ 316.419477][ C0] 0xb1c: [316427756434] delta:24300 .d [ 316.419486][ C0] 0xb40: [316427756434] delta:0 TIME EXTEND [ 316.419493][ C0] 0xb48: [316427756434] delta:0 .d [ 316.419501][ C0] expected end:0xb6c last event actually ended at:0xb6c [ 316.419604][ C0] ------------[ cut here ]------------ [ 316.419608][ C0] system_state != SYSTEM_BOOTING [ 316.419615][ C0] WARNING: kernel/trace/ring_buffer.c:4783 at check_buffer.cold+0x1a2/0x1ef, CPU#0: syz.2.2310/11669 [ 316.934634][ C0] Modules linked in: [ 316.938518][ C0] CPU: 0 UID: 0 PID: 11669 Comm: syz.2.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.949431][ C0] Tainted: [L]=SOFTLOCKUP [ 316.953727][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 316.963751][ C0] RIP: 0010:check_buffer.cold+0x1a2/0x1ef [ 316.969453][ C0] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 5c 8b 2d 8c e5 21 10 31 ff 89 ee e8 3f 17 e9 00 85 ed 0f 84 58 b2 eb 00 e8 c2 1c e9 00 90 <0f> 0b 90 e9 03 b0 eb 00 49 c7 c7 60 5e f6 8b e9 51 fe ff ff e8 98 [ 316.989042][ C0] RSP: 0018:ffffc90000007858 EFLAGS: 00010046 [ 316.995091][ C0] RAX: 0000000000000000 RBX: 1ffff92000000f11 RCX: 0000000000000103 [ 317.003034][ C0] RDX: ffff8880556ba580 RSI: ffffffff8123280e RDI: ffff8880556ba580 [ 317.010978][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 317.018924][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000002 [ 317.026865][ C0] R13: ffff88801c095000 R14: ffff888071530000 R15: ffffffff8bf65a00 [ 317.034816][ C0] FS: 00007f3b30b456c0(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 317.043721][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.050279][ C0] CR2: 0000001b32f11ff8 CR3: 00000000586ea000 CR4: 00000000003526f0 [ 317.058225][ C0] Call Trace: [ 317.061485][ C0] [ 317.064305][ C0] ? __pfx_trace_clock_counter+0x10/0x10 [ 317.069931][ C0] ? __pfx_check_buffer+0x10/0x10 [ 317.074928][ C0] ? find_held_lock+0x2b/0x80 [ 317.079586][ C0] ? console_srcu_read_unlock+0x41/0x60 [ 317.085121][ C0] ? console_srcu_read_unlock+0x41/0x60 [ 317.090646][ C0] __rb_reserve_next.constprop.0+0x486/0x1640 [ 317.096706][ C0] ring_buffer_lock_reserve+0x49a/0x1220 [ 317.102313][ C0] ? _printk+0xcf/0x110 [ 317.106453][ C0] ? __pfx__printk+0x10/0x10 [ 317.111016][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 317.115926][ C0] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 317.121978][ C0] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 317.128113][ C0] trace_event_buffer_reserve+0x1f9/0x350 [ 317.133811][ C0] trace_event_raw_event_msr_trace_class+0xe8/0x270 [ 317.140377][ C0] ? __pfx_trace_event_raw_event_msr_trace_class+0x10/0x10 [ 317.147550][ C0] ? lock_acquire+0x1d1/0x380 [ 317.152221][ C0] ? clockevents_program_event+0x23e/0x820 [ 317.158017][ C0] ? clockevents_program_event+0x23e/0x820 [ 317.163805][ C0] trace_write_msr+0x160/0x1f0 [ 317.168547][ C0] lapic_next_event+0x10/0x20 [ 317.173199][ C0] clockevents_program_event+0x375/0x820 [ 317.178819][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 317.184968][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 317.190329][ C0] tick_program_event+0xa9/0x140 [ 317.195259][ C0] __hrtimer_rearm_deferred+0x234/0x7b0 [ 317.200790][ C0] irqentry_exit+0x5f3/0xa10 [ 317.205362][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.211318][ C0] RIP: 0010:handle_softirqs+0x1a9/0x9d0 [ 317.216847][ C0] Code: 89 6c 24 28 4c 89 7c 24 10 48 c7 c7 60 9d ed 8b e8 4c 49 08 0a 31 d2 65 66 89 15 ce ce c2 12 e8 cd 5a 4a 00 fb bb ff ff ff ff <48> c7 c5 c0 a0 a0 8e 41 0f bc dc 83 c3 01 0f 85 9d 00 00 00 e9 b9 [ 317.236518][ C0] RSP: 0018:ffffc90000007f20 EFLAGS: 00000202 [ 317.242559][ C0] RAX: 000000000000027a RBX: 00000000ffffffff RCX: 0000000000000004 [ 317.250543][ C0] RDX: 0000000000000100 RSI: ffffffff8e38e957 RDI: ffffffff8c623980 [ 317.258525][ C0] RBP: 1ffff92000000fec R08: 0000000000000001 R09: 0000000000000000 [ 317.266493][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000004 [ 317.274465][ C0] R13: 000000000000000a R14: 00000001000005ce R15: fffffbfff1d41e50 [ 317.282428][ C0] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 317.288217][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 317.293479][ C0] ? _raw_spin_unlock+0x28/0x50 [ 317.298312][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 317.303920][ C0] __irq_exit_rcu+0x16a/0x210 [ 317.308572][ C0] irq_exit_rcu+0x9/0x30 [ 317.312809][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 317.318447][ C0] [ 317.321442][ C0] [ 317.324347][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.330304][ C0] RIP: 0010:tracing_reset_online_cpus+0x0/0x200 [ 317.336528][ C0] Code: fc ff e8 d3 56 fa ff 5b 5d c3 cc cc cc cc e8 b7 c1 6d 00 eb c0 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 [ 317.356110][ C0] RSP: 0018:ffffc9000401fbf8 EFLAGS: 00010246 [ 317.362164][ C0] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc9000e121000 [ 317.370110][ C0] RDX: 1ffff1100380ac19 RSI: ffffffff82108e61 RDI: ffffffff8ee828f8 [ 317.378315][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff228ab4b [ 317.386259][ C0] R10: ffffc9000401fc00 R11: 0000000000000000 R12: ffffffff8bf708b8 [ 317.394215][ C0] R13: ffffffff8ee828e0 R14: ffffffff8ee829e8 R15: ffffffff8ee82900 [ 317.402167][ C0] ? ring_buffer_set_clock+0x11/0x50 [ 317.407443][ C0] tracing_set_clock+0x16f/0x3a0 [ 317.412371][ C0] tracing_clock_write+0x16a/0x270 [ 317.417459][ C0] ? __pfx_tracing_clock_write+0x10/0x10 [ 317.423075][ C0] vfs_write+0x2aa/0x1050 [ 317.427382][ C0] ? __pfx_tracing_clock_write+0x10/0x10 [ 317.433005][ C0] ? lock_acquire+0x1d1/0x380 [ 317.437657][ C0] ? __fget_files+0x34/0x3d0 [ 317.442226][ C0] ? __pfx_vfs_write+0x10/0x10 [ 317.446978][ C0] ? find_held_lock+0x2b/0x80 [ 317.451657][ C0] ? __fget_files+0x215/0x3d0 [ 317.456316][ C0] ? __fget_files+0x21f/0x3d0 [ 317.460980][ C0] ksys_write+0x12a/0x250 [ 317.465290][ C0] ? __pfx_ksys_write+0x10/0x10 [ 317.470134][ C0] do_syscall_64+0x123/0x790 [ 317.474702][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.480583][ C0] RIP: 0033:0x7f3b2fb9e159 [ 317.484988][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.504572][ C0] RSP: 002b:00007f3b30b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.512958][ C0] RAX: ffffffffffffffda RBX: 00007f3b2fe25fa0 RCX: 00007f3b2fb9e159 [ 317.520988][ C0] RDX: 0000000000000007 RSI: 0000200000000300 RDI: 0000000000000004 [ 317.528932][ C0] RBP: 00007f3b2fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 317.536887][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.544845][ C0] R13: 00007f3b2fe26038 R14: 00007f3b2fe25fa0 R15: 00007ffcb1d09f38 [ 317.552800][ C0] [ 317.555795][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 317.563049][ C0] CPU: 0 UID: 0 PID: 11669 Comm: syz.2.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.573983][ C0] Tainted: [L]=SOFTLOCKUP [ 317.578290][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 317.588329][ C0] Call Trace: [ 317.591595][ C0] [ 317.594416][ C0] dump_stack_lvl+0x100/0x190 [ 317.599080][ C0] vpanic+0x553/0x970 [ 317.603039][ C0] ? __pfx_vpanic+0x10/0x10 [ 317.607536][ C0] panic+0xd1/0xe0 [ 317.611231][ C0] ? __pfx_panic+0x10/0x10 [ 317.615637][ C0] check_panic_on_warn.cold+0x19/0x34 [ 317.620985][ C0] ? check_buffer.cold+0x1a2/0x1ef [ 317.626072][ C0] __warn.cold+0x191/0x318 [ 317.630479][ C0] __report_bug+0x30f/0x440 [ 317.634987][ C0] ? check_buffer.cold+0x1a2/0x1ef [ 317.640079][ C0] ? __pfx___report_bug+0x10/0x10 [ 317.645146][ C0] ? irq_work_queue+0xd1/0x100 [ 317.649893][ C0] ? __wake_up_klogd+0xe5/0x140 [ 317.654720][ C0] ? vprintk_emit+0x1c9/0x6b0 [ 317.659394][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 317.664413][ C0] ? check_buffer.cold+0x1a2/0x1ef [ 317.669514][ C0] report_bug+0xb3/0x220 [ 317.673758][ C0] ? check_buffer.cold+0x1a2/0x1ef [ 317.678847][ C0] handle_bug+0x16a/0x2a0 [ 317.683156][ C0] exc_invalid_op+0x17/0x50 [ 317.687637][ C0] asm_exc_invalid_op+0x1a/0x20 [ 317.692486][ C0] RIP: 0010:check_buffer.cold+0x1a2/0x1ef [ 317.698181][ C0] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 5c 8b 2d 8c e5 21 10 31 ff 89 ee e8 3f 17 e9 00 85 ed 0f 84 58 b2 eb 00 e8 c2 1c e9 00 90 <0f> 0b 90 e9 03 b0 eb 00 49 c7 c7 60 5e f6 8b e9 51 fe ff ff e8 98 [ 317.717767][ C0] RSP: 0018:ffffc90000007858 EFLAGS: 00010046 [ 317.723824][ C0] RAX: 0000000000000000 RBX: 1ffff92000000f11 RCX: 0000000000000103 [ 317.731777][ C0] RDX: ffff8880556ba580 RSI: ffffffff8123280e RDI: ffff8880556ba580 [ 317.739746][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 317.747705][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000002 [ 317.755660][ C0] R13: ffff88801c095000 R14: ffff888071530000 R15: ffffffff8bf65a00 [ 317.763635][ C0] ? check_buffer.cold+0x1a1/0x1ef [ 317.768764][ C0] ? check_buffer.cold+0x1a1/0x1ef [ 317.773887][ C0] ? __pfx_trace_clock_counter+0x10/0x10 [ 317.779528][ C0] ? __pfx_check_buffer+0x10/0x10 [ 317.784543][ C0] ? find_held_lock+0x2b/0x80 [ 317.789237][ C0] ? console_srcu_read_unlock+0x41/0x60 [ 317.794780][ C0] ? console_srcu_read_unlock+0x41/0x60 [ 317.800325][ C0] __rb_reserve_next.constprop.0+0x486/0x1640 [ 317.806396][ C0] ring_buffer_lock_reserve+0x49a/0x1220 [ 317.812013][ C0] ? _printk+0xcf/0x110 [ 317.816159][ C0] ? __pfx__printk+0x10/0x10 [ 317.820737][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 317.825678][ C0] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 317.831747][ C0] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 317.837918][ C0] trace_event_buffer_reserve+0x1f9/0x350 [ 317.843650][ C0] trace_event_raw_event_msr_trace_class+0xe8/0x270 [ 317.850233][ C0] ? __pfx_trace_event_raw_event_msr_trace_class+0x10/0x10 [ 317.857429][ C0] ? lock_acquire+0x1d1/0x380 [ 317.862096][ C0] ? clockevents_program_event+0x23e/0x820 [ 317.867910][ C0] ? clockevents_program_event+0x23e/0x820 [ 317.873721][ C0] trace_write_msr+0x160/0x1f0 [ 317.878501][ C0] lapic_next_event+0x10/0x20 [ 317.883173][ C0] clockevents_program_event+0x375/0x820 [ 317.888801][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 317.894943][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 317.900299][ C0] tick_program_event+0xa9/0x140 [ 317.905243][ C0] __hrtimer_rearm_deferred+0x234/0x7b0 [ 317.910870][ C0] irqentry_exit+0x5f3/0xa10 [ 317.915453][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.921423][ C0] RIP: 0010:handle_softirqs+0x1a9/0x9d0 [ 317.926946][ C0] Code: 89 6c 24 28 4c 89 7c 24 10 48 c7 c7 60 9d ed 8b e8 4c 49 08 0a 31 d2 65 66 89 15 ce ce c2 12 e8 cd 5a 4a 00 fb bb ff ff ff ff <48> c7 c5 c0 a0 a0 8e 41 0f bc dc 83 c3 01 0f 85 9d 00 00 00 e9 b9 [ 317.946528][ C0] RSP: 0018:ffffc90000007f20 EFLAGS: 00000202 [ 317.952572][ C0] RAX: 000000000000027a RBX: 00000000ffffffff RCX: 0000000000000004 [ 317.960521][ C0] RDX: 0000000000000100 RSI: ffffffff8e38e957 RDI: ffffffff8c623980 [ 317.968478][ C0] RBP: 1ffff92000000fec R08: 0000000000000001 R09: 0000000000000000 [ 317.976426][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000004 [ 317.984370][ C0] R13: 000000000000000a R14: 00000001000005ce R15: fffffbfff1d41e50 [ 317.992326][ C0] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 317.998024][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 318.003298][ C0] ? _raw_spin_unlock+0x28/0x50 [ 318.008144][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 318.013750][ C0] __irq_exit_rcu+0x16a/0x210 [ 318.018404][ C0] irq_exit_rcu+0x9/0x30 [ 318.022681][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 318.028296][ C0] [ 318.031210][ C0] [ 318.034128][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.040083][ C0] RIP: 0010:tracing_reset_online_cpus+0x0/0x200 [ 318.046305][ C0] Code: fc ff e8 d3 56 fa ff 5b 5d c3 cc cc cc cc e8 b7 c1 6d 00 eb c0 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 41 55 49 bd 00 00 00 00 00 fc ff df 41 54 [ 318.065884][ C0] RSP: 0018:ffffc9000401fbf8 EFLAGS: 00010246 [ 318.071925][ C0] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc9000e121000 [ 318.079876][ C0] RDX: 1ffff1100380ac19 RSI: ffffffff82108e61 RDI: ffffffff8ee828f8 [ 318.087829][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff228ab4b [ 318.095792][ C0] R10: ffffc9000401fc00 R11: 0000000000000000 R12: ffffffff8bf708b8 [ 318.103745][ C0] R13: ffffffff8ee828e0 R14: ffffffff8ee829e8 R15: ffffffff8ee82900 [ 318.111705][ C0] ? ring_buffer_set_clock+0x11/0x50 [ 318.116981][ C0] tracing_set_clock+0x16f/0x3a0 [ 318.121917][ C0] tracing_clock_write+0x16a/0x270 [ 318.127004][ C0] ? __pfx_tracing_clock_write+0x10/0x10 [ 318.132619][ C0] vfs_write+0x2aa/0x1050 [ 318.136933][ C0] ? __pfx_tracing_clock_write+0x10/0x10 [ 318.142538][ C0] ? lock_acquire+0x1d1/0x380 [ 318.147190][ C0] ? __fget_files+0x34/0x3d0 [ 318.151758][ C0] ? __pfx_vfs_write+0x10/0x10 [ 318.156511][ C0] ? find_held_lock+0x2b/0x80 [ 318.161174][ C0] ? __fget_files+0x215/0x3d0 [ 318.165837][ C0] ? __fget_files+0x21f/0x3d0 [ 318.170517][ C0] ksys_write+0x12a/0x250 [ 318.174823][ C0] ? __pfx_ksys_write+0x10/0x10 [ 318.179654][ C0] do_syscall_64+0x123/0x790 [ 318.184222][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.190108][ C0] RIP: 0033:0x7f3b2fb9e159 [ 318.194515][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.214109][ C0] RSP: 002b:00007f3b30b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 318.222496][ C0] RAX: ffffffffffffffda RBX: 00007f3b2fe25fa0 RCX: 00007f3b2fb9e159 [ 318.230440][ C0] RDX: 0000000000000007 RSI: 0000200000000300 RDI: 0000000000000004 [ 318.238385][ C0] RBP: 00007f3b2fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 318.246329][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.254273][ C0] R13: 00007f3b2fe26038 R14: 00007f3b2fe25fa0 R15: 00007ffcb1d09f38 [ 318.262227][ C0] [ 318.265298][ C0] Kernel Offset: disabled [ 318.269601][ C0] Rebooting in 86400 seconds..