last executing test programs: 34.48493833s ago: executing program 4 (id=1129): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000180)=0x1) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4020744f, 0x0) 34.427493113s ago: executing program 4 (id=1130): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x35d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 34.221326508s ago: executing program 4 (id=1131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.296298673s ago: executing program 4 (id=1132): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) open(&(0x7f0000000100)='./file0\x00', 0x1419c2, 0x1cf) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 33.244362815s ago: executing program 4 (id=1133): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x20) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 33.047127519s ago: executing program 4 (id=1134): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x26, &(0x7f0000001280)=ANY=[@ANYRES16=r0], 0x20) 32.952766064s ago: executing program 32 (id=1134): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x26, &(0x7f0000001280)=ANY=[@ANYRES16=r0], 0x20) 3.462686614s ago: executing program 1 (id=1473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 3.371659392s ago: executing program 1 (id=1476): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.224663613s ago: executing program 1 (id=1478): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1ffffffffffffe, 0x1) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) 2.282478647s ago: executing program 3 (id=1496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0xd0dc, 0x7, 0x0, 0x18000000, 0x2, [0xfffffff5, 0x5, 0x0, 0x7]}) 2.15902796s ago: executing program 3 (id=1497): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xe516bfac06eb6b0c}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0xfffffffd, 0x3, 0xffff0099, 0x7, 0xffffffff}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0xb268, 0x2, 0x1ff, 0x8}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000c2}, 0x800) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000ac0)="99c9137c0740efb04eab19d42b20", 0xe, 0x40, &(0x7f0000000b00)={0x11, 0x19, r1, 0x1, 0xd4, 0x6, @random="0000ee773968"}, 0x14) 1.915555077s ago: executing program 3 (id=1501): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x37}, @local, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x7, 0x0, 0x1}}}}}}}, 0x0) 1.7852042s ago: executing program 3 (id=1504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e80)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x16, 0x19, &(0x7f0000001f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000002080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000020c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000002140)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.438679898s ago: executing program 3 (id=1507): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c40)='./debug\x00', &(0x7f0000000c80)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./debug/dri/128/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000d00), 0x100) 1.194888436s ago: executing program 3 (id=1509): syz_usb_connect$hid(0x3, 0x9, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 956.814111ms ago: executing program 5 (id=1518): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x4) clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 934.070639ms ago: executing program 0 (id=1519): setfsgid(0xee00) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x30925) keyctl$read(0xb, r0, 0x0, 0x0) 861.96304ms ago: executing program 5 (id=1520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x2, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x48, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0x1, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0x7, '\x00', 0x4}, {0x7, 0x6, 0x6, '\x00', 0x8}]}}) 861.196126ms ago: executing program 2 (id=1521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001880)={{r1}, &(0x7f00000018c0), &(0x7f0000001900)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001940)={r1, &(0x7f0000001980)}, 0x20) 852.808298ms ago: executing program 0 (id=1522): r0 = socket$inet6(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10000) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 790.857216ms ago: executing program 2 (id=1523): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xcb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xc5) 760.82821ms ago: executing program 2 (id=1524): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x8800) 670.915768ms ago: executing program 0 (id=1525): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "12"}], 0x18}, 0x0) 670.665806ms ago: executing program 5 (id=1526): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = fanotify_init(0x4, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fanotify_mark(r0, 0x1, 0x800002b, r1, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) 635.848434ms ago: executing program 0 (id=1527): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000100)='4', 0x4b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 585.661023ms ago: executing program 0 (id=1528): unshare(0x6020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000180)) 510.924332ms ago: executing program 2 (id=1529): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xa00) r0 = syz_io_uring_setup(0x7406, &(0x7f00000009c0)={0x0, 0x2346, 0x10000, 0x0, 0x4e}, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000b00)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x4, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/92, 0x5c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x4, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 431.594107ms ago: executing program 0 (id=1530): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 396.318627ms ago: executing program 5 (id=1531): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f80), 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x11) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x80000}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 318.992845ms ago: executing program 2 (id=1532): timer_create(0x1, &(0x7f0000000180)={0x0, 0xc, 0x2, @thr={&(0x7f0000000000)="1c7e39b3f8b7102d69e2325aa9e5b49439629d7e8278f000c24c902521b6216561f0b04539370de4b02f1a03f7bbaffab6b80bd4c8f7a31353a4bf0f12815816727e3488a8a9067c08c14143dfb9874d2a2259c9cfe9940efc4b14460db8e4dbb2b0c3aeafc8a730c96096b198e6b82656264c0af79711fb33a383f8e567eae4c72aff63e26620daaa101a45715266af616340a3a916d5d089345e3f", &(0x7f00000000c0)="dc94b68d784e6f271cb2d9b74bbe6c18f00daf0ea8a931c173b9cc3796304d44ca21b7a484e4eac5b44d510060047694418f8df25f9851f58e4e319bac17d4ee290f2028e50328cd9d2924e8f4fce1a482d98fe15e1d9a49646c3ac6829a85a5e631ee999fa762c1af88af0f660e7e983c1ec2c62735b54379abe55389887e62443ba0104c1a6099464db7bc942a447714474ac3f7c5dd84ebec14934527c417af47178d15c666c43da2df101f0e5a6f"}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000400)={0x30, 0x0, 0x0, 0x0, 0x0, 0x80100000, 0x5, 0x0}) 252.513411ms ago: executing program 2 (id=1533): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28011, r1, 0x2cb25000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 244.661613ms ago: executing program 5 (id=1534): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x400) ioctl$IOC_PR_RELEASE(r0, 0xc02812f8, 0x0) 138.863825ms ago: executing program 5 (id=1535): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000fc0)={0x40000004}) 121.440097ms ago: executing program 1 (id=1536): unshare(0x26020480) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) poll(&(0x7f0000000540)=[{r0, 0x26}], 0x1, 0x9) 57.487222ms ago: executing program 1 (id=1537): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000002840)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002940)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002980)={r1, 0x0, 0x0, 0x4}, 0x20) 0s ago: executing program 1 (id=1538): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'macvtap0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x2000, 0x0}}], 0x34000, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 4-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 154.715419][ T8097] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.715449][ T8097] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 154.715488][ T8097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.741545][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.743860][ T8097] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 154.879189][ T8439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.896613][ T8439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.935457][ T30] audit: type=1400 audit(1793241253.410:540): avc: denied { read } for pid=8435 comm="syz.3.1047" name="idmouse0" dev="devtmpfs" ino=3322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 155.190358][ T8447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.193967][ T8447] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.201353][ T1014] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.201449][ T1014] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.201572][ T1014] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.201608][ T1014] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.261572][ T9] usb 1-1: USB disconnect, device number 15 [ 155.297449][ T8450] bond0: (slave batadv0): Releasing backup interface [ 155.324856][ T8450] bridge_slave_0: left allmulticast mode [ 155.324882][ T8450] bridge_slave_0: left promiscuous mode [ 155.325072][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.360401][ T8450] bridge_slave_1: left allmulticast mode [ 155.360429][ T8450] bridge_slave_1: left promiscuous mode [ 155.360535][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.408409][ T8450] bond0: (slave bond_slave_0): Releasing backup interface [ 155.425017][ T8450] bond0: (slave bond_slave_1): Releasing backup interface [ 155.456723][ T8450] team0: Port device team_slave_0 removed [ 155.485589][ T8450] team0: Port device team_slave_1 removed [ 155.487911][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.487933][ T8450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.497343][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.497365][ T8450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.532281][ T8450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.658419][ T30] audit: type=1400 audit(1793241254.130:541): avc: denied { mounton } for pid=8462 comm="syz.4.1055" path="/209/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 155.674659][ T8463] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.685486][ T30] audit: type=1400 audit(1793241254.160:542): avc: denied { read } for pid=8462 comm="syz.4.1055" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 155.685535][ T30] audit: type=1400 audit(1793241254.160:543): avc: denied { read } for pid=8462 comm="syz.4.1055" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 155.685598][ T30] audit: type=1400 audit(1793241254.160:544): avc: denied { open } for pid=8462 comm="syz.4.1055" path="/209/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 155.685640][ T30] audit: type=1400 audit(1793241254.160:545): avc: denied { read } for pid=8462 comm="syz.4.1055" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 155.697993][ T30] audit: type=1400 audit(1793241254.170:546): avc: denied { read } for pid=8462 comm="syz.4.1055" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 155.709672][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.732266][ T30] audit: type=1400 audit(1793241254.210:547): avc: denied { getattr } for pid=8462 comm="syz.4.1055" name="saved_tgids" dev="tracefs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 155.784400][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.038191][ T29] usb 4-1: USB disconnect, device number 14 [ 156.064416][ T29] idmouse 4-1:1.0: disconnected [ 156.169750][ T30] audit: type=1326 audit(1793241254.640:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8472 comm="syz.4.1057" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f912b59f559 code=0x0 [ 156.411105][ T5755] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 156.451502][ T8494] netlink: 'syz.1.1068': attribute type 16 has an invalid length. [ 156.451515][ T8494] netlink: 'syz.1.1068': attribute type 17 has an invalid length. [ 156.483968][ T8494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.573828][ T5755] usb 3-1: not running at top speed; connect to a high speed hub [ 156.573861][ T5755] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 156.574788][ T5755] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.574837][ T5755] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 156.574864][ T5755] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 156.574908][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.591150][ T5749] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 156.648306][ T5755] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 156.659113][ T5755] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 156.670481][ T5755] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 156.681648][ T5755] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 156.681747][ T5755] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 156.683768][ T5755] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 156.736246][ T8499] netlink: 'syz.3.1070': attribute type 2 has an invalid length. [ 156.736260][ T8499] netlink: 'syz.3.1070': attribute type 2 has an invalid length. [ 156.741803][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.743423][ T5749] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.40 [ 156.745848][ T5749] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 156.745879][ T5749] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 156.745907][ T5749] usb 1-1: config 1 interface 0 has no altsetting 0 [ 156.749965][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.749990][ T5749] usb 1-1: Product: syz [ 156.750006][ T5749] usb 1-1: Manufacturer: syz [ 156.750023][ T5749] usb 1-1: SerialNumber: syz [ 156.764186][ T8488] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 156.764304][ T8488] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 156.821454][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.070403][ T5715] usb 3-1: USB disconnect, device number 13 [ 157.087953][ T5715] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 157.106286][ T8510] tunl0: entered promiscuous mode [ 157.110110][ T5715] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 157.110894][ T5715] keyspan 3-1:1.0: device disconnected [ 157.122338][ T8510] netlink: 'syz.1.1074': attribute type 4 has an invalid length. [ 157.122357][ T8510] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1074'. [ 157.304263][ T5755] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 157.349502][ T8519] FAULT_INJECTION: forcing a failure. [ 157.349502][ T8519] name failslab, interval 1, probability 0, space 0, times 0 [ 157.349541][ T8519] CPU: 1 UID: 0 PID: 8519 Comm: syz.1.1079 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.349576][ T8519] Tainted: [L]=SOFTLOCKUP [ 157.349584][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 157.349595][ T8519] Call Trace: [ 157.349600][ T8519] [ 157.349606][ T8519] dump_stack_lvl+0x100/0x190 [ 157.349630][ T8519] should_fail_ex.cold+0x5/0xa [ 157.349650][ T8519] should_failslab+0xc2/0x120 [ 157.349677][ T8519] __kmalloc_cache_noprof+0x91/0x6d0 [ 157.349708][ T8519] ? lock_acquire+0x1d1/0x380 [ 157.349739][ T8519] ? dm_open+0x51/0x130 [ 157.349759][ T8519] dm_open+0x51/0x130 [ 157.349774][ T8519] ? __pfx_dm_open+0x10/0x10 [ 157.349789][ T8519] misc_open+0x26d/0x450 [ 157.349813][ T8519] ? __pfx_misc_open+0x10/0x10 [ 157.349846][ T8519] chrdev_open+0x234/0x6a0 [ 157.349875][ T8519] ? __pfx_chrdev_open+0x10/0x10 [ 157.349895][ T8519] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 157.349917][ T8519] do_dentry_open+0x674/0x1470 [ 157.349929][ T8519] ? __pfx_chrdev_open+0x10/0x10 [ 157.349948][ T8519] vfs_open_consume+0xcc/0x460 [ 157.349983][ T8519] path_openat+0x1547/0x23f0 [ 157.350018][ T8519] ? __pfx_path_openat+0x10/0x10 [ 157.350054][ T8519] do_file_open+0x20e/0x430 [ 157.350085][ T8519] ? __pfx_do_file_open+0x10/0x10 [ 157.350141][ T8519] ? _raw_spin_unlock+0x28/0x50 [ 157.350173][ T8519] ? alloc_fd+0x471/0x7a0 [ 157.350193][ T8519] do_sys_openat2+0x163/0x1d0 [ 157.350210][ T8519] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.350226][ T8519] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.350257][ T8519] __x64_sys_openat+0x12d/0x210 [ 157.350289][ T8519] ? __pfx___x64_sys_openat+0x10/0x10 [ 157.350318][ T8519] ? ksys_write+0x1ac/0x250 [ 157.350336][ T8519] do_syscall_64+0x123/0x790 [ 157.350351][ T8519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.350364][ T8519] RIP: 0033:0x7effa839f559 [ 157.350375][ T8519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.350398][ T8519] RSP: 002b:00007effa924a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.350422][ T8519] RAX: ffffffffffffffda RBX: 00007effa8625fa0 RCX: 00007effa839f559 [ 157.350438][ T8519] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 157.350454][ T8519] RBP: 00007effa8436b20 R08: 0000000000000000 R09: 0000000000000000 [ 157.350467][ T8519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.350474][ T8519] R13: 00007effa8626038 R14: 00007effa8625fa0 R15: 00007ffdcc1c92f8 [ 157.350493][ T8519] [ 157.503143][ T5755] usb 5-1: New USB device found: idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 157.534661][ T5755] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.637530][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.637558][ T5755] usb 5-1: Product: syz [ 157.637575][ T5755] usb 5-1: Manufacturer: syz [ 157.637593][ T5755] usb 5-1: SerialNumber: syz [ 157.671644][ T5755] usb 5-1: config 0 descriptor?? [ 157.677288][ T5755] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 157.781853][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.805791][ T5749] (unnamed net_device) (uninitialized): Assigned a random MAC address: 32:eb:5b:aa:bf:d9 [ 157.827404][ T5749] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 157.844734][ T5749] usb 1-1: USB disconnect, device number 16 [ 157.862273][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.082335][ T8542] FAULT_INJECTION: forcing a failure. [ 158.082335][ T8542] name failslab, interval 1, probability 0, space 0, times 0 [ 158.082373][ T8542] CPU: 1 UID: 0 PID: 8542 Comm: syz.1.1089 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.082410][ T8542] Tainted: [L]=SOFTLOCKUP [ 158.082422][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 158.082437][ T8542] Call Trace: [ 158.082445][ T8542] [ 158.082455][ T8542] dump_stack_lvl+0x100/0x190 [ 158.082507][ T8542] should_fail_ex.cold+0x5/0xa [ 158.082546][ T8542] should_failslab+0xc2/0x120 [ 158.082574][ T8542] __kmalloc_noprof+0xfc/0x840 [ 158.082609][ T8542] ? rcu_is_watching+0x13/0xc0 [ 158.082636][ T8542] ? tomoyo_encode2+0xfb/0x3c0 [ 158.082668][ T8542] tomoyo_encode2+0xfb/0x3c0 [ 158.082698][ T8542] tomoyo_encode+0x29/0x50 [ 158.082721][ T8542] tomoyo_realpath_from_path+0x18c/0x690 [ 158.082755][ T8542] tomoyo_check_open_permission+0x2af/0x3c0 [ 158.082791][ T8542] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 158.082840][ T8542] ? hook_file_open+0x245/0x8e0 [ 158.082902][ T8542] tomoyo_file_open+0x6b/0x90 [ 158.082933][ T8542] security_file_open+0xb5/0x1e0 [ 158.082959][ T8542] do_dentry_open+0x552/0x1470 [ 158.082991][ T8542] vfs_open_consume+0xcc/0x460 [ 158.083028][ T8542] path_openat+0x1547/0x23f0 [ 158.083060][ T8542] ? __pfx_stack_trace_save+0x10/0x10 [ 158.083094][ T8542] ? __pfx_path_openat+0x10/0x10 [ 158.083126][ T8542] ? check_noncircular+0x97/0x160 [ 158.083163][ T8542] do_file_open+0x20e/0x430 [ 158.083195][ T8542] ? __pfx_do_file_open+0x10/0x10 [ 158.083224][ T8542] ? check_prev_add+0x354/0xe60 [ 158.083268][ T8542] ? __pfx_kfree_link+0x10/0x10 [ 158.083304][ T8542] ? __might_fault+0xc5/0x140 [ 158.083333][ T8542] ? find_held_lock+0x2b/0x80 [ 158.083358][ T8542] ? __might_fault+0xc5/0x140 [ 158.083384][ T8542] ? __might_fault+0xc5/0x140 [ 158.083417][ T8542] file_open_name+0x1c3/0x3e0 [ 158.083449][ T8542] ? __pfx_file_open_name+0x10/0x10 [ 158.083494][ T8542] ? do_getname+0x191/0x390 [ 158.083534][ T8542] acct_on+0xa6/0xa00 [ 158.083570][ T8542] ? __pfx_acct_on+0x10/0x10 [ 158.083604][ T8542] ? bpf_lsm_capable+0x9/0x10 [ 158.083634][ T8542] __x64_sys_acct+0x81/0x1e0 [ 158.083666][ T8542] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.083705][ T8542] do_syscall_64+0x123/0x790 [ 158.083733][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.083759][ T8542] RIP: 0033:0x7effa839f559 [ 158.083781][ T8542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.083807][ T8542] RSP: 002b:00007effa924a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 158.083832][ T8542] RAX: ffffffffffffffda RBX: 00007effa8625fa0 RCX: 00007effa839f559 [ 158.083850][ T8542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 158.083866][ T8542] RBP: 00007effa8436b20 R08: 0000000000000000 R09: 0000000000000000 [ 158.083882][ T8542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.083897][ T8542] R13: 00007effa8626038 R14: 00007effa8625fa0 R15: 00007ffdcc1c92f8 [ 158.083934][ T8542] [ 158.090476][ T8542] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.187728][ T8544] xt_hashlimit: size too large, truncated to 1048576 [ 158.224086][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 158.564189][ T5755] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 158.711656][ T5749] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 158.797115][ T8449] usb 5-1: USB disconnect, device number 12 [ 158.822169][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.867544][ T5749] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 158.868666][ T5749] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.868694][ T5749] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 158.868715][ T5749] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.868759][ T5749] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 158.868782][ T5749] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 158.876698][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.876724][ T5749] usb 2-1: Product: syz [ 158.876741][ T5749] usb 2-1: Manufacturer: syz [ 158.889552][ T5749] cdc_wdm 2-1:1.0: skipping garbage [ 158.889569][ T5749] cdc_wdm 2-1:1.0: skipping garbage [ 158.917018][ T5749] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 158.917055][ T5749] cdc_wdm 2-1:1.0: Unknown control protocol [ 158.922635][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.224069][ T8570] FAULT_INJECTION: forcing a failure. [ 159.224069][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 159.224099][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.2.1100 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.224118][ T8570] Tainted: [L]=SOFTLOCKUP [ 159.224123][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 159.224131][ T8570] Call Trace: [ 159.224135][ T8570] [ 159.224140][ T8570] dump_stack_lvl+0x100/0x190 [ 159.224166][ T8570] should_fail_ex.cold+0x5/0xa [ 159.224186][ T8570] should_failslab+0xc2/0x120 [ 159.224200][ T8570] __kmalloc_cache_noprof+0x91/0x6d0 [ 159.224216][ T8570] ? sget_fc+0x117/0x1f60 [ 159.224235][ T8570] ? sget_fc+0x1ba/0x1f60 [ 159.224256][ T8570] sget_fc+0x1ba/0x1f60 [ 159.224279][ T8570] ? __pfx_set_anon_super_fc+0x10/0x10 [ 159.224297][ T8570] ? __pfx_sget_fc+0x10/0x10 [ 159.224314][ T8570] ? refcount_dec_not_one+0x136/0x1b0 [ 159.224329][ T8570] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 159.224349][ T8570] ? __kasan_kmalloc+0xaa/0xb0 [ 159.224386][ T8570] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 159.224419][ T8570] ? __kasan_kmalloc+0xaa/0xb0 [ 159.224440][ T8570] ? __pfx_mqueue_fill_super+0x10/0x10 [ 159.224455][ T8570] get_tree_nodev+0x28/0x190 [ 159.224469][ T8570] mqueue_get_tree+0xf1/0x130 [ 159.224483][ T8570] vfs_get_tree+0x92/0x320 [ 159.224500][ T8570] fc_mount_longterm+0x1a/0x270 [ 159.224515][ T8570] mq_init_ns+0x482/0x820 [ 159.224533][ T8570] copy_ipcs+0x3d8/0x7e0 [ 159.224550][ T8570] create_new_namespaces+0x20a/0xac0 [ 159.224568][ T8570] ? security_capable+0x80/0x260 [ 159.224587][ T8570] unshare_nsproxy_namespaces+0xf6/0x210 [ 159.224606][ T8570] ksys_unshare+0x44f/0x980 [ 159.224622][ T8570] ? __pfx_ksys_unshare+0x10/0x10 [ 159.224638][ T8570] ? fput+0x7c/0x100 [ 159.224653][ T8570] ? ksys_write+0x1ac/0x250 [ 159.224669][ T8570] __x64_sys_unshare+0x31/0x40 [ 159.224685][ T8570] do_syscall_64+0x123/0x790 [ 159.224699][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.224713][ T8570] RIP: 0033:0x7efeb8b9f559 [ 159.224725][ T8570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.224738][ T8570] RSP: 002b:00007efeb9ab8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 159.224751][ T8570] RAX: ffffffffffffffda RBX: 00007efeb8e25fa0 RCX: 00007efeb8b9f559 [ 159.224760][ T8570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 159.224768][ T8570] RBP: 00007efeb8c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 159.224775][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.224783][ T8570] R13: 00007efeb8e26038 R14: 00007efeb8e25fa0 R15: 00007ffc86322d98 [ 159.224800][ T8570] [ 159.505219][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 159.505237][ T30] audit: type=1326 audit(1793241257.980:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912b59f559 code=0x7ffc0000 [ 159.505284][ T30] audit: type=1326 audit(1793241257.980:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912b59f559 code=0x7ffc0000 [ 159.506909][ T30] audit: type=1326 audit(1793241257.980:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912b59f559 code=0x7ffc0000 [ 159.507049][ T30] audit: type=1326 audit(1793241257.980:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912b59f559 code=0x7ffc0000 [ 159.509009][ T30] audit: type=1326 audit(1793241257.980:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f912b59f559 code=0x7ffc0000 [ 159.509132][ T30] audit: type=1326 audit(1793241257.980:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912b59f559 code=0x7ffc0000 [ 159.509249][ T30] audit: type=1326 audit(1793241257.980:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912b59f559 code=0x7ffc0000 [ 159.509518][ T30] audit: type=1326 audit(1793241257.980:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912b59f559 code=0x7ffc0000 [ 159.509649][ T30] audit: type=1326 audit(1793241257.980:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f912b59f559 code=0x7ffc0000 [ 159.509834][ T30] audit: type=1326 audit(1793241257.980:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.4.1102" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f912b5992d7 code=0x7ffc0000 [ 159.850930][ T8584] scsi_dev_info_list_add_str: bad dev info string 'Öõ' '' '' [ 159.872270][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.889725][ T29] usb 2-1: USB disconnect, device number 14 [ 160.098878][ T8591] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 160.406223][ T8603] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 28 [ 160.512411][ T8449] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 160.663374][ T8449] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 160.667489][ T8449] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.667516][ T8449] usb 3-1: config 0 has no interfaces? [ 160.667547][ T8449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.673026][ T8449] usb 3-1: config 0 descriptor?? [ 160.901543][ T51] net_ratelimit: 1 callbacks suppressed [ 160.901561][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.982358][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.216591][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 161.251246][ T5749] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 161.402093][ T5749] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 161.403405][ T5749] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.403452][ T5749] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 161.405238][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.405272][ T5749] usb 4-1: Product: syz [ 161.405291][ T5749] usb 4-1: Manufacturer: syz [ 161.405309][ T5749] usb 4-1: SerialNumber: syz [ 161.417945][ T5749] cdc_mbim 4-1:1.0: skipping garbage [ 161.531214][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 161.620437][ T8620] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 161.681788][ T9] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 161.682712][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.686456][ T9] usb 1-1: config 0 descriptor?? [ 161.731101][ T8097] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 161.881571][ T8097] usb 2-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 161.882602][ T8097] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.882626][ T8097] usb 2-1: config 0 has no interfaces? [ 161.884857][ T8097] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 161.884883][ T8097] usb 2-1: Product: syz [ 161.884893][ T8097] usb 2-1: Manufacturer: syz [ 161.884902][ T8097] usb 2-1: SerialNumber: syz [ 161.889498][ T8097] usb 2-1: config 0 descriptor?? [ 161.891255][ T9] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 161.944583][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.021146][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.123066][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 162.123091][ T9] [drm] Initialized udl on minor 1 [ 162.226446][ T8620] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 162.229024][ T5749] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 162.287197][ T29] usb 2-1: USB disconnect, device number 15 [ 162.429992][ T5749] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 162.463514][ T5749] wwan wwan0: port wwan0mbim0 attached [ 162.475560][ T5749] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 96:52:81:d6:6a:f6 [ 162.484664][ T5749] usb 4-1: USB disconnect, device number 15 [ 162.488326][ T5749] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 162.539475][ T5749] wwan wwan0: port wwan0mbim0 disconnected [ 162.981796][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.062191][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.077389][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.085366][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.090707][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.107328][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.107901][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.329998][ T5749] usb 3-1: USB disconnect, device number 14 [ 163.465981][ T8656] rxe_eth0 speed is unknown, defaulting to 1000 [ 163.866800][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.866909][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.866985][ T8656] bridge_slave_0: entered allmulticast mode [ 163.868181][ T8656] bridge_slave_0: entered promiscuous mode [ 163.897725][ T8656] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.897841][ T8656] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.898173][ T8656] bridge_slave_1: entered allmulticast mode [ 163.899608][ T8656] bridge_slave_1: entered promiscuous mode [ 163.981600][ T8656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.994918][ T8656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.018732][ T8694] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.018855][ T8694] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 164.024413][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.039339][ T8656] team0: Port device team_slave_0 added [ 164.042739][ T8656] team0: Port device team_slave_1 added [ 164.065078][ T8694] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 164.078042][ T8694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.078150][ T8694] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.080986][ T8694] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.086256][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.086269][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.086293][ T8656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.088597][ T8656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.088670][ T8656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.088695][ T8656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.107768][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.156712][ T8694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.170833][ T8694] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.189816][ T8656] hsr_slave_0: entered promiscuous mode [ 164.194041][ T8656] hsr_slave_1: entered promiscuous mode [ 164.194852][ T8656] debugfs: 'hsr0' already exists in 'hsr' [ 164.194870][ T8656] Cannot create hsr debugfs directory [ 164.203126][ T8694] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.231817][ T8694] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.232713][ T8694] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.266021][ T8694] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.277919][ T8694] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.277998][ T8694] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.300580][ T8694] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.572604][ T30] kauditd_printk_skb: 2356 callbacks suppressed [ 164.572619][ T30] audit: type=1400 audit(1793241263.050:2918): avc: denied { bind } for pid=8709 comm="syz.3.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.622652][ T8656] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.701786][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.704195][ T8656] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.715263][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.784537][ T30] audit: type=1400 audit(1793241263.260:2919): avc: denied { write } for pid=8714 comm="syz.2.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.785620][ T8656] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.818565][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.850526][ T8656] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.859863][ T8656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.007717][ T8656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.038287][ T8656] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.057437][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.057531][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.059391][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.059492][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.064272][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.141914][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.327257][ T8743] ip6_vti0: entered promiscuous mode [ 165.381264][ T8449] page_pool_release_retry() stalled pool shutdown: id 33, 1 inflight 60 sec [ 165.605626][ T8757] loop2: detected capacity change from 0 to 7 [ 165.624698][ T8757] Dev loop2: unable to read RDB block 7 [ 165.624732][ T8757] loop2: unable to read partition table [ 165.624877][ T8757] loop2: partition table beyond EOD, truncated [ 165.626555][ T8757] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.659927][ T5755] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 165.714375][ T8656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.813112][ T5755] usb 2-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 165.814022][ T5755] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.814066][ T5755] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 165.814095][ T5755] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 165.814122][ T5755] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 165.814165][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.820231][ T8747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 165.820361][ T8747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 165.883437][ T5755] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 165.908484][ T5755] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 165.908562][ T5755] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 165.931835][ T5755] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 165.934106][ T5755] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 165.934183][ T5755] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 165.937903][ T5755] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 166.021435][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.101444][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.105746][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.184449][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.261331][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 166.261362][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.262047][ T8656] veth0_vlan: entered promiscuous mode [ 166.290148][ T29] usb 2-1: USB disconnect, device number 16 [ 166.300714][ T8656] veth1_vlan: entered promiscuous mode [ 166.307599][ T5755] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.322445][ T29] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 166.326917][ T29] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 166.327684][ T29] keyspan 2-1:1.0: device disconnected [ 166.341399][ T5622] Bluetooth: hci3: command 0x041b tx timeout [ 166.396447][ T8656] veth0_macvtap: entered promiscuous mode [ 166.400526][ T8656] veth1_macvtap: entered promiscuous mode [ 166.422827][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.428722][ T8656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.472409][ T5755] usb 3-1: Using ep0 maxpacket: 32 [ 166.476065][ T5755] usb 3-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 166.483762][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.483821][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.483853][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.483885][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.489504][ T5755] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 166.489540][ T5755] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.489575][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.547199][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.547216][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.579173][ T5755] usb 3-1: config 0 descriptor?? [ 166.632593][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.632632][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.638993][ T30] audit: type=1400 audit(1793241265.110:2920): avc: denied { mounton } for pid=8656 comm="syz-executor" path="/root/syzkaller.VhkEh4/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 166.639780][ T30] audit: type=1400 audit(1793241265.110:2921): avc: denied { mount } for pid=8656 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 166.734971][ T30] audit: type=1400 audit(1793241265.210:2922): avc: denied { mounton } for pid=8656 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 166.975914][ T30] audit: type=1400 audit(1793241265.450:2923): avc: denied { map } for pid=8787 comm="syz.5.1178" path="socket:[23987]" dev="sockfs" ino=23987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 167.143217][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.143805][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 167.144181][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 167.148252][ T9] usb 1-1: USB disconnect, device number 17 [ 167.150932][ T8097] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 167.170311][ T8797] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 167.233218][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.399506][ T5755] corsair-psu 0003:1B1C:1C09.0013: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 167.578368][ T5755] corsair-psu 0003:1B1C:1C09.0013: unable to initialize device (-95) [ 167.595376][ T5755] corsair-psu 0003:1B1C:1C09.0013: probe with driver corsair-psu failed with error -95 [ 167.819817][ T9] usb 3-1: USB disconnect, device number 15 [ 167.855910][ T8819] FAULT_INJECTION: forcing a failure. [ 167.855910][ T8819] name failslab, interval 1, probability 0, space 0, times 0 [ 167.855942][ T8819] CPU: 0 UID: 0 PID: 8819 Comm: syz.5.1190 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.855976][ T8819] Tainted: [L]=SOFTLOCKUP [ 167.855987][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 167.856001][ T8819] Call Trace: [ 167.856008][ T8819] [ 167.856018][ T8819] dump_stack_lvl+0x100/0x190 [ 167.856063][ T8819] should_fail_ex.cold+0x5/0xa [ 167.856102][ T8819] should_failslab+0xc2/0x120 [ 167.856129][ T8819] kmem_cache_alloc_noprof+0x92/0x6a0 [ 167.856167][ T8819] ? prepare_creds+0x2c/0x950 [ 167.856204][ T8819] prepare_creds+0x2c/0x950 [ 167.856236][ T8819] __sys_setreuid+0x10c/0xab0 [ 167.856271][ T8819] do_syscall_64+0x123/0x790 [ 167.856298][ T8819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.856324][ T8819] RIP: 0033:0x7fa14459f559 [ 167.856344][ T8819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.856368][ T8819] RSP: 002b:00007fa145527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 167.856400][ T8819] RAX: ffffffffffffffda RBX: 00007fa144825fa0 RCX: 00007fa14459f559 [ 167.856417][ T8819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.856432][ T8819] RBP: 00007fa144636b20 R08: 0000000000000000 R09: 0000000000000000 [ 167.856447][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.856463][ T8819] R13: 00007fa144826038 R14: 00007fa144825fa0 R15: 00007ffdba61ab18 [ 167.856498][ T8819] [ 167.861485][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 167.953716][ T8822] netlink: 'syz.3.1192': attribute type 10 has an invalid length. [ 168.101243][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.181403][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.181490][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.184185][ T30] audit: type=1400 audit(1793241266.660:2924): avc: denied { create } for pid=8823 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 168.186574][ T30] audit: type=1400 audit(1793241266.660:2925): avc: denied { write } for pid=8823 comm="syz.1.1193" path="socket:[24057]" dev="sockfs" ino=24057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 168.262095][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.341586][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 168.341670][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.421896][ T5622] Bluetooth: hci3: command 0x041b tx timeout [ 168.589977][ T8835] FAULT_INJECTION: forcing a failure. [ 168.589977][ T8835] name failslab, interval 1, probability 0, space 0, times 0 [ 168.590001][ T8835] CPU: 1 UID: 0 PID: 8835 Comm: syz.1.1199 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.590019][ T8835] Tainted: [L]=SOFTLOCKUP [ 168.590025][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 168.590037][ T8835] Call Trace: [ 168.590045][ T8835] [ 168.590054][ T8835] dump_stack_lvl+0x100/0x190 [ 168.590093][ T8835] should_fail_ex.cold+0x5/0xa [ 168.590116][ T8835] should_failslab+0xc2/0x120 [ 168.590130][ T8835] kmem_cache_alloc_noprof+0x92/0x6a0 [ 168.590149][ T8835] ? d_instantiate+0x8a/0xb0 [ 168.590167][ T8835] ? alloc_empty_file+0x5b/0x1c0 [ 168.590186][ T8835] alloc_empty_file+0x5b/0x1c0 [ 168.590203][ T8835] alloc_file_pseudo+0x17e/0x290 [ 168.590220][ T8835] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 168.590236][ T8835] ? alloc_fd+0x471/0x7a0 [ 168.590252][ T8835] ? do_raw_spin_unlock+0x145/0x1e0 [ 168.590267][ T8835] __anon_inode_getfile+0xe8/0x280 [ 168.590282][ T8835] anon_inode_getfile_fmode+0x37/0xa0 [ 168.590296][ T8835] __do_sys_fanotify_init+0xa70/0xe10 [ 168.590316][ T8835] do_syscall_64+0x123/0x790 [ 168.590331][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.590346][ T8835] RIP: 0033:0x7effa839f559 [ 168.590357][ T8835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.590370][ T8835] RSP: 002b:00007effa924a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 168.590383][ T8835] RAX: ffffffffffffffda RBX: 00007effa8625fa0 RCX: 00007effa839f559 [ 168.590391][ T8835] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 168.590399][ T8835] RBP: 00007effa8436b20 R08: 0000000000000000 R09: 0000000000000000 [ 168.590406][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.590413][ T8835] R13: 00007effa8626038 R14: 00007effa8625fa0 R15: 00007ffdcc1c92f8 [ 168.590432][ T8835] [ 168.932724][ T8842] FAULT_INJECTION: forcing a failure. [ 168.932724][ T8842] name failslab, interval 1, probability 0, space 0, times 0 [ 168.932758][ T8842] CPU: 1 UID: 0 PID: 8842 Comm: syz.5.1200 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.932792][ T8842] Tainted: [L]=SOFTLOCKUP [ 168.932801][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 168.932825][ T8842] Call Trace: [ 168.932833][ T8842] [ 168.932843][ T8842] dump_stack_lvl+0x100/0x190 [ 168.932890][ T8842] should_fail_ex.cold+0x5/0xa [ 168.932927][ T8842] should_failslab+0xc2/0x120 [ 168.932954][ T8842] __kmalloc_cache_noprof+0x91/0x6d0 [ 168.932988][ T8842] ? alloc_mnt_ns+0xc9/0x510 [ 168.933021][ T8842] alloc_mnt_ns+0xc9/0x510 [ 168.933048][ T8842] copy_mnt_ns+0x2f4/0x1180 [ 168.933087][ T8842] ? rcu_is_watching+0x13/0xc0 [ 168.933115][ T8842] ? __pfx_copy_mnt_ns+0x10/0x10 [ 168.933156][ T8842] ? create_new_namespaces+0x30/0xac0 [ 168.933196][ T8842] create_new_namespaces+0xd3/0xac0 [ 168.933230][ T8842] ? bpf_lsm_capable+0x9/0x10 [ 168.933251][ T8842] ? security_capable+0x80/0x260 [ 168.933287][ T8842] unshare_nsproxy_namespaces+0xf6/0x210 [ 168.933324][ T8842] ksys_unshare+0x44f/0x980 [ 168.933355][ T8842] ? __pfx_ksys_unshare+0x10/0x10 [ 168.933403][ T8842] __x64_sys_unshare+0x31/0x40 [ 168.933434][ T8842] do_syscall_64+0x123/0x790 [ 168.933462][ T8842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.933487][ T8842] RIP: 0033:0x7fa14459f559 [ 168.933507][ T8842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.933531][ T8842] RSP: 002b:00007fa145527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 168.933553][ T8842] RAX: ffffffffffffffda RBX: 00007fa144825fa0 RCX: 00007fa14459f559 [ 168.933569][ T8842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a060680 [ 168.933584][ T8842] RBP: 00007fa144636b20 R08: 0000000000000000 R09: 0000000000000000 [ 168.933598][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.933613][ T8842] R13: 00007fa144826038 R14: 00007fa144825fa0 R15: 00007ffdba61ab18 [ 168.933646][ T8842] [ 169.147842][ T8841] FAULT_INJECTION: forcing a failure. [ 169.147842][ T8841] name failslab, interval 1, probability 0, space 0, times 0 [ 169.147875][ T8841] CPU: 0 UID: 0 PID: 8841 Comm: syz.2.1202 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.147909][ T8841] Tainted: [L]=SOFTLOCKUP [ 169.147917][ T8841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 169.147932][ T8841] Call Trace: [ 169.147940][ T8841] [ 169.147949][ T8841] dump_stack_lvl+0x100/0x190 [ 169.147994][ T8841] should_fail_ex.cold+0x5/0xa [ 169.148036][ T8841] should_failslab+0xc2/0x120 [ 169.148062][ T8841] __kmalloc_cache_noprof+0x91/0x6d0 [ 169.148096][ T8841] ? alloc_vfsmnt+0x72/0x840 [ 169.148125][ T8841] alloc_vfsmnt+0x72/0x840 [ 169.148147][ T8841] clone_mnt+0x4b/0x9c0 [ 169.148168][ T8841] ? _raw_spin_unlock+0x28/0x50 [ 169.148204][ T8841] lock_mount_exact+0x187/0x890 [ 169.148238][ T8841] create_new_namespace+0x34e/0xf60 [ 169.148277][ T8841] ? __pfx_create_new_namespace+0x10/0x10 [ 169.148320][ T8841] ? strncpy_from_user+0x19d/0x2d0 [ 169.148361][ T8841] ? vfs_open_tree+0x91e/0xb60 [ 169.148391][ T8841] vfs_open_tree+0x91e/0xb60 [ 169.148419][ T8841] ? _raw_spin_unlock+0x28/0x50 [ 169.148448][ T8841] ? __pfx_vfs_open_tree+0x10/0x10 [ 169.148488][ T8841] __x64_sys_open_tree+0xbe/0x150 [ 169.148523][ T8841] do_syscall_64+0x123/0x790 [ 169.148550][ T8841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.148575][ T8841] RIP: 0033:0x7efeb8b9f559 [ 169.148595][ T8841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.148618][ T8841] RSP: 002b:00007efeb9ab8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 169.148642][ T8841] RAX: ffffffffffffffda RBX: 00007efeb8e25fa0 RCX: 00007efeb8b9f559 [ 169.148659][ T8841] RDX: 0000000000081802 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 169.148675][ T8841] RBP: 00007efeb8c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 169.148690][ T8841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.148706][ T8841] R13: 00007efeb8e26038 R14: 00007efeb8e25fa0 R15: 00007ffc86322d98 [ 169.148739][ T8841] [ 169.291736][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.310615][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.644637][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1207'. [ 169.646323][ T8858] ip_tables: iptables: counters copy to user failed while replacing table [ 169.757332][ T8861] input: syz1 as /devices/virtual/input/input18 [ 169.788662][ T30] audit: type=1400 audit(1793241268.250:2926): avc: denied { cmd } for pid=8862 comm="syz.2.1211" path="socket:[25100]" dev="sockfs" ino=25100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 169.904785][ T8868] bond0: entered promiscuous mode [ 170.183228][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.263158][ T8097] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 170.263297][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.288056][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 170.323408][ T8885] ip_tables: iptables: counters copy to user failed while replacing table [ 170.423237][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 170.423283][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.424720][ T8097] usb 4-1: Using ep0 maxpacket: 32 [ 170.425832][ T8097] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 170.462090][ T8097] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 170.462119][ T8097] usb 4-1: config 0 has no interface number 0 [ 170.468313][ T8097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.468340][ T8097] usb 4-1: Product: syz [ 170.468359][ T8097] usb 4-1: Manufacturer: syz [ 170.468376][ T8097] usb 4-1: SerialNumber: syz [ 170.481858][ T8097] usb 4-1: config 0 descriptor?? [ 170.502402][ T5622] Bluetooth: hci3: command 0x041b tx timeout [ 170.623472][ T30] audit: type=1400 audit(1793241269.100:2927): avc: denied { accept } for pid=8888 comm="syz.1.1222" path=2F3235302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 170.933589][ T8905] FAULT_INJECTION: forcing a failure. [ 170.933589][ T8905] name failslab, interval 1, probability 0, space 0, times 0 [ 170.933645][ T8905] CPU: 0 UID: 0 PID: 8905 Comm: syz.2.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.933680][ T8905] Tainted: [L]=SOFTLOCKUP [ 170.933689][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 170.933703][ T8905] Call Trace: [ 170.933711][ T8905] [ 170.933721][ T8905] dump_stack_lvl+0x100/0x190 [ 170.933768][ T8905] should_fail_ex.cold+0x5/0xa [ 170.933805][ T8905] should_failslab+0xc2/0x120 [ 170.933832][ T8905] __kmalloc_cache_noprof+0x91/0x6d0 [ 170.933862][ T8905] ? ptmx_open+0x11a/0x360 [ 170.933895][ T8905] ? alloc_tty_struct+0x96/0x8e0 [ 170.933931][ T8905] alloc_tty_struct+0x96/0x8e0 [ 170.933959][ T8905] ? __pfx_alloc_tty_struct+0x10/0x10 [ 170.933996][ T8905] tty_init_dev.part.0+0x20/0x470 [ 170.934026][ T8905] tty_init_dev+0x60/0x80 [ 170.934052][ T8905] ? __pfx_ptmx_open+0x10/0x10 [ 170.934083][ T8905] ptmx_open+0x128/0x360 [ 170.934116][ T8905] ? __pfx_ptmx_open+0x10/0x10 [ 170.934149][ T8905] chrdev_open+0x234/0x6a0 [ 170.934178][ T8905] ? __pfx_chrdev_open+0x10/0x10 [ 170.934214][ T8905] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 170.934259][ T8905] do_dentry_open+0x674/0x1470 [ 170.934283][ T8905] ? __pfx_chrdev_open+0x10/0x10 [ 170.934317][ T8905] vfs_open_consume+0xcc/0x460 [ 170.934353][ T8905] path_openat+0x1547/0x23f0 [ 170.934388][ T8905] ? __pfx_path_openat+0x10/0x10 [ 170.934427][ T8905] do_file_open+0x20e/0x430 [ 170.934458][ T8905] ? __pfx_do_file_open+0x10/0x10 [ 170.934511][ T8905] ? _raw_spin_unlock+0x28/0x50 [ 170.934544][ T8905] ? alloc_fd+0x471/0x7a0 [ 170.934584][ T8905] do_sys_openat2+0x163/0x1d0 [ 170.934617][ T8905] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.934649][ T8905] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 170.934684][ T8905] __x64_sys_openat+0x12d/0x210 [ 170.934716][ T8905] ? __pfx___x64_sys_openat+0x10/0x10 [ 170.934761][ T8905] do_syscall_64+0x123/0x790 [ 170.934788][ T8905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.934814][ T8905] RIP: 0033:0x7efeb8b9f559 [ 170.934836][ T8905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.934860][ T8905] RSP: 002b:00007efeb9ab8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.934885][ T8905] RAX: ffffffffffffffda RBX: 00007efeb8e25fa0 RCX: 00007efeb8b9f559 [ 170.934902][ T8905] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 170.934918][ T8905] RBP: 00007efeb8c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 170.934932][ T8905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.934946][ T8905] R13: 00007efeb8e26038 R14: 00007efeb8e25fa0 R15: 00007ffc86322d98 [ 170.934978][ T8905] [ 171.028367][ T8097] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 171.028399][ T8097] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 171.383605][ T1219] net_ratelimit: 2 callbacks suppressed [ 171.383622][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.384233][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.456526][ T8097] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 171.456740][ T8097] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 171.505199][ T8097] usb 4-1: USB disconnect, device number 16 [ 171.751155][ T5715] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 171.760726][ T8929] FAULT_INJECTION: forcing a failure. [ 171.760726][ T8929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 171.760759][ T8929] CPU: 0 UID: 0 PID: 8929 Comm: syz.2.1239 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.760793][ T8929] Tainted: [L]=SOFTLOCKUP [ 171.760802][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 171.760817][ T8929] Call Trace: [ 171.760825][ T8929] [ 171.760834][ T8929] dump_stack_lvl+0x100/0x190 [ 171.760878][ T8929] should_fail_ex.cold+0x5/0xa [ 171.760915][ T8929] should_fail_alloc_page+0xeb/0x140 [ 171.760943][ T8929] prepare_alloc_pages+0x1f0/0x5b0 [ 171.760974][ T8929] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 171.761012][ T8929] ? rcu_is_watching+0x13/0xc0 [ 171.761042][ T8929] ? trace_kmem_cache_alloc+0xdd/0x100 [ 171.761070][ T8929] ? kmem_cache_alloc_lru_noprof+0x2d1/0x6a0 [ 171.761106][ T8929] ? xas_alloc+0x350/0x460 [ 171.761135][ T8929] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 171.761177][ T8929] ? __css_rstat_updated+0x1ce/0x590 [ 171.761206][ T8929] ? __pfx___css_rstat_updated+0x10/0x10 [ 171.761229][ T8929] ? xas_create+0x1f4/0x14e0 [ 171.761264][ T8929] ? rcu_is_watching+0x13/0xc0 [ 171.761301][ T8929] ? __lock_acquire+0x5c0/0x1f40 [ 171.761335][ T8929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.761375][ T8929] ? policy_nodemask+0xed/0x5e0 [ 171.761402][ T8929] alloc_pages_mpol+0x201/0x560 [ 171.761429][ T8929] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 171.761456][ T8929] ? filemap_get_entry+0x22d/0x450 [ 171.761491][ T8929] ? filemap_get_entry+0x22d/0x450 [ 171.761529][ T8929] folio_alloc_noprof+0x22/0x250 [ 171.761560][ T8929] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 171.761594][ T8929] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 171.761624][ T8929] ? rcu_is_watching+0x13/0xc0 [ 171.761649][ T8929] ? trace_kmalloc+0xeb/0x110 [ 171.761675][ T8929] __filemap_get_folio_mpol+0x64e/0x1230 [ 171.761720][ T8929] ioctx_alloc+0x7e1/0x21d0 [ 171.761769][ T8929] ? __pfx_ioctx_alloc+0x10/0x10 [ 171.761812][ T8929] __x64_sys_io_setup+0xc9/0x220 [ 171.761849][ T8929] do_syscall_64+0x123/0x790 [ 171.761875][ T8929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.761899][ T8929] RIP: 0033:0x7efeb8b9f559 [ 171.761919][ T8929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.761942][ T8929] RSP: 002b:00007efeb9ab8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 171.761964][ T8929] RAX: ffffffffffffffda RBX: 00007efeb8e25fa0 RCX: 00007efeb8b9f559 [ 171.761980][ T8929] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000ffff [ 171.761995][ T8929] RBP: 00007efeb8c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 171.762011][ T8929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.762026][ T8929] R13: 00007efeb8e26038 R14: 00007efeb8e25fa0 R15: 00007ffc86322d98 [ 171.762059][ T8929] [ 171.955221][ T5715] usb 2-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=1.00 [ 171.975676][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.975695][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 172.040673][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.040688][ T5715] usb 2-1: Product: syz [ 172.040698][ T5715] usb 2-1: Manufacturer: syz [ 172.040707][ T5715] usb 2-1: SerialNumber: syz [ 172.394100][ T5715] kaweth 2-1:1.0: Firmware present in device. [ 172.420696][ T8942] syzkaller1: entered promiscuous mode [ 172.420709][ T8942] syzkaller1: entered allmulticast mode [ 172.422182][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.422814][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.570999][ T5715] kaweth 2-1:1.0: Statistics collection: 0 [ 172.571013][ T5715] kaweth 2-1:1.0: Multicast filter limit: 0 [ 172.571094][ T5715] kaweth 2-1:1.0: MTU: 0 [ 172.571111][ T5715] kaweth 2-1:1.0: Read MAC address 00:00:00:00:00:00 [ 172.582761][ T5622] Bluetooth: hci3: command 0x041b tx timeout [ 172.772580][ T5715] kaweth 2-1:1.0: probe with driver kaweth failed with error -5 [ 172.787155][ T5715] usb 2-1: USB disconnect, device number 17 [ 172.821207][ T29] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 172.881587][ T8097] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 172.981897][ T29] usb 3-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 172.983176][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.985584][ T29] usb 3-1: config 0 descriptor?? [ 173.009473][ T29] cp210x 3-1:0.0: cp210x converter detected [ 173.034511][ T8097] usb 4-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 173.035586][ T8097] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 173.035618][ T8097] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 173.035646][ T8097] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 173.035687][ T8097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.070706][ T8950] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 173.070816][ T8950] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 173.111381][ T8097] pl2303 4-1:1.0: pl2303 converter detected [ 173.154718][ T8097] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 173.400939][ T29] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 173.435315][ T8950] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 173.440999][ T8950] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 173.450639][ T8950] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 173.462897][ T8950] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 173.467580][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.471115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 173.481057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 173.491100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 173.500911][ T8950] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 173.511117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 173.545651][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.599227][ T29] usb 3-1: cp210x converter now attached to ttyUSB1 [ 173.623392][ T29] usb 3-1: USB disconnect, device number 16 [ 173.680693][ T29] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 173.690263][ T29] cp210x 3-1:0.0: device disconnected [ 173.794745][ T8950] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 173.813252][ T8950] pl2303 ttyUSB0: error sending break = -32 [ 173.874372][ T8097] usb 4-1: USB disconnect, device number 17 [ 173.902779][ T30] audit: type=1400 audit(1793241272.370:2928): avc: denied { execute } for pid=8963 comm="syz.5.1254" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 173.978966][ T8097] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 173.979638][ T8097] pl2303 4-1:1.0: device disconnected [ 174.483997][ T8975] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 174.502824][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.616779][ T8981] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 174.630188][ T30] audit: type=1400 audit(1793241273.100:2929): avc: denied { map } for pid=8980 comm="syz.2.1262" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 174.630237][ T30] audit: type=1400 audit(1793241273.100:2930): avc: denied { execute } for pid=8980 comm="syz.2.1262" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 174.661205][ T5622] Bluetooth: hci3: command 0x041b tx timeout [ 174.703828][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.767022][ T8984] serio: Serial port ptm0 [ 175.545644][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.553689][ T9011] FAULT_INJECTION: forcing a failure. [ 175.553689][ T9011] name failslab, interval 1, probability 0, space 0, times 0 [ 175.553723][ T9011] CPU: 0 UID: 0 PID: 9011 Comm: syz.2.1273 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.553759][ T9011] Tainted: [L]=SOFTLOCKUP [ 175.553768][ T9011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 175.553782][ T9011] Call Trace: [ 175.553790][ T9011] [ 175.553799][ T9011] dump_stack_lvl+0x100/0x190 [ 175.553843][ T9011] should_fail_ex.cold+0x5/0xa [ 175.553881][ T9011] should_failslab+0xc2/0x120 [ 175.553906][ T9011] kmem_cache_alloc_noprof+0x92/0x6a0 [ 175.553942][ T9011] ? __kernfs_new_node+0xd2/0xa10 [ 175.553984][ T9011] __kernfs_new_node+0xd2/0xa10 [ 175.554024][ T9011] ? __pfx___kernfs_new_node+0x10/0x10 [ 175.554063][ T9011] ? lock_acquire+0x1d1/0x380 [ 175.554094][ T9011] ? kernfs_root+0x23/0x2a0 [ 175.554127][ T9011] ? find_held_lock+0x2b/0x80 [ 175.554151][ T9011] ? kernfs_root+0xee/0x2a0 [ 175.554181][ T9011] ? kernfs_root+0xee/0x2a0 [ 175.554221][ T9011] kernfs_new_node+0x194/0x200 [ 175.554259][ T9011] ? __pfx_kernfs_new_node+0x10/0x10 [ 175.554297][ T9011] ? kernfs_add_one+0x213/0xb40 [ 175.554339][ T9011] __kernfs_create_file+0x53/0x350 [ 175.554370][ T9011] sysfs_add_file_mode_ns+0x207/0x3c0 [ 175.554409][ T9011] internal_create_group+0x593/0xfb0 [ 175.554458][ T9011] ? __pfx_internal_create_group+0x10/0x10 [ 175.554498][ T9011] ? kernfs_create_link+0x1f1/0x280 [ 175.554532][ T9011] internal_create_groups+0x9d/0x150 [ 175.554570][ T9011] device_add+0x71a/0x1970 [ 175.554605][ T9011] ? __pfx_device_add+0x10/0x10 [ 175.554636][ T9011] ? lockdep_init_map_type+0x5c/0x250 [ 175.554670][ T9011] ? __init_waitqueue_head+0xca/0x150 [ 175.554716][ T9011] rfkill_register+0x1ad/0xb30 [ 175.554753][ T9011] nfc_register_device+0x11f/0x3e0 [ 175.554781][ T9011] nci_register_device+0x7f1/0xb80 [ 175.554816][ T9011] ? __pfx_nci_register_device+0x10/0x10 [ 175.554854][ T9011] ? lockdep_init_map_type+0x5c/0x250 [ 175.554894][ T9011] virtual_ncidev_open+0x141/0x220 [ 175.554928][ T9011] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 175.554962][ T9011] misc_open+0x26d/0x450 [ 175.554996][ T9011] ? __pfx_misc_open+0x10/0x10 [ 175.555028][ T9011] chrdev_open+0x234/0x6a0 [ 175.555057][ T9011] ? __pfx_chrdev_open+0x10/0x10 [ 175.555086][ T9011] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 175.555128][ T9011] do_dentry_open+0x674/0x1470 [ 175.555152][ T9011] ? __pfx_chrdev_open+0x10/0x10 [ 175.555184][ T9011] vfs_open_consume+0xcc/0x460 [ 175.555219][ T9011] path_openat+0x1547/0x23f0 [ 175.555252][ T9011] ? __pfx_path_openat+0x10/0x10 [ 175.555290][ T9011] do_file_open+0x20e/0x430 [ 175.555320][ T9011] ? __pfx_do_file_open+0x10/0x10 [ 175.555372][ T9011] ? _raw_spin_unlock+0x28/0x50 [ 175.555404][ T9011] ? alloc_fd+0x471/0x7a0 [ 175.555451][ T9011] do_sys_openat2+0x163/0x1d0 [ 175.555483][ T9011] ? __pfx_do_sys_openat2+0x10/0x10 [ 175.555515][ T9011] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 175.555550][ T9011] __x64_sys_openat+0x12d/0x210 [ 175.555581][ T9011] ? __pfx___x64_sys_openat+0x10/0x10 [ 175.555625][ T9011] do_syscall_64+0x123/0x790 [ 175.555651][ T9011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.555677][ T9011] RIP: 0033:0x7efeb8b9f559 [ 175.555697][ T9011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.555720][ T9011] RSP: 002b:00007efeb9ab8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 175.555742][ T9011] RAX: ffffffffffffffda RBX: 00007efeb8e25fa0 RCX: 00007efeb8b9f559 [ 175.555758][ T9011] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 175.555773][ T9011] RBP: 00007efeb8c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 175.555788][ T9011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.555803][ T9011] R13: 00007efeb8e26038 R14: 00007efeb8e25fa0 R15: 00007ffc86322d98 [ 175.555837][ T9011] [ 175.721195][ T8097] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 175.871088][ T8097] usb 4-1: Using ep0 maxpacket: 16 [ 175.871726][ T8097] usb 4-1: New USB device found: idVendor=041e, idProduct=2801, bcdDevice=0.00 [ 175.875971][ T8097] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.876004][ T8097] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.876046][ T8097] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.876077][ T8097] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.876109][ T8097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.882862][ T8097] usb 4-1: config 0 descriptor?? [ 176.327357][ T8097] input: HID 041e:2801 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:041E:2801.0014/input/input19 [ 176.418005][ T8097] prodikeys 0003:041E:2801.0014: input,hidraw0: USB HID v0.00 Joystick [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 176.529063][ T9] usb 4-1: USB disconnect, device number 18 [ 176.566814][ T9042] fido_id[9042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 176.600360][ T43] net_ratelimit: 1 callbacks suppressed [ 176.600374][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.742237][ T5622] Bluetooth: hci3: command 0x041b tx timeout [ 176.780856][ T30] audit: type=1400 audit(1793241275.250:2931): avc: denied { view } for pid=9056 comm="syz.2.1291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 176.904408][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.957101][ T30] audit: type=1400 audit(1793241275.430:2932): avc: denied { create } for pid=9067 comm="syz.1.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 176.971004][ T30] audit: type=1400 audit(1793241275.440:2933): avc: denied { write } for pid=9067 comm="syz.1.1295" path="socket:[24565]" dev="sockfs" ino=24565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 177.009736][ T30] audit: type=1400 audit(1793241275.480:2934): avc: denied { ioctl } for pid=9069 comm="syz.0.1297" path="socket:[24570]" dev="sockfs" ino=24570 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 177.269900][ T9085] ip_tables: iptables: counters copy to user failed while replacing table [ 177.280604][ T30] audit: type=1400 audit(1793241275.750:2935): avc: denied { bind } for pid=9084 comm="syz.5.1303" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.280965][ T30] audit: type=1400 audit(1793241275.750:2936): avc: denied { name_bind } for pid=9084 comm="syz.5.1303" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 177.301635][ T30] audit: type=1400 audit(1793241275.780:2937): avc: denied { node_bind } for pid=9084 comm="syz.5.1303" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 177.621311][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.773718][ T43] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.773762][ T43] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.773799][ T43] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.773833][ T43] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.944736][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.960375][ T30] audit: type=1400 audit(1793241276.430:2938): avc: denied { name_bind } for pid=9104 comm="syz.5.1310" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 178.001127][ T5749] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 178.151950][ T5749] usb 3-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 178.153227][ T5749] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.153282][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.192198][ T5749] metro_usb 3-1:1.0: Metrologic USB to Serial converter detected [ 178.197802][ T5749] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 178.348258][ T30] audit: type=1400 audit(1793241276.820:2939): avc: denied { listen } for pid=9117 comm="syz.5.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 178.417907][ T5749] usb 3-1: USB disconnect, device number 17 [ 178.432584][ T5749] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 178.435748][ T5749] metro_usb 3-1:1.0: device disconnected [ 178.661162][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.991848][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.701192][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.022027][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.741477][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.702747][ T9151] jffs2: notice: (9151) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 181.707533][ T64] IPVS: starting estimator thread 0... [ 181.708071][ T9150] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1330'. [ 181.781466][ T64] net_ratelimit: 1 callbacks suppressed [ 181.781481][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.791157][ T9153] IPVS: using max 38 ests per chain, 91200 per kthread [ 181.845051][ T9161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1335'. [ 181.849102][ T9159] FAULT_INJECTION: forcing a failure. [ 181.849102][ T9159] name failslab, interval 1, probability 0, space 0, times 0 [ 181.849143][ T9159] CPU: 1 UID: 0 PID: 9159 Comm: syz.3.1333 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.849179][ T9159] Tainted: [L]=SOFTLOCKUP [ 181.849188][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 181.849207][ T9159] Call Trace: [ 181.849216][ T9159] [ 181.849229][ T9159] dump_stack_lvl+0x100/0x190 [ 181.849276][ T9159] should_fail_ex.cold+0x5/0xa [ 181.849315][ T9159] should_failslab+0xc2/0x120 [ 181.849343][ T9159] kmem_cache_alloc_noprof+0x92/0x6a0 [ 181.849381][ T9159] ? pidfs_register_pid_gfp+0x93/0x1f0 [ 181.849420][ T9159] pidfs_register_pid_gfp+0x93/0x1f0 [ 181.849453][ T9159] __pidfs_register_pids+0x76/0xd0 [ 181.849487][ T9159] unix_stream_connect+0x445/0x1b60 [ 181.849527][ T9159] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 181.849575][ T9159] ? __pfx_unix_stream_connect+0x10/0x10 [ 181.849612][ T9159] ? security_socket_post_create+0x85/0x270 [ 181.849650][ T9159] ? __sock_create+0xa3/0x860 [ 181.849697][ T9159] p9_fd_create_unix+0x280/0x350 [ 181.849735][ T9159] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 181.849789][ T9159] ? lockdep_init_map_type+0x5c/0x250 [ 181.849831][ T9159] p9_client_create+0x563/0xd40 [ 181.849862][ T9159] ? __pfx_p9_client_create+0x10/0x10 [ 181.849898][ T9159] ? lockdep_init_map_type+0x5c/0x250 [ 181.849934][ T9159] ? __raw_spin_lock_init+0x3a/0x110 [ 181.849977][ T9159] v9fs_session_init+0x3c/0xdd0 [ 181.850016][ T9159] ? v9fs_get_tree+0x9c/0xb50 [ 181.850049][ T9159] v9fs_get_tree+0xb8/0xb50 [ 181.850075][ T9159] ? rcu_is_watching+0x13/0xc0 [ 181.850102][ T9159] ? __pfx_v9fs_get_tree+0x10/0x10 [ 181.850134][ T9159] ? bpf_lsm_capable+0x9/0x10 [ 181.850155][ T9159] ? security_capable+0x80/0x260 [ 181.850190][ T9159] vfs_get_tree+0x92/0x320 [ 181.850224][ T9159] path_mount+0x7d0/0x2850 [ 181.850263][ T9159] ? __pfx_path_mount+0x10/0x10 [ 181.850296][ T9159] ? lockdep_hardirqs_on+0x7d/0x110 [ 181.850338][ T9159] ? putname+0xb1/0x110 [ 181.850366][ T9159] ? kmem_cache_free+0x127/0x6c0 [ 181.850409][ T9159] ? __x64_sys_mount+0x293/0x310 [ 181.850442][ T9159] __x64_sys_mount+0x293/0x310 [ 181.850477][ T9159] ? __pfx___x64_sys_mount+0x10/0x10 [ 181.850521][ T9159] do_syscall_64+0x123/0x790 [ 181.850548][ T9159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.850574][ T9159] RIP: 0033:0x7f3d8dd9f559 [ 181.850594][ T9159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.850619][ T9159] RSP: 002b:00007f3d8ec41028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.850645][ T9159] RAX: ffffffffffffffda RBX: 00007f3d8e025fa0 RCX: 00007f3d8dd9f559 [ 181.850662][ T9159] RDX: 0000200000002500 RSI: 00002000000024c0 RDI: 0000200000002480 [ 181.850684][ T9159] RBP: 00007f3d8de36b20 R08: 0000200000002540 R09: 0000000000000000 [ 181.850700][ T9159] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 181.850716][ T9159] R13: 00007f3d8e026038 R14: 00007f3d8e025fa0 R15: 00007ffc731c6148 [ 181.850750][ T9159] [ 181.856711][ T9159] 9pnet_fd: p9_fd_create_unix (9159): problem connecting socket: ./proc/thread-self/fail-nth: -12 [ 181.875348][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 181.905063][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1335'. [ 182.084615][ T9] usb 2-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 182.084656][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 182.089590][ T30] audit: type=1326 audit(1793241280.560:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.2.1338" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efeb8b9f559 code=0x0 [ 182.101303][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.140411][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.140458][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.140488][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.173046][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.173094][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.173124][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.196510][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.196555][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.196586][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.274720][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.274766][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.274800][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.330603][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.330650][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.330682][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.371148][ T5715] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 182.388161][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.388212][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.388244][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.425192][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.425250][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.425282][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.437076][ T9176] FAULT_INJECTION: forcing a failure. [ 182.437076][ T9176] name failslab, interval 1, probability 0, space 0, times 0 [ 182.437108][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: syz.3.1341 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.437141][ T9176] Tainted: [L]=SOFTLOCKUP [ 182.437149][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 182.437163][ T9176] Call Trace: [ 182.437170][ T9176] [ 182.437179][ T9176] dump_stack_lvl+0x100/0x190 [ 182.437224][ T9176] should_fail_ex.cold+0x5/0xa [ 182.437261][ T9176] should_failslab+0xc2/0x120 [ 182.437288][ T9176] kmem_cache_alloc_noprof+0x92/0x6a0 [ 182.437324][ T9176] ? __pfx_map_id_range_down+0x10/0x10 [ 182.437361][ T9176] ? security_inode_alloc+0x3b/0x2c0 [ 182.437403][ T9176] security_inode_alloc+0x3b/0x2c0 [ 182.437439][ T9176] inode_init_always_gfp+0xc6f/0xfb0 [ 182.437473][ T9176] alloc_inode+0x8e/0x250 [ 182.437507][ T9176] new_inode+0x22/0x1c0 [ 182.437546][ T9176] shmem_get_inode+0x1e3/0xfe0 [ 182.437578][ T9176] ? __lock_acquire+0x5c0/0x1f40 [ 182.437611][ T9176] ? __pfx_shmem_get_inode+0x10/0x10 [ 182.437660][ T9176] __shmem_file_setup+0x168/0x460 [ 182.437691][ T9176] ? lock_acquire+0x1d1/0x380 [ 182.437724][ T9176] ? __pfx___shmem_file_setup+0x10/0x10 [ 182.437754][ T9176] ? do_raw_spin_lock+0x128/0x260 [ 182.437775][ T9176] ? find_held_lock+0x2b/0x80 [ 182.437800][ T9176] ? alloc_fd+0x471/0x7a0 [ 182.437827][ T9176] ? alloc_fd+0x471/0x7a0 [ 182.437858][ T9176] memfd_alloc_file+0x247/0x610 [ 182.437889][ T9176] ? _raw_spin_unlock+0x28/0x50 [ 182.437922][ T9176] ? __pfx_memfd_alloc_file+0x10/0x10 [ 182.437962][ T9176] __do_sys_memfd_create+0x2ce/0x3c0 [ 182.437995][ T9176] do_syscall_64+0x123/0x790 [ 182.438022][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.438046][ T9176] RIP: 0033:0x7f3d8dd9f559 [ 182.438065][ T9176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.438088][ T9176] RSP: 002b:00007f3d8ec41028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 182.438111][ T9176] RAX: ffffffffffffffda RBX: 00007f3d8e025fa0 RCX: 00007f3d8dd9f559 [ 182.438127][ T9176] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 182.438142][ T9176] RBP: 00007f3d8de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 182.438156][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.438170][ T9176] R13: 00007f3d8e026038 R14: 00007f3d8e025fa0 R15: 00007ffc731c6148 [ 182.438203][ T9176] [ 182.453612][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.453662][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.453694][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.521159][ T5715] usb 1-1: Using ep0 maxpacket: 32 [ 182.521921][ T5715] usb 1-1: New USB device found: idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 182.522898][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.529836][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 182.529863][ T9] usb 2-1: Product: syz [ 182.529880][ T9] usb 2-1: Manufacturer: syz [ 182.529897][ T9] usb 2-1: SerialNumber: syz [ 182.534796][ T5715] usb 1-1: config 0 descriptor?? [ 182.552677][ T5715] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 182.654798][ T9] usb 2-1: config 0 descriptor?? [ 182.822183][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.825875][ T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 182.872682][ T30] audit: type=1400 audit(1793241281.350:2941): avc: denied { unmount } for pid=8656 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 182.943462][ T5725] usb 2-1: USB disconnect, device number 18 [ 182.957244][ T5725] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 182.995274][ T30] audit: type=1400 audit(1793241281.470:2942): avc: denied { bind } for pid=9185 comm="syz.2.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.998940][ T30] audit: type=1400 audit(1793241281.470:2943): avc: denied { connect } for pid=9185 comm="syz.2.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.045525][ T9190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.143221][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.233113][ T5755] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 183.236680][ T9205] FAULT_INJECTION: forcing a failure. [ 183.236680][ T9205] name failslab, interval 1, probability 0, space 0, times 0 [ 183.236712][ T9205] CPU: 1 UID: 0 PID: 9205 Comm: syz.3.1353 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.236746][ T9205] Tainted: [L]=SOFTLOCKUP [ 183.236755][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 183.236772][ T9205] Call Trace: [ 183.236780][ T9205] [ 183.236789][ T9205] dump_stack_lvl+0x100/0x190 [ 183.236834][ T9205] should_fail_ex.cold+0x5/0xa [ 183.236872][ T9205] should_failslab+0xc2/0x120 [ 183.236899][ T9205] __kvmalloc_node_noprof+0x113/0x9b0 [ 183.236938][ T9205] ? __pfx___might_resched+0x10/0x10 [ 183.236968][ T9205] ? newary+0x185/0xc30 [ 183.237005][ T9205] newary+0x185/0xc30 [ 183.237032][ T9205] ? __pfx_down_write+0x10/0x10 [ 183.237060][ T9205] ? ksys_write+0x190/0x250 [ 183.237082][ T9205] ? ksys_write+0x190/0x250 [ 183.237105][ T9205] ipcget+0xe7/0xe70 [ 183.237131][ T9205] ? __pfx_do_futex+0x10/0x10 [ 183.237164][ T9205] ? __pfx_ipcget+0x10/0x10 [ 183.237190][ T9205] ? __x64_sys_futex+0x34f/0x4d0 [ 183.237223][ T9205] __x64_sys_semget+0x1cb/0x260 [ 183.237257][ T9205] ? __pfx___x64_sys_semget+0x10/0x10 [ 183.237300][ T9205] do_syscall_64+0x123/0x790 [ 183.237328][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.237354][ T9205] RIP: 0033:0x7f3d8dd9f559 [ 183.237375][ T9205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.237399][ T9205] RSP: 002b:00007f3d8ec41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 183.237422][ T9205] RAX: ffffffffffffffda RBX: 00007f3d8e025fa0 RCX: 00007f3d8dd9f559 [ 183.237439][ T9205] RDX: 0000000000000200 RSI: 0000000000000003 RDI: 0000000000000000 [ 183.237461][ T9205] RBP: 00007f3d8de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 183.237476][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.237492][ T9205] R13: 00007f3d8e026038 R14: 00007f3d8e025fa0 R15: 00007ffc731c6148 [ 183.237528][ T9205] [ 183.386392][ T5755] usb 6-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 183.389047][ T5755] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 183.389098][ T5755] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 183.389127][ T5755] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 183.389156][ T5755] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 183.389193][ T5755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.399207][ T9188] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 183.399369][ T9188] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 183.413028][ T5755] pl2303 6-1:1.0: pl2303 converter detected [ 183.439327][ T5755] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 183.618952][ T5715] gspca_nw80x: reg_w err -71 [ 183.619023][ T5715] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 183.631154][ T5715] usb 1-1: USB disconnect, device number 18 [ 183.719933][ T30] audit: type=1400 audit(1793241282.190:2944): avc: denied { watch } for pid=9222 comm="syz.1.1361" path="/271/file0" dev="tmpfs" ino=1456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.761371][ T9188] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 183.761693][ T9188] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 183.761984][ T9188] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 183.762310][ T9188] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 183.762362][ T9188] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 183.767245][ T5755] usb 6-1: USB disconnect, device number 2 [ 183.780534][ T5755] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 183.784218][ T5755] pl2303 6-1:1.0: device disconnected [ 183.861799][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.950002][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 184.111301][ T9237] sd 0:0:1:0: PR command failed: 1026 [ 184.111340][ T9237] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 184.111364][ T9237] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 184.127288][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 184.183154][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.281587][ T9] usb 2-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 184.283514][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 184.283549][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 184.286128][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.286155][ T9] usb 2-1: Product: syz [ 184.286171][ T9] usb 2-1: Manufacturer: syz [ 184.286188][ T9] usb 2-1: SerialNumber: syz [ 184.350123][ T9228] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.350247][ T9228] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.359574][ T9] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 184.359597][ T9] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 184.359639][ T9] usbserial_generic 2-1:1.0: generic converter detected [ 184.410727][ T9] usb 2-1: generic converter now attached to ttyUSB0 [ 184.478783][ T9254] netlink: 'syz.5.1372': attribute type 12 has an invalid length. [ 184.478802][ T9254] netlink: 'syz.5.1372': attribute type 29 has an invalid length. [ 184.478816][ T9254] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1372'. [ 184.620380][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.620645][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.620735][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.620819][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.620904][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.620989][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.621129][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.621279][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.621394][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.621474][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.621586][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.621672][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.621792][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.621866][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.621985][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.622058][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.622178][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.622251][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.622354][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 184.632714][ T5715] usb 2-1: USB disconnect, device number 19 [ 184.661732][ T5715] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 184.662303][ T5715] usbserial_generic 2-1:1.0: device disconnected [ 184.761743][ T9256] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 184.763127][ T9256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.763334][ T9256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 184.765065][ T9256] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 184.765293][ T9256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 184.904623][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.109592][ T30] audit: type=1400 audit(1793241283.580:2945): avc: denied { getopt } for pid=9270 comm="syz.3.1379" lport=48207 faddr=::ffff:172.30.0.4 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 185.222267][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.651381][ T5749] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 185.709339][ T9296] evm: overlay not supported [ 185.804383][ T5749] usb 1-1: Using ep0 maxpacket: 16 [ 185.805049][ T5749] usb 1-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 185.810123][ T5749] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.810158][ T5749] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.810185][ T5749] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.810218][ T5749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.876108][ T5749] usb 1-1: config 0 descriptor?? [ 185.921757][ T30] audit: type=1400 audit(1793241284.400:2946): avc: denied { read write } for pid=9297 comm="syz.1.1386" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 185.922134][ T30] audit: type=1400 audit(1793241284.400:2947): avc: denied { open } for pid=9297 comm="syz.1.1386" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 185.943807][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.090460][ T30] audit: type=1400 audit(1793241284.560:2948): avc: denied { ioctl } for pid=9300 comm="syz.3.1389" path="socket:[26201]" dev="sockfs" ino=26201 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 186.261767][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.332344][ T5749] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 186.332379][ T5749] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 186.332405][ T5749] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 186.332432][ T5749] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 186.332457][ T5749] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 186.334823][ T5749] mcp2221 0003:04D8:00DD.0015: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 186.496199][ T30] audit: type=1400 audit(1793241284.970:2949): avc: denied { ioctl } for pid=9314 comm="syz.5.1397" path="socket:[27069]" dev="sockfs" ino=27069 ioctlcmd=0x40047452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.609968][ T5715] usb 1-1: USB disconnect, device number 19 [ 186.661765][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.821477][ T5622] Bluetooth: hci3: command 0x041b tx timeout [ 186.821498][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 186.821516][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.821528][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.984125][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.306238][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.449666][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 187.449684][ T30] audit: type=1400 audit(1793241285.920:2951): avc: denied { name_bind } for pid=9342 comm="syz.2.1409" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 188.021993][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.212483][ T30] audit: type=1400 audit(1793241286.680:2952): avc: denied { map } for pid=9359 comm="syz.5.1415" path="socket:[26279]" dev="sockfs" ino=26279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.212536][ T30] audit: type=1400 audit(1793241286.690:2953): avc: denied { read write } for pid=9359 comm="syz.5.1415" path="socket:[26279]" dev="sockfs" ino=26279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.353928][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.401125][ T990] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 188.555527][ T990] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 188.557998][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.580745][ T990] usb 1-1: config 0 descriptor?? [ 188.808228][ T990] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 188.858793][ T30] audit: type=1400 audit(1793241287.330:2954): avc: denied { read } for pid=9377 comm="syz.5.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.026855][ T990] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 189.026883][ T990] [drm] Initialized udl on minor 1 [ 189.061152][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.294203][ T9387] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 189.390447][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.974324][ T9403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1434'. [ 189.987054][ T9403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1434'. [ 190.102953][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.421582][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.938807][ T9427] netlink: 'syz.3.1445': attribute type 1 has an invalid length. [ 190.938832][ T9427] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1445'. [ 190.967612][ T9430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.084122][ T9441] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 191.151467][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.261386][ T8097] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 191.380701][ T30] audit: type=1400 audit(1793241289.850:2955): avc: denied { read } for pid=9447 comm="syz.2.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 191.422016][ T8097] usb 4-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 191.423391][ T8097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 191.423426][ T8097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 191.423454][ T8097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 191.426937][ T8097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.426970][ T8097] usb 4-1: Product: syz [ 191.426987][ T8097] usb 4-1: Manufacturer: syz [ 191.427028][ T8097] usb 4-1: SerialNumber: syz [ 191.452274][ T8097] usb 4-1: config 0 descriptor?? [ 191.589327][ T9454] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 191.591884][ T9454] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 191.591939][ T9454] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 191.701213][ T8097] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 191.951640][ T8097] usb 4-1: USB disconnect, device number 19 [ 192.070753][ T9482] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1467'. [ 192.186892][ T43] net_ratelimit: 1 callbacks suppressed [ 192.186910][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.496356][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 192.496403][ T9502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1476'. [ 192.512984][ T9502] geneve2: entered promiscuous mode [ 192.513006][ T9502] geneve2: entered allmulticast mode [ 192.520940][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.524457][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.524845][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.524913][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.524947][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.759540][ T9513] FAULT_INJECTION: forcing a failure. [ 192.759540][ T9513] name failslab, interval 1, probability 0, space 0, times 0 [ 192.759577][ T9513] CPU: 0 UID: 0 PID: 9513 Comm: syz.3.1481 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.759616][ T9513] Tainted: [L]=SOFTLOCKUP [ 192.759626][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 192.759642][ T9513] Call Trace: [ 192.759650][ T9513] [ 192.759660][ T9513] dump_stack_lvl+0x100/0x190 [ 192.759706][ T9513] should_fail_ex.cold+0x5/0xa [ 192.759745][ T9513] should_failslab+0xc2/0x120 [ 192.759772][ T9513] __kmalloc_cache_noprof+0x91/0x6d0 [ 192.759805][ T9513] ? snd_seq_pool_new+0x44/0x230 [ 192.759834][ T9513] ? __pfx_snd_seq_open+0x10/0x10 [ 192.759868][ T9513] snd_seq_pool_new+0x44/0x230 [ 192.759893][ T9513] seq_create_client1+0x66/0x5c0 [ 192.759930][ T9513] ? __pfx_snd_seq_open+0x10/0x10 [ 192.759964][ T9513] snd_seq_open+0x41/0x530 [ 192.759999][ T9513] ? __pfx_snd_seq_open+0x10/0x10 [ 192.760031][ T9513] snd_open+0x201/0x450 [ 192.760068][ T9513] ? __pfx_snd_open+0x10/0x10 [ 192.760104][ T9513] chrdev_open+0x234/0x6a0 [ 192.760133][ T9513] ? __pfx_chrdev_open+0x10/0x10 [ 192.760163][ T9513] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 192.760207][ T9513] do_dentry_open+0x674/0x1470 [ 192.760231][ T9513] ? __pfx_chrdev_open+0x10/0x10 [ 192.760264][ T9513] vfs_open_consume+0xcc/0x460 [ 192.760301][ T9513] path_openat+0x1547/0x23f0 [ 192.760337][ T9513] ? __pfx_path_openat+0x10/0x10 [ 192.760376][ T9513] do_file_open+0x20e/0x430 [ 192.760414][ T9513] ? __pfx_do_file_open+0x10/0x10 [ 192.760470][ T9513] ? _raw_spin_unlock+0x28/0x50 [ 192.760504][ T9513] ? alloc_fd+0x471/0x7a0 [ 192.760544][ T9513] do_sys_openat2+0x163/0x1d0 [ 192.760576][ T9513] ? __pfx_do_sys_openat2+0x10/0x10 [ 192.760609][ T9513] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.760645][ T9513] __x64_sys_openat+0x12d/0x210 [ 192.760678][ T9513] ? __pfx___x64_sys_openat+0x10/0x10 [ 192.760723][ T9513] do_syscall_64+0x123/0x790 [ 192.760751][ T9513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.760777][ T9513] RIP: 0033:0x7f3d8dd9f559 [ 192.760798][ T9513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.760823][ T9513] RSP: 002b:00007f3d8ec41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 192.760849][ T9513] RAX: ffffffffffffffda RBX: 00007f3d8e025fa0 RCX: 00007f3d8dd9f559 [ 192.760867][ T9513] RDX: 0000000000000002 RSI: 0000200000001500 RDI: ffffffffffffff9c [ 192.760883][ T9513] RBP: 00007f3d8de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 192.760899][ T9513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.760914][ T9513] R13: 00007f3d8e026038 R14: 00007f3d8e025fa0 R15: 00007ffc731c6148 [ 192.760950][ T9513] [ 192.870565][ T9517] input: syz0 as /devices/virtual/input/input20 [ 193.077616][ T9522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1485'. [ 193.231138][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.266179][ T9533] FAULT_INJECTION: forcing a failure. [ 193.266179][ T9533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 193.266215][ T9533] CPU: 0 UID: 0 PID: 9533 Comm: syz.2.1490 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.266248][ T9533] Tainted: [L]=SOFTLOCKUP [ 193.266258][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 193.266272][ T9533] Call Trace: [ 193.266279][ T9533] [ 193.266288][ T9533] dump_stack_lvl+0x100/0x190 [ 193.266333][ T9533] should_fail_ex.cold+0x5/0xa [ 193.266372][ T9533] should_fail_alloc_page+0xeb/0x140 [ 193.266401][ T9533] prepare_alloc_pages+0x1f0/0x5b0 [ 193.266432][ T9533] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 193.266466][ T9533] ? __pfx_get_page_from_freelist+0x10/0x10 [ 193.266501][ T9533] ? rcu_is_watching+0x13/0xc0 [ 193.266536][ T9533] ? trace_mm_page_alloc+0x164/0x1c0 [ 193.266577][ T9533] ? __alloc_frozen_pages_noprof+0x306/0x3280 [ 193.266616][ T9533] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 193.266658][ T9533] ? stack_trace_save+0x8e/0xc0 [ 193.266690][ T9533] ? __pfx_stack_trace_save+0x10/0x10 [ 193.266723][ T9533] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 193.266765][ T9533] ? __kasan_slab_alloc+0x89/0x90 [ 193.266788][ T9533] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 193.266823][ T9533] ? alloc_vmap_area+0x1829/0x2bc0 [ 193.266857][ T9533] ? __get_vm_area_node+0x1ed/0x350 [ 193.266892][ T9533] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 193.266917][ T9533] ? __vmalloc_node_noprof+0xad/0xf0 [ 193.266940][ T9533] ? copy_process+0x80b/0x84c0 [ 193.266968][ T9533] ? kernel_clone+0x176/0x9d0 [ 193.266996][ T9533] ? __do_sys_clone+0xd9/0x120 [ 193.267022][ T9533] ? do_syscall_64+0x123/0x790 [ 193.267045][ T9533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.267081][ T9533] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 193.267121][ T9533] ? policy_nodemask+0xed/0x5e0 [ 193.267151][ T9533] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 193.267205][ T9533] __kasan_populate_vmalloc+0xf0/0x210 [ 193.267249][ T9533] alloc_vmap_area+0x963/0x2bc0 [ 193.267296][ T9533] ? kasan_save_track+0x14/0x30 [ 193.267318][ T9533] ? __kasan_kmalloc+0xaa/0xb0 [ 193.267355][ T9533] ? __pfx_alloc_vmap_area+0x10/0x10 [ 193.267393][ T9533] ? __get_vm_area_node+0x124/0x350 [ 193.267435][ T9533] __get_vm_area_node+0x1ed/0x350 [ 193.267480][ T9533] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 193.267507][ T9533] ? kernel_clone+0x176/0x9d0 [ 193.267544][ T9533] ? lock_acquire+0x1d1/0x380 [ 193.267587][ T9533] ? kernel_clone+0x176/0x9d0 [ 193.267621][ T9533] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 193.267659][ T9533] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 193.267689][ T9533] ? rcu_is_watching+0x13/0xc0 [ 193.267716][ T9533] ? trace_kmem_cache_alloc+0xdd/0x100 [ 193.267746][ T9533] ? kernel_clone+0x176/0x9d0 [ 193.267775][ T9533] __vmalloc_node_noprof+0xad/0xf0 [ 193.267800][ T9533] ? kernel_clone+0x176/0x9d0 [ 193.267833][ T9533] copy_process+0x80b/0x84c0 [ 193.267867][ T9533] ? __pfx___futex_wait+0x10/0x10 [ 193.267900][ T9533] ? __pfx_try_to_wake_up+0x10/0x10 [ 193.267933][ T9533] ? futex_hash+0x311/0x400 [ 193.267969][ T9533] ? __pfx_copy_process+0x10/0x10 [ 193.268000][ T9533] ? futex_wake+0x4ea/0x5e0 [ 193.268045][ T9533] kernel_clone+0x176/0x9d0 [ 193.268077][ T9533] ? __pfx_kernel_clone+0x10/0x10 [ 193.268114][ T9533] ? ksys_write+0x190/0x250 [ 193.268146][ T9533] __do_sys_clone+0xd9/0x120 [ 193.268177][ T9533] ? __pfx___do_sys_clone+0x10/0x10 [ 193.268206][ T9533] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 193.268260][ T9533] do_syscall_64+0x123/0x790 [ 193.268287][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.268314][ T9533] RIP: 0033:0x7efeb8b9f559 [ 193.268335][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.268360][ T9533] RSP: 002b:00007efeb9ab7fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 193.268386][ T9533] RAX: ffffffffffffffda RBX: 00007efeb8e25fa0 RCX: 00007efeb8b9f559 [ 193.268403][ T9533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000082020000 [ 193.268418][ T9533] RBP: 00007efeb8c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 193.268434][ T9533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 193.268450][ T9533] R13: 00007efeb8e26038 R14: 00007efeb8e25fa0 R15: 00007ffc86322d98 [ 193.268484][ T9533] [ 193.268889][ T9533] syz.2.1490: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 193.268980][ T9533] CPU: 0 UID: 0 PID: 9533 Comm: syz.2.1490 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.269016][ T9533] Tainted: [L]=SOFTLOCKUP [ 193.269027][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 193.269042][ T9533] Call Trace: [ 193.269050][ T9533] [ 193.269059][ T9533] dump_stack_lvl+0x100/0x190 [ 193.269104][ T9533] warn_alloc.cold+0x9e/0xb2 [ 193.269132][ T9533] ? __pfx_warn_alloc+0x10/0x10 [ 193.269163][ T9533] ? lockdep_hardirqs_on+0x7d/0x110 [ 193.269204][ T9533] ? __get_vm_area_node+0x2f0/0x350 [ 193.269250][ T9533] ? __get_vm_area_node+0x22b/0x350 [ 193.269297][ T9533] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 193.269324][ T9533] ? lock_acquire+0x1d1/0x380 [ 193.269366][ T9533] ? kernel_clone+0x176/0x9d0 [ 193.269399][ T9533] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 193.269436][ T9533] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 193.269466][ T9533] ? rcu_is_watching+0x13/0xc0 [ 193.269493][ T9533] ? trace_kmem_cache_alloc+0xdd/0x100 [ 193.269528][ T9533] ? kernel_clone+0x176/0x9d0 [ 193.269558][ T9533] __vmalloc_node_noprof+0xad/0xf0 [ 193.269585][ T9533] ? kernel_clone+0x176/0x9d0 [ 193.269619][ T9533] copy_process+0x80b/0x84c0 [ 193.269653][ T9533] ? __pfx___futex_wait+0x10/0x10 [ 193.269686][ T9533] ? __pfx_try_to_wake_up+0x10/0x10 [ 193.269719][ T9533] ? futex_hash+0x311/0x400 [ 193.269755][ T9533] ? __pfx_copy_process+0x10/0x10 [ 193.269786][ T9533] ? futex_wake+0x4ea/0x5e0 [ 193.269831][ T9533] kernel_clone+0x176/0x9d0 [ 193.269864][ T9533] ? __pfx_kernel_clone+0x10/0x10 [ 193.269902][ T9533] ? ksys_write+0x190/0x250 [ 193.269934][ T9533] __do_sys_clone+0xd9/0x120 [ 193.269965][ T9533] ? __pfx___do_sys_clone+0x10/0x10 [ 193.269992][ T9533] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 193.270044][ T9533] do_syscall_64+0x123/0x790 [ 193.270071][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.270096][ T9533] RIP: 0033:0x7efeb8b9f559 [ 193.270116][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.270139][ T9533] RSP: 002b:00007efeb9ab7fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 193.270162][ T9533] RAX: ffffffffffffffda RBX: 00007efeb8e25fa0 RCX: 00007efeb8b9f559 [ 193.270179][ T9533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000082020000 [ 193.270194][ T9533] RBP: 00007efeb8c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 193.270210][ T9533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 193.270226][ T9533] R13: 00007efeb8e26038 R14: 00007efeb8e25fa0 R15: 00007ffc86322d98 [ 193.270261][ T9533] [ 193.270376][ T9533] Mem-Info: [ 193.270390][ T9533] active_anon:12977 inactive_anon:0 isolated_anon:0 [ 193.270390][ T9533] active_file:3789 inactive_file:52745 isolated_file:0 [ 193.270390][ T9533] unevictable:0 dirty:387 writeback:0 [ 193.270390][ T9533] slab_reclaimable:12955 slab_unreclaimable:103815 [ 193.270390][ T9533] mapped:30592 shmem:527 pagetables:1647 [ 193.270390][ T9533] sec_pagetables:0 bounce:0 [ 193.270390][ T9533] kernel_misc_reclaimable:0 [ 193.270390][ T9533] free:1268559 free_pcp:18009 free_cma:0 [ 193.270479][ T9533] Node 0 active_anon:51908kB inactive_anon:0kB active_file:15156kB inactive_file:210776kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122368kB dirty:1544kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13240kB pagetables:6152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 193.270554][ T9533] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 193.270641][ T9533] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.270713][ T9533] lowmem_reserve[]: 0 2447 2449 2449 2449 [ 193.270756][ T9533] Node 0 DMA32 free:1128536kB boost:0kB min:33784kB low:42228kB high:50672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:51908kB inactive_anon:0kB active_file:15156kB inactive_file:210776kB unevictable:0kB writepending:1536kB zspages:0kB present:3129332kB managed:2506512kB mlocked:0kB bounce:0kB free_pcp:66300kB local_pcp:25620kB free_cma:0kB [ 193.270848][ T9533] lowmem_reserve[]: 0 0 1 1 1 [ 193.270888][ T9533] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1764kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.270971][ T9533] lowmem_reserve[]: 0 0 0 0 0 [ 193.271008][ T9533] Node 1 Normal free:3930340kB boost:0kB min:56088kB low:70108kB high:84128kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5736kB local_pcp:3776kB free_cma:0kB [ 193.295526][ T9533] lowmem_reserve[]: 0 0 0 0 0 [ 193.295594][ T9533] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.295756][ T9533] Node 0 DMA32: 228*4kB (UM) 159*8kB (M) 417*16kB (UME) 692*32kB (UM) 199*64kB (UME) 101*128kB (UM) 25*256kB (UM) 21*512kB (UM) 10*1024kB (ME) 6*2048kB (UME) 252*4096kB (UM) = 1128536kB [ 193.295955][ T9533] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 193.296090][ T9533] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 3*16kB (UM) 4*32kB (UM) 3*64kB (UM) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3930392kB [ 193.360671][ T9533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.360692][ T9533] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.360712][ T9533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.360754][ T9533] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.360773][ T9533] 57057 total pagecache pages [ 193.360782][ T9533] 0 pages in swap cache [ 193.360790][ T9533] Free swap = 124996kB [ 193.360799][ T9533] Total swap = 124996kB [ 193.360809][ T9533] 2097051 pages RAM [ 193.360816][ T9533] 0 pages HighMem/MovableOnly [ 193.360824][ T9533] 438366 pages reserved [ 193.360840][ T9533] 0 pages cma reserved [ 193.475705][ T9540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1493'. [ 193.480982][ T9540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1493'. [ 193.544094][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.825252][ T9551] batadv_slave_0: Caught tx_queue_len zero misconfig [ 194.111658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.113855][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.158311][ T990] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 194.158684][ T990] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 194.268604][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.471009][ T990] usb 1-1: USB disconnect, device number 20 [ 194.492533][ T8097] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 194.494608][ T8097] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 194.583296][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.678690][ T62] Bluetooth: hci5: Frame reassembly failed (-84) [ 194.680348][ T64] Bluetooth: hci5: Frame reassembly failed (-84) [ 194.795212][ T9590] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.913277][ T9596] mac80211_hwsim hwsim5 syzkaller1: entered promiscuous mode [ 194.913305][ T9596] mac80211_hwsim hwsim5 syzkaller1: entered allmulticast mode [ 195.104024][ T9609] FAULT_INJECTION: forcing a failure. [ 195.104024][ T9609] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.104061][ T9609] CPU: 0 UID: 0 PID: 9609 Comm: syz.2.1524 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.104098][ T9609] Tainted: [L]=SOFTLOCKUP [ 195.104108][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 195.104123][ T9609] Call Trace: [ 195.104131][ T9609] [ 195.104143][ T9609] dump_stack_lvl+0x100/0x190 [ 195.104189][ T9609] should_fail_ex.cold+0x5/0xa [ 195.104226][ T9609] should_fail_alloc_page+0xeb/0x140 [ 195.104262][ T9609] prepare_alloc_pages+0x1f0/0x5b0 [ 195.104294][ T9609] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 195.104342][ T9609] ? stack_trace_save+0x8e/0xc0 [ 195.104376][ T9609] ? __pfx_stack_trace_save+0x10/0x10 [ 195.104410][ T9609] ? stack_depot_save_flags+0x27/0xa10 [ 195.104449][ T9609] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 195.104486][ T9609] ? kasan_save_stack+0x3f/0x50 [ 195.104522][ T9609] ? kasan_save_stack+0x30/0x50 [ 195.104559][ T9609] ? kasan_save_track+0x14/0x30 [ 195.104580][ T9609] ? __kasan_kmalloc+0xaa/0xb0 [ 195.104615][ T9609] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 195.104646][ T9609] ? mon_bin_open+0x1a8/0x470 [ 195.104681][ T9609] ? chrdev_open+0x234/0x6a0 [ 195.104707][ T9609] ? do_dentry_open+0x674/0x1470 [ 195.104729][ T9609] ? vfs_open_consume+0xcc/0x460 [ 195.104757][ T9609] ? path_openat+0x1547/0x23f0 [ 195.104784][ T9609] ? do_file_open+0x20e/0x430 [ 195.104811][ T9609] ? do_sys_openat2+0x163/0x1d0 [ 195.104840][ T9609] ? __x64_sys_openat+0x12d/0x210 [ 195.104869][ T9609] ? do_syscall_64+0x123/0x790 [ 195.104892][ T9609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.104936][ T9609] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 195.104978][ T9609] ? policy_nodemask+0xed/0x5e0 [ 195.105009][ T9609] alloc_pages_mpol+0x201/0x560 [ 195.105039][ T9609] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 195.105074][ T9609] alloc_pages_noprof+0x1a/0x160 [ 195.105104][ T9609] get_zeroed_page_noprof+0x18/0xb0 [ 195.105128][ T9609] mon_alloc_buff+0xce/0x1b0 [ 195.105169][ T9609] mon_bin_open+0x207/0x470 [ 195.105205][ T9609] ? __pfx_mon_bin_open+0x10/0x10 [ 195.105247][ T9609] chrdev_open+0x234/0x6a0 [ 195.105278][ T9609] ? __pfx_chrdev_open+0x10/0x10 [ 195.105309][ T9609] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 195.105355][ T9609] do_dentry_open+0x674/0x1470 [ 195.105379][ T9609] ? __pfx_chrdev_open+0x10/0x10 [ 195.105413][ T9609] vfs_open_consume+0xcc/0x460 [ 195.105450][ T9609] path_openat+0x1547/0x23f0 [ 195.105484][ T9609] ? __pfx_path_openat+0x10/0x10 [ 195.105524][ T9609] do_file_open+0x20e/0x430 [ 195.105556][ T9609] ? __pfx_do_file_open+0x10/0x10 [ 195.105610][ T9609] ? _raw_spin_unlock+0x28/0x50 [ 195.105643][ T9609] ? alloc_fd+0x471/0x7a0 [ 195.105682][ T9609] do_sys_openat2+0x163/0x1d0 [ 195.105714][ T9609] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.105744][ T9609] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 195.105792][ T9609] __x64_sys_openat+0x12d/0x210 [ 195.105825][ T9609] ? __pfx___x64_sys_openat+0x10/0x10 [ 195.105871][ T9609] do_syscall_64+0x123/0x790 [ 195.105898][ T9609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.105923][ T9609] RIP: 0033:0x7efeb8b5fd8e [ 195.105944][ T9609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.105967][ T9609] RSP: 002b:00007efeb9ab7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.105991][ T9609] RAX: ffffffffffffffda RBX: 00007efeb9ab86c0 RCX: 00007efeb8b5fd8e [ 195.106009][ T9609] RDX: 0000000000008800 RSI: 00007efeb9ab7c00 RDI: ffffffffffffff9c [ 195.106027][ T9609] RBP: 00007efeb9ab7c00 R08: 0000000000000000 R09: 0000000000000000 [ 195.106043][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 195.106060][ T9609] R13: 00007efeb8e26038 R14: 00007efeb8e25fa0 R15: 00007ffc86322d98 [ 195.106096][ T9609] [ 195.302569][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.494398][ T30] audit: type=1400 audit(1793241293.970:2956): avc: denied { write } for pid=9623 comm="syz.5.1531" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 195.508132][ T9624] jffs2: notice: (9624) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 195.622869][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.839084][ T9643] netlink: 'syz.1.1538': attribute type 10 has an invalid length. [ 195.839976][ T9636] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7655f [ 195.840003][ T9636] memcg:ffff88805802d080 [ 195.840014][ T9636] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 195.840048][ T9636] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 195.840085][ T9636] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff88805802d080 [ 195.840103][ T9636] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 195.840124][ T9636] page_owner tracks the page as allocated [ 195.840134][ T9636] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9636, tgid 9631 (syz.2.1533), ts 195839954810 [ 195.840180][ T9636] post_alloc_hook+0xfd/0x120 [ 195.840223][ T9636] get_page_from_freelist+0x1113/0x35e0 [ 195.840259][ T9636] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 195.840296][ T9636] alloc_pages_mpol+0x201/0x560 [ 195.840326][ T9636] folio_alloc_noprof+0x22/0x250 [ 195.840354][ T9636] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 195.840387][ T9636] filemap_alloc_folio_noprof+0x5e/0x80 [ 195.840416][ T9636] page_cache_ra_order+0x539/0xed0 [ 195.840455][ T9636] filemap_fault+0x1953/0x3140 [ 195.840496][ T9636] __do_fault+0x10b/0x440 [ 195.840529][ T9636] do_fault+0xb3f/0x1890 [ 195.840569][ T9636] __handle_mm_fault+0x150b/0x2f60 [ 195.840598][ T9636] handle_mm_fault+0x363/0xa20 [ 195.840624][ T9636] __get_user_pages+0x8a9/0x2c20 [ 195.840660][ T9636] populate_vma_page_range+0x2bb/0x450 [ 195.840697][ T9636] __mm_populate+0x107/0x3a0 [ 195.840733][ T9636] page last free pid 13 tgid 13 ts 195791758247 stack trace: [ 195.840795][ T9636] __free_frozen_pages+0x7b4/0x1110 [ 195.840823][ T9636] tlb_remove_table_rcu+0x2cf/0x380 [ 195.840845][ T9636] rcu_core+0x5f0/0x1220 [ 195.840867][ T9636] handle_softirqs+0x216/0xa20 [ 195.840892][ T9636] __irq_exit_rcu+0x178/0x220 [ 195.840916][ T9636] irq_exit_rcu+0x9/0x30 [ 195.845226][ T30] audit: type=1400 audit(1793241294.320:2957): avc: denied { read } for pid=4969 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 195.845531][ T30] audit: type=1400 audit(1793241294.320:2958): avc: denied { search } for pid=4969 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.848665][ T30] audit: type=1400 audit(1793241294.320:2959): avc: denied { write search } for pid=4969 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.848716][ T30] audit: type=1400 audit(1793241294.320:2960): avc: denied { add_name } for pid=4969 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.848757][ T30] audit: type=1400 audit(1793241294.320:2961): avc: denied { create } for pid=4969 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.848796][ T30] audit: type=1400 audit(1793241294.320:2962): avc: denied { append open } for pid=4969 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.848838][ T30] audit: type=1400 audit(1793241294.320:2963): avc: denied { getattr } for pid=4969 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.869033][ T9636] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 195.869080][ T9636] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 195.869339][ T9636] ------------[ cut here ]------------ [ 195.869348][ T9636] kernel BUG at mm/filemap.c:858! [ 195.869380][ T9636] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 195.905419][ T5725] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 196.051963][ T5725] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.052715][ T5725] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.052743][ T5725] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.052793][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.272249][ T9636] CPU: 0 UID: 0 PID: 9636 Comm: syz.2.1533 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.283183][ T9636] Tainted: [L]=SOFTLOCKUP [ 196.287497][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 196.291306][ T5725] usb 6-1: GET_CAPABILITIES returned 0 [ 196.291336][ T5725] usbtmc 6-1:16.0: can't read capabilities [ 196.308746][ T9636] RIP: 0010:__filemap_add_folio+0xfe6/0x1290 [ 196.314729][ T9636] Code: 11 ba ff 48 c7 c6 a0 60 1f 8c 4c 89 ef e8 c2 53 13 00 90 0f 0b e8 8a 11 ba ff 48 c7 c6 00 61 1f 8c 4c 89 ef e8 ab 53 13 00 90 <0f> 0b e8 73 11 ba ff 90 0f 0b 90 e9 12 fc ff ff e8 65 11 ba ff 48 [ 196.334324][ T9636] RSP: 0018:ffffc9000707f398 EFLAGS: 00010287 [ 196.340374][ T9636] RAX: 000000000001317d RBX: 0000000000112cc0 RCX: ffffc9000ee31000 [ 196.348326][ T9636] RDX: 0000000000080000 RSI: ffffffff82679598 RDI: ffff8880326584c4 [ 196.356278][ T9636] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 196.364233][ T9636] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 196.372191][ T9636] R13: ffffea0001d957c0 R14: 0000000000000000 R15: 1ffff92000e0fe9e [ 196.380142][ T9636] FS: 00007efeb9a976c0(0000) GS:ffff88812248e000(0000) knlGS:0000000000000000 [ 196.389056][ T9636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.395624][ T9636] CR2: 0000001b33d1aff8 CR3: 000000007ca44000 CR4: 00000000003526f0 [ 196.403577][ T9636] DR0: 0000000066d5c2cc DR1: 0000000000000000 DR2: 0000000000000000 [ 196.411528][ T9636] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 196.419481][ T9636] Call Trace: [ 196.422742][ T9636] [ 196.425656][ T9636] ? rcu_is_watching+0x13/0xc0 [ 196.430411][ T9636] ? lock_acquire+0x1d1/0x380 [ 196.435080][ T9636] ? __pfx___filemap_add_folio+0x10/0x10 [ 196.440711][ T9636] filemap_add_folio+0x1d3/0x640 [ 196.445640][ T9636] ? __pfx_filemap_add_folio+0x10/0x10 [ 196.451089][ T9636] ? lockdep_hardirqs_on+0x7d/0x110 [ 196.456281][ T9636] page_cache_ra_order+0x602/0xed0 [ 196.461387][ T9636] filemap_fault+0x1953/0x3140 [ 196.466147][ T9636] ? __pfx_filemap_fault+0x10/0x10 [ 196.471260][ T9636] ? find_held_lock+0x2b/0x80 [ 196.475923][ T9636] ? __pfx_filemap_map_pages+0x10/0x10 [ 196.481372][ T9636] __do_fault+0x10b/0x440 [ 196.485693][ T9636] do_fault+0xb3f/0x1890 [ 196.489927][ T9636] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 196.496167][ T9636] ? __pfx_do_fault+0x10/0x10 [ 196.500832][ T9636] ? pgd_none+0x9f/0xe0 [ 196.504970][ T9636] ? __pfx_pgd_none+0x10/0x10 [ 196.509629][ T9636] ? find_held_lock+0x2b/0x80 [ 196.514294][ T9636] __handle_mm_fault+0x150b/0x2f60 [ 196.519391][ T9636] ? __pfx___handle_mm_fault+0x10/0x10 [ 196.524834][ T9636] ? __pfx_mt_find+0x10/0x10 [ 196.529421][ T9636] handle_mm_fault+0x363/0xa20 [ 196.534172][ T9636] __get_user_pages+0x8a9/0x2c20 [ 196.539102][ T9636] ? __pfx_mt_find+0x10/0x10 [ 196.543676][ T9636] ? __pfx___get_user_pages+0x10/0x10 [ 196.549039][ T9636] populate_vma_page_range+0x2bb/0x450 [ 196.554489][ T9636] ? __pfx_populate_vma_page_range+0x10/0x10 [ 196.560461][ T9636] ? __pfx_find_vma_intersection+0x10/0x10 [ 196.566260][ T9636] __mm_populate+0x107/0x3a0 [ 196.570850][ T9636] ? __pfx___mm_populate+0x10/0x10 [ 196.575963][ T9636] ? up_write+0x2dc/0x5b0 [ 196.580287][ T9636] vm_mmap_pgoff+0x44a/0x490 [ 196.584876][ T9636] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 196.589984][ T9636] ? __fget_files+0x215/0x3d0 [ 196.594652][ T9636] ? __fget_files+0x21f/0x3d0 [ 196.599317][ T9636] ksys_mmap_pgoff+0x3cb/0x610 [ 196.604072][ T9636] ? kcov_ioctl+0x17a/0x750 [ 196.608567][ T9636] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 196.613843][ T9636] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 196.619650][ T9636] __x64_sys_mmap+0x125/0x190 [ 196.624319][ T9636] do_syscall_64+0x123/0x790 [ 196.628891][ T9636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.634766][ T9636] RIP: 0033:0x7efeb8b9f559 [ 196.639161][ T9636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.658749][ T9636] RSP: 002b:00007efeb9a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 196.667146][ T9636] RAX: ffffffffffffffda RBX: 00007efeb8e26090 RCX: 00007efeb8b9f559 [ 196.675099][ T9636] RDX: 0000000000000007 RSI: 0000000000b36000 RDI: 0000200000000000 [ 196.683051][ T9636] RBP: 00007efeb8c36b20 R08: 0000000000000004 R09: 000000002cb25000 [ 196.691006][ T9636] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 196.698966][ T9636] R13: 00007efeb8e26128 R14: 00007efeb8e26090 R15: 00007ffc86322d98 [ 196.706929][ T9636] [ 196.709928][ T9636] Modules linked in: [ 196.716408][ T9636] ---[ end trace 0000000000000000 ]--- [ 196.734883][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.746425][ T4938] Bluetooth: hci5: command 0x1003 tx timeout [ 196.746468][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 196.789722][ ** replaying previous printk message ** [ 196.789722][ T8097] usb 6-1: USB disconnect, device number 3 [ 196.797012][ T9636] RIP: 0010:__filemap_add_folio+0xfe6/0x1290 [ 196.797054][ T9636] Code: 11 ba ff 48 c7 c6 a0 60 1f 8c 4c 89 ef e8 c2 53 13 00 90 0f 0b e8 8a 11 ba ff 48 c7 c6 00 61 1f 8c 4c 89 ef e8 ab 53 13 00 90 <0f> 0b e8 73 11 ba ff 90 0f 0b 90 e9 12 fc ff ff e8 65 11 ba ff 48 [ 196.797078][ T9636] RSP: 0018:ffffc9000707f398 EFLAGS: 00010287 [ 196.797097][ T9636] RAX: 000000000001317d RBX: 0000000000112cc0 RCX: ffffc9000ee31000 [ 196.797113][ T9636] RDX: 0000000000080000 RSI: ffffffff82679598 RDI: ffff8880326584c4 [ 196.797179][ T9636] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 196.797193][ T9636] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 [ 196.797207][ T9636] R13: ffffea0001d957c0 R14: 0000000000000000 R15: 1ffff92000e0fe9e [ 196.797224][ T9636] FS: 00007efeb9a976c0(0000) GS:ffff88812248e000(0000) knlGS:0000000000000000 [ 196.797247][ T9636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.797263][ T9636] CR2: 0000001b33e0dff8 CR3: 000000007ca44000 CR4: 00000000003526f0 [ 196.797278][ T9636] DR0: 0000000066d5c2cc DR1: 0000000000000000 DR2: 0000000000000000 [ 196.797293][ T9636] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 196.797309][ T9636] Kernel panic - not syncing: Fatal exception [ 196.924408][ T9636] Kernel Offset: disabled [ 196.928708][ T9636] Rebooting in 86400 seconds..