last executing test programs: 2m15.965010507s ago: executing program 0 (id=1920): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="00010200ac1e0101000000000000"], 0x78}, 0x1, 0xba01}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth1_to_team\x00', 0x8000}) keyctl$set_reqkey_keyring(0xe, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x400c}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x20004040) 2m15.889678706s ago: executing program 0 (id=1923): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x101) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) read(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 2m15.590364777s ago: executing program 0 (id=1930): setns(0xc9, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbff, {0x1, 0x7f, 0x8, 0x7, {0x4e24, 0x4e22, [0x3, 0xd, 0xfffffd01, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0xde, 0x7fffffff]}, 0x10102, 0x3}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) 2m15.391403123s ago: executing program 0 (id=1934): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x4000840) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="b229", 0x2}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00') ioctl$KDSKBLED(r0, 0xc0686611, 0x20000081) 2m15.240626785s ago: executing program 3 (id=1935): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) setreuid(0xee01, 0xee01) 2m15.197787141s ago: executing program 0 (id=1938): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2m15.052572091s ago: executing program 4 (id=1939): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = fanotify_init(0x40, 0x80000) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f0000001500)=""/4080, 0xff0) 2m15.032975229s ago: executing program 2 (id=1940): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x8) fcntl$setpipe(r0, 0x407, 0xfffffffffffffff8) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) 2m14.962064704s ago: executing program 0 (id=1942): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='*:', 0x2) 2m14.942816711s ago: executing program 3 (id=1943): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x4, 0x2003, 0x2}, 0x50) 2m14.788852816s ago: executing program 1 (id=1944): getsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0xfffffffffffffffe) 2m14.78846022s ago: executing program 3 (id=1945): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r3, 0x2}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0c02, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2m14.714459464s ago: executing program 1 (id=1946): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) 2m14.691409488s ago: executing program 2 (id=1947): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 2m11.856246238s ago: executing program 4 (id=1948): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103a01, 0x60) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8) 2m9.622264226s ago: executing program 1 (id=1949): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m8.703452706s ago: executing program 2 (id=1950): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) bpf$PROG_LOAD(0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x8a28, 0x2476}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000) 2m3.189861411s ago: executing program 4 (id=1951): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000001000/0x4000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2m2.289902539s ago: executing program 3 (id=1952): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2m2.085900797s ago: executing program 1 (id=1953): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) setreuid(0xee01, 0xee01) 2m0.232864624s ago: executing program 2 (id=1954): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) close(0x3) 1m57.840065246s ago: executing program 32 (id=1942): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='*:', 0x2) 1m56.212793506s ago: executing program 4 (id=1956): getsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0xfffffffffffffffe) 1m54.286966645s ago: executing program 1 (id=1957): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40008c0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f00000001c0)=0x8) 1m53.158633347s ago: executing program 3 (id=1958): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) fadvise64(r0, 0x3ff, 0x8, 0x7) 1m52.342373258s ago: executing program 2 (id=1959): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x29dd, &(0x7f00000031c0)=ANY=[], 0x0) 1m48.92306805s ago: executing program 4 (id=1960): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) 1m46.671034354s ago: executing program 1 (id=1961): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 1m45.826118537s ago: executing program 3 (id=1962): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40500f0) 1m44.858296298s ago: executing program 2 (id=1963): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m42.72264447s ago: executing program 5 (id=1955): r0 = socket$packet(0x11, 0x3, 0x300) mount$fuse(0x0, 0x0, 0x0, 0x2000413, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @loopback, 0x7ffff, 0x6, 0x0, 0x0, 0x6, 0x40000010}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m41.236032508s ago: executing program 4 (id=1964): r0 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1, 0x8}, 0x50) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m18.48756176s ago: executing program 33 (id=1961): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 1m16.522533309s ago: executing program 34 (id=1963): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m13.979902205s ago: executing program 35 (id=1962): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40500f0) 1m10.193748526s ago: executing program 36 (id=1964): r0 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1, 0x8}, 0x50) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m2.626515569s ago: executing program 5 (id=1955): r0 = socket$packet(0x11, 0x3, 0x300) mount$fuse(0x0, 0x0, 0x0, 0x2000413, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @loopback, 0x7ffff, 0x6, 0x0, 0x0, 0x6, 0x40000010}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 59.162575572s ago: executing program 6 (id=1965): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x54d, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="c8", 0x1}], 0x1}}], 0x1, 0x55) sendto$inet6(r0, &(0x7f0000000540)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x7, 0x5bae, 0xa, 0x3, 0x4, 0x2, 0x30, {0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x7fff, 0x1, 0xabd, 0x6, 0x3}}, &(0x7f00000001c0)=0xb0) 16.185144555s ago: executing program 7 (id=1966): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x1, 0x0, 0x3, 0x100000012, 0x0, 0x0, 0x0, 0x7, 0x4, 0x2, 0x100000000001], 0x6000, 0x4bb40}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) 14.230496644s ago: executing program 8 (id=1967): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) write(r1, &(0x7f0000000140)="8ecbf2", 0x3) 11.056186634s ago: executing program 9 (id=1968): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='blk', 0x3) 2.210588195s ago: executing program 5 (id=1955): r0 = socket$packet(0x11, 0x3, 0x300) mount$fuse(0x0, 0x0, 0x0, 0x2000413, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @loopback, 0x7ffff, 0x6, 0x0, 0x0, 0x6, 0x40000010}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 6 (id=1965): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x54d, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="c8", 0x1}], 0x1}}], 0x1, 0x55) sendto$inet6(r0, &(0x7f0000000540)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x7, 0x5bae, 0xa, 0x3, 0x4, 0x2, 0x30, {0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x7fff, 0x1, 0xabd, 0x6, 0x3}}, &(0x7f00000001c0)=0xb0) kernel console output (not intermixed with test programs): ORIG_RAX: 0000000000000141 [ 599.817311][T11936] RAX: ffffffffffffffda RBX: 00007f280e625fa0 RCX: 00007f280e39e159 [ 599.817322][T11936] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 599.817332][T11936] RBP: 00007f280c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 599.817342][T11936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.817352][T11936] R13: 00007f280e626038 R14: 00007f280e625fa0 R15: 00007ffd5d470bc8 [ 599.817374][T11936] [ 599.817380][T11936] Mem-Info: [ 599.817387][T11936] active_anon:23406 inactive_anon:6879 isolated_anon:0 [ 599.817387][T11936] active_file:2237 inactive_file:55372 isolated_file:0 [ 599.817387][T11936] unevictable:0 dirty:304 writeback:0 [ 599.817387][T11936] slab_reclaimable:12108 slab_unreclaimable:98363 [ 599.817387][T11936] mapped:45790 shmem:24231 pagetables:1294 [ 599.817387][T11936] sec_pagetables:0 bounce:0 [ 599.817387][T11936] kernel_misc_reclaimable:0 [ 599.817387][T11936] free:1254304 free_pcp:21554 free_cma:0 [ 599.817426][T11936] Node 0 active_anon:93624kB inactive_anon:27516kB active_file:8948kB inactive_file:221292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183160kB dirty:1216kB writeback:0kB shmem:96924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12360kB pagetables:4996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 599.817475][T11936] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 599.817512][T11936] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.817553][T11936] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 599.817581][T11936] Node 0 DMA32 free:1059896kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:93624kB inactive_anon:27516kB active_file:8948kB inactive_file:221292kB unevictable:0kB writepending:1216kB zspages:320kB present:3129332kB managed:2530528kB mlocked:0kB bounce:0kB free_pcp:86216kB local_pcp:46060kB free_cma:0kB [ 599.817624][T11936] lowmem_reserve[]: 0 0 0 0 0 [ 599.817651][T11936] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.817691][T11936] lowmem_reserve[]: 0 0 0 0 0 [ 599.817717][T11936] Node 1 Normal free:3941960kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.820903][T11936] lowmem_reserve[]: 0 0 0 0 0 [ 599.820932][T11936] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 599.821020][T11936] Node 0 DMA32: 13*4kB (UE) 499*8kB (UME) 94*16kB (UE) 655*32kB (UME) 182*64kB (UM) 457*128kB (UME) 96*256kB (UME) 31*512kB (UME) 13*1024kB (UME) 10*2048kB (UM) 217*4096kB (UM) = 1059724kB [ 599.821142][T11936] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 599.823277][T11936] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 10*16kB (UM) 8*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941960kB [ 599.825686][T11936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.825699][T11936] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.825712][T11936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.825724][T11936] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.825736][T11936] 81921 total pagecache pages [ 599.825742][T11936] 26 pages in swap cache [ 599.825748][T11936] Free swap = 124800kB [ 599.825754][T11936] Total swap = 124996kB [ 599.825760][T11936] 2097051 pages RAM [ 599.825765][T11936] 0 pages HighMem/MovableOnly [ 599.825771][T11936] 432785 pages reserved [ 599.825776][T11936] 0 pages cma reserved [ 599.883511][ T10] usb 2-1: USB disconnect, device number 48 [ 600.296783][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 600.612167][T11953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1659'. [ 601.314233][T11963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1661'. [ 601.441684][ T31] kauditd_printk_skb: 154 callbacks suppressed [ 601.441697][ T31] audit: type=1400 audit(1789567237.496:8583): avc: denied { append } for pid=11964 comm="syz.4.1663" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 601.569517][T11974] FAULT_INJECTION: forcing a failure. [ 601.569517][T11974] name failslab, interval 1, probability 0, space 0, times 0 [ 601.569539][T11974] CPU: 0 UID: 0 PID: 11974 Comm: syz.3.1666 Tainted: G L syzkaller #0 PREEMPT(full) [ 601.569554][T11974] Tainted: [L]=SOFTLOCKUP [ 601.569558][T11974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 601.569565][T11974] Call Trace: [ 601.569569][T11974] [ 601.569574][T11974] dump_stack_lvl+0x100/0x190 [ 601.569598][T11974] should_fail_ex.cold+0x5/0xa [ 601.569614][T11974] should_failslab+0xc2/0x120 [ 601.569629][T11974] kmem_cache_alloc_noprof+0x92/0x6a0 [ 601.569641][T11974] ? skb_clone+0x190/0x400 [ 601.569657][T11974] skb_clone+0x190/0x400 [ 601.569671][T11974] nfnetlink_rcv_batch+0x1c8/0x2880 [ 601.569689][T11974] ? kmem_cache_free+0x127/0x6c0 [ 601.569707][T11974] ? __lock_acquire+0x5c0/0x1f40 [ 601.569721][T11974] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 601.569739][T11974] ? lock_acquire+0x1d1/0x380 [ 601.569750][T11974] ? avc_has_perm_noaudit+0x56/0x3b0 [ 601.569771][T11974] ? avc_has_perm_noaudit+0x145/0x3b0 [ 601.569787][T11974] ? __asan_memset+0x23/0x50 [ 601.569798][T11974] ? __nla_validate_parse+0x1e7/0x28b0 [ 601.569818][T11974] ? __pfx___nla_validate_parse+0x10/0x10 [ 601.569835][T11974] ? rcu_is_watching+0x13/0xc0 [ 601.569851][T11974] ? cap_capable+0x107/0x430 [ 601.569870][T11974] ? __nla_parse+0x40/0x60 [ 601.569888][T11974] nfnetlink_rcv+0x3bd/0x440 [ 601.569903][T11974] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 601.569921][T11974] netlink_unicast+0x585/0x850 [ 601.569936][T11974] ? __pfx_netlink_unicast+0x10/0x10 [ 601.569949][T11974] ? __pfx_sock_has_perm+0x10/0x10 [ 601.569969][T11974] netlink_sendmsg+0x8b0/0xda0 [ 601.569983][T11974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.569997][T11974] ? selinux_socket_sendmsg+0x198/0x2f0 [ 601.570011][T11974] ____sys_sendmsg+0xa4d/0xbe0 [ 601.570027][T11974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.570040][T11974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.570059][T11974] ? lock_acquire+0x1d1/0x380 [ 601.570070][T11974] ? get_pid_task+0x2a/0x250 [ 601.570088][T11974] ___sys_sendmsg+0x190/0x1e0 [ 601.570106][T11974] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.570123][T11974] ? get_pid_task+0x106/0x250 [ 601.570142][T11974] ? find_held_lock+0x2b/0x80 [ 601.570166][T11974] __sys_sendmsg+0x160/0x210 [ 601.570180][T11974] ? __pfx___sys_sendmsg+0x10/0x10 [ 601.570201][T11974] do_syscall_64+0x123/0x790 [ 601.570218][T11974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.570229][T11974] RIP: 0033:0x7f6e7739e159 [ 601.570239][T11974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.570249][T11974] RSP: 002b:00007f6e7825b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.570261][T11974] RAX: ffffffffffffffda RBX: 00007f6e77625fa0 RCX: 00007f6e7739e159 [ 601.570268][T11974] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 601.570275][T11974] RBP: 00007f6e7825b090 R08: 0000000000000000 R09: 0000000000000000 [ 601.570282][T11974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.570288][T11974] R13: 00007f6e77626038 R14: 00007f6e77625fa0 R15: 00007ffcadcdefd8 [ 601.570302][T11974] [ 601.662555][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 601.812801][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 601.813801][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 601.817553][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 601.817581][ T10] usb 1-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 601.817603][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 601.817628][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.826355][ T10] usb 1-1: config 0 descriptor?? [ 602.265299][ T10] logitech 0003:046D:C294.000A: item fetching failed at offset 3/5 [ 602.265565][ T10] logitech 0003:046D:C294.000A: parse failed [ 602.265603][ T10] logitech 0003:046D:C294.000A: probe with driver logitech failed with error -22 [ 603.249333][T11970] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 603.311366][ T5694] usb 1-1: USB disconnect, device number 91 [ 603.631179][ T31] audit: type=1326 audit(1789567239.686:8584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.1.1670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e39e159 code=0x7ffc0000 [ 603.665179][ T31] audit: type=1326 audit(1789567239.726:8585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.1.1670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e39e159 code=0x7ffc0000 [ 603.665268][ T31] audit: type=1326 audit(1789567239.726:8586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.1.1670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e39e159 code=0x7ffc0000 [ 603.671312][ T31] audit: type=1326 audit(1789567239.726:8587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.1.1670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f280e35e98e code=0x7ffc0000 [ 603.671671][ T31] audit: type=1326 audit(1789567239.726:8588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.1.1670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e39e159 code=0x7ffc0000 [ 603.671782][ T31] audit: type=1326 audit(1789567239.726:8589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.1.1670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e39e159 code=0x7ffc0000 [ 603.673768][ T31] audit: type=1326 audit(1789567239.736:8590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.1.1670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e39e159 code=0x7ffc0000 [ 603.673820][ T31] audit: type=1326 audit(1789567239.736:8591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.1.1670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280e39e159 code=0x7ffc0000 [ 603.674303][ T31] audit: type=1326 audit(1789567239.736:8592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.1.1670" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f280e35e98e code=0x7ffc0000 [ 604.136725][T12003] FAULT_INJECTION: forcing a failure. [ 604.136725][T12003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.136792][T12003] CPU: 1 UID: 0 PID: 12003 Comm: syz.4.1671 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.136819][T12003] Tainted: [L]=SOFTLOCKUP [ 604.136825][T12003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 604.136837][T12003] Call Trace: [ 604.136844][T12003] [ 604.136852][T12003] dump_stack_lvl+0x100/0x190 [ 604.136883][T12003] should_fail_ex.cold+0x5/0xa [ 604.136910][T12003] _copy_from_user+0x2e/0xd0 [ 604.136932][T12003] kstrtouint_from_user+0xd6/0x1d0 [ 604.136958][T12003] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 604.136996][T12003] proc_fail_nth_write+0x83/0x220 [ 604.137022][T12003] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 604.137053][T12003] vfs_write+0x2aa/0x1050 [ 604.137074][T12003] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 604.137097][T12003] ? lock_acquire+0x1d1/0x380 [ 604.137117][T12003] ? __fget_files+0x34/0x3d0 [ 604.137140][T12003] ? __pfx_vfs_write+0x10/0x10 [ 604.137157][T12003] ? find_held_lock+0x2b/0x80 [ 604.137184][T12003] ? __fget_files+0x215/0x3d0 [ 604.137211][T12003] ? __fget_files+0x21f/0x3d0 [ 604.137241][T12003] ksys_write+0x12a/0x250 [ 604.137261][T12003] ? __pfx_ksys_write+0x10/0x10 [ 604.137288][T12003] do_syscall_64+0x123/0x790 [ 604.137317][T12003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.137337][T12003] RIP: 0033:0x7fd77b55e98e [ 604.137353][T12003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 604.137371][T12003] RSP: 002b:00007fd7797f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 604.137390][T12003] RAX: ffffffffffffffda RBX: 00007fd7797f66c0 RCX: 00007fd77b55e98e [ 604.137402][T12003] RDX: 0000000000000001 RSI: 00007fd7797f60a0 RDI: 0000000000000008 [ 604.137413][T12003] RBP: 00007fd7797f6090 R08: 0000000000000000 R09: 0000000000000000 [ 604.137425][T12003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.137437][T12003] R13: 00007fd77b826218 R14: 00007fd77b826180 R15: 00007ffd47d81d78 [ 604.137464][T12003] [ 604.803017][ T5701] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 605.153522][ T5701] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 605.154853][ T5701] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 605.154892][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 416, setting to 64 [ 605.155853][ T5701] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 605.155873][ T5701] usb 4-1: Manufacturer: syz [ 605.210997][ T5701] usb 4-1: config 0 descriptor?? [ 605.231628][T12018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1676'. [ 605.342378][ T5701] rc_core: IR keymap rc-hauppauge not found [ 605.342397][ T5701] Registered IR keymap rc-empty [ 605.344102][ T5701] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 605.351750][ T5701] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input100 [ 605.621041][ T5701] usb 4-1: USB disconnect, device number 45 [ 606.148057][T12033] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 609.247792][T12042] FAULT_INJECTION: forcing a failure. [ 609.247792][T12042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.247814][T12042] CPU: 0 UID: 0 PID: 12042 Comm: syz.2.1686 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.247829][T12042] Tainted: [L]=SOFTLOCKUP [ 609.247834][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 609.247840][T12042] Call Trace: [ 609.247844][T12042] [ 609.247849][T12042] dump_stack_lvl+0x100/0x190 [ 609.247869][T12042] should_fail_ex.cold+0x5/0xa [ 609.247885][T12042] _copy_from_user+0x2e/0xd0 [ 609.247898][T12042] kstrtouint_from_user+0xd6/0x1d0 [ 609.247913][T12042] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 609.247932][T12042] ? lock_acquire+0x1d1/0x380 [ 609.247947][T12042] proc_fail_nth_write+0x83/0x220 [ 609.247961][T12042] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 609.247987][T12042] vfs_write+0x2aa/0x1050 [ 609.247999][T12042] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 609.248013][T12042] ? lock_acquire+0x1d1/0x380 [ 609.248024][T12042] ? __fget_files+0x34/0x3d0 [ 609.248038][T12042] ? __pfx_vfs_write+0x10/0x10 [ 609.248048][T12042] ? find_held_lock+0x2b/0x80 [ 609.248065][T12042] ? __fget_files+0x215/0x3d0 [ 609.248080][T12042] ? __fget_files+0x21f/0x3d0 [ 609.248098][T12042] ksys_write+0x12a/0x250 [ 609.248110][T12042] ? __pfx_ksys_write+0x10/0x10 [ 609.248125][T12042] do_syscall_64+0x123/0x790 [ 609.248142][T12042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.248154][T12042] RIP: 0033:0x7f95e855e98e [ 609.248164][T12042] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 609.248175][T12042] RSP: 002b:00007f95e9553fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 609.248186][T12042] RAX: ffffffffffffffda RBX: 00007f95e95546c0 RCX: 00007f95e855e98e [ 609.248194][T12042] RDX: 0000000000000001 RSI: 00007f95e95540a0 RDI: 0000000000000004 [ 609.248201][T12042] RBP: 00007f95e9554090 R08: 0000000000000000 R09: 0000000000000000 [ 609.248207][T12042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.248214][T12042] R13: 00007f95e8826038 R14: 00007f95e8825fa0 R15: 00007ffcc0215cb8 [ 609.248229][T12042] [ 609.467226][ T31] kauditd_printk_skb: 458 callbacks suppressed [ 609.467241][ T31] audit: type=1400 audit(1789567245.526:9051): avc: denied { mounton } for pid=12046 comm="syz.2.1687" path="/330/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 609.506034][ T31] audit: type=1400 audit(1789567245.546:9052): avc: denied { mounton } for pid=12046 comm="syz.2.1687" path="/dev/comedi1" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 609.722339][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 609.872348][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 609.875081][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.875142][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.878070][ T10] usb 5-1: config 0 descriptor?? [ 609.889463][ T10] gspca_main: kinect-2.14.0 probing 045e:02bf [ 609.987348][T12059] udevd[12059]: open /dev/null failed: No such file or directory [ 609.994668][ T31] audit: type=1400 audit(1789567246.056:9053): avc: denied { read } for pid=12057 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 610.056372][T12060] netlink: 'syz.1.1688': attribute type 10 has an invalid length. [ 610.106943][T12060] team0: Port device dummy0 added [ 610.484879][T12067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1684'. [ 610.501831][T12047] comedi comedi1: reset error (fatal) [ 610.505313][T12048] FAULT_INJECTION: forcing a failure. [ 610.505313][T12048] name fail_futex, interval 1, probability 0, space 0, times 1 [ 610.505341][T12048] CPU: 0 UID: 0 PID: 12048 Comm: syz.2.1687 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.505359][T12048] Tainted: [L]=SOFTLOCKUP [ 610.505363][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 610.505370][T12048] Call Trace: [ 610.505374][T12048] [ 610.505379][T12048] dump_stack_lvl+0x100/0x190 [ 610.505400][T12048] should_fail_ex.cold+0x5/0xa [ 610.505416][T12048] get_futex_key+0x1d0/0x14f0 [ 610.505433][T12048] ? __pfx_get_futex_key+0x10/0x10 [ 610.505450][T12048] ? comedi_unlocked_ioctl+0x3a6/0x3310 [ 610.505467][T12048] futex_wake+0xf4/0x5e0 [ 610.505486][T12048] ? __pfx_futex_wake+0x10/0x10 [ 610.505505][T12048] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 610.505519][T12048] ? do_vfs_ioctl+0x226/0x13e0 [ 610.505533][T12048] do_futex+0x2b2/0x440 [ 610.505554][T12048] ? __pfx_do_futex+0x10/0x10 [ 610.505568][T12048] ? __fget_files+0x34/0x3d0 [ 610.505585][T12048] __x64_sys_futex+0x34f/0x4d0 [ 610.505602][T12048] ? __pfx___x64_sys_futex+0x10/0x10 [ 610.505623][T12048] do_syscall_64+0x123/0x790 [ 610.505640][T12048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.505652][T12048] RIP: 0033:0x7f95e859e159 [ 610.505662][T12048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.505673][T12048] RSP: 002b:00007f95e95330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 610.505684][T12048] RAX: ffffffffffffffda RBX: 00007f95e8826098 RCX: 00007f95e859e159 [ 610.505692][T12048] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f95e882609c [ 610.505699][T12048] RBP: 00007f95e8826090 R08: 0000000000000001 R09: 0000000000000000 [ 610.505705][T12048] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 610.505712][T12048] R13: 00007f95e8826128 R14: 00007ffcc0215bd0 R15: 00007ffcc0215cb8 [ 610.505726][T12048] [ 611.821985][ T5597] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 611.822410][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 611.901942][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 611.952148][ T5597] usb 3-1: device descriptor read/64, error -32 [ 612.052647][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 612.053600][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.053624][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.054958][ T10] usb 4-1: config 0 descriptor?? [ 612.058216][ T10] gspca_main: kinect-2.14.0 probing 045e:02bf [ 612.058257][ T10] videodev: could not get a free minor [ 612.058263][ T10] gspca_main: video_register_device err -23 [ 612.058292][ T10] kinect 4-1:0.0: probe with driver kinect failed with error -23 [ 612.177915][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1693'. [ 612.178953][T12082] FAULT_INJECTION: forcing a failure. [ 612.178953][T12082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.178988][T12082] CPU: 0 UID: 0 PID: 12082 Comm: syz.1.1693 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.179015][T12082] Tainted: [L]=SOFTLOCKUP [ 612.179022][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 612.179032][T12082] Call Trace: [ 612.179038][T12082] [ 612.179046][T12082] dump_stack_lvl+0x100/0x190 [ 612.179076][T12082] should_fail_ex.cold+0x5/0xa [ 612.179102][T12082] _copy_from_iter+0x1f4/0x1690 [ 612.179125][T12082] ? __asan_memset+0x23/0x50 [ 612.179145][T12082] ? __pfx__copy_from_iter+0x10/0x10 [ 612.179163][T12082] ? __pfx___alloc_skb+0x10/0x10 [ 612.179182][T12082] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 612.179213][T12082] ? sock_has_perm+0x25a/0x2f0 [ 612.179240][T12082] ? __pfx_sock_has_perm+0x10/0x10 [ 612.179273][T12082] netlink_sendmsg+0x808/0xda0 [ 612.179298][T12082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.179321][T12082] ? selinux_socket_sendmsg+0x198/0x2f0 [ 612.179344][T12082] ____sys_sendmsg+0xa4d/0xbe0 [ 612.179369][T12082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.179390][T12082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 612.179422][T12082] ? lock_acquire+0x1d1/0x380 [ 612.179441][T12082] ? get_pid_task+0x2a/0x250 [ 612.179467][T12082] ___sys_sendmsg+0x190/0x1e0 [ 612.179494][T12082] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.179521][T12082] ? get_pid_task+0x106/0x250 [ 612.179553][T12082] ? find_held_lock+0x2b/0x80 [ 612.179589][T12082] __sys_sendmsg+0x160/0x210 [ 612.179611][T12082] ? __pfx___sys_sendmsg+0x10/0x10 [ 612.179647][T12082] do_syscall_64+0x123/0x790 [ 612.179675][T12082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.179694][T12082] RIP: 0033:0x7f280e39e159 [ 612.179710][T12082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.179727][T12082] RSP: 002b:00007f280c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.179747][T12082] RAX: ffffffffffffffda RBX: 00007f280e625fa0 RCX: 00007f280e39e159 [ 612.179759][T12082] RDX: 0000000004044094 RSI: 0000200000000000 RDI: 0000000000000003 [ 612.179771][T12082] RBP: 00007f280c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 612.179782][T12082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.179793][T12082] R13: 00007f280e626038 R14: 00007f280e625fa0 R15: 00007ffd5d470bc8 [ 612.179817][T12082] [ 612.187531][ T5701] usb 5-1: USB disconnect, device number 41 [ 612.191977][ T5597] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 612.364528][ T5597] usb 3-1: Using ep0 maxpacket: 8 [ 612.370176][ T5597] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 612.385427][ T5597] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.385469][ T5597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.392811][ T5597] usb 3-1: config 0 descriptor?? [ 612.463231][ T5597] ldusb 3-1:0.0: Interrupt in endpoint not found [ 612.772699][T12088] syz.4.1695: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 612.772936][T12088] CPU: 1 UID: 0 PID: 12088 Comm: syz.4.1695 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.772964][T12088] Tainted: [L]=SOFTLOCKUP [ 612.772972][T12088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 612.772984][T12088] Call Trace: [ 612.772994][T12088] [ 612.773003][T12088] dump_stack_lvl+0x100/0x190 [ 612.773036][T12088] warn_alloc.cold+0x9e/0xb2 [ 612.773060][T12088] ? __pfx_warn_alloc+0x10/0x10 [ 612.773095][T12088] ? avc_has_extended_perms+0x201/0x1080 [ 612.773126][T12088] ? avc_has_extended_perms+0x33a/0x1080 [ 612.773153][T12088] ? avc_has_extended_perms+0x33a/0x1080 [ 612.773191][T12088] __vmalloc_node_range_noprof+0x123b/0x1420 [ 612.773219][T12088] ? rcu_is_watching+0x13/0xc0 [ 612.773246][T12088] ? trace_contention_end+0x126/0x160 [ 612.773273][T12088] ? dvb_demux_do_ioctl+0x929/0x1200 [ 612.773293][T12088] ? kasan_quarantine_put+0x104/0x240 [ 612.773314][T12088] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 612.773337][T12088] ? __pfx___mutex_lock+0x10/0x10 [ 612.773366][T12088] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 612.773395][T12088] ? tomoyo_path_number_perm+0x188/0x580 [ 612.773422][T12088] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 612.773441][T12088] __vmalloc_node_noprof+0xad/0xf0 [ 612.773473][T12088] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 612.773496][T12088] dvb_demux_do_ioctl+0x9e0/0x1200 [ 612.773518][T12088] ? do_vfs_ioctl+0x226/0x13e0 [ 612.773543][T12088] dvb_usercopy+0x167/0x340 [ 612.773573][T12088] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 612.773597][T12088] ? __pfx_dvb_usercopy+0x10/0x10 [ 612.773627][T12088] ? __fget_files+0x34/0x3d0 [ 612.773663][T12088] ? selinux_file_ioctl+0x13b/0x290 [ 612.773684][T12088] ? selinux_file_ioctl+0xb6/0x290 [ 612.773709][T12088] dvb_demux_ioctl+0x29/0x40 [ 612.773738][T12088] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 612.773769][T12088] __x64_sys_ioctl+0x18e/0x210 [ 612.773791][T12088] do_syscall_64+0x123/0x790 [ 612.773821][T12088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.773842][T12088] RIP: 0033:0x7fd77b59e159 [ 612.773860][T12088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.773878][T12088] RSP: 002b:00007fd7797f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.773898][T12088] RAX: ffffffffffffffda RBX: 00007fd77b826180 RCX: 00007fd77b59e159 [ 612.773911][T12088] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 612.773924][T12088] RBP: 00007fd77b63506b R08: 0000000000000000 R09: 0000000000000000 [ 612.773936][T12088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.773947][T12088] R13: 00007fd77b826218 R14: 00007fd77b826180 R15: 00007ffd47d81d78 [ 612.773974][T12088] [ 612.774070][T12088] Mem-Info: [ 612.774174][T12088] active_anon:9484 inactive_anon:42 isolated_anon:0 [ 612.774174][T12088] active_file:2416 inactive_file:50428 isolated_file:0 [ 612.774174][T12088] unevictable:0 dirty:373 writeback:0 [ 612.774174][T12088] slab_reclaimable:12110 slab_unreclaimable:98976 [ 612.774174][T12088] mapped:33379 shmem:3405 pagetables:1263 [ 612.774174][T12088] sec_pagetables:0 bounce:0 [ 612.774174][T12088] kernel_misc_reclaimable:0 [ 612.774174][T12088] free:1282352 free_pcp:18187 free_cma:0 [ 612.774291][T12088] Node 0 active_anon:37936kB inactive_anon:168kB active_file:9664kB inactive_file:201516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133516kB dirty:1488kB writeback:0kB shmem:13620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12460kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 612.774409][T12088] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 612.774526][T12088] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 612.774646][T12088] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 612.774835][T12088] Node 0 DMA32 free:1172088kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37936kB inactive_anon:168kB active_file:9664kB inactive_file:201516kB unevictable:0kB writepending:1488kB zspages:0kB present:3129332kB managed:2530528kB mlocked:0kB bounce:0kB free_pcp:72748kB local_pcp:16312kB free_cma:0kB [ 612.775076][T12088] lowmem_reserve[]: 0 0 0 0 0 [ 612.775203][T12088] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 612.775333][T12088] lowmem_reserve[]: 0 0 0 0 0 [ 612.778671][T12088] Node 1 Normal free:3941960kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 612.778850][T12088] lowmem_reserve[]: 0 0 0 0 0 [ 612.778981][T12088] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 612.779562][T12088] Node 0 DMA32: 3096*4kB (UME) 2791*8kB (UME) 1400*16kB (UME) 1219*32kB (UME) 628*64kB (UME) 466*128kB (UME) 107*256kB (UME) 35*512kB (UME) 13*1024kB (UME) 10*2048kB (UM) 219*4096kB (UM) = 1172088kB [ 612.780560][T12088] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 612.788419][T12088] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 10*16kB (UM) 8*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941960kB [ 612.797816][T12088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.797832][T12088] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 612.797846][T12088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.797859][T12088] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 612.797874][T12088] 56255 total pagecache pages [ 612.797880][T12088] 10 pages in swap cache [ 612.797886][T12088] Free swap = 124956kB [ 612.797893][T12088] Total swap = 124996kB [ 612.797900][T12088] 2097051 pages RAM [ 612.797906][T12088] 0 pages HighMem/MovableOnly [ 612.797911][T12088] 432785 pages reserved [ 612.797917][T12088] 0 pages cma reserved [ 614.213822][ T5597] usb 3-1: USB disconnect, device number 39 [ 614.464528][ T10] usb 4-1: USB disconnect, device number 46 [ 615.447373][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1700'. [ 616.022318][ T31] audit: type=1400 audit(1789567252.076:9054): avc: denied { write } for pid=12111 comm="syz.2.1702" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 616.722294][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 616.872342][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 616.873628][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.873649][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.873661][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 616.873682][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.891312][ T10] usb 3-1: config 0 descriptor?? [ 616.901885][ T5701] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 617.052427][ T5701] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 617.053330][ T5701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.053353][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.058786][ T5701] usb 4-1: config 0 descriptor?? [ 617.067097][ T5701] gspca_main: kinect-2.14.0 probing 045e:02bf [ 617.077013][T12127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1706'. [ 617.172073][T12128] udevd[12128]: open /dev/null failed: No such file or directory [ 617.391324][ T10] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 617.433218][ T10] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 617.468356][T12129] udevd[12129]: open /dev/null failed: No such file or directory [ 617.748275][T12137] [ 617.801513][ T5701] usb 3-1: USB disconnect, device number 40 [ 618.737091][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.737138][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.853345][T12149] netlink: 'syz.1.1714': attribute type 1 has an invalid length. [ 618.898631][T12149] 8021q: adding VLAN 0 to HW filter on device bond3 [ 618.936227][T12149] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 619.048262][T12161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 619.064986][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 619.065005][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 619.084157][T12161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.090518][T12161] bond4: (slave bond0): making interface the new active one [ 619.106093][T12161] bond4: (slave bond0): Enslaving as an active interface with an up link [ 619.172901][ T10] usb 4-1: USB disconnect, device number 47 [ 619.251885][ T5701] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 619.382203][ T5701] usb 3-1: device descriptor read/64, error -71 [ 620.518260][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 620.518403][ T5597] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 620.598185][ T5701] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 620.682503][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 620.682642][ T5597] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 620.683478][ T5597] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 620.683491][ T5597] usb 5-1: config 0 has no interface number 0 [ 620.683558][ T10] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 620.683570][ T10] usb 4-1: config 0 has no interface number 0 [ 620.683587][ T10] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 620.685091][ T5597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.685104][ T5597] usb 5-1: Product: syz [ 620.685113][ T5597] usb 5-1: Manufacturer: syz [ 620.685120][ T5597] usb 5-1: SerialNumber: syz [ 620.688580][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.688594][ T10] usb 4-1: Product: syz [ 620.688603][ T10] usb 4-1: Manufacturer: syz [ 620.688611][ T10] usb 4-1: SerialNumber: syz [ 620.689613][ T5597] usb 5-1: config 0 descriptor?? [ 620.691011][ T10] usb 4-1: config 0 descriptor?? [ 620.721895][ T5701] usb 3-1: device descriptor read/64, error -71 [ 620.832961][ T5701] usb usb3-port1: attempt power cycle [ 620.855636][ T10] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 620.908552][ T5597] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 620.923319][ T5597] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 620.923613][ T5597] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 620.923651][ T5597] usb 5-1: media controller created [ 620.982773][ T5597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 620.988280][T12170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.988637][T12170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.172296][ T5701] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 621.195035][ T5701] usb 3-1: device descriptor read/8, error -71 [ 621.363000][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.363401][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.365056][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.365390][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.433327][ T5701] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 621.452494][ T5701] usb 3-1: device descriptor read/8, error -71 [ 621.563278][ T5701] usb usb3-port1: unable to enumerate USB device [ 621.743081][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.092987][ T5597] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 622.108809][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.535539][T12145] usb 5-1: dvb_usb_ec168: I2C read not implemented [ 623.722253][ T10] usb 4-1: USB disconnect, device number 48 [ 623.740657][ T10] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 623.783787][ T5597] usb 5-1: USB disconnect, device number 42 [ 623.817039][T12192] FAULT_INJECTION: forcing a failure. [ 623.817039][T12192] name failslab, interval 1, probability 0, space 0, times 0 [ 623.817070][T12192] CPU: 0 UID: 0 PID: 12192 Comm: syz.3.1720 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.817095][T12192] Tainted: [L]=SOFTLOCKUP [ 623.817102][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 623.817113][T12192] Call Trace: [ 623.817120][T12192] [ 623.817127][T12192] dump_stack_lvl+0x100/0x190 [ 623.817159][T12192] should_fail_ex.cold+0x5/0xa [ 623.817186][T12192] should_failslab+0xc2/0x120 [ 623.817211][T12192] __kmalloc_noprof+0xfc/0x840 [ 623.817233][T12192] ? tomoyo_encode2+0xfb/0x3c0 [ 623.817260][T12192] tomoyo_encode2+0xfb/0x3c0 [ 623.817287][T12192] tomoyo_encode+0x29/0x50 [ 623.817308][T12192] tomoyo_realpath_from_path+0x18c/0x690 [ 623.817337][T12192] tomoyo_path_number_perm+0x23c/0x580 [ 623.817355][T12192] ? tomoyo_path_number_perm+0x22e/0x580 [ 623.817383][T12192] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 623.817412][T12192] ? __lock_acquire+0x5c0/0x1f40 [ 623.817445][T12192] ? __fget_files+0x34/0x3d0 [ 623.817468][T12192] ? find_held_lock+0x2b/0x80 [ 623.817497][T12192] ? hook_file_ioctl_common+0x140/0x440 [ 623.817528][T12192] ? __fget_files+0x21f/0x3d0 [ 623.817556][T12192] security_file_ioctl+0xd3/0x230 [ 623.817578][T12192] __x64_sys_ioctl+0xb7/0x210 [ 623.817599][T12192] do_syscall_64+0x123/0x790 [ 623.817629][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.817648][T12192] RIP: 0033:0x7f6e7739e159 [ 623.817664][T12192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.817681][T12192] RSP: 002b:00007f6e7825b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.817700][T12192] RAX: ffffffffffffffda RBX: 00007f6e77625fa0 RCX: 00007f6e7739e159 [ 623.817713][T12192] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 623.817725][T12192] RBP: 00007f6e7825b090 R08: 0000000000000000 R09: 0000000000000000 [ 623.817736][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.817747][T12192] R13: 00007f6e77626038 R14: 00007f6e77625fa0 R15: 00007ffcadcdefd8 [ 623.817773][T12192] [ 623.817798][T12192] ERROR: Out of memory at tomoyo_realpath_from_path. [ 624.894975][T12194] binder: 12193:12194 ioctl c0286405 200000000480 returned -22 [ 625.020213][T12202] FAULT_INJECTION: forcing a failure. [ 625.020213][T12202] name failslab, interval 1, probability 0, space 0, times 0 [ 625.020281][T12202] CPU: 1 UID: 0 PID: 12202 Comm: syz.4.1724 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.020308][T12202] Tainted: [L]=SOFTLOCKUP [ 625.020316][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 625.020328][T12202] Call Trace: [ 625.020335][T12202] [ 625.020343][T12202] dump_stack_lvl+0x100/0x190 [ 625.020374][T12202] should_fail_ex.cold+0x5/0xa [ 625.020402][T12202] should_failslab+0xc2/0x120 [ 625.020427][T12202] __kmalloc_cache_noprof+0x91/0x6d0 [ 625.020455][T12202] ? __fget_files+0x215/0x3d0 [ 625.020481][T12202] ? __pollwait+0x2c3/0x490 [ 625.020504][T12202] ? __pfx___pollwait+0x10/0x10 [ 625.020526][T12202] __pollwait+0x2c3/0x490 [ 625.020549][T12202] ? __pfx___pollwait+0x10/0x10 [ 625.020569][T12202] inotify_poll+0x7b/0x160 [ 625.020590][T12202] ? __pfx_inotify_poll+0x10/0x10 [ 625.020610][T12202] do_select+0xd54/0x1850 [ 625.020651][T12202] ? __pfx_do_select+0x10/0x10 [ 625.020672][T12202] ? do_raw_spin_lock+0x128/0x260 [ 625.020698][T12202] ? __pfx___pollwait+0x10/0x10 [ 625.020722][T12202] ? __pfx_pollwake+0x10/0x10 [ 625.020746][T12202] ? __pfx_pollwake+0x10/0x10 [ 625.020769][T12202] ? __pfx_pollwake+0x10/0x10 [ 625.020793][T12202] ? __pfx_pollwake+0x10/0x10 [ 625.020816][T12202] ? __pfx_pollwake+0x10/0x10 [ 625.020839][T12202] ? __pfx_pollwake+0x10/0x10 [ 625.020869][T12202] ? __pfx_pollwake+0x10/0x10 [ 625.020892][T12202] ? __pfx_pollwake+0x10/0x10 [ 625.020915][T12202] ? __pfx_pollwake+0x10/0x10 [ 625.020936][T12202] ? __might_fault+0xc5/0x140 [ 625.020963][T12202] ? find_held_lock+0x2b/0x80 [ 625.020988][T12202] ? __might_fault+0xc5/0x140 [ 625.021014][T12202] ? __might_fault+0xc5/0x140 [ 625.021048][T12202] ? core_sys_select+0x55b/0xbb0 [ 625.021070][T12202] core_sys_select+0x55b/0xbb0 [ 625.021098][T12202] ? __pfx_core_sys_select+0x10/0x10 [ 625.021146][T12202] ? __pfx_set_user_sigmask+0x10/0x10 [ 625.021166][T12202] ? __mutex_unlock_slowpath+0x35d/0x930 [ 625.021198][T12202] do_pselect.constprop.0+0x238/0x270 [ 625.021224][T12202] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 625.021252][T12202] ? ksys_write+0x1ac/0x250 [ 625.021275][T12202] __x64_sys_pselect6+0x149/0x1c0 [ 625.021300][T12202] do_syscall_64+0x123/0x790 [ 625.021329][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.021348][T12202] RIP: 0033:0x7fd77b59e159 [ 625.021363][T12202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.021381][T12202] RSP: 002b:00007fd77c39c028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 625.021400][T12202] RAX: ffffffffffffffda RBX: 00007fd77b826090 RCX: 00007fd77b59e159 [ 625.021413][T12202] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 625.021424][T12202] RBP: 00007fd77c39c090 R08: 0000000000000000 R09: 0000000000000000 [ 625.021436][T12202] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 625.021447][T12202] R13: 00007fd77b826128 R14: 00007fd77b826090 R15: 00007ffd47d81d78 [ 625.021472][T12202] [ 625.248899][T11703] udevd[11703]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 626.501984][ T5597] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 626.609112][T12212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1725'. [ 627.037311][ T5597] usb 1-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 627.065001][ T5597] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.065131][ T5597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.149397][ T5597] usb 1-1: config 0 descriptor?? [ 627.249000][ T5597] gspca_main: kinect-2.14.0 probing 045e:02bf [ 628.071894][T12230] udevd[12230]: open /dev/null failed: No such file or directory [ 628.372264][ T5694] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 628.451921][ T5597] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 628.513639][ T10] usb 1-1: USB disconnect, device number 92 [ 628.543199][ T5694] usb 5-1: Using ep0 maxpacket: 8 [ 628.549164][ T5694] usb 5-1: unable to get BOS descriptor or descriptor too short [ 628.549204][ T5694] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 628.568697][ T5694] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 628.568719][ T5694] usb 5-1: config 0 has no interface number 0 [ 628.568748][ T5694] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 628.568770][ T5694] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 628.568788][ T5694] usb 5-1: config 0 interface 88 has no altsetting 0 [ 628.622309][ T5597] usb 3-1: unable to get BOS descriptor or descriptor too short [ 628.622353][ T5597] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 628.623201][ T5597] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 628.623223][ T5597] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 628.623240][ T5597] usb 3-1: config 63 has no interface number 0 [ 628.623264][ T5597] usb 3-1: config 63 interface 66 has no altsetting 0 [ 628.624948][ T5597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.624969][ T5597] usb 3-1: Product: syz [ 628.624982][ T5597] usb 3-1: Manufacturer: syz [ 628.624995][ T5597] usb 3-1: SerialNumber: syz [ 628.659596][ T5785] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 628.687439][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 628.687460][ T5694] usb 5-1: Product: syz [ 628.687474][ T5694] usb 5-1: SerialNumber: syz [ 628.692011][ T5694] usb 5-1: config 0 descriptor?? [ 628.812420][ T5785] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 628.813394][ T5785] usb 2-1: config index 0 descriptor too short (expected 50, got 32) [ 628.813418][ T5785] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.813453][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 628.813474][ T5785] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 628.813516][ T5785] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.815328][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.815350][ T5785] usb 2-1: Product: syz [ 628.815365][ T5785] usb 2-1: Manufacturer: syz [ 628.815380][ T5785] usb 2-1: SerialNumber: syz [ 628.844145][ T5785] usb_debug 2-1:1.0: debug converter detected [ 628.953791][T12248] FAULT_INJECTION: forcing a failure. [ 628.953791][T12248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.953874][T12248] CPU: 0 UID: 0 PID: 12248 Comm: syz.0.1734 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.953901][T12248] Tainted: [L]=SOFTLOCKUP [ 628.953908][T12248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 628.953920][T12248] Call Trace: [ 628.953927][T12248] [ 628.953934][T12248] dump_stack_lvl+0x100/0x190 [ 628.953968][T12248] should_fail_ex.cold+0x5/0xa [ 628.953994][T12248] _copy_from_user+0x2e/0xd0 [ 628.954015][T12248] io_sqe_files_register+0x219/0x970 [ 628.954046][T12248] ? __pfx_io_sqe_files_register+0x10/0x10 [ 628.954080][T12248] __do_sys_io_uring_register+0xf69/0x1bc0 [ 628.954110][T12248] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 628.954138][T12248] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 628.954163][T12248] ? __fget_files+0x21f/0x3d0 [ 628.954191][T12248] ? fput+0x7c/0x100 [ 628.954214][T12248] ? ksys_write+0x1ac/0x250 [ 628.954233][T12248] ? __pfx_ksys_write+0x10/0x10 [ 628.954260][T12248] do_syscall_64+0x123/0x790 [ 628.954287][T12248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.954306][T12248] RIP: 0033:0x7ff988f9e159 [ 628.954322][T12248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.954338][T12248] RSP: 002b:00007ff989ed2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 628.954356][T12248] RAX: ffffffffffffffda RBX: 00007ff989226180 RCX: 00007ff988f9e159 [ 628.954369][T12248] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 0000000000000005 [ 628.954381][T12248] RBP: 00007ff989ed2090 R08: 0000000000000000 R09: 0000000000000000 [ 628.954392][T12248] R10: 00000000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 628.954405][T12248] R13: 00007ff989226218 R14: 00007ff989226180 R15: 00007fffa69913b8 [ 628.954431][T12248] [ 629.198814][T12233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.209723][ T5785] usb 2-1: debug converter now attached to ttyUSB0 [ 629.237625][ T5785] usb 2-1: USB disconnect, device number 49 [ 629.252133][ T5785] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 629.254428][ T5785] usb_debug 2-1:1.0: device disconnected [ 629.265915][T12233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.995251][T12253] cgroup: Unknown subsys name 'cpuset' [ 630.689890][T12255] ip6_vti0: entered promiscuous mode [ 631.748183][ T5597] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 631.748256][ T5597] uvcvideo 3-1:63.66: No valid video chain found. [ 631.751899][ T5597] usb 3-1: USB disconnect, device number 45 [ 631.767504][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1729'. [ 631.865023][ T5694] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input103 [ 631.901631][ T5694] usb 5-1: USB disconnect, device number 43 [ 632.522007][T12265] syz.0.1737 (12265): drop_caches: 2 [ 633.354089][T12273] warn_alloc: 2 callbacks suppressed [ 633.354112][T12273] syz.4.1741: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 633.354312][T12273] CPU: 0 UID: 0 PID: 12273 Comm: syz.4.1741 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.354341][T12273] Tainted: [L]=SOFTLOCKUP [ 633.354349][T12273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 633.354362][T12273] Call Trace: [ 633.354370][T12273] [ 633.354379][T12273] dump_stack_lvl+0x100/0x190 [ 633.354413][T12273] warn_alloc.cold+0x9e/0xb2 [ 633.354435][T12273] ? __pfx_warn_alloc+0x10/0x10 [ 633.354475][T12273] ? rcu_is_watching+0x13/0xc0 [ 633.354513][T12273] __vmalloc_node_range_noprof+0x123b/0x1420 [ 633.354541][T12273] ? rcu_is_watching+0x13/0xc0 [ 633.354566][T12273] ? trace_contention_end+0x126/0x160 [ 633.354592][T12273] ? dvb_demux_do_ioctl+0x929/0x1200 [ 633.354612][T12273] ? kasan_quarantine_put+0x104/0x240 [ 633.354633][T12273] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 633.354656][T12273] ? __pfx___mutex_lock+0x10/0x10 [ 633.354684][T12273] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 633.354713][T12273] ? tomoyo_path_number_perm+0x188/0x580 [ 633.354740][T12273] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 633.354760][T12273] __vmalloc_node_noprof+0xad/0xf0 [ 633.354794][T12273] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 633.354818][T12273] dvb_demux_do_ioctl+0x9e0/0x1200 [ 633.354842][T12273] ? do_vfs_ioctl+0x226/0x13e0 [ 633.354867][T12273] dvb_usercopy+0x167/0x340 [ 633.354905][T12273] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 633.354928][T12273] ? __pfx_dvb_usercopy+0x10/0x10 [ 633.354955][T12273] ? __fget_files+0x34/0x3d0 [ 633.354991][T12273] ? selinux_file_ioctl+0x13b/0x290 [ 633.355014][T12273] ? selinux_file_ioctl+0xb6/0x290 [ 633.355039][T12273] dvb_demux_ioctl+0x29/0x40 [ 633.355067][T12273] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 633.355098][T12273] __x64_sys_ioctl+0x18e/0x210 [ 633.355121][T12273] do_syscall_64+0x123/0x790 [ 633.355151][T12273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.355172][T12273] RIP: 0033:0x7fd77b59e159 [ 633.355190][T12273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.355208][T12273] RSP: 002b:00007fd7797f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.355227][T12273] RAX: ffffffffffffffda RBX: 00007fd77b826180 RCX: 00007fd77b59e159 [ 633.355240][T12273] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 633.355252][T12273] RBP: 00007fd77b63506b R08: 0000000000000000 R09: 0000000000000000 [ 633.355263][T12273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.355275][T12273] R13: 00007fd77b826218 R14: 00007fd77b826180 R15: 00007ffd47d81d78 [ 633.355300][T12273] [ 633.355335][T12273] Mem-Info: [ 633.355377][T12273] active_anon:36396 inactive_anon:32 isolated_anon:0 [ 633.355377][T12273] active_file:311 inactive_file:57909 isolated_file:0 [ 633.355377][T12273] unevictable:0 dirty:333 writeback:0 [ 633.355377][T12273] slab_reclaimable:12018 slab_unreclaimable:99040 [ 633.355377][T12273] mapped:30567 shmem:30453 pagetables:1193 [ 633.355377][T12273] sec_pagetables:0 bounce:0 [ 633.355377][T12273] kernel_misc_reclaimable:0 [ 633.355377][T12273] free:1240278 free_pcp:28034 free_cma:0 [ 633.355447][T12273] Node 0 active_anon:145584kB inactive_anon:128kB active_file:1244kB inactive_file:231440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122268kB dirty:1328kB writeback:0kB shmem:121812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12356kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 633.355504][T12273] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 633.355586][T12273] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 633.355670][T12273] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 633.355813][T12273] Node 0 DMA32 free:1003792kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:145584kB inactive_anon:128kB active_file:1244kB inactive_file:231440kB unevictable:0kB writepending:1328kB zspages:0kB present:3129332kB managed:2530528kB mlocked:0kB bounce:0kB free_pcp:112260kB local_pcp:60380kB free_cma:0kB [ 633.355923][T12273] lowmem_reserve[]: 0 0 0 0 0 [ 633.356176][T12273] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 633.356262][T12273] lowmem_reserve[]: 0 0 0 0 0 [ 633.356384][T12273] Node 1 Normal free:3941960kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 633.356519][T12273] lowmem_reserve[]: 0 0 0 0 0 [ 633.356780][T12273] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 633.357301][T12273] Node 0 DMA32: 2*4kB (UE) 91*8kB (UME) 11*16kB (UME) 2*32kB (E) 7*64kB (UE) 125*128kB (UME) 133*256kB (UME) 38*512kB (UME) 13*1024kB (UME) 11*2048kB (UM) 219*4096kB (UM) = 1003792kB [ 633.358061][T12273] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 633.358544][T12273] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 10*16kB (UM) 8*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941960kB [ 633.359537][T12273] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.359560][T12273] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 633.359598][T12273] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.359621][T12273] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 633.359651][T12273] 88602 total pagecache pages [ 633.359688][T12273] 8 pages in swap cache [ 633.359722][T12273] Free swap = 124972kB [ 633.359760][T12273] Total swap = 124996kB [ 633.359864][T12273] 2097051 pages RAM [ 633.359895][T12273] 0 pages HighMem/MovableOnly [ 633.359933][T12273] 432785 pages reserved [ 633.359966][T12273] 0 pages cma reserved [ 635.230144][T12280] FAULT_INJECTION: forcing a failure. [ 635.230144][T12280] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 635.230240][T12280] CPU: 0 UID: 0 PID: 12280 Comm: syz.1.1745 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.230272][T12280] Tainted: [L]=SOFTLOCKUP [ 635.230279][T12280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 635.230291][T12280] Call Trace: [ 635.230298][T12280] [ 635.230306][T12280] dump_stack_lvl+0x100/0x190 [ 635.230337][T12280] should_fail_ex.cold+0x5/0xa [ 635.230360][T12280] ? prepare_alloc_pages+0x16d/0x5b0 [ 635.230387][T12280] should_fail_alloc_page+0xeb/0x140 [ 635.230413][T12280] prepare_alloc_pages+0x1f0/0x5b0 [ 635.230441][T12280] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 635.230464][T12280] ? lock_acquire+0x1d1/0x380 [ 635.230484][T12280] ? clockevents_program_event+0x23e/0x820 [ 635.230511][T12280] ? find_held_lock+0x2b/0x80 [ 635.230537][T12280] ? clockevents_program_event+0x23e/0x820 [ 635.230563][T12280] ? clockevents_program_event+0x23e/0x820 [ 635.230594][T12280] ? __lock_acquire+0x5c0/0x1f40 [ 635.230615][T12280] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 635.230638][T12280] ? __lock_acquire+0x5c0/0x1f40 [ 635.230663][T12280] ? __lock_acquire+0x5c0/0x1f40 [ 635.230689][T12280] ? __lock_acquire+0x5c0/0x1f40 [ 635.230711][T12280] ? lock_acquire+0x1d1/0x380 [ 635.230731][T12280] ? unwind_next_frame+0xbd/0x2090 [ 635.230756][T12280] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 635.230778][T12280] ? policy_nodemask+0xed/0x4f0 [ 635.230805][T12280] alloc_pages_mpol+0x201/0x550 [ 635.230832][T12280] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 635.230857][T12280] ? __lock_acquire+0x5c0/0x1f40 [ 635.230881][T12280] folio_alloc_mpol_noprof+0x36/0x260 [ 635.230911][T12280] vma_alloc_folio_noprof+0xed/0x1d0 [ 635.230938][T12280] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 635.230967][T12280] ? unwind_next_frame+0xbd/0x2090 [ 635.230997][T12280] do_anonymous_page+0xac9/0x2050 [ 635.231033][T12280] ? __pfx_do_anonymous_page+0x10/0x10 [ 635.231058][T12280] ? rcu_read_unlock+0x2d/0xb0 [ 635.231084][T12280] ? rcu_read_unlock+0x2d/0xb0 [ 635.231110][T12280] ? __pte_offset_map+0x179/0x310 [ 635.231137][T12280] __handle_mm_fault+0x1ff3/0x2f60 [ 635.231170][T12280] ? __pfx___handle_mm_fault+0x10/0x10 [ 635.231195][T12280] ? __pfx_mt_find+0x10/0x10 [ 635.231237][T12280] ? find_vma+0xbf/0x140 [ 635.231257][T12280] ? __pfx_find_vma+0x10/0x10 [ 635.231286][T12280] handle_mm_fault+0x363/0xa20 [ 635.231317][T12280] do_user_addr_fault+0x745/0x12f0 [ 635.231350][T12280] exc_page_fault+0x6f/0xd0 [ 635.231376][T12280] asm_exc_page_fault+0x26/0x30 [ 635.231394][T12280] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 635.231415][T12280] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 635.231433][T12280] RSP: 0018:ffffc9000342f8e8 EFLAGS: 00050206 [ 635.231450][T12280] RAX: 2065636976654420 RBX: 000000000000002c RCX: 000000000000002c [ 635.231463][T12280] RDX: 0000000000000001 RSI: ffff88807e64c003 RDI: 0000200000001a40 [ 635.231475][T12280] RBP: ffffc9000342faf8 R08: 0000000000000000 R09: ffffed100fcc9805 [ 635.231487][T12280] R10: ffff88807e64c02e R11: 0000000000000001 R12: ffff88807e64c003 [ 635.231500][T12280] R13: 0000000000000000 R14: 0000200000001a40 R15: 000000000000002c [ 635.231525][T12280] _copy_to_iter+0x4c5/0x1720 [ 635.231552][T12280] ? __pfx__copy_to_iter+0x10/0x10 [ 635.231575][T12280] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 635.231607][T12280] seq_read_iter+0x691/0x1270 [ 635.231639][T12280] seq_read+0x344/0x4d0 [ 635.231662][T12280] ? __pfx_seq_read+0x10/0x10 [ 635.231684][T12280] ? copy_iovec_from_user+0x102/0x140 [ 635.231706][T12280] ? iovec_from_user+0xda/0x140 [ 635.231730][T12280] ? selinux_file_permission+0x8f/0x6d0 [ 635.231755][T12280] ? __pfx_seq_read+0x10/0x10 [ 635.231774][T12280] proc_reg_read+0x240/0x330 [ 635.231800][T12280] ? __pfx_proc_reg_read+0x10/0x10 [ 635.231825][T12280] vfs_readv+0x5d8/0x8d0 [ 635.231850][T12280] ? __pfx_vfs_readv+0x10/0x10 [ 635.231874][T12280] ? lock_acquire+0x1d1/0x380 [ 635.231893][T12280] ? __fget_files+0x34/0x3d0 [ 635.231926][T12280] ? __fget_files+0x21f/0x3d0 [ 635.231955][T12280] ? do_preadv+0x1ac/0x270 [ 635.231972][T12280] do_preadv+0x1ac/0x270 [ 635.231990][T12280] ? __pfx_do_preadv+0x10/0x10 [ 635.232015][T12280] do_syscall_64+0x123/0x790 [ 635.232043][T12280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.232062][T12280] RIP: 0033:0x7f280e39e159 [ 635.232078][T12280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.232095][T12280] RSP: 002b:00007f280c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 635.232112][T12280] RAX: ffffffffffffffda RBX: 00007f280e625fa0 RCX: 00007f280e39e159 [ 635.232124][T12280] RDX: 0000000000000002 RSI: 0000200000003200 RDI: 0000000000000003 [ 635.232135][T12280] RBP: 00007f280c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 635.232146][T12280] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 635.232157][T12280] R13: 00007f280e626038 R14: 00007f280e625fa0 R15: 00007ffd5d470bc8 [ 635.232182][T12280] [ 635.988778][T12288] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 636.096701][ T5597] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 636.105378][ T5701] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 636.243883][ T5597] usb 1-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 636.247715][ T5597] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.247865][ T5597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.299316][ T5597] usb 1-1: config 0 descriptor?? [ 636.366791][ T5701] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 636.386778][ T5701] usb 5-1: config 1 interface 0 altsetting 129 endpoint 0x1 is Bulk; changing to Interrupt [ 636.386805][ T5701] usb 5-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 636.386830][ T5701] usb 5-1: config 1 interface 0 has no altsetting 0 [ 636.457184][ T5597] gspca_main: kinect-2.14.0 probing 045e:02bf [ 636.964995][T12290] udevd[12290]: open /dev/null failed: No such file or directory [ 638.627281][ T5694] usb 1-1: USB disconnect, device number 93 [ 638.712756][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.716033][ T5701] usb 5-1: can't set config #1, error -71 [ 638.719374][ T5701] usb 5-1: USB disconnect, device number 44 [ 639.264042][ T5597] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 639.324630][T12314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1751'. [ 639.441198][ T5597] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 639.453495][ T31] audit: type=1400 audit(1789567275.506:9055): avc: denied { setopt } for pid=12323 comm="syz.4.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 639.702047][ T5694] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 639.863885][ T5694] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 639.866570][ T5694] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 639.866595][ T5694] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 639.866618][ T5694] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 639.879722][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.879781][ T5694] usb 3-1: Product: syz [ 639.879823][ T5694] usb 3-1: Manufacturer: syz [ 639.879851][ T5694] usb 3-1: SerialNumber: syz [ 639.951355][ T5597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 639.951387][ T5597] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.951421][ T5597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.021492][ T5694] usb 3-1: config 0 descriptor?? [ 640.027444][ T5597] usb 4-1: config 0 descriptor?? [ 640.027572][T12322] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 640.027662][T12322] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 640.033422][ T5694] usb 3-1: ucan: probing device on interface #0 [ 640.461972][ T5597] usbhid 4-1:0.0: can't add hid device: -71 [ 640.462045][ T5597] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 640.470257][ T5597] usb 4-1: USB disconnect, device number 49 [ 640.893979][ T5785] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 641.043365][ T5785] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 641.045906][ T5785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.046040][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.282588][ T5785] usb 2-1: config 0 descriptor?? [ 641.292284][ T5694] usb 3-1: ucan: failed to retrieve device info [ 641.292301][ T5694] usb 3-1: ucan: probe failed; try to update the device firmware [ 641.313641][ T5785] gspca_main: kinect-2.14.0 probing 045e:02bf [ 641.351382][T12349] udevd[12349]: open /dev/null failed: No such file or directory [ 641.691097][ T31] audit: type=1400 audit(1789567277.746:9056): avc: denied { write } for pid=12354 comm="syz.0.1761" name="dlm" dev="configfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 641.720442][ T31] audit: type=1400 audit(1789567277.776:9057): avc: denied { write } for pid=12354 comm="syz.0.1761" name="comms" dev="configfs" ino=36390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 641.748222][ T31] audit: type=1400 audit(1789567277.806:9058): avc: denied { write } for pid=12354 comm="syz.0.1761" name="spaces" dev="configfs" ino=36389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 641.781320][ T31] audit: type=1400 audit(1789567277.836:9059): avc: denied { write } for pid=12354 comm="syz.0.1761" name="nodes" dev="configfs" ino=36393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 641.895091][ T31] audit: type=1400 audit(1789567277.956:9060): avc: denied { append } for pid=12350 comm="syz.3.1760" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 641.900703][ T31] audit: type=1400 audit(1789567277.956:9061): avc: denied { read } for pid=12350 comm="syz.3.1760" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 641.900750][ T31] audit: type=1400 audit(1789567277.956:9062): avc: denied { open } for pid=12350 comm="syz.3.1760" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 642.011284][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 642.011374][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 642.013963][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x7969 instead [ 642.014014][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x748c instead [ 642.014118][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 642.014195][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 642.014279][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 642.014535][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 642.313162][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 642.313252][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 642.313278][T12352] jffs2: Further such events for this erase block will not be printed [ 642.314146][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 642.314174][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 642.314217][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x7969 instead [ 642.314246][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x748c instead [ 642.314273][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 642.314299][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 642.314325][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 642.314407][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 642.314469][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 642.314530][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 642.314555][T12352] jffs2: Further such events for this erase block will not be printed [ 642.315327][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 642.315353][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 642.315381][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x7969 instead [ 642.315463][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x748c instead [ 642.315562][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 642.315587][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 642.315614][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x7969 instead [ 642.315642][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x748c instead [ 642.315729][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 642.315755][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 642.315783][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x7969 instead [ 642.315810][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x748c instead [ 642.316011][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 642.316041][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 642.316071][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x7969 instead [ 642.316102][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x748c instead [ 642.316277][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 642.316307][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 642.316337][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x7969 instead [ 642.316368][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x748c instead [ 642.316559][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 642.316586][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 642.316614][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x7969 instead [ 642.316643][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x748c instead [ 642.316729][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 642.316756][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 642.316782][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x7969 instead [ 642.316810][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x748c instead [ 642.316908][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 642.316934][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 642.316961][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x7969 instead [ 642.316989][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x748c instead [ 642.317087][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 642.317114][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 642.317129][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x7969 instead [ 642.317157][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x748c instead [ 642.317260][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 642.317286][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 642.317312][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x7969 instead [ 642.317340][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x748c instead [ 642.317437][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 642.317462][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 642.317541][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x7969 instead [ 642.317570][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x748c instead [ 642.317668][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 642.317694][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 642.317720][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x7969 instead [ 642.317748][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x748c instead [ 642.317834][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 642.317860][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 642.317887][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x7969 instead [ 642.317915][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x748c instead [ 642.318012][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 642.318038][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 642.318065][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x7969 instead [ 642.318092][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x748c instead [ 642.318190][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 642.318221][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 642.318247][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x7969 instead [ 642.318276][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x748c instead [ 642.318405][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 642.318435][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 642.318465][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x7969 instead [ 642.318496][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x748c instead [ 642.318660][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 642.318687][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 642.318713][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x7969 instead [ 642.318740][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x748c instead [ 642.318838][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 642.318863][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 642.318890][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x7969 instead [ 642.318918][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x748c instead [ 642.319019][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 642.319044][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 642.319070][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x7969 instead [ 642.319098][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x748c instead [ 642.319196][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 642.319227][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 642.319253][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x7969 instead [ 642.319281][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x748c instead [ 642.319379][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 642.319405][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 642.319432][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x7969 instead [ 642.319460][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x748c instead [ 642.319559][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 642.319639][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 642.319739][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x7969 instead [ 642.319768][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x748c instead [ 642.319868][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 642.319895][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 642.319923][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x7969 instead [ 642.319952][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x748c instead [ 642.320052][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 642.320078][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 642.320106][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x7969 instead [ 642.320134][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x748c instead [ 642.320235][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 642.320261][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 642.320287][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x7969 instead [ 642.320315][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x748c instead [ 642.320413][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 642.320438][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 642.320464][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x7969 instead [ 642.320492][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x748c instead [ 642.320742][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 642.320769][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 642.320796][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x7969 instead [ 642.320825][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x748c instead [ 642.321030][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 642.321061][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 642.321092][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x7969 instead [ 642.321124][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x748c instead [ 642.321343][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 642.321372][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 642.321402][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x7969 instead [ 642.321434][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x748c instead [ 642.321608][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 642.321637][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 642.321717][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x7969 instead [ 642.321748][T12352] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x748c instead [ 642.321932][T12352] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 642.321956][T12352] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 642.421877][ T31] audit: type=1400 audit(1789567278.476:9063): avc: denied { relabelfrom } for pid=12364 comm="syz.4.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 642.421917][ T31] audit: type=1400 audit(1789567278.476:9064): avc: denied { relabelto } for pid=12364 comm="syz.4.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 642.533518][ T5701] usb 3-1: USB disconnect, device number 46 [ 643.795385][ T5701] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 643.805195][ T5694] usb 2-1: USB disconnect, device number 50 [ 644.042121][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 644.062282][ T5701] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 644.093897][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.175347][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.175406][ T5701] usb 5-1: Product: syz [ 644.175441][ T5701] usb 5-1: Manufacturer: syz [ 644.175476][ T5701] usb 5-1: SerialNumber: syz [ 644.248491][ T5701] usb 5-1: config 0 descriptor?? [ 644.924787][ T5701] usb 5-1: USB disconnect, device number 45 [ 645.427596][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 645.427621][ T31] audit: type=1400 audit(1789567281.486:9067): avc: denied { write } for pid=12381 comm="syz.2.1769" name="functions" dev="configfs" ino=8938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 645.474235][ T31] audit: type=1400 audit(1789567281.536:9068): avc: denied { write } for pid=12381 comm="syz.2.1769" name="header" dev="configfs" ino=36684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 646.100467][T12398] gadgetfs: bound to dummy_udc driver [ 646.642221][ T5597] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 646.642428][ C0] gadgetfs: connected [ 646.642803][ T5597] gadgetfs: disconnected [ 646.694484][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1773'. [ 647.042878][T12420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1774'. [ 647.070319][T12421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1776'. [ 647.925819][ T31] audit: type=1400 audit(1789567283.986:9069): avc: denied { append } for pid=12425 comm="syz.4.1778" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 647.928430][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1779'. [ 647.978142][T12426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.997535][ T31] audit: type=1400 audit(1789567284.046:9070): avc: denied { ioctl } for pid=12425 comm="syz.4.1778" path="socket:[37244]" dev="sockfs" ino=37244 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 648.001856][T12426] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 648.015036][T12426] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 648.031931][T12426] cramfs: wrong magic [ 648.129054][ T31] audit: type=1400 audit(1789567284.186:9071): avc: denied { write } for pid=12427 comm="syz.2.1780" name="nullb" dev="configfs" ino=3426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 648.182813][ T31] audit: type=1400 audit(1789567284.236:9072): avc: denied { write } for pid=12427 comm="syz.2.1780" name="power" dev="configfs" ino=37261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 648.182863][ T31] audit: type=1400 audit(1789567284.236:9073): avc: denied { open } for pid=12427 comm="syz.2.1780" path="/346/config/nullb/nullb1/power" dev="configfs" ino=37261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 648.297194][ T31] audit: type=1400 audit(1789567284.356:9074): avc: denied { write } for pid=12429 comm="syz.3.1781" name="configs" dev="configfs" ino=8939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 648.310919][T12428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=12428 comm=syz.2.1780 [ 648.314016][T12430] FAULT_INJECTION: forcing a failure. [ 648.314016][T12430] name failslab, interval 1, probability 0, space 0, times 0 [ 648.314565][T12430] CPU: 1 UID: 0 PID: 12430 Comm: syz.3.1781 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.314589][T12430] Tainted: [L]=SOFTLOCKUP [ 648.314596][T12430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 648.314605][T12430] Call Trace: [ 648.314611][T12430] [ 648.314618][T12430] dump_stack_lvl+0x100/0x190 [ 648.314646][T12430] should_fail_ex.cold+0x5/0xa [ 648.314670][T12430] should_failslab+0xc2/0x120 [ 648.314691][T12430] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 648.314710][T12430] ? __d_alloc+0x35/0xa50 [ 648.314736][T12430] __d_alloc+0x35/0xa50 [ 648.314760][T12430] d_alloc+0x4a/0x1e0 [ 648.314783][T12430] lookup_one_qstr_excl+0x171/0x250 [ 648.314812][T12430] ? mnt_want_write+0x164/0x420 [ 648.314833][T12430] filename_create+0x1cf/0x400 [ 648.314851][T12430] ? __pfx_filename_create+0x10/0x10 [ 648.314870][T12430] ? lock_acquire+0x1d1/0x380 [ 648.314889][T12430] ? find_held_lock+0x2b/0x80 [ 648.314915][T12430] filename_symlinkat+0xe1/0x560 [ 648.314942][T12430] ? __pfx_filename_symlinkat+0x10/0x10 [ 648.314964][T12430] ? strncpy_from_user+0x19d/0x2d0 [ 648.314986][T12430] ? do_getname+0x191/0x390 [ 648.315011][T12430] __x64_sys_symlinkat+0x9c/0xe0 [ 648.315034][T12430] do_syscall_64+0x123/0x790 [ 648.315058][T12430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.315075][T12430] RIP: 0033:0x7f6e7739e159 [ 648.315088][T12430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.315103][T12430] RSP: 002b:00007f6e7825b028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 648.315120][T12430] RAX: ffffffffffffffda RBX: 00007f6e77625fa0 RCX: 00007f6e7739e159 [ 648.315131][T12430] RDX: 0000200000000700 RSI: ffffffffffffff9c RDI: 00002000000006c0 [ 648.315142][T12430] RBP: 00007f6e7825b090 R08: 0000000000000000 R09: 0000000000000000 [ 648.315151][T12430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.315161][T12430] R13: 00007f6e77626038 R14: 00007f6e77625fa0 R15: 00007ffcadcdefd8 [ 648.315183][T12430] [ 648.321893][ T31] audit: type=1400 audit(1789567284.356:9075): avc: denied { write } for pid=12429 comm="syz.3.1781" name="fs" dev="configfs" ino=36691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 648.321931][ T31] audit: type=1400 audit(1789567284.366:9076): avc: denied { create } for pid=12429 comm="syz.3.1781" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 648.582211][ T5701] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 648.743927][ T5701] usb 5-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 648.745516][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.745555][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.749017][ T5701] usb 5-1: config 0 descriptor?? [ 648.756798][ T5701] gspca_main: kinect-2.14.0 probing 045e:02bf [ 648.796305][T12446] udevd[12446]: open /dev/null failed: No such file or directory [ 648.799692][T12445] gadgetfs: bound to dummy_udc driver [ 649.133743][ T5597] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 649.133943][ C0] gadgetfs: connected [ 649.134111][ T5597] gadgetfs: disconnected [ 649.264198][T12447] gadgetfs: suspended from state 2 [ 649.294347][ T5597] usb 1-1: device descriptor read/all, error -71 [ 651.214594][ T5701] usb 5-1: USB disconnect, device number 46 [ 651.594199][ T5701] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 651.832373][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 651.832959][ T5701] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 651.836639][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.867645][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.867682][ T5701] usb 5-1: Product: syz [ 651.867726][ T5701] usb 5-1: Manufacturer: syz [ 651.867740][ T5701] usb 5-1: SerialNumber: syz [ 651.870987][ T5701] usb 5-1: config 0 descriptor?? [ 652.186672][ T5701] usb 5-1: USB disconnect, device number 47 [ 652.341650][T12472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1791'. [ 652.479727][T12474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1790'. [ 655.458105][T12490] gadgetfs: bound to dummy_udc driver [ 655.631282][T12497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1792'. [ 655.691990][ T5597] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 655.692195][ C0] gadgetfs: connected [ 655.692313][ T5597] gadgetfs: disconnected [ 655.698879][T12503] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 655.891643][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 655.891660][ T31] audit: type=1400 audit(1789567291.946:9081): avc: denied { setopt } for pid=12499 comm="syz.1.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 657.367000][ T31] audit: type=1400 audit(1789567293.016:9082): avc: denied { ioctl } for pid=12510 comm="syz.4.1803" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x6f01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 658.435200][ T5597] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 658.631878][ T5597] usb 1-1: Using ep0 maxpacket: 16 [ 658.632376][ T5597] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 658.636599][ T5597] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.694288][ T5597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.694315][ T5597] usb 1-1: Product: syz [ 658.694329][ T5597] usb 1-1: Manufacturer: syz [ 658.694344][ T5597] usb 1-1: SerialNumber: syz [ 658.786759][ T5597] usb 1-1: config 0 descriptor?? [ 659.347248][T12538] gadgetfs: bound to dummy_udc driver [ 659.416532][ T5597] usb 1-1: USB disconnect, device number 98 [ 659.622032][ T5694] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 659.622245][ C1] gadgetfs: connected [ 659.623438][ T5694] gadgetfs: disconnected [ 660.708422][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1811'. [ 660.937657][T12559] syzkaller0: entered promiscuous mode [ 660.937676][T12559] syzkaller0: entered allmulticast mode [ 661.567082][ T5597] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 661.743252][ T5597] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 661.744134][ T5597] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.744160][ T5597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.772511][ T5597] usb 4-1: config 0 descriptor?? [ 661.796461][ T5597] gspca_main: kinect-2.14.0 probing 045e:02bf [ 662.758829][T12574] udevd[12574]: open /dev/null failed: No such file or directory [ 662.868524][ T31] audit: type=1400 audit(1789567298.926:9083): avc: denied { write } for pid=12579 comm="syz.1.1817" name="subsystems" dev="configfs" ino=3435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 662.978058][ T31] audit: type=1400 audit(1789567299.036:9084): avc: denied { create } for pid=12577 comm="syz.2.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 663.006787][ T31] audit: type=1400 audit(1789567299.066:9085): avc: denied { write } for pid=12577 comm="syz.2.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 663.079325][T12581] lo: entered promiscuous mode [ 663.079777][T12581] tunl0: entered promiscuous mode [ 663.101391][T12581] gre0: entered promiscuous mode [ 663.169449][T12581] gretap0: entered promiscuous mode [ 663.501704][T12581] erspan0: entered promiscuous mode [ 663.700856][T12581] ip_vti0: entered promiscuous mode [ 663.873569][T12581] ip6_vti0: entered promiscuous mode [ 664.083503][ T5597] usb 4-1: USB disconnect, device number 50 [ 664.115993][T12581] sit0: entered promiscuous mode [ 664.349843][T12581] ip6tnl0: entered promiscuous mode [ 664.369122][T12581] ip6gre0: entered promiscuous mode [ 664.445904][T12581] syz_tun: entered promiscuous mode [ 664.475045][T12581] ip6gretap0: entered promiscuous mode [ 664.592322][T12581] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.593145][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.625208][T12581] bridge0: entered promiscuous mode [ 664.632635][T12581] vcan0: entered promiscuous mode [ 664.655111][T12581] bond0: entered promiscuous mode [ 664.655126][T12581] bond_slave_0: entered promiscuous mode [ 664.655231][T12581] bond_slave_1: entered promiscuous mode [ 664.674768][T12581] team0: entered promiscuous mode [ 664.674787][T12581] team_slave_0: entered promiscuous mode [ 664.674980][T12581] team_slave_1: entered promiscuous mode [ 664.692996][T12581] dummy0: entered promiscuous mode [ 664.726411][T12581] nlmon0: entered promiscuous mode [ 664.727217][T12581] batadv0: entered promiscuous mode [ 664.760995][T12581] vxcan0: entered promiscuous mode [ 664.770387][T12581] vxcan1: entered promiscuous mode [ 664.779489][T12581] veth0: entered promiscuous mode [ 664.802782][T12581] veth1: entered promiscuous mode [ 664.860895][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 664.929763][T12581] wg0: entered promiscuous mode [ 664.966915][T12581] wg1: entered promiscuous mode [ 664.986900][T12581] wg2: entered promiscuous mode [ 664.998834][T12581] veth0_to_bridge: entered promiscuous mode [ 665.040707][T12581] veth1_to_bridge: entered promiscuous mode [ 665.118471][T12581] veth0_to_bond: entered promiscuous mode [ 665.144274][T12581] veth1_to_bond: entered promiscuous mode [ 665.181308][T12581] veth0_to_team: entered promiscuous mode [ 665.211733][T12581] veth1_to_team: entered promiscuous mode [ 665.215150][T12581] veth0_to_batadv: entered promiscuous mode [ 665.216639][T12581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.216674][T12581] batadv_slave_0: entered promiscuous mode [ 665.246351][T12581] veth1_to_batadv: entered promiscuous mode [ 665.247356][T12581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.247395][T12581] batadv_slave_1: entered promiscuous mode [ 665.260381][T12581] xfrm0: entered promiscuous mode [ 665.265585][T12599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1824'. [ 665.268122][T12581] veth0_to_hsr: entered promiscuous mode [ 665.275518][ T5714] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 665.291604][T12581] veth1_to_hsr: entered promiscuous mode [ 665.320731][T12581] hsr0: entered promiscuous mode [ 665.328129][T12581] veth1_virt_wifi: entered promiscuous mode [ 665.334425][T12581] veth0_virt_wifi: entered promiscuous mode [ 665.366411][T12581] virt_wifi0: entered promiscuous mode [ 665.398538][T12581] vlan0: entered promiscuous mode [ 665.414645][T12581] vlan1: entered promiscuous mode [ 665.442610][ T5714] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 665.462071][T12581] macvlan0: entered promiscuous mode [ 665.466462][T12581] macvlan1: entered promiscuous mode [ 665.468448][ T5714] usb 2-1: config 0 has no interfaces? [ 665.468478][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.468726][T12581] ipvlan0: entered promiscuous mode [ 665.471017][T12581] ipvlan1: entered promiscuous mode [ 665.482729][ T5714] usb 2-1: config 0 descriptor?? [ 665.529258][T12581] macvtap0: entered promiscuous mode [ 665.542056][T12581] macsec0: entered promiscuous mode [ 665.545317][T12581] geneve0: entered promiscuous mode [ 665.547355][T12581] geneve1: entered promiscuous mode [ 665.621560][T12581] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 665.638637][T12581] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 665.652164][T12581] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 665.701364][T12581] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 665.781957][T12581] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 665.844762][T12581] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 665.845629][T12581] ip6gre1: entered promiscuous mode [ 665.926789][ T5852] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.930609][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.932080][ T1470] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.932116][ T1470] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.111338][T12615] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 667.135551][ T5692] usb 2-1: USB disconnect, device number 52 [ 668.109274][T12620] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 668.362220][ T5701] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 668.522153][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 668.523156][ T5701] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 668.525301][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.643620][ T5701] usb 4-1: config 0 descriptor?? [ 668.761816][ T5701] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 668.890222][T12603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.970848][T12603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.990100][T12603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.990524][T12603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.040017][T12603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.040425][T12603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.282722][ T5701] gspca_vc032x: reg_r err -110 [ 669.282749][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.282809][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.282873][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.282910][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.282942][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.282980][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.282989][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.283022][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.283054][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.283086][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.283118][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.283150][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.283182][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.283214][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.283245][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.283277][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.283309][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.283342][ T5701] gspca_vc032x: I2c Bus Busy Wait 00 [ 669.283374][ T5701] gspca_vc032x: Unknown sensor... [ 669.284338][ T5701] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 669.845040][ T5692] usb 4-1: USB disconnect, device number 51 [ 670.268426][ T5692] libceph: connect (1)[c::]:6789 error -101 [ 670.268589][ T5692] libceph: mon0 (1)[c::]:6789 connect error [ 670.400029][T12633] ceph: No mds server is up or the cluster is laggy [ 671.081007][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1837'. [ 671.150160][T12654] bond0: (slave bond_slave_1): Releasing backup interface [ 672.076999][T12692] FAULT_INJECTION: forcing a failure. [ 672.076999][T12692] name failslab, interval 1, probability 0, space 0, times 0 [ 672.077033][T12692] CPU: 0 UID: 0 PID: 12692 Comm: syz.3.1853 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.077060][T12692] Tainted: [L]=SOFTLOCKUP [ 672.077068][T12692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 672.077078][T12692] Call Trace: [ 672.077086][T12692] [ 672.077094][T12692] dump_stack_lvl+0x100/0x190 [ 672.077129][T12692] should_fail_ex.cold+0x5/0xa [ 672.077155][T12692] should_failslab+0xc2/0x120 [ 672.077182][T12692] kmem_cache_alloc_noprof+0x92/0x6a0 [ 672.077204][T12692] ? security_file_alloc+0x34/0x2c0 [ 672.077232][T12692] security_file_alloc+0x34/0x2c0 [ 672.077256][T12692] init_file+0x95/0x480 [ 672.077282][T12692] alloc_empty_file+0x79/0x1c0 [ 672.077310][T12692] alloc_file_pseudo+0x183/0x290 [ 672.077338][T12692] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 672.077373][T12692] __anon_inode_getfile+0xe8/0x280 [ 672.077397][T12692] bpf_link_prime+0x200/0x4c0 [ 672.077420][T12692] tcx_link_attach+0x1f4/0xbc0 [ 672.077456][T12692] ? __pfx_tcx_link_attach+0x10/0x10 [ 672.077490][T12692] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 672.077519][T12692] __sys_bpf+0x4583/0x4a30 [ 672.077537][T12692] ? plist_check_list+0x1b8/0x280 [ 672.077563][T12692] ? plist_check_list+0x190/0x280 [ 672.077583][T12692] ? __pfx___sys_bpf+0x10/0x10 [ 672.077601][T12692] ? find_held_lock+0x2b/0x80 [ 672.077628][T12692] ? futex_wake+0x4ea/0x5e0 [ 672.077659][T12692] ? futex_private_hash_put.part.0+0xdc/0x180 [ 672.077683][T12692] ? futex_private_hash_put+0x24/0x30 [ 672.077712][T12692] ? __pfx_futex_wake+0x10/0x10 [ 672.077745][T12692] ? rcu_read_lock_any_held+0x6a/0x90 [ 672.077773][T12692] ? find_held_lock+0x2b/0x80 [ 672.077798][T12692] ? ksys_write+0x190/0x250 [ 672.077817][T12692] ? ksys_write+0x190/0x250 [ 672.077854][T12692] ? __x64_sys_futex+0x34f/0x4d0 [ 672.077879][T12692] ? __x64_sys_futex+0x358/0x4d0 [ 672.077909][T12692] ? xfd_validate_state+0x129/0x190 [ 672.077933][T12692] ? __x64_sys_bpf+0xce/0x140 [ 672.077950][T12692] __x64_sys_bpf+0xce/0x140 [ 672.077970][T12692] ? do_syscall_64+0xae/0x790 [ 672.077996][T12692] do_syscall_64+0x123/0x790 [ 672.078024][T12692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.078044][T12692] RIP: 0033:0x7f6e7739e159 [ 672.078062][T12692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.078080][T12692] RSP: 002b:00007f6e7825b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 672.078100][T12692] RAX: ffffffffffffffda RBX: 00007f6e77625fa0 RCX: 00007f6e7739e159 [ 672.078113][T12692] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c [ 672.078125][T12692] RBP: 00007f6e7743506b R08: 0000000000000000 R09: 0000000000000000 [ 672.078136][T12692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.078147][T12692] R13: 00007f6e77626038 R14: 00007f6e77625fa0 R15: 00007ffcadcdefd8 [ 672.078174][T12692] [ 672.489524][ T31] audit: type=1400 audit(1789567308.546:9086): avc: denied { remount } for pid=12704 comm="syz.0.1858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 672.521601][T12707] ipip0: entered promiscuous mode [ 672.521623][T12707] ipip0: entered allmulticast mode [ 672.655952][ T31] audit: type=1400 audit(1789567308.716:9087): avc: denied { append } for pid=12714 comm="syz.1.1862" name="uprobe_events" dev="tracefs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 672.704576][T12718] FAULT_INJECTION: forcing a failure. [ 672.704576][T12718] name failslab, interval 1, probability 0, space 0, times 0 [ 672.704609][T12718] CPU: 1 UID: 0 PID: 12718 Comm: syz.4.1865 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.704634][T12718] Tainted: [L]=SOFTLOCKUP [ 672.704641][T12718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 672.704652][T12718] Call Trace: [ 672.704659][T12718] [ 672.704666][T12718] dump_stack_lvl+0x100/0x190 [ 672.704695][T12718] should_fail_ex.cold+0x5/0xa [ 672.704720][T12718] should_failslab+0xc2/0x120 [ 672.704744][T12718] kmem_cache_alloc_noprof+0x92/0x6a0 [ 672.704765][T12718] ? security_file_alloc+0x34/0x2c0 [ 672.704793][T12718] security_file_alloc+0x34/0x2c0 [ 672.704815][T12718] init_file+0x95/0x480 [ 672.704840][T12718] alloc_empty_file+0x79/0x1c0 [ 672.704867][T12718] alloc_file_pseudo+0x183/0x290 [ 672.704896][T12718] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 672.704925][T12718] ? _raw_spin_unlock+0x28/0x50 [ 672.704957][T12718] ? alloc_fd+0x471/0x7a0 [ 672.704986][T12718] __anon_inode_getfile+0xe8/0x280 [ 672.705011][T12718] __anon_inode_getfd+0x5c/0xe0 [ 672.705035][T12718] __do_sys_landlock_create_ruleset+0x3be/0x770 [ 672.705064][T12718] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 672.705102][T12718] do_syscall_64+0x123/0x790 [ 672.705134][T12718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.705154][T12718] RIP: 0033:0x7fd77b59e159 [ 672.705171][T12718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.705189][T12718] RSP: 002b:00007fd77c3bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 672.705209][T12718] RAX: ffffffffffffffda RBX: 00007fd77b825fa0 RCX: 00007fd77b59e159 [ 672.705222][T12718] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000200000000080 [ 672.705234][T12718] RBP: 00007fd77b63506b R08: 0000000000000000 R09: 0000000000000000 [ 672.705246][T12718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.705257][T12718] R13: 00007fd77b826038 R14: 00007fd77b825fa0 R15: 00007ffd47d81d78 [ 672.705283][T12718] [ 672.973219][ T31] audit: type=1400 audit(1789567309.036:9088): avc: denied { watch } for pid=12725 comm="syz.4.1867" path="/366" dev="tmpfs" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 672.979523][ T31] audit: type=1400 audit(1789567309.036:9089): avc: denied { audit_write } for pid=12727 comm="syz.1.1868" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 673.051546][ T31] audit: type=1400 audit(1789567309.106:9090): avc: denied { read } for pid=12731 comm="syz.3.1870" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 673.110427][ T31] audit: type=1400 audit(1789567309.166:9091): avc: denied { watch_reads } for pid=12727 comm="syz.1.1868" path="/374" dev="tmpfs" ino=2107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 673.158080][ T31] audit: type=1400 audit(1789567309.216:9092): avc: denied { execute } for pid=12738 comm="syz.2.1874" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=38488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 673.431896][ T31] audit: type=1400 audit(1789567309.446:9093): avc: denied { nlmsg_write } for pid=12754 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 673.470209][ T31] audit: type=1400 audit(1789567309.526:9094): avc: denied { read } for pid=12753 comm="syz.2.1881" lport=50586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 673.895745][T12773] FAULT_INJECTION: forcing a failure. [ 673.895745][T12773] name failslab, interval 1, probability 0, space 0, times 0 [ 673.895779][T12773] CPU: 1 UID: 0 PID: 12773 Comm: syz.2.1886 Tainted: G L syzkaller #0 PREEMPT(full) [ 673.895806][T12773] Tainted: [L]=SOFTLOCKUP [ 673.895813][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 673.895826][T12773] Call Trace: [ 673.895833][T12773] [ 673.895841][T12773] dump_stack_lvl+0x100/0x190 [ 673.895874][T12773] should_fail_ex.cold+0x5/0xa [ 673.895902][T12773] should_failslab+0xc2/0x120 [ 673.895928][T12773] kmem_cache_alloc_noprof+0x92/0x6a0 [ 673.895950][T12773] ? alloc_uid+0x13d/0x4c0 [ 673.895987][T12773] alloc_uid+0x13d/0x4c0 [ 673.896009][T12773] ? cap_capable+0x107/0x430 [ 673.896039][T12773] ? __pfx_alloc_uid+0x10/0x10 [ 673.896064][T12773] ? bpf_lsm_capable+0x9/0x10 [ 673.896092][T12773] ? security_capable+0x80/0x260 [ 673.896125][T12773] __sys_setreuid+0x63c/0xb00 [ 673.896150][T12773] do_syscall_64+0x123/0x790 [ 673.896195][T12773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.896217][T12773] RIP: 0033:0x7f95e859e159 [ 673.896233][T12773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.896251][T12773] RSP: 002b:00007f95e9554028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 673.896270][T12773] RAX: ffffffffffffffda RBX: 00007f95e8825fa0 RCX: 00007f95e859e159 [ 673.896282][T12773] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 000000000000ee01 [ 673.896294][T12773] RBP: 00007f95e863506b R08: 0000000000000000 R09: 0000000000000000 [ 673.896305][T12773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.896316][T12773] R13: 00007f95e8826038 R14: 00007f95e8825fa0 R15: 00007ffcc0215cb8 [ 673.896342][T12773] [ 674.724527][ T31] audit: type=1400 audit(1789567310.786:9095): avc: denied { bind } for pid=12793 comm="syz.4.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 675.871025][T12848] FAULT_INJECTION: forcing a failure. [ 675.871025][T12848] name failslab, interval 1, probability 0, space 0, times 0 [ 675.871059][T12848] CPU: 0 UID: 0 PID: 12848 Comm: syz.0.1920 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.871086][T12848] Tainted: [L]=SOFTLOCKUP [ 675.871093][T12848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 675.871104][T12848] Call Trace: [ 675.871111][T12848] [ 675.871120][T12848] dump_stack_lvl+0x100/0x190 [ 675.871153][T12848] should_fail_ex.cold+0x5/0xa [ 675.871182][T12848] should_failslab+0xc2/0x120 [ 675.871208][T12848] kmem_cache_alloc_noprof+0x92/0x6a0 [ 675.871231][T12848] ? do_getname+0x35/0x390 [ 675.871267][T12848] do_getname+0x35/0x390 [ 675.871298][T12848] do_sys_openat2+0xc7/0x1e0 [ 675.871325][T12848] ? __pfx_do_sys_openat2+0x10/0x10 [ 675.871353][T12848] ? fput+0x7c/0x100 [ 675.871382][T12848] __x64_sys_openat+0x12d/0x210 [ 675.871415][T12848] ? __pfx___x64_sys_openat+0x10/0x10 [ 675.871452][T12848] do_syscall_64+0x123/0x790 [ 675.871482][T12848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.871503][T12848] RIP: 0033:0x7ff988f9e159 [ 675.871520][T12848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.871538][T12848] RSP: 002b:00007ff989f14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 675.871558][T12848] RAX: ffffffffffffffda RBX: 00007ff989225fa0 RCX: 00007ff988f9e159 [ 675.871571][T12848] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 675.871583][T12848] RBP: 00007ff98903506b R08: 0000000000000000 R09: 0000000000000000 [ 675.871595][T12848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.871606][T12848] R13: 00007ff989226038 R14: 00007ff989225fa0 R15: 00007fffa69913b8 [ 675.871632][T12848] [ 676.199794][T12862] FAULT_INJECTION: forcing a failure. [ 676.199794][T12862] name failslab, interval 1, probability 0, space 0, times 0 [ 676.199826][T12862] CPU: 0 UID: 0 PID: 12862 Comm: syz.3.1927 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.199853][T12862] Tainted: [L]=SOFTLOCKUP [ 676.199860][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 676.199871][T12862] Call Trace: [ 676.199878][T12862] [ 676.199885][T12862] dump_stack_lvl+0x100/0x190 [ 676.199916][T12862] should_fail_ex.cold+0x5/0xa [ 676.199943][T12862] should_failslab+0xc2/0x120 [ 676.199968][T12862] __kvmalloc_node_noprof+0x113/0x9b0 [ 676.199990][T12862] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 676.200019][T12862] ? udmabuf_create+0x2e5/0x1110 [ 676.200050][T12862] udmabuf_create+0x2e5/0x1110 [ 676.200089][T12862] ? lock_acquire+0x1d1/0x380 [ 676.200112][T12862] ? __pfx_udmabuf_create+0x10/0x10 [ 676.200139][T12862] ? find_held_lock+0x2b/0x80 [ 676.200164][T12862] ? __might_fault+0xc5/0x140 [ 676.200190][T12862] ? __might_fault+0xc5/0x140 [ 676.200227][T12862] udmabuf_ioctl+0x18f/0x300 [ 676.200252][T12862] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 676.200285][T12862] ? selinux_file_ioctl+0x13b/0x290 [ 676.200306][T12862] ? selinux_file_ioctl+0xb6/0x290 [ 676.200329][T12862] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 676.200355][T12862] __x64_sys_ioctl+0x18e/0x210 [ 676.200376][T12862] do_syscall_64+0x123/0x790 [ 676.200413][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.200434][T12862] RIP: 0033:0x7f6e7739e159 [ 676.200451][T12862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.200468][T12862] RSP: 002b:00007f6e7825b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.200487][T12862] RAX: ffffffffffffffda RBX: 00007f6e77625fa0 RCX: 00007f6e7739e159 [ 676.200500][T12862] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000004 [ 676.200512][T12862] RBP: 00007f6e7743506b R08: 0000000000000000 R09: 0000000000000000 [ 676.200524][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.200536][T12862] R13: 00007f6e77626038 R14: 00007f6e77625fa0 R15: 00007ffcadcdefd8 [ 676.200562][T12862] [ 676.640546][T12880] FAULT_INJECTION: forcing a failure. [ 676.640546][T12880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 676.640579][T12880] CPU: 1 UID: 60929 PID: 12880 Comm: syz.3.1935 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.640606][T12880] Tainted: [L]=SOFTLOCKUP [ 676.640613][T12880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 676.640624][T12880] Call Trace: [ 676.640631][T12880] [ 676.640638][T12880] dump_stack_lvl+0x100/0x190 [ 676.640669][T12880] should_fail_ex.cold+0x5/0xa [ 676.640691][T12880] ? do_syscall_64+0x123/0x790 [ 676.640719][T12880] get_futex_key+0x1d0/0x14f0 [ 676.640746][T12880] ? __pfx_get_futex_key+0x10/0x10 [ 676.640778][T12880] futex_wake+0xf4/0x5e0 [ 676.640809][T12880] ? find_ucounts+0x87/0x3e0 [ 676.640835][T12880] ? __pfx_futex_wake+0x10/0x10 [ 676.640859][T12880] ? find_ucounts+0x218/0x3e0 [ 676.640902][T12880] do_futex+0x2b2/0x440 [ 676.640932][T12880] ? __pfx_do_futex+0x10/0x10 [ 676.640967][T12880] __x64_sys_futex+0x34f/0x4d0 [ 676.640999][T12880] ? __pfx___x64_sys_futex+0x10/0x10 [ 676.641037][T12880] do_syscall_64+0x123/0x790 [ 676.641064][T12880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.641084][T12880] RIP: 0033:0x7f6e7739e159 [ 676.641100][T12880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.641119][T12880] RSP: 002b:00007f6e7825b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 676.641139][T12880] RAX: ffffffffffffffda RBX: 00007f6e77625fa8 RCX: 00007f6e7739e159 [ 676.641152][T12880] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6e77625fac [ 676.641164][T12880] RBP: 00007f6e77625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 676.641176][T12880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.641187][T12880] R13: 00007f6e77626038 R14: 00007ffcadcdeef0 R15: 00007ffcadcdefd8 [ 676.641213][T12880] [ 677.081313][ T5608] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 680.214192][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.214766][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.301974][T12903] geneve3: left promiscuous mode [ 687.302029][T12903] geneve3: left allmulticast mode [ 687.819898][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.821758][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.452768][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 692.452811][ T31] audit: type=1400 audit(1789567328.506:9107): avc: denied { read } for pid=12922 comm="syz.4.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 741.675737][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.676371][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 789.809128][ T7104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.297413][ T7104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.705060][ T7104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.928631][ T7104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.111545][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.113581][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.542527][ T31] audit: type=1400 audit(1789567448.566:9108): avc: denied { read } for pid=5261 comm="dhcpcd" name="n32" dev="tmpfs" ino=4970 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 812.592218][ T31] audit: type=1400 audit(1789567448.606:9109): avc: denied { open } for pid=5261 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=4970 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 812.592716][ T31] audit: type=1400 audit(1789567448.646:9110): avc: denied { getattr } for pid=5261 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=4970 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 814.077432][ T7104] bridge_slave_1: left allmulticast mode [ 814.077500][ T7104] bridge_slave_1: left promiscuous mode [ 814.097696][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.720665][ T7104] bridge_slave_0: left allmulticast mode [ 814.720766][ T7104] bridge_slave_0: left promiscuous mode [ 814.764352][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.982958][ T32] INFO: task kworker/1:3:5692 blocked for more than 143 seconds. [ 836.983014][ T32] Tainted: G L syzkaller #0 [ 836.983052][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 836.983095][ T32] task:kworker/1:3 state:D stack:22824 pid:5692 tgid:5692 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 836.983230][ T32] Workqueue: events drain_vmap_area_work [ 836.983361][ T32] Call Trace: [ 836.983408][ T32] [ 836.983526][ T32] __schedule+0x1259/0x6920 [ 836.983842][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 836.984141][ T32] ? __pfx___schedule+0x10/0x10 [ 836.984210][ T32] ? find_held_lock+0x2b/0x80 [ 836.984370][ T32] ? schedule+0x225/0x2c0 [ 836.984773][ T32] schedule+0xdd/0x2c0 [ 836.984953][ T32] schedule_timeout+0x1b2/0x280 [ 836.985052][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 836.985457][ T32] ? mark_held_locks+0x40/0x70 [ 836.985631][ T32] __wait_for_common+0x2e7/0x4c0 [ 836.985723][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 836.986014][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 836.986061][ T32] ? __flush_work+0x4ca/0xcb0 [ 836.986144][ T32] ? find_held_lock+0x2b/0x80 [ 836.986222][ T32] ? __flush_work+0x928/0xcb0 [ 836.986304][ T32] ? __flush_work+0x928/0xcb0 [ 836.986539][ T32] ? __flush_work+0x4ca/0xcb0 [ 836.986624][ T32] __flush_work+0x7c7/0xcb0 [ 836.986736][ T32] ? __pfx_find_held_lock+0x10/0x10 [ 836.986825][ T32] ? purge_vmap_node+0x810/0xb40 [ 836.986943][ T32] ? __pfx___flush_work+0x10/0x10 [ 836.987152][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 836.987615][ T32] ? __pfx___might_resched+0x10/0x10 [ 836.987685][ T32] ? queue_work_on+0x11b/0x1e0 [ 836.987763][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 836.988026][ T32] __purge_vmap_area_lazy+0x879/0xc00 [ 836.988270][ T32] drain_vmap_area_work+0x27/0x40 [ 836.988345][ T32] process_one_work+0xac7/0x1b10 [ 836.988797][ T32] ? __pfx_process_one_work+0x10/0x10 [ 836.988971][ T32] ? lock_acquire+0x1d1/0x380 [ 836.989275][ T32] ? __pfx_drain_vmap_area_work+0x10/0x10 [ 836.989514][ T32] worker_thread+0x5ef/0xe50 [ 836.989813][ T32] ? __pfx_worker_thread+0x10/0x10 [ 836.989999][ T32] ? kthread+0x13a/0x450 [ 836.990094][ T32] ? __pfx_worker_thread+0x10/0x10 [ 836.990155][ T32] kthread+0x373/0x450 [ 836.990215][ T32] ? __pfx_kthread+0x10/0x10 [ 836.990352][ T32] ret_from_fork+0x730/0xd60 [ 836.990526][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 836.990708][ T32] ? __switch_to+0x800/0x10f0 [ 836.990791][ T32] ? __pfx_kthread+0x10/0x10 [ 836.990946][ T32] ret_from_fork_asm+0x1a/0x30 [ 836.991473][ T32] [ 836.991567][ T32] [ 836.991567][ T32] Showing all locks held in the system: [ 836.991618][ T32] locks held by kworker/0:0/9: 3, on CPU#0: [ 836.991666][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.233818][ T32] #1: ffffc900000e7d08 (netdev_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.233997][ T32] #2: ffffffff90cd2700 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x71/0x880 [ 837.234235][ T32] locks held by kworker/0:1/10: 3, on CPU#0: [ 837.234281][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.234498][ T32] #1: ffffc900000f7d08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.234651][ T32] #2: ffffffff90cd2700 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 837.234874][ T32] locks held by kworker/u8:0/12: 4, last CPU#0: [ 837.234915][ T32] #0: ffff8880342b4940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.339558][ T32] #1: ffffc90000117d08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.339820][ T32] #2: ffff88802c4ee1c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0 [ 837.339946][ T32] #3: ffff8880b843bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 837.356293][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 837.356332][ T32] #0: ffffffff8edd87b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 837.509144][ T32] #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e0c/0x6920 [ 837.509348][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 837.509389][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 837.509680][ T32] locks held by kworker/u8:3/50: 3, last CPU#1: [ 837.509733][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.509946][ T32] #1: ffffc90000ba7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.510133][ T32] #2: ffff8880581907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 837.510402][ T32] locks held by kworker/u8:5/148: 3, last CPU#1: [ 837.510453][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.597117][ T32] #1: ffffc90002e8fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.597310][ T32] #2: ffff8880246ca258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 837.597609][ T32] locks held by kworker/u8:6/1090: 3, last CPU#1: [ 837.597647][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.597775][ T32] #1: ffffc90005237d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.597965][ T32] #2: ffff888029c8d258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 837.598265][ T32] locks held by dhcpcd/5261: 1, on CPU#0: [ 837.598314][ T32] #0: ffffffff90cd2700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 837.598458][ T32] locks held by getty/5357: 2, on CPU#1: [ 837.598484][ T32] #0: ffff8880383650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 837.631002][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 837.631213][ T32] locks held by kworker/0:3/5597: 2, last CPU#0: [ 837.631255][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.631504][ T32] #1: ffffc90003a37d08 ((work_completion)(&vn->purge_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.631647][ T32] locks held by kworker/1:3/5692: 3, on CPU#1: [ 837.631677][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.631976][ T32] #1: ffffc9000463fd08 (drain_vmap_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.632106][ T32] #2: ffffffff8efc25c0 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 837.632296][ T32] locks held by kworker/1:5/5694: 2, last CPU#1: [ 837.632334][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.679437][ T32] #1: ffffc9000205fd08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.679609][ T32] locks held by kworker/1:7/5714: 3, last CPU#1: [ 837.679645][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.679895][ T32] #1: ffffc9000475fd08 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.680221][ T32] #2: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x21a/0x1a10 [ 837.680375][ T32] locks held by kworker/u8:9/5852: 3, on CPU#0: [ 837.680408][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.680639][ T32] #1: ffffc900048efd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.680939][ T32] #2: ffffffff90cd2700 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 837.720222][ T32] locks held by kworker/u8:10/5917: 3, on CPU#1: [ 837.720254][ T32] #0: ffff8880340da940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.720448][ T32] #1: ffffc90004df7d08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one ** replaying previous printk message ** [ 837.720448][ T32] #1: ffffc90004df7d08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.720710][ T32] #2: ffffffff90cd2700 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 837.720891][ T32] locks held by kworker/u8:14/6170: 3, last CPU#1: [ 837.720916][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.721087][ T32] #1: ffffc90003b07d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.721321][ T32] #2: ffff888037613258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 837.721572][ T32] locks held by kworker/u8:15/7104: 6, last CPU#1: [ 837.721595][ T32] #0: ffff88801d2d8940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.757925][ T32] #1: ffffc90005007d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.758065][ T32] #2: ffffffff90cb9c08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 837.758266][ T32] #3: ffffffff90cd2700 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 837.758529][ T32] #4: ffff88801d2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 837.758695][ T32] #5: ffff88801d2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 837.758857][ T32] locks held by kworker/u8:17/7666: 3, last CPU#1: [ 837.758892][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 837.759131][ T32] #1: ffffc90003c37d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 837.791565][ T32] #2: ffff888057ee07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 837.793542][ T32] locks held by syz-executor/12986: 1, last CPU#1: [ 837.793574][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x25/0x1a0 [ 837.793781][ T32] locks held by syz-executor/12988: 1, last CPU#1: [ 837.793822][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 837.794186][ T32] [ 837.794207][ T32] ============================================= [ 837.794207][ T32] [ 837.794232][ T32] NMI backtrace for cpu 1 [ 837.794257][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 837.794291][ T32] Tainted: [L]=SOFTLOCKUP [ 837.794310][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 837.794332][ T32] Call Trace: [ 837.794372][ T32] [ 837.794413][ T32] dump_stack_lvl+0x100/0x190 [ 837.794607][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 837.794685][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 837.794763][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 837.794911][ T32] sys_info+0x141/0x190 [ 837.795022][ T32] watchdog+0xcb1/0x1030 [ 837.795257][ T32] ? __pfx_watchdog+0x10/0x10 [ 837.795398][ T32] ? __kthread_parkme+0x18f/0x230 [ 837.795544][ T32] ? kthread+0x13a/0x450 [ 837.795588][ T32] ? __pfx_watchdog+0x10/0x10 [ 837.795630][ T32] kthread+0x373/0x450 [ 837.795705][ T32] ? __pfx_kthread+0x10/0x10 [ 837.795869][ T32] ret_from_fork+0x730/0xd60 [ 837.795966][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 837.796069][ T32] ? __switch_to+0x800/0x10f0 [ 837.796173][ T32] ? __pfx_kthread+0x10/0x10 [ 837.796345][ T32] ret_from_fork_asm+0x1a/0x30 [ 837.796751][ T32] [ 837.796850][ T32] Sending NMI from CPU 1 to CPUs 0: [ 837.796891][ C0] NMI backtrace for cpu 0 [ 837.796909][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 837.796934][ C0] Tainted: [L]=SOFTLOCKUP [ 837.796944][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 837.796959][ C0] RIP: 0010:delay_tsc+0x6a/0xc0 [ 837.796992][ C0] Code: 00 44 39 e0 75 36 0f 01 f9 66 90 48 c1 e2 20 48 89 d3 48 09 c3 48 89 d8 48 29 e8 4c 39 e8 73 27 bf 01 00 00 00 e8 76 26 07 f6 <65> 48 83 3d 55 f4 bc 08 00 75 bb e8 56 11 a7 f5 eb b4 4c 01 ed 48 [ 837.797013][ C0] RSP: 0018:ffffc90000157950 EFLAGS: 00000093 [ 837.797046][ C0] RAX: 8000000000000002 RBX: 000002277a152601 RCX: 0000000000000000 [ 837.797065][ C0] RDX: 0000000000000004 RSI: ffffffff8c622e00 RDI: 0000000000000001 [ 837.797083][ C0] RBP: 000002277a151c46 R08: 0000000000000005 R09: 0000000000000000 [ 837.797101][ C0] R10: 00000000000007f3 R11: 205d323354202020 R12: 0000000000000000 [ 837.797120][ C0] R13: 0000000000000af1 R14: fffffbfff378d7e9 R15: dffffc0000000000 [ 837.797158][ C0] FS: 0000000000000000(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 837.797184][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 837.797206][ C0] CR2: 00007f5495a69ed0 CR3: 000000000eb96000 CR4: 00000000003526f0 [ 837.797228][ C0] Call Trace: [ 837.797255][ C0] [ 837.797337][ C0] wait_for_lsr+0xf3/0x210 [ 837.797499][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 837.797646][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 837.797695][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 837.797830][ C0] serial8250_console_write+0xf46/0x1330 [ 837.798034][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 837.798072][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 837.798162][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 837.798431][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 837.798586][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 837.798664][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 837.798739][ C0] ? do_raw_spin_lock+0x30/0x260 [ 837.798956][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 837.799046][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 837.799176][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 837.799234][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 837.799493][ C0] nbcon_kthread_func+0x613/0x7d0 [ 837.799631][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 837.799853][ C0] ? __kthread_parkme+0x18f/0x230 [ 837.799985][ C0] ? kthread+0x13a/0x450 [ 837.800035][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 837.800078][ C0] kthread+0x373/0x450 [ 837.800157][ C0] ? __pfx_kthread+0x10/0x10 [ 837.800257][ C0] ret_from_fork+0x730/0xd60 [ 837.800339][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 837.800461][ C0] ? __switch_to+0x800/0x10f0 [ 837.800571][ C0] ? __pfx_kthread+0x10/0x10 [ 837.800655][ C0] ret_from_fork_asm+0x1a/0x30 [ 837.801007][ C0] [ 838.033126][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 838.659302][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 838.669986][ T32] Tainted: [L]=SOFTLOCKUP [ 838.674308][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 838.684363][ T32] Call Trace: [ 838.687656][ T32] [ 838.690607][ T32] dump_stack_lvl+0x100/0x190 [ 838.695434][ T32] vpanic+0x553/0x970 [ 838.699516][ T32] ? __pfx_vpanic+0x10/0x10 [ 838.704279][ T32] panic+0xd1/0xe0 [ 838.708091][ T32] ? __pfx_panic+0x10/0x10 [ 838.712696][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 838.718904][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 838.725080][ T32] ? watchdog.cold+0x1ec/0x234 [ 838.730058][ T32] watchdog.cold+0x1fd/0x234 [ 838.734897][ T32] ? __pfx_watchdog+0x10/0x10 [ 838.739718][ T32] ? __kthread_parkme+0x18f/0x230 [ 838.744878][ T32] ? kthread+0x13a/0x450 [ 838.749142][ T32] ? __pfx_watchdog+0x10/0x10 [ 838.753840][ T32] kthread+0x373/0x450 [ 838.757974][ T32] ? __pfx_kthread+0x10/0x10 [ 838.762741][ T32] ret_from_fork+0x730/0xd60 [ 838.767409][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 838.772621][ T32] ? __switch_to+0x800/0x10f0 [ 838.777396][ T32] ? __pfx_kthread+0x10/0x10 [ 838.782178][ T32] ret_from_fork_asm+0x1a/0x30 [ 838.787382][ T32] [ 838.790691][ T32] Kernel Offset: disabled [ 838.795035][ T32] Rebooting in 86400 seconds..