last executing test programs: 2m33.261956986s ago: executing program 0 (id=336): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0}) 2m33.180146033s ago: executing program 0 (id=338): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}}, 0x10000010) 2m33.027254974s ago: executing program 0 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/afs/sysname\x00', 0x2, 0x84) write(r0, &(0x7f0000000500)="2e801dc070eb3d02050b03b7b765146d6bdd78cb2c2bb145f9cbdffe40737978", 0x20) 2m32.886870102s ago: executing program 0 (id=348): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x40000000000000d8, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) 2m32.696646366s ago: executing program 0 (id=354): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x9, 0x80, 0x3e, 0x9}, 'syz0\x00', 0x2d}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) 2m32.290095668s ago: executing program 0 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) write(r0, &(0x7f0000000380)='1', 0x1) 2m30.388693068s ago: executing program 1 (id=402): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) 2m30.303375652s ago: executing program 1 (id=404): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xfffffffe, 0x3c, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffbf, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1d, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 2m30.227832805s ago: executing program 1 (id=406): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m30.168390317s ago: executing program 1 (id=408): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 2m28.98807813s ago: executing program 1 (id=422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m28.931106087s ago: executing program 1 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000280)="2bde92", 0x3}], 0x1) 2m17.254304824s ago: executing program 32 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) write(r0, &(0x7f0000000380)='1', 0x1) 2m13.708381276s ago: executing program 33 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000280)="2bde92", 0x3}], 0x1) 7.490033681s ago: executing program 2 (id=2198): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1ff) mount$nfs(&(0x7f0000000300)='127.0.0.1:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=20000,proto=tcp,vers=3,noresvport\x00']) 7.285139228s ago: executing program 2 (id=2199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x4e22, 0x17c1, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "62720ca2b85b3f2b6042fa786c16f9e7bb65605abae22a54bae6c17bfd398af8", "53fc667d6b96930d9a13a68a40d2b87b", {"3331a53cc42928af63a8c6c490795fa7", "1cf46193b4bb5c93fcf4c2bbc9f752b1"}}}}}}}}, 0x8e) 7.174761277s ago: executing program 2 (id=2200): syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x1c) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 7.140141416s ago: executing program 2 (id=2201): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000840)={@local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @generic={0x1, 0x6, '\b\x00', 0x0, 0x67, 0x1, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}, 0x0) 7.041194687s ago: executing program 2 (id=2202): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1) 7.040364422s ago: executing program 2 (id=2203): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f0000000500)='\x00', 0x1}) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 4.776693285s ago: executing program 3 (id=2219): syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x80000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.850182645s ago: executing program 5 (id=2228): r0 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8a) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) 3.625208963s ago: executing program 5 (id=2234): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.081071056s ago: executing program 5 (id=2240): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 2.151617006s ago: executing program 6 (id=2249): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r0, &(0x7f0000000080)=""/102, 0x18) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 1.528322345s ago: executing program 6 (id=2251): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1.528190814s ago: executing program 3 (id=2252): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x201, 0x7}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2}) 1.402098316s ago: executing program 6 (id=2254): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x7) 1.358192024s ago: executing program 5 (id=2255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000300), &(0x7f0000000540)='%pK \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x15, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 1.276934825s ago: executing program 6 (id=2256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x488, 0x0, 0x3}]}) 1.276698581s ago: executing program 5 (id=2257): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x28, 0x801, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.23909667s ago: executing program 5 (id=2258): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000a80)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030800383a00fc010000000000000000000000000000fe8000000000000000000000000000aa020090780000f900605b52ab00002b00fc000000000000000000000000000000fc000000000000000000000000000000110004000100"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 1.203614749s ago: executing program 4 (id=2259): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @local}}}, 0x108) 1.150519935s ago: executing program 4 (id=2260): timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ppoll(&(0x7f00000000c0)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.115536096s ago: executing program 6 (id=2261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) 989.900642ms ago: executing program 6 (id=2262): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200119"], 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 617.291263ms ago: executing program 3 (id=2263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x20000000000003, 0x1004}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 246.498552ms ago: executing program 4 (id=2264): openat$tun(0xffffffffffffff9c, 0x0, 0x4001, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 244.110495ms ago: executing program 3 (id=2274): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mknod$loop(0x0, 0xfff, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 154.538375ms ago: executing program 4 (id=2265): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 117.129838ms ago: executing program 3 (id=2266): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000540)=0xfffffffffffffeee) 48.7264ms ago: executing program 4 (id=2267): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)) 28.084156ms ago: executing program 3 (id=2268): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000100)) 0s ago: executing program 4 (id=2269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) kernel console output (not intermixed with test programs): 91.098235][ T9814] infiniband sz1: added lo [ 191.149472][ T9814] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 191.149507][ T9814] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 191.149548][ T9814] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 191.151307][ T31] audit: type=1400 audit(1791072599.491:713): avc: denied { setopt } for pid=9821 comm="syz.2.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 191.198485][ T9814] RDS/IB: sz1: added [ 191.200112][ T9814] smc: adding ib device sz1 with port count 1 [ 191.200307][ T9814] smc: ib device sz1 port 1 has no pnetid [ 191.202864][ T5723] lo speed is unknown, defaulting to 1000 [ 191.226822][ T9814] lo speed is unknown, defaulting to 1000 [ 191.451942][ T5794] hid-alps 0003:044E:120B.000E: failed to read command (-71) [ 191.451993][ T5794] hid-alps 0003:044E:120B.000E: failed to change TP mode (-71) [ 191.483882][ T5794] hid-alps 0003:044E:120B.000E: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 191.507599][ T5794] usb 4-1: USB disconnect, device number 21 [ 191.578244][ T9814] lo speed is unknown, defaulting to 1000 [ 191.683714][ T9829] fido_id[9829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 191.900717][ T9814] lo speed is unknown, defaulting to 1000 [ 192.164398][ T5624] Bluetooth: hci7: command 0x1003 tx timeout [ 192.170023][ T4925] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 192.249556][ T31] audit: type=1400 audit(1791072600.591:714): avc: denied { listen } for pid=9845 comm="syz.2.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.312281][ T9814] lo speed is unknown, defaulting to 1000 [ 192.334289][ T5703] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 192.496702][ T5703] usb 4-1: unable to get BOS descriptor or descriptor too short [ 192.497330][ T5703] usb 4-1: not running at top speed; connect to a high speed hub [ 192.497359][ T5703] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 192.498557][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.501653][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 192.501676][ T5703] usb 4-1: Product: syz [ 192.501691][ T5703] usb 4-1: Manufacturer: syz [ 192.568187][ T5703] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 192.631826][ T9855] gretap0: entered promiscuous mode [ 192.642170][ T9855] 8021q: adding VLAN 0 to HW filter on device eth0 [ 192.653530][ T9855] 8021q: adding VLAN 0 to HW filter on device eth1 [ 192.672307][ T9855] 8021q: adding VLAN 0 to HW filter on device eth2 [ 192.682851][ T9855] 8021q: adding VLAN 0 to HW filter on device eth3 [ 192.706834][ T9814] lo speed is unknown, defaulting to 1000 [ 192.977698][ T5703] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 192.978429][ T5703] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 192.978485][ T5703] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 192.979115][ T5703] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -5 [ 193.030187][ T5703] usb 4-1: USB disconnect, device number 22 [ 193.193060][ T9814] lo speed is unknown, defaulting to 1000 [ 193.222537][ T9872] FAULT_INJECTION: forcing a failure. [ 193.222537][ T9872] name failslab, interval 1, probability 0, space 0, times 0 [ 193.222573][ T9872] CPU: 1 UID: 0 PID: 9872 Comm: syz.5.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.222602][ T9872] Tainted: [L]=SOFTLOCKUP [ 193.222610][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 193.222622][ T9872] Call Trace: [ 193.222629][ T9872] [ 193.222637][ T9872] dump_stack_lvl+0x100/0x190 [ 193.222675][ T9872] should_fail_ex.cold+0x5/0xa [ 193.222704][ T9872] should_failslab+0xc2/0x120 [ 193.222732][ T9872] __kmalloc_cache_noprof+0x91/0x6d0 [ 193.222755][ T9872] ? kasan_save_track+0x14/0x30 [ 193.222780][ T9872] ? smb3_init_fs_context+0xb1/0xb90 [ 193.222806][ T9872] smb3_init_fs_context+0xb1/0xb90 [ 193.222830][ T9872] alloc_fs_context+0x60c/0xf40 [ 193.222857][ T9872] __x64_sys_fsopen+0xed/0x220 [ 193.222883][ T9872] do_syscall_64+0x123/0x790 [ 193.222909][ T9872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.222930][ T9872] RIP: 0033:0x7f4e2cf9e159 [ 193.222946][ T9872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.222964][ T9872] RSP: 002b:00007f4e2ddee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 193.222984][ T9872] RAX: ffffffffffffffda RBX: 00007f4e2d225fa0 RCX: 00007f4e2cf9e159 [ 193.222998][ T9872] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 193.223009][ T9872] RBP: 00007f4e2d03506b R08: 0000000000000000 R09: 0000000000000000 [ 193.223020][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.223033][ T9872] R13: 00007f4e2d226038 R14: 00007f4e2d225fa0 R15: 00007ffe07047e78 [ 193.223062][ T9872] [ 193.601741][ T9814] lo speed is unknown, defaulting to 1000 [ 193.708620][ T31] audit: type=1400 audit(1791072602.051:715): avc: denied { lock } for pid=9889 comm="syz.4.1632" path="socket:[29586]" dev="sockfs" ino=29586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 193.925698][ T5794] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 194.081983][ T5794] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.085671][ T5794] usb 4-1: not running at top speed; connect to a high speed hub [ 194.085700][ T5794] usb 4-1: New USB device found, idVendor=1199, idProduct=9053, bcdDevice=bf.1c [ 194.087026][ T5794] usb 4-1: config 129 has an invalid interface number: 8 but max is 1 [ 194.087050][ T5794] usb 4-1: config 129 has an invalid interface number: 3 but max is 1 [ 194.087069][ T5794] usb 4-1: config 129 has no interface number 0 [ 194.087085][ T5794] usb 4-1: config 129 has no interface number 1 [ 194.087119][ T5794] usb 4-1: config 129 interface 8 has no altsetting 0 [ 194.090300][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.090323][ T5794] usb 4-1: Product: syz [ 194.090338][ T5794] usb 4-1: Manufacturer: syz [ 194.090351][ T5794] usb 4-1: SerialNumber: syz [ 194.194339][ T5703] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 194.325306][ T4925] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.344354][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 194.344860][ T5703] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.345750][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.345769][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.345788][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.345827][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.347911][ T5703] usb 3-1: config 0 descriptor?? [ 194.500913][ T9923] bridge0: port 3(erspan0) entered blocking state [ 194.501052][ T9923] bridge0: port 3(erspan0) entered disabled state [ 194.501353][ T9923] erspan0: entered allmulticast mode [ 194.513771][ T9923] erspan0: entered promiscuous mode [ 194.518704][ T9923] bridge0: port 3(erspan0) entered blocking state [ 194.518824][ T9923] bridge0: port 3(erspan0) entered listening state [ 194.542126][ T9923] erspan0: left allmulticast mode [ 194.542151][ T9923] erspan0: left promiscuous mode [ 194.543364][ T9923] bridge0: port 3(erspan0) entered disabled state [ 194.548583][ T5607] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 194.734447][ T5607] usb 7-1: Using ep0 maxpacket: 32 [ 194.735068][ T5607] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 194.736019][ T5607] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 194.736037][ T5607] usb 7-1: config 0 has no interface number 0 [ 194.736058][ T5607] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 194.736073][ T5607] usb 7-1: config 0 interface 196 has no altsetting 0 [ 194.738109][ T5607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.738122][ T5607] usb 7-1: Product: syz [ 194.738131][ T5607] usb 7-1: Manufacturer: syz [ 194.738139][ T5607] usb 7-1: SerialNumber: syz [ 194.741563][ T5607] usb 7-1: config 0 descriptor?? [ 194.742795][ T9917] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 194.808154][ T5703] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000F/input/input37 [ 194.883317][ T5703] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 194.897431][ T974] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 194.926550][ T5794] qcserial 4-1:129.3: Qualcomm USB modem converter detected [ 195.017717][ T5794] usb 3-1: USB disconnect, device number 21 [ 195.047368][ T974] usb 6-1: unable to get BOS descriptor or descriptor too short [ 195.047408][ T974] usb 6-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 195.049054][ T974] usb 6-1: config 160 has an invalid interface number: 168 but max is 0 [ 195.049079][ T974] usb 6-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 195.049098][ T974] usb 6-1: config 160 has no interface number 0 [ 195.049133][ T974] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 195.049159][ T974] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 195.049186][ T974] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 195.049209][ T974] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x7 has an invalid bInterval 195, changing to 11 [ 195.049235][ T974] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 195.049258][ T974] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 195.049281][ T974] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 195.049306][ T974] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 195.049331][ T974] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0xC has invalid wMaxPacketSize 0 [ 195.049352][ T974] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 0 [ 195.049373][ T974] usb 6-1: config 160 interface 168 has no altsetting 0 [ 195.051880][ T974] usb 6-1: string descriptor 0 read error: -22 [ 195.051995][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.094740][ T9925] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 195.095021][ T9925] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 195.143487][ T5703] usb 4-1: USB disconnect, device number 23 [ 195.150479][ T5703] qcserial 4-1:129.3: device disconnected [ 195.230692][ T974] io_edgeport 6-1:160.168: EPiC device converter detected [ 195.231146][ T974] usb 6-1: detected [ 195.305846][ T974] usb 6-1: EPiC device converter now attached to ttyUSB0 [ 195.509636][ C1] usb 6-1: edge_interrupt_callback - Error -19 submitting control urb [ 195.509648][ T5703] usb 6-1: USB disconnect, device number 15 [ 195.530655][ T5703] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0 [ 195.536035][ T5703] io_edgeport 6-1:160.168: device disconnected [ 195.564350][ T5607] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 195.615841][ T5607] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 195.626686][ T5607] usb 7-1: USB disconnect, device number 21 [ 195.677474][ T5607] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 195.887695][ T31] audit: type=1400 audit(1791072604.231:716): avc: denied { create } for pid=9940 comm="syz.3.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.888564][ T31] audit: type=1400 audit(1791072604.231:717): avc: denied { connect } for pid=9940 comm="syz.3.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.888929][ T31] audit: type=1400 audit(1791072604.231:718): avc: denied { bind } for pid=9940 comm="syz.3.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.889297][ T31] audit: type=1400 audit(1791072604.231:719): avc: denied { write } for pid=9940 comm="syz.3.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.135367][ T5607] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 196.265873][ T9952] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 196.290949][ T5607] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 196.302534][ T5607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.309822][ T5607] usb 3-1: config 0 descriptor?? [ 196.328747][ T5607] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 196.378780][ T31] audit: type=1400 audit(1791072604.721:720): avc: denied { bind } for pid=9956 comm="syz.3.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.752872][ T5607] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 196.883484][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1674'. [ 196.936984][ T9989] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 197.156228][ T5607] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 197.244335][ T974] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 197.285640][ T5607] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 197.365962][ T968] usb 3-1: USB disconnect, device number 22 [ 197.394449][ T5794] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 197.396219][ T974] usb 4-1: not running at top speed; connect to a high speed hub [ 197.396249][ T974] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 197.397156][ T974] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 1024, setting to 64 [ 197.398971][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.398993][ T974] usb 4-1: Product: syz [ 197.399008][ T974] usb 4-1: Manufacturer: syz [ 197.399023][ T974] usb 4-1: SerialNumber: syz [ 197.421973][ T974] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 197.445012][ T5607] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 197.446086][ T5607] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.446115][ T5607] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.447578][ T5607] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 197.447607][ T5607] usb 7-1: Manufacturer: syz [ 197.450548][ T5607] usb 7-1: config 0 descriptor?? [ 197.502003][ T974] keyspan 4-1:1.0: unsupported endpoint type 0 [ 197.511495][ T974] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 197.525228][ T974] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 197.529350][ T974] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 197.532561][ T974] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 197.567632][ T5794] usb 6-1: not running at top speed; connect to a high speed hub [ 197.567662][ T5794] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 197.574861][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.574887][ T5794] usb 6-1: Product: syz [ 197.574902][ T5794] usb 6-1: Manufacturer: syz [ 197.574917][ T5794] usb 6-1: SerialNumber: syz [ 197.611781][ T5794] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 197.643608][ T5794] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 197.657418][ T5794] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 197.669185][ T5794] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 197.676762][ T5794] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 197.761932][ T31] audit: type=1400 audit(1791072606.101:721): avc: denied { mount } for pid=10007 comm="syz.4.1685" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 197.833838][ T31] audit: type=1400 audit(1791072606.171:722): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 197.847084][ T968] usb 4-1: USB disconnect, device number 24 [ 197.911432][ T968] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 197.943518][ T968] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 197.983931][ T968] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 198.000953][ T968] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 198.018508][ T968] keyspan 4-1:1.0: device disconnected [ 198.386307][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 198.531006][ T5607] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #100: -71 [ 198.531065][ T5607] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 198.531082][ T5607] uclogic 0003:256C:006D.0010: failed probing pen v1 parameters: -71 [ 198.531128][ T5607] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 198.531240][ T5607] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 198.596562][ T5607] usb 7-1: USB disconnect, device number 22 [ 198.915639][T10043] FAULT_INJECTION: forcing a failure. [ 198.915639][T10043] name failslab, interval 1, probability 0, space 0, times 0 [ 198.915673][T10043] CPU: 1 UID: 0 PID: 10043 Comm: syz.3.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.915690][T10043] Tainted: [L]=SOFTLOCKUP [ 198.915694][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 198.915702][T10043] Call Trace: [ 198.915706][T10043] [ 198.915711][T10043] dump_stack_lvl+0x100/0x190 [ 198.915733][T10043] should_fail_ex.cold+0x5/0xa [ 198.915753][T10043] should_failslab+0xc2/0x120 [ 198.915770][T10043] kmem_cache_alloc_noprof+0x92/0x6a0 [ 198.915785][T10043] ? copy_fs_struct+0x49/0x340 [ 198.915804][T10043] copy_fs_struct+0x49/0x340 [ 198.915819][T10043] ksys_unshare+0x3a6/0xa70 [ 198.915833][T10043] ? __pfx_ksys_unshare+0x10/0x10 [ 198.915847][T10043] ? ksys_write+0x1ac/0x250 [ 198.915873][T10043] __x64_sys_unshare+0x31/0x40 [ 198.915898][T10043] do_syscall_64+0x123/0x790 [ 198.915924][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.915944][T10043] RIP: 0033:0x7f8d5fd9e159 [ 198.915961][T10043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.915973][T10043] RSP: 002b:00007f8d60d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 198.915985][T10043] RAX: ffffffffffffffda RBX: 00007f8d60025fa0 RCX: 00007f8d5fd9e159 [ 198.915993][T10043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 198.916001][T10043] RBP: 00007f8d5fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 198.916009][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.916016][T10043] R13: 00007f8d60026038 R14: 00007f8d60025fa0 R15: 00007fffbfe24578 [ 198.916032][T10043] [ 199.291114][ T31] audit: type=1400 audit(1791072607.631:723): avc: denied { listen } for pid=10046 comm="syz.2.1702" lport=33762 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.305792][ T31] audit: type=1400 audit(1791072607.641:724): avc: denied { accept } for pid=10046 comm="syz.2.1702" lport=33762 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.305841][ T31] audit: type=1400 audit(1791072607.641:725): avc: denied { write } for pid=10046 comm="syz.2.1702" lport=33762 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 199.644173][T10060] tipc: Started in network mode [ 199.645493][T10060] tipc: Node identity ac1414aa, cluster identity 4711 [ 199.659182][T10060] tipc: New replicast peer: 172.20.20.187 [ 199.666617][T10060] tipc: Enabled bearer , priority 10 [ 200.001703][ T31] audit: type=1400 audit(1791072608.341:726): avc: denied { load_policy } for pid=10071 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 200.038394][T10073] SELinux: failed to load policy [ 200.159471][T10080] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 200.197360][ T974] usb 6-1: USB disconnect, device number 16 [ 200.240237][ T974] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 200.262893][ T974] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 200.301427][ T974] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 200.314311][ T5607] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 200.316361][ T974] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 200.321387][ T974] keyspan 6-1:1.0: device disconnected [ 200.336878][T10086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.379823][T10086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.487792][ T5607] usb 3-1: unable to get BOS descriptor or descriptor too short [ 200.487838][ T5607] usb 3-1: New USB device found, idVendor=1b80, idProduct=a340, bcdDevice=4b.ee [ 200.488954][ T5607] usb 3-1: config 7 has an invalid interface number: 216 but max is 0 [ 200.488980][ T5607] usb 3-1: config 7 has no interface number 0 [ 200.489016][ T5607] usb 3-1: config 7 interface 216 altsetting 9 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 200.489043][ T5607] usb 3-1: config 7 interface 216 has no altsetting 0 [ 200.491274][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.491299][ T5607] usb 3-1: Product: syz [ 200.491314][ T5607] usb 3-1: Manufacturer: syz [ 200.491328][ T5607] usb 3-1: SerialNumber: syz [ 200.582711][ T31] audit: type=1400 audit(1791072608.921:727): avc: denied { map } for pid=10096 comm="syz.6.1724" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 200.610654][ T31] audit: type=1400 audit(1791072608.951:728): avc: denied { mounton } for pid=10096 comm="syz.6.1724" path="/221/dev/mtdblock0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.653890][T10097] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 200.653890][T10097] [ 200.778358][ T974] tipc: Node number set to 2886997162 [ 200.802102][ T5607] em28xx 3-1:7.216: New device syz syz @ 480 Mbps (1b80:a340, interface 216, class 216) [ 200.802139][ T5607] em28xx 3-1:7.216: Video interface 216 found: [ 200.874654][ T5607] em28xx 3-1:7.216: unknown em28xx chip ID (0) [ 200.965942][ T5607] em28xx 3-1:7.216: reading from i2c device at 0xa0 failed (error=-5) [ 200.966632][ T5607] em28xx 3-1:7.216: board has no eeprom [ 201.024633][ T5607] em28xx 3-1:7.216: Identified as KWorld PlusTV 340U or UB435-Q (ATSC) (card=76) [ 201.024663][ T5607] em28xx 3-1:7.216: Currently, V4L2 is not supported on this model [ 201.025533][ T5703] em28xx 3-1:7.216: Binding DVB extension [ 201.026038][ T5703] em28xx 3-1:7.216: no endpoint for DVB mode and transfer type 0 [ 201.026056][ T5703] em28xx 3-1:7.216: failed to pre-allocate USB transfer buffers for DVB. [ 201.026099][ T5703] em28xx 3-1:7.216: Remote control support is not available for this card. [ 201.085138][ T5607] usb 3-1: USB disconnect, device number 23 [ 201.086602][ T5607] em28xx 3-1:7.216: Disconnecting em28xx [ 201.086626][ T5607] em28xx 3-1:7.216: Closing input extension [ 201.168090][ T5607] em28xx: Freeing device [ 201.311787][T10136] i2c i2c-0: new_device: Extra parameters [ 201.665477][T10153] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 201.848944][ T31] audit: type=1400 audit(1791072610.191:729): avc: denied { write } for pid=10160 comm="syz.3.1752" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.848992][ T31] audit: type=1400 audit(1791072610.191:730): avc: denied { open } for pid=10160 comm="syz.3.1752" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.851409][ T31] audit: type=1400 audit(1791072610.191:731): avc: denied { ioctl } for pid=10160 comm="syz.3.1752" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 202.033551][ T31] audit: type=1400 audit(1791072610.371:732): avc: denied { write } for pid=10165 comm="syz.3.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 202.495198][T10186] tipc: Can't bind to reserved service type 1 [ 202.671601][T10192] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 202.957332][T10201] IPVS: persistence engine module ip_vs_pe_À not found [ 203.040182][ T31] audit: type=1400 audit(1791072611.381:733): avc: denied { ioctl } for pid=10203 comm="syz.4.1772" path="/dev/sg0" dev="devtmpfs" ino=890 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 203.044576][ T974] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 203.197204][ T974] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.199155][ T974] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.199182][ T974] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 203.199202][ T974] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.199242][ T974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 203.199269][ T974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 203.200728][ T974] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.200752][ T974] usb 6-1: Product: syz [ 203.200767][ T974] usb 6-1: Manufacturer: syz [ 203.222139][ T974] cdc_wdm 6-1:1.0: skipping garbage [ 203.222160][ T974] cdc_wdm 6-1:1.0: skipping garbage [ 203.249291][ T974] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 203.250863][ T974] cdc_wdm 6-1:1.0: Unknown control protocol [ 203.332322][ T31] audit: type=1400 audit(1791072611.671:734): avc: denied { write } for pid=10213 comm="syz.6.1777" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 203.488984][T10223] FAULT_INJECTION: forcing a failure. [ 203.488984][T10223] name failslab, interval 1, probability 0, space 0, times 0 [ 203.489025][T10223] CPU: 0 UID: 0 PID: 10223 Comm: syz.2.1781 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.489053][T10223] Tainted: [L]=SOFTLOCKUP [ 203.489060][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 203.489072][T10223] Call Trace: [ 203.489079][T10223] [ 203.489086][T10223] dump_stack_lvl+0x100/0x190 [ 203.489123][T10223] should_fail_ex.cold+0x5/0xa [ 203.489152][T10223] should_failslab+0xc2/0x120 [ 203.489179][T10223] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 203.489203][T10223] ? start_dirop+0x79/0xb0 [ 203.489231][T10223] ? alloc_inode+0x68/0x250 [ 203.489254][T10223] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 203.489284][T10223] alloc_inode+0x68/0x250 [ 203.489313][T10223] new_inode+0x22/0x1c0 [ 203.489348][T10223] __debugfs_create_file+0xfb/0x500 [ 203.489384][T10223] debugfs_create_file_full+0x41/0x60 [ 203.489418][T10223] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 203.489462][T10223] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 203.489529][T10223] ? kasan_save_track+0x14/0x30 [ 203.489568][T10223] ? __kasan_kmalloc+0xaa/0xb0 [ 203.489605][T10223] ? lockdep_init_map_type+0x5c/0x250 [ 203.489645][T10223] preinit_net+0x252/0x920 [ 203.489683][T10223] copy_net_ns+0x1dd/0x7a0 [ 203.489715][T10223] create_new_namespaces+0x3ea/0xac0 [ 203.489761][T10223] unshare_nsproxy_namespaces+0xf2/0x220 [ 203.489799][T10223] ksys_unshare+0x4a2/0xa70 [ 203.489836][T10223] ? __pfx_ksys_unshare+0x10/0x10 [ 203.489882][T10223] __x64_sys_unshare+0x31/0x40 [ 203.489917][T10223] do_syscall_64+0x123/0x790 [ 203.489954][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.489985][T10223] RIP: 0033:0x7f0ce539e159 [ 203.490015][T10223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.490041][T10223] RSP: 002b:00007f0ce61b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 203.490070][T10223] RAX: ffffffffffffffda RBX: 00007f0ce5625fa0 RCX: 00007f0ce539e159 [ 203.490086][T10223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 203.490101][T10223] RBP: 00007f0ce543506b R08: 0000000000000000 R09: 0000000000000000 [ 203.490115][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.490128][T10223] R13: 00007f0ce5626038 R14: 00007f0ce5625fa0 R15: 00007ffc2e10caa8 [ 203.490157][T10223] [ 203.490190][T10223] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888043505240' [ 203.600344][T10221] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 203.600369][T10221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.638263][T10221] vhci_hcd vhci_hcd.0: Device attached [ 203.650963][ T5796] usb 6-1: USB disconnect, device number 17 [ 203.797713][T10223] lo speed is unknown, defaulting to 1000 [ 203.804350][ T974] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 203.845604][ T968] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 203.955674][ T974] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.956334][ T974] usb 7-1: config 0 has no interfaces? [ 203.956365][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.962022][ T974] usb 7-1: config 0 descriptor?? [ 204.206591][T10224] usb 45-1: recv xbuf, 0 [ 204.212114][ T974] usb 7-1: USB disconnect, device number 23 [ 204.242835][ T1399] vhci_hcd vhci_hcd.6: stop threads [ 204.243651][ T1399] vhci_hcd vhci_hcd.6: release socket [ 204.264129][ T1399] vhci_hcd vhci_hcd.6: disconnect device [ 204.288419][ T968] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 204.468716][T10229] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.597928][T10229] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.889321][T10229] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.106144][T10229] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.525489][T10240] xt_hashlimit: size too large, truncated to 1048576 [ 205.608639][T10243] macvtap1: entered promiscuous mode [ 205.608665][T10243] vlan0: entered promiscuous mode [ 205.609932][T10243] macvtap1: entered allmulticast mode [ 205.609951][T10243] vlan0: entered allmulticast mode [ 205.609964][T10243] veth0_vlan: entered allmulticast mode [ 205.659665][ T161] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.710254][T10245] macvtap2: entered promiscuous mode [ 205.710276][T10245] macvtap2: entered allmulticast mode [ 205.755434][ T161] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.755474][ T161] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.755500][ T161] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.943009][ T31] audit: type=1400 audit(1791072614.281:735): avc: denied { read } for pid=10251 comm="syz.2.1791" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 205.943676][ T31] audit: type=1400 audit(1791072614.281:736): avc: denied { open } for pid=10251 comm="syz.2.1791" path="net:[4026532807]" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 206.174376][ T968] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 206.222087][ T31] audit: type=1400 audit(1791072614.561:737): avc: denied { setopt } for pid=10267 comm="syz.6.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.228125][ T31] audit: type=1400 audit(1791072614.571:738): avc: denied { read } for pid=10267 comm="syz.6.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.325508][ T968] usb 4-1: Using ep0 maxpacket: 16 [ 206.327172][ T968] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 206.330439][ T968] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.330456][ T968] usb 4-1: config 0 has no interface number 0 [ 206.330478][ T968] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.330493][ T968] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.330505][ T968] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.330520][ T968] usb 4-1: config 0 interface 1 has no altsetting 0 [ 206.330537][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.339701][ T968] usb 4-1: config 0 descriptor?? [ 206.352315][ T968] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 206.793623][ T968] elan 0003:04F3:074D.0011: failed to start in urb: -90 [ 206.819154][T10292] loop3: detected capacity change from 0 to 7 [ 206.828034][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.828107][ C1] buffer_io_error: 338 callbacks suppressed [ 206.828119][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 206.829439][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.829527][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 206.829815][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.829896][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 206.830069][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.830136][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 206.830351][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.830409][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 206.830671][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.830756][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 206.830932][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.830989][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 206.831044][T10292] ldm_validate_partition_table(): Disk read failed. [ 206.831162][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.831228][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 206.831376][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.831444][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 206.831612][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.831683][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 206.831889][T10292] Dev loop3: unable to read RDB block 0 [ 206.832550][T10292] loop3: unable to read partition table [ 206.832752][T10292] loop3: partition table beyond EOD, truncated [ 206.834775][T10292] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 207.130647][ T31] audit: type=1326 audit(1791072615.471:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10299 comm="syz.6.1814" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febc619e159 code=0x0 [ 207.183344][T10302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.191515][ T968] elan 0003:04F3:074D.0011: Get report error for parm 6: 0 [ 207.392899][ T968] elan 0003:04F3:074D.0011: Set report error for parm 7: -71 [ 207.411902][ T968] elan 0003:04F3:074D.0011: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.3-1/input1 [ 207.411938][ T968] elan 0003:04F3:074D.0011: Input device is not registered [ 207.450669][ T968] elan 0003:04F3:074D.0011: probe with driver elan failed with error -119 [ 207.463153][ T968] usb 4-1: USB disconnect, device number 25 [ 207.531128][T10316] fido_id[10316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 207.794767][T10328] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 207.954839][ T5607] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 208.099701][T10339] FAULT_INJECTION: forcing a failure. [ 208.099701][T10339] name failslab, interval 1, probability 0, space 0, times 0 [ 208.099735][T10339] CPU: 1 UID: 0 PID: 10339 Comm: syz.6.1827 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.099764][T10339] Tainted: [L]=SOFTLOCKUP [ 208.099771][T10339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 208.099783][T10339] Call Trace: [ 208.099790][T10339] [ 208.099797][T10339] dump_stack_lvl+0x100/0x190 [ 208.099831][T10339] should_fail_ex.cold+0x5/0xa [ 208.099861][T10339] should_failslab+0xc2/0x120 [ 208.099892][T10339] __kmalloc_cache_noprof+0x91/0x6d0 [ 208.099916][T10339] ? comedi_open+0x9b/0x5e0 [ 208.099947][T10339] ? __pfx_comedi_open+0x10/0x10 [ 208.099974][T10339] comedi_open+0x9b/0x5e0 [ 208.100000][T10339] ? __pfx_comedi_open+0x10/0x10 [ 208.100027][T10339] chrdev_open+0x234/0x6a0 [ 208.100055][T10339] ? __pfx_chrdev_open+0x10/0x10 [ 208.100083][T10339] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 208.100111][T10339] do_dentry_open+0x6ab/0x14d0 [ 208.100135][T10339] ? __pfx_chrdev_open+0x10/0x10 [ 208.100169][T10339] vfs_open+0x82/0x3f0 [ 208.100200][T10339] path_openat+0x19fa/0x2440 [ 208.100231][T10339] ? __pfx_path_openat+0x10/0x10 [ 208.100266][T10339] do_file_open+0x20e/0x430 [ 208.100296][T10339] ? __pfx_do_file_open+0x10/0x10 [ 208.100345][T10339] ? _raw_spin_unlock+0x28/0x50 [ 208.100374][T10339] ? alloc_fd+0x471/0x7a0 [ 208.100410][T10339] do_sys_openat2+0x10f/0x1e0 [ 208.100442][T10339] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.100471][T10339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.100512][T10339] __x64_sys_openat+0x12d/0x210 [ 208.100546][T10339] ? __pfx___x64_sys_openat+0x10/0x10 [ 208.100591][T10339] do_syscall_64+0x123/0x790 [ 208.100618][T10339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.100640][T10339] RIP: 0033:0x7febc619e159 [ 208.100658][T10339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.100677][T10339] RSP: 002b:00007febc714a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.100698][T10339] RAX: ffffffffffffffda RBX: 00007febc6425fa0 RCX: 00007febc619e159 [ 208.100712][T10339] RDX: 0000000000000202 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 208.100725][T10339] RBP: 00007febc623506b R08: 0000000000000000 R09: 0000000000000000 [ 208.100739][T10339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.100750][T10339] R13: 00007febc6426038 R14: 00007febc6425fa0 R15: 00007ffc48876de8 [ 208.100779][T10339] [ 208.120266][ T5607] usb 6-1: Using ep0 maxpacket: 32 [ 208.132410][ T5607] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 208.403126][ T5607] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 208.403154][ T5607] usb 6-1: config 0 has no interface number 0 [ 208.421734][ T5607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.421791][ T5607] usb 6-1: Product: syz [ 208.421807][ T5607] usb 6-1: Manufacturer: syz [ 208.421822][ T5607] usb 6-1: SerialNumber: syz [ 208.437950][ T31] audit: type=1400 audit(1791072616.781:740): avc: denied { execute } for pid=10340 comm="syz.6.1829" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.479093][ T5607] usb 6-1: config 0 descriptor?? [ 208.626443][T10345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.648714][T10345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.894086][ T5607] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 208.894119][ T5607] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 209.318188][ T5607] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 209.318475][ T5607] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 209.323475][ T5607] usb 6-1: USB disconnect, device number 18 [ 210.040402][T10382] zswap: compressor s not available [ 210.156997][ T31] audit: type=1400 audit(1791072618.501:741): avc: denied { create } for pid=10393 comm="syz.2.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 210.158287][ T31] audit: type=1400 audit(1791072618.501:742): avc: denied { write } for pid=10393 comm="syz.2.1853" path="socket:[32198]" dev="sockfs" ino=32198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 210.264368][ T968] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 210.366301][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 210.415038][ T968] usb 4-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 210.415993][ T968] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.416037][ T968] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.416078][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.474471][ T5723] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 210.501297][T10404] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.501337][T10404] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.619284][T10404] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.619323][T10404] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.645640][ T5723] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 210.646799][ T5723] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.646848][ T5723] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.648798][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.648820][ T5723] usb 7-1: Product: syz [ 210.648835][ T5723] usb 7-1: Manufacturer: syz [ 210.648857][ T5723] usb 7-1: SerialNumber: syz [ 210.768889][T10404] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.768912][T10404] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.839806][T10404] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.839853][T10404] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.896177][ T5723] usb 7-1: USB disconnect, device number 24 [ 211.036735][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.043227][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.085168][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.085202][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.144905][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.144937][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.144971][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.144993][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.260288][T10418] Trying to write to read-only block-device nullb0 [ 211.446051][ T5794] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 211.535063][ T5723] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 211.594781][ T5794] usb 3-1: Using ep0 maxpacket: 16 [ 211.595497][ T5794] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 211.599648][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.599672][ T5794] usb 3-1: Product: syz [ 211.599688][ T5794] usb 3-1: Manufacturer: syz [ 211.599703][ T5794] usb 3-1: SerialNumber: syz [ 211.602264][ T5794] usb 3-1: config 0 descriptor?? [ 211.611829][ T5794] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 211.690907][ T31] audit: type=1400 audit(1791072620.031:743): avc: denied { read } for pid=10429 comm="syz.6.1868" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 211.691190][ T31] audit: type=1400 audit(1791072620.031:744): avc: denied { open } for pid=10429 comm="syz.6.1868" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 211.693714][ T31] audit: type=1400 audit(1791072620.031:745): avc: denied { ioctl } for pid=10429 comm="syz.6.1868" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 211.775148][ T5723] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 211.780317][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.784973][ T5723] usb 6-1: config 0 descriptor?? [ 211.799647][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 211.800302][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 211.800353][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 211.802322][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 211.805847][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 211.808544][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 211.809265][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 211.812233][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 211.815456][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 211.817196][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 211.817997][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 211.822576][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 211.827193][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 211.830119][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 211.830725][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 211.833372][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 211.833916][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 211.838874][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 211.839394][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 211.839894][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 211.841231][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 211.843462][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 211.849098][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 211.850422][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 211.854378][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 211.856505][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 211.859545][ T968] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 212.005189][ T968] ax88179_178a 4-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, ae:05:44:60:2b:5b [ 212.045276][ T5723] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 212.046718][ T968] usb 4-1: USB disconnect, device number 26 [ 212.074081][ T968] ax88179_178a 4-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 212.277899][ T5723] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 212.277923][ T5723] [drm] Initialized udl on minor 1 [ 212.279147][ T5794] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 212.291771][ T5794] usb 3-1: USB disconnect, device number 24 [ 212.476245][T10440] ip6_vti0: entered promiscuous mode [ 212.559311][T10448] kernel read not supported for file /bus (pid: 10448 comm: syz.4.1875) [ 212.559611][ T31] audit: type=1800 audit(1791072620.901:746): pid=10448 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1875" name="bus" dev="mqueue" ino=33146 res=0 errno=0 [ 213.164246][ T5725] kernel read not supported for file /video9 (pid: 5725 comm: kworker/0:9) [ 213.207408][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 213.208106][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 213.334428][ T31] audit: type=1400 audit(1791072621.671:747): avc: denied { map } for pid=10477 comm="syz.6.1888" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.335684][ T31] audit: type=1400 audit(1791072621.671:748): avc: denied { execute } for pid=10477 comm="syz.6.1888" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1                                                                                                                                   [ 214.539760][ T31] audit: type=1400 audit(1791072622.881:749): avc: denied { search } for pid=10505 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.542705][ T31] audit: type=1400 audit(1791072622.881:750): avc: denied { read write } for pid=10505 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 214.542749][ T31] audit: type=1400 audit(1791072622.881:751): avc: denied { open } for pid=10505 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 214.542788][ T31] audit: type=1400 audit(1791072622.881:752): avc: denied { lock } for pid=10505 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 214.572274][ T5794] usb 7-1: USB disconnect, device number 25 [ 214.588884][ T5794] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 214.600095][ T5794] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 214.600934][ T5794] keyspan 7-1:1.0: device disconnected syzkaller syzkaller login: [ 215.186108][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1905'. [ 215.584551][ T5725] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 215.604522][ T5624] Bluetooth: hci7: command 0xfc11 tx timeout [ 215.605134][ T4925] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 215.746762][ T5725] usb 7-1: Using ep0 maxpacket: 32 [ 215.747609][ T5725] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 215.748579][ T5725] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 215.748618][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.748635][ T5725] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 215.748681][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.757866][ T5725] usb 7-1: config 0 descriptor?? [ 215.835537][ T31] audit: type=1400 audit(1791072624.181:753): avc: denied { mounton } for pid=10540 comm="syz.3.1913" path="/387/sys_mnt" dev="tmpfs" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 216.233634][ T5725] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x0 [ 216.233668][ T5725] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x4 [ 216.489238][T10552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1918'. [ 216.676370][ T31] audit: type=1400 audit(1791072625.021:754): avc: denied { setopt } for pid=10557 comm="syz.4.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 216.759060][ T31] audit: type=1400 audit(1791072625.101:755): avc: denied { write } for pid=10563 comm="syz.4.1925" name="cluster" dev="configfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.763436][T10566] o2hb: Heartbeat mode set to local [ 216.821457][T10569] input: syz0 as /devices/virtual/input/input43 [ 216.860267][ T5796] usb 7-1: USB disconnect, device number 26 [ 216.984511][ T968] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 217.097578][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'. [ 217.135210][ T968] usb 3-1: Using ep0 maxpacket: 8 [ 217.136832][ T968] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 217.139456][ T968] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 217.139480][ T968] usb 3-1: config 179 has no interface number 0 [ 217.139529][ T968] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 217.139557][ T968] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 217.139584][ T968] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 217.139610][ T968] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 217.139633][ T968] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 217.139711][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.150622][T10565] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 217.181110][T10575] team0: Port device team_slave_0 removed [ 217.374618][ T5723] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 217.374994][ T5723] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 217.400487][ T5703] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 217.409195][ T968] usb 6-1: USB disconnect, device number 19 [ 217.426536][ T5703] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 217.426778][ T5703] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 217.646433][ T5796] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input44 [ 217.671777][ T5703] usb 3-1: USB disconnect, device number 25 [ 217.672165][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 217.672220][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 217.992579][ T31] audit: type=1400 audit(1791072626.331:756): avc: denied { mount } for pid=10600 comm="syz.3.1940" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 218.094853][ T31] audit: type=1400 audit(1791072626.431:757): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 218.156816][T10606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.309266][T10616] netlink: 'syz.2.1948': attribute type 12 has an invalid length. [ 218.309288][T10616] netlink: 'syz.2.1948': attribute type 29 has an invalid length. [ 218.309301][T10616] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1948'. [ 218.309319][T10616] netlink: 'syz.2.1948': attribute type 1 has an invalid length. [ 218.309332][T10616] netlink: 'syz.2.1948': attribute type 2 has an invalid length. [ 218.309344][T10616] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1948'. [ 218.382151][ T31] audit: type=1400 audit(1791072626.721:758): avc: denied { watch watch_reads } for pid=10617 comm="syz.4.1949" path="/366" dev="tmpfs" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 218.554833][ T5703] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 218.717606][ T5703] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 218.720025][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.966804][ T31] audit: type=1400 audit(1791072627.311:759): avc: denied { setopt } for pid=10651 comm="syz.4.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 219.386059][ T5703] usb 6-1: NFC: NXP PN500 firmware ver 0.0 now attached [ 219.430658][T10659] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.461920][ T31] audit: type=1400 audit(1791072627.801:760): avc: denied { create } for pid=10666 comm="syz.2.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 219.472447][ T31] audit: type=1400 audit(1791072627.811:761): avc: denied { write } for pid=10666 comm="syz.2.1968" path="socket:[33971]" dev="sockfs" ino=33971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 219.575727][ C0] usb 6-1: NFC: Urb failure (status -71) [ 219.576242][ T5703] usb 6-1: NFC: Error on setting MAX_RETRIES config [ 219.577015][ T5703] pn533_usb 6-1:1.0: probe with driver pn533_usb failed with error -71 [ 219.613282][ T5703] usb 6-1: USB disconnect, device number 20 [ 219.691777][ T31] audit: type=1400 audit(1791072628.031:762): avc: denied { ioctl } for pid=10670 comm="syz.4.1971" path="socket:[33577]" dev="sockfs" ino=33577 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.739596][T10659] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.848909][T10659] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.880160][ T31] audit: type=1400 audit(1791072628.221:763): avc: denied { create } for pid=10680 comm="syz.2.1975" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.881072][ T31] audit: type=1400 audit(1791072628.221:764): avc: denied { read } for pid=10680 comm="syz.2.1975" name="file0" dev="tmpfs" ino=2582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.881383][ T31] audit: type=1400 audit(1791072628.221:765): avc: denied { open } for pid=10680 comm="syz.2.1975" path="/489/file0" dev="tmpfs" ino=2582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 220.060496][T10659] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.215341][ T43] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.215385][ T43] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.264441][ T43] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.264505][ T43] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.385671][ T5703] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 220.532265][T10697] syz_tun: entered allmulticast mode [ 220.533551][T10696] syz_tun: left allmulticast mode [ 220.545139][ T5703] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 220.558013][ T5703] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 220.558060][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.558086][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.558106][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 220.559099][ T5703] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 220.559123][ T5703] usb 3-1: Manufacturer: syz [ 220.561869][ T5703] usb 3-1: config 0 descriptor?? [ 220.944986][ T968] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 220.975655][ T5703] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 221.011282][ T5703] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 221.105796][ T968] usb 6-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 221.106761][ T968] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.106803][ T968] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.106824][ T968] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.106860][ T968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.283633][ T5607] usb 3-1: USB disconnect, device number 26 [ 221.349274][ T968] usb 6-1: dvb_usb_v2: 2nd usb_bulk_msg() failed=-22 [ 221.349362][ T968] dvb_usb_af9035 6-1:1.0: probe with driver dvb_usb_af9035 failed with error -22 [ 221.451999][T10714] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 221.567999][ T968] usb 6-1: USB disconnect, device number 21 [ 221.822182][T10728] bond0: no command found in slaves file - use +ifname or -ifname [ 222.374376][ T5794] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 222.415197][ T5723] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 222.528293][ T5794] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 222.531129][ T5794] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.531183][ T5794] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 222.533102][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.533125][ T5794] usb 6-1: Product: syz [ 222.533140][ T5794] usb 6-1: Manufacturer: syz [ 222.533154][ T5794] usb 6-1: SerialNumber: syz [ 222.606616][ T5723] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 222.608327][ T5723] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.610673][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.610699][ T5723] usb 3-1: Product: syz [ 222.610714][ T5723] usb 3-1: Manufacturer: syz [ 222.610729][ T5723] usb 3-1: SerialNumber: syz [ 222.864989][T10754] Invalid argument reading file caps for ./file0 [ 222.870238][ T5723] dvbdev: DVB: registering new adapter (DEC3000-s) [ 222.894091][ T5723] usb 3-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 223.071984][ T5723] usb 3-1: selecting invalid altsetting 8 [ 223.284103][ T968] usb 3-1: USB disconnect, device number 27 [ 223.479969][T10765] FAULT_INJECTION: forcing a failure. [ 223.479969][T10765] name failslab, interval 1, probability 0, space 0, times 0 [ 223.479992][T10765] CPU: 1 UID: 0 PID: 10765 Comm: syz.3.2012 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.480011][T10765] Tainted: [L]=SOFTLOCKUP [ 223.480015][T10765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 223.480023][T10765] Call Trace: [ 223.480026][T10765] [ 223.480031][T10765] dump_stack_lvl+0x100/0x190 [ 223.480052][T10765] should_fail_ex.cold+0x5/0xa [ 223.480071][T10765] should_failslab+0xc2/0x120 [ 223.480088][T10765] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 223.480105][T10765] ? __d_alloc+0x35/0xa50 [ 223.480127][T10765] __d_alloc+0x35/0xa50 [ 223.480146][T10765] d_alloc_pseudo+0x1c/0xc0 [ 223.480159][T10765] alloc_file_pseudo+0x118/0x290 [ 223.480178][T10765] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 223.480196][T10765] ? alloc_fd+0x471/0x7a0 [ 223.480224][T10765] sock_alloc_file+0x50/0x210 [ 223.480258][T10765] __sys_socket+0x1c0/0x260 [ 223.480280][T10765] ? fput+0x7c/0x100 [ 223.480295][T10765] ? __pfx___sys_socket+0x10/0x10 [ 223.480307][T10765] ? ksys_write+0x1ac/0x250 [ 223.480320][T10765] ? __pfx_ksys_write+0x10/0x10 [ 223.480336][T10765] __x64_sys_socket+0x72/0xb0 [ 223.480348][T10765] ? lockdep_hardirqs_on+0x7d/0x110 [ 223.480361][T10765] do_syscall_64+0x123/0x790 [ 223.480375][T10765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.480387][T10765] RIP: 0033:0x7f8d5fd9e159 [ 223.480398][T10765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.480409][T10765] RSP: 002b:00007f8d60d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 223.480421][T10765] RAX: ffffffffffffffda RBX: 00007f8d60025fa0 RCX: 00007f8d5fd9e159 [ 223.480428][T10765] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 223.480438][T10765] RBP: 00007f8d5fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 223.480453][T10765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.480460][T10765] R13: 00007f8d60026038 R14: 00007f8d60025fa0 R15: 00007fffbfe24578 [ 223.480477][T10765] [ 223.522148][ C1] usb 6-1: received EP1 urb->status = -71 [ 223.523483][ T5794] snd-usb-caiaq 6-1:1.0: unable to initialize device, too many streams. [ 223.523502][ T5794] snd-usb-caiaq 6-1:1.0: Unable to set up audio system (ret=-22) [ 223.523522][ T5794] usb 6-1: unable to init card! (ret=-22) [ 223.523930][ T5794] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 223.532126][ T5794] usb 6-1: USB disconnect, device number 22 [ 223.710745][T10770] jffs2: notice: (10770) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 223.766641][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 223.766659][ T31] audit: type=1400 audit(1791072632.101:768): avc: denied { write } for pid=10768 comm="syz.6.2014" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.766699][ T31] audit: type=1400 audit(1791072632.101:769): avc: denied { create } for pid=10768 comm="syz.6.2014" name="test2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 223.829315][ T31] audit: type=1400 audit(1791072632.171:770): avc: denied { read write open } for pid=10768 comm="syz.6.2014" path="/305/mnt/test2" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 224.167083][ T968] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 224.315089][ T968] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.316214][ T968] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.316264][ T968] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.316291][ T968] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 224.316327][ T968] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.318221][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.318245][ T968] usb 3-1: Product: syz [ 224.318260][ T968] usb 3-1: Manufacturer: syz [ 224.318275][ T968] usb 3-1: SerialNumber: syz [ 224.351364][T10779] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 224.362640][ T968] cdc_mbim 3-1:1.0: skipping garbage [ 224.428271][T10795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.621325][ T968] cdc_mbim 3-1:1.0: bind() failure [ 224.638611][ T968] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 224.638658][ T968] cdc_ncm 3-1:1.1: bind() failure [ 224.658506][ T968] usb 3-1: USB disconnect, device number 28 [ 224.698514][ T31] audit: type=1400 audit(1791072633.041:771): avc: denied { setopt } for pid=10807 comm="syz.3.2031" lport=54204 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 225.034391][T10820] input: syz0 as /devices/virtual/input/input45 [ 225.323134][T10836] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 225.323864][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2046'. [ 225.406762][T10844] FAULT_INJECTION: forcing a failure. [ 225.406762][T10844] name failslab, interval 1, probability 0, space 0, times 0 [ 225.406804][T10844] CPU: 0 UID: 0 PID: 10844 Comm: syz.6.2049 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.406834][T10844] Tainted: [L]=SOFTLOCKUP [ 225.406843][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 225.406855][T10844] Call Trace: [ 225.406862][T10844] [ 225.406870][T10844] dump_stack_lvl+0x100/0x190 [ 225.406906][T10844] should_fail_ex.cold+0x5/0xa [ 225.406935][T10844] should_failslab+0xc2/0x120 [ 225.406963][T10844] __kmalloc_node_noprof+0xff/0x880 [ 225.406996][T10844] ? __get_vm_area_node+0x1ff/0x350 [ 225.407032][T10844] ? __get_vm_area_node+0x22b/0x350 [ 225.407059][T10844] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 225.407095][T10844] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 225.407139][T10844] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 225.407179][T10844] ? find_held_lock+0x2b/0x80 [ 225.407211][T10844] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.407238][T10844] ? avc_has_perm_noaudit+0x11e/0x470 [ 225.407278][T10844] ? avc_has_perm_noaudit+0x145/0x470 [ 225.407313][T10844] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 225.407339][T10844] __vmalloc_node_noprof+0xad/0xf0 [ 225.407367][T10844] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 225.407403][T10844] __vmalloc_noprof+0xa3/0x120 [ 225.407445][T10844] ? __pfx___vmalloc_noprof+0x10/0x10 [ 225.407478][T10844] ? rcu_is_watching+0x13/0xc0 [ 225.407505][T10844] ? cap_capable+0x107/0x430 [ 225.407530][T10844] bpf_prog_alloc_no_stats+0x59/0x690 [ 225.407556][T10844] ? security_capable+0x80/0x260 [ 225.407584][T10844] bpf_prog_alloc+0x3b/0x200 [ 225.407609][T10844] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.407638][T10844] bpf_prog_load+0x1247/0x2a70 [ 225.407670][T10844] ? __pfx_bpf_prog_load+0x10/0x10 [ 225.407720][T10844] __sys_bpf+0x1f46/0x4a30 [ 225.407747][T10844] ? __pfx___sys_bpf+0x10/0x10 [ 225.407767][T10844] ? find_held_lock+0x2b/0x80 [ 225.407807][T10844] ? futex_wake+0x4ea/0x5e0 [ 225.407849][T10844] ? rcu_read_lock_any_held+0x6a/0x90 [ 225.407878][T10844] ? find_held_lock+0x2b/0x80 [ 225.407903][T10844] ? ksys_write+0x190/0x250 [ 225.407922][T10844] ? ksys_write+0x190/0x250 [ 225.407966][T10844] ? __x64_sys_futex+0x34f/0x4d0 [ 225.407996][T10844] ? __x64_sys_futex+0x358/0x4d0 [ 225.408024][T10844] ? xfd_validate_state+0x129/0x190 [ 225.408051][T10844] ? __x64_sys_bpf+0xce/0x140 [ 225.408078][T10844] __x64_sys_bpf+0xce/0x140 [ 225.408101][T10844] ? do_syscall_64+0xae/0x790 [ 225.408127][T10844] do_syscall_64+0x123/0x790 [ 225.408152][T10844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.408173][T10844] RIP: 0033:0x7febc619e159 [ 225.408192][T10844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.408212][T10844] RSP: 002b:00007febc714a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.408232][T10844] RAX: ffffffffffffffda RBX: 00007febc6425fa0 RCX: 00007febc619e159 [ 225.408245][T10844] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000005 [ 225.408257][T10844] RBP: 00007febc623506b R08: 0000000000000000 R09: 0000000000000000 [ 225.408268][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.408280][T10844] R13: 00007febc6426038 R14: 00007febc6425fa0 R15: 00007ffc48876de8 [ 225.408305][T10844] [ 225.408360][T10844] syz.6.2049: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 225.408425][T10844] CPU: 0 UID: 0 PID: 10844 Comm: syz.6.2049 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.408454][T10844] Tainted: [L]=SOFTLOCKUP [ 225.408461][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 225.408474][T10844] Call Trace: [ 225.408481][T10844] [ 225.408489][T10844] dump_stack_lvl+0x100/0x190 [ 225.408530][T10844] warn_alloc.cold+0x9e/0xb2 [ 225.408556][T10844] ? __pfx_warn_alloc+0x10/0x10 [ 225.408578][T10844] ? dump_stack_lvl+0x17c/0x190 [ 225.408610][T10844] ? rcu_is_watching+0x13/0xc0 [ 225.408641][T10844] ? __kasan_kmalloc+0x8a/0xb0 [ 225.408667][T10844] ? __kmalloc_node_noprof+0x360/0x880 [ 225.408689][T10844] ? __get_vm_area_node+0x1ff/0x350 [ 225.408715][T10844] ? __get_vm_area_node+0x22b/0x350 [ 225.408740][T10844] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 225.408787][T10844] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 225.408830][T10844] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 225.408864][T10844] ? find_held_lock+0x2b/0x80 [ 225.408893][T10844] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.408921][T10844] ? avc_has_perm_noaudit+0x11e/0x470 [ 225.408958][T10844] ? avc_has_perm_noaudit+0x145/0x470 [ 225.408990][T10844] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 225.409016][T10844] __vmalloc_node_noprof+0xad/0xf0 [ 225.409044][T10844] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 225.409075][T10844] __vmalloc_noprof+0xa3/0x120 [ 225.409103][T10844] ? __pfx___vmalloc_noprof+0x10/0x10 [ 225.409142][T10844] ? rcu_is_watching+0x13/0xc0 [ 225.409170][T10844] ? cap_capable+0x107/0x430 [ 225.409195][T10844] bpf_prog_alloc_no_stats+0x59/0x690 [ 225.409223][T10844] ? security_capable+0x80/0x260 [ 225.409246][T10844] bpf_prog_alloc+0x3b/0x200 [ 225.409270][T10844] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.409297][T10844] bpf_prog_load+0x1247/0x2a70 [ 225.409331][T10844] ? __pfx_bpf_prog_load+0x10/0x10 [ 225.409385][T10844] __sys_bpf+0x1f46/0x4a30 [ 225.409414][T10844] ? __pfx___sys_bpf+0x10/0x10 [ 225.409434][T10844] ? find_held_lock+0x2b/0x80 [ 225.409462][T10844] ? futex_wake+0x4ea/0x5e0 [ 225.409504][T10844] ? rcu_read_lock_any_held+0x6a/0x90 [ 225.409533][T10844] ? find_held_lock+0x2b/0x80 [ 225.409561][T10844] ? ksys_write+0x190/0x250 [ 225.409584][T10844] ? ksys_write+0x190/0x250 [ 225.409624][T10844] ? __x64_sys_futex+0x34f/0x4d0 [ 225.409651][T10844] ? __x64_sys_futex+0x358/0x4d0 [ 225.409683][T10844] ? xfd_validate_state+0x129/0x190 [ 225.409708][T10844] ? __x64_sys_bpf+0xce/0x140 [ 225.409727][T10844] __x64_sys_bpf+0xce/0x140 [ 225.409748][T10844] ? do_syscall_64+0xae/0x790 [ 225.409779][T10844] do_syscall_64+0x123/0x790 [ 225.409806][T10844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.409828][T10844] RIP: 0033:0x7febc619e159 [ 225.409846][T10844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.409866][T10844] RSP: 002b:00007febc714a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.409887][T10844] RAX: ffffffffffffffda RBX: 00007febc6425fa0 RCX: 00007febc619e159 [ 225.409901][T10844] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000005 [ 225.409913][T10844] RBP: 00007febc623506b R08: 0000000000000000 R09: 0000000000000000 [ 225.409926][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.409938][T10844] R13: 00007febc6426038 R14: 00007febc6425fa0 R15: 00007ffc48876de8 [ 225.409967][T10844] [ 225.410003][T10844] Mem-Info: [ 225.410013][T10844] active_anon:15292 inactive_anon:8 isolated_anon:0 [ 225.410013][T10844] active_file:190 inactive_file:43707 isolated_file:0 [ 225.410013][T10844] unevictable:0 dirty:580 writeback:0 [ 225.410013][T10844] slab_reclaimable:12706 slab_unreclaimable:109958 [ 225.410013][T10844] mapped:40798 shmem:2578 pagetables:1767 [ 225.410013][T10844] sec_pagetables:1 bounce:0 [ 225.410013][T10844] kernel_misc_reclaimable:0 [ 225.410013][T10844] free:992244 free_pcp:10073 free_cma:0 [ 225.410067][T10844] Node 0 active_anon:61168kB inactive_anon:32kB active_file:760kB inactive_file:174620kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163192kB dirty:2320kB writeback:0kB shmem:10312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13868kB pagetables:6948kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 225.410123][T10844] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 225.410171][T10844] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.410253][T10844] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 225.410297][T10844] Node 0 DMA32 free:1053652kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:61168kB inactive_anon:32kB active_file:760kB inactive_file:174620kB unevictable:0kB writepending:2320kB zspages:752kB present:3129332kB managed:2530356kB mlocked:0kB bounce:0kB free_pcp:40288kB local_pcp:19816kB free_cma:0kB [ 225.410355][T10844] lowmem_reserve[]: 0 0 0 0 0 [ 225.410384][T10844] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:64kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.410439][T10844] lowmem_reserve[]: 0 0 0 0 0 [ 225.410473][T10844] Node 1 Normal free:2899964kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.410526][T10844] lowmem_reserve[]: 0 0 0 0 0 [ 225.410557][T10844] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 225.410660][T10844] Node 0 DMA32: 1072*4kB (UME) 716*8kB (UME) 501*16kB (UME) 136*32kB (UM) 99*64kB (UME) 95*128kB (UME) 72*256kB (UME) 26*512kB (UM) 14*1024kB (UME) 4*2048kB (ME) 234*4096kB (UME) = 1053616kB [ 225.410807][T10844] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 225.410898][T10844] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 6*16kB (UM) 7*32kB (UM) 4*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 707*4096kB (M) = 2899964kB [ 225.411045][T10844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.411063][T10844] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.411091][T10844] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 225.411112][T10844] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.411131][T10844] 46479 total pagecache pages [ 225.411141][T10844] 11 pages in swap cache [ 225.411150][T10844] Free swap = 124404kB [ 225.411160][T10844] Total swap = 124996kB [ 225.411171][T10844] 2097051 pages RAM [ 225.411177][T10844] 0 pages HighMem/MovableOnly [ 225.411185][T10844] 432830 pages reserved [ 225.411191][T10844] 0 pages cma reserved [ 225.805579][ T31] audit: type=1400 audit(1791072634.131:772): avc: denied { mounton } for pid=10855 comm="syz.3.2053" path="/proc/952/cgroup" dev="proc" ino=35199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 225.805625][ T31] audit: type=1400 audit(1791072634.151:773): avc: denied { remount } for pid=10855 comm="syz.3.2053" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 226.603008][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2061'. [ 226.713501][T10878] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 226.778948][T10882] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2064'. [ 226.835599][T10886] cramfs: checking physical address 0x0000000144ac0000 for linear cramfs image [ 226.835921][T10886] cramfs: wrong magic [ 226.868897][T10886] cramfs: wrong magic [ 226.995521][ T31] audit: type=1400 audit(1791072635.341:774): avc: denied { create } for pid=10896 comm="syz.5.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.081652][ T31] audit: type=1400 audit(1791072635.421:775): avc: denied { relabelfrom } for pid=10899 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 227.082308][ T31] audit: type=1400 audit(1791072635.421:776): avc: denied { relabelto } for pid=10899 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 227.344806][T10908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.446108][ T968] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 227.513314][T10914] FAULT_INJECTION: forcing a failure. [ 227.513314][T10914] name failslab, interval 1, probability 0, space 0, times 0 [ 227.513347][T10914] CPU: 1 UID: 0 PID: 10914 Comm: syz.3.2078 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.513378][T10914] Tainted: [L]=SOFTLOCKUP [ 227.513385][T10914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 227.513401][T10914] Call Trace: [ 227.513408][T10914] [ 227.513417][T10914] dump_stack_lvl+0x100/0x190 [ 227.513453][T10914] should_fail_ex.cold+0x5/0xa [ 227.513485][T10914] should_failslab+0xc2/0x120 [ 227.513514][T10914] __kmalloc_cache_noprof+0x91/0x6d0 [ 227.513534][T10914] ? __kasan_kmalloc+0xaa/0xb0 [ 227.513558][T10914] ? nci_allocate_device+0x105/0x410 [ 227.513594][T10914] nci_allocate_device+0x105/0x410 [ 227.513628][T10914] virtual_ncidev_open+0x6f/0x220 [ 227.513649][T10914] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 227.513669][T10914] misc_open+0x26d/0x450 [ 227.513695][T10914] ? __pfx_misc_open+0x10/0x10 [ 227.513720][T10914] chrdev_open+0x234/0x6a0 [ 227.513748][T10914] ? __pfx_chrdev_open+0x10/0x10 [ 227.513777][T10914] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 227.513805][T10914] do_dentry_open+0x6ab/0x14d0 [ 227.513829][T10914] ? __pfx_chrdev_open+0x10/0x10 [ 227.513862][T10914] vfs_open+0x82/0x3f0 [ 227.513894][T10914] path_openat+0x19fa/0x2440 [ 227.513927][T10914] ? __pfx_path_openat+0x10/0x10 [ 227.513963][T10914] do_file_open+0x20e/0x430 [ 227.513993][T10914] ? __pfx_do_file_open+0x10/0x10 [ 227.514043][T10914] ? _raw_spin_unlock+0x28/0x50 [ 227.514080][T10914] ? alloc_fd+0x471/0x7a0 [ 227.514120][T10914] do_sys_openat2+0x10f/0x1e0 [ 227.514152][T10914] ? __pfx_do_sys_openat2+0x10/0x10 [ 227.514185][T10914] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 227.514214][T10914] __x64_sys_openat+0x12d/0x210 [ 227.514243][T10914] ? __pfx___x64_sys_openat+0x10/0x10 [ 227.514268][T10914] ? ksys_write+0x1ac/0x250 [ 227.514303][T10914] do_syscall_64+0x123/0x790 [ 227.514328][T10914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.514350][T10914] RIP: 0033:0x7f8d5fd9e159 [ 227.514368][T10914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.514389][T10914] RSP: 002b:00007f8d60d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 227.514410][T10914] RAX: ffffffffffffffda RBX: 00007f8d60025fa0 RCX: 00007f8d5fd9e159 [ 227.514425][T10914] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 227.514438][T10914] RBP: 00007f8d5fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 227.514451][T10914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.514463][T10914] R13: 00007f8d60026038 R14: 00007f8d60025fa0 R15: 00007fffbfe24578 [ 227.514494][T10914] [ 227.699878][ T968] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 227.722183][ T968] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 227.722211][ T968] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 227.722230][ T968] usb 7-1: config 4 has no interface number 0 [ 227.722265][ T968] usb 7-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 227.818191][ T968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.818218][ T968] usb 7-1: Product: syz [ 227.818232][ T968] usb 7-1: Manufacturer: syz [ 227.818246][ T968] usb 7-1: SerialNumber: syz [ 227.895552][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2080'. [ 227.903032][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2080'. [ 228.312332][ T968] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 228.332471][ T968] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 228.333367][ T968] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 228.333414][ T968] usb 7-1: media controller created [ 228.360247][ T968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.480922][ T968] DVB: Unable to find symbol dib7000p_attach() [ 228.480938][ T968] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 228.576141][ T968] rc_core: IR keymap rc-dib0700-rc5 not found [ 228.576158][ T968] Registered IR keymap rc-empty [ 228.581987][ T968] dvb-usb: could not initialize remote control. [ 228.582001][ T968] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 228.623980][ T968] usb 7-1: USB disconnect, device number 27 [ 228.675320][ T968] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 228.877609][T10943] ip_tables: iptables: counters copy to user failed while replacing table [ 229.075011][ T31] audit: type=1400 audit(1791072637.421:777): avc: denied { read } for pid=10954 comm="syz.3.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.116927][T10959] overlayfs: failed to set uuid (398/file0, err=-1); falling back to uuid=null. [ 229.116964][T10959] overlayfs: failed to verify upper root origin [ 229.309435][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 229.542852][T10976] Line length is too long: Should be less than 4094 [ 229.784390][ T5794] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 229.937086][ T5794] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 229.938205][ T5794] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 229.938231][ T5794] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 229.941633][ T5794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.941658][ T5794] usb 7-1: Product: syz [ 229.941672][ T5794] usb 7-1: Manufacturer: syz [ 229.941687][ T5794] usb 7-1: SerialNumber: syz [ 230.168072][ T5794] usb 7-1: Limiting number of CPorts to U8_MAX [ 230.441843][T10982] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 230.468260][T11008] FAULT_INJECTION: forcing a failure. [ 230.468260][T11008] name failslab, interval 1, probability 0, space 0, times 0 [ 230.468330][T11008] CPU: 1 UID: 0 PID: 11008 Comm: syz.2.2120 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.468359][T11008] Tainted: [L]=SOFTLOCKUP [ 230.468366][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 230.468378][T11008] Call Trace: [ 230.468385][T11008] [ 230.468393][T11008] dump_stack_lvl+0x100/0x190 [ 230.468433][T11008] should_fail_ex.cold+0x5/0xa [ 230.468464][T11008] should_failslab+0xc2/0x120 [ 230.468495][T11008] __kmalloc_noprof+0xfc/0x840 [ 230.468521][T11008] ? iovec_from_user+0x8d/0x140 [ 230.468552][T11008] iovec_from_user+0x8d/0x140 [ 230.468580][T11008] __import_iovec+0x81/0x640 [ 230.468611][T11008] import_iovec+0x101/0x130 [ 230.468640][T11008] vfs_readv+0x19e/0x8d0 [ 230.468668][T11008] ? __pfx_vfs_readv+0x10/0x10 [ 230.468694][T11008] ? lock_acquire+0x1d1/0x380 [ 230.468714][T11008] ? __fget_files+0x34/0x3d0 [ 230.468746][T11008] ? __fget_files+0x21f/0x3d0 [ 230.468773][T11008] ? do_preadv+0x1ac/0x270 [ 230.468790][T11008] do_preadv+0x1ac/0x270 [ 230.468811][T11008] ? __pfx_do_preadv+0x10/0x10 [ 230.468840][T11008] do_syscall_64+0x123/0x790 [ 230.468873][T11008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.468893][T11008] RIP: 0033:0x7f0ce539e159 [ 230.468910][T11008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.468930][T11008] RSP: 002b:00007f0ce61b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 230.468949][T11008] RAX: ffffffffffffffda RBX: 00007f0ce5625fa0 RCX: 00007f0ce539e159 [ 230.468962][T11008] RDX: 0000000000000009 RSI: 0000200000003fc0 RDI: 0000000000000003 [ 230.468973][T11008] RBP: 00007f0ce543506b R08: 0000000000000002 R09: 0000000000000000 [ 230.468985][T11008] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 230.468995][T11008] R13: 00007f0ce5626038 R14: 00007f0ce5625fa0 R15: 00007ffc2e10caa8 [ 230.469020][T11008] [ 230.563644][T11012] batman_adv: batadv0: Adding interface: syz_tun [ 230.563660][T11012] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.563688][T11012] batman_adv: batadv0: Interface activated: syz_tun [ 230.776870][ T5794] usb 7-1: failed to send ARPC request 1: -71 [ 230.777323][ T5794] usb 7-1: failed to execute ARPC: -71 [ 230.777336][ T5794] usb 7-1: failed to set connected state for cport 0: -71 [ 230.777438][ T5794] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 230.777833][ T5794] usb 7-1: failed to send ARPC request 3: -71 [ 230.777996][ T5794] usb 7-1: failed to execute ARPC: -71 [ 230.778006][ T5794] usb 7-1: failed to clear cport 0: -71 [ 230.778016][ T5794] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 230.867956][ T5794] es2_ap_driver 7-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 230.873585][ T5794] usb 7-1: USB disconnect, device number 28 [ 231.014346][ T5607] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 231.089262][T11029] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2130'. [ 231.092388][T11029] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.092896][T11029] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.102066][T11029] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2130'. [ 231.164503][ T5607] usb 4-1: Using ep0 maxpacket: 32 [ 231.168326][ T5607] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 231.171679][ T5607] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 231.171709][ T5607] usb 4-1: config 0 interface 0 has no altsetting 0 [ 231.171747][ T5607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.200635][ T5607] usb 4-1: config 0 descriptor?? [ 231.714359][ T5821] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 231.865077][ T5821] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 231.866030][ T5821] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.866059][ T5821] usb 7-1: config 0 interface 0 has no altsetting 0 [ 231.866089][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.881929][ T5821] usb 7-1: config 0 descriptor?? [ 232.004433][ T5607] corsair-cpro 0003:1B1C:0C10.0014: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 232.116950][ T31] audit: type=1400 audit(1791072640.461:778): avc: denied { connect } for pid=11061 comm="syz.2.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.121370][ T31] audit: type=1400 audit(1791072640.461:779): avc: denied { listen } for pid=11061 comm="syz.2.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.197811][ T5607] corsair-cpro 0003:1B1C:0C10.0014: probe with driver corsair-cpro failed with error -71 [ 232.252193][T11067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.324114][ T5821] input: HID 13ec:0006 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:13EC:0006.0015/input/input47 [ 232.348440][ T5821] zydacron 0003:13EC:0006.0015: input,hidraw0: USB HID v36.2c Joystick [HID 13ec:0006] on usb-dummy_hcd.6-1/input0 [ 232.474871][ T5794] usb 4-1: USB disconnect, device number 27 [ 232.590022][ T5821] usb 7-1: USB disconnect, device number 29 [ 232.706613][T11080] netlink: 'syz.2.2149': attribute type 4 has an invalid length. [ 232.754138][T11082] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 232.758006][ T31] audit: type=1400 audit(1791072641.101:780): avc: denied { relabelto } for pid=11081 comm="syz.5.2151" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 232.813648][T11086] trusted_key: syz.5.2153 sent an empty control message without MSG_MORE. [ 233.024482][ T5794] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 233.138604][T11092] block nbd3: shutting down sockets [ 233.175218][ T5794] usb 3-1: Using ep0 maxpacket: 32 [ 233.178950][ T5794] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 233.182358][ T5794] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 233.182386][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 233.182411][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 233.182433][ T5794] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.182456][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.182479][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.185261][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.185284][ T5794] usb 3-1: Product: syz [ 233.185298][ T5794] usb 3-1: Manufacturer: syz [ 233.185312][ T5794] usb 3-1: SerialNumber: syz [ 233.193083][ T5794] usb 3-1: config 0 descriptor?? [ 233.805044][ T31] audit: type=1400 audit(1791072642.151:781): avc: denied { remount } for pid=11118 comm="syz.5.2166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 233.902465][ T31] audit: type=1400 audit(1791072642.241:782): avc: denied { read } for pid=11123 comm="syz.3.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 234.317576][T11139] device-mapper: ioctl: populate_table: no targets specified [ 234.487358][T11144] type: 2282218472 invalid [ 234.514041][T11142] syz.5.2176 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 234.514071][T11142] CPU: 0 UID: 0 PID: 11142 Comm: syz.5.2176 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.514089][T11142] Tainted: [L]=SOFTLOCKUP [ 234.514093][T11142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 234.514100][T11142] Call Trace: [ 234.514105][T11142] [ 234.514110][T11142] dump_stack_lvl+0x100/0x190 [ 234.514132][T11142] dump_header+0xfb/0x606 [ 234.514147][T11142] out_of_memory.cold+0xd/0x170 [ 234.514164][T11142] ? __pfx_out_of_memory+0x10/0x10 [ 234.514186][T11142] mem_cgroup_out_of_memory+0xc6/0x130 [ 234.514204][T11142] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 234.514225][T11142] ? find_held_lock+0x2b/0x80 [ 234.514259][T11142] ? do_raw_spin_unlock+0x145/0x1e0 [ 234.514282][T11142] ? _raw_spin_unlock+0x28/0x50 [ 234.514315][T11142] try_charge_memcg+0x783/0xf60 [ 234.514340][T11142] ? __pfx_try_charge_memcg+0x10/0x10 [ 234.514359][T11142] ? find_held_lock+0x2b/0x80 [ 234.514386][T11142] ? rcu_read_unlock+0x17/0x60 [ 234.514405][T11142] ? rcu_read_unlock+0x17/0x60 [ 234.514438][T11142] obj_cgroup_charge_pages+0x2b/0x1f0 [ 234.514462][T11142] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 234.514494][T11142] ? kasan_unpoison+0x27/0x60 [ 234.514520][T11142] __kmalloc_cache_noprof+0x52a/0x6d0 [ 234.514541][T11142] ? mem_cgroup_css_alloc+0x11f/0x1d10 [ 234.514570][T11142] ? mem_cgroup_css_alloc+0x8cd/0x1d10 [ 234.514606][T11142] mem_cgroup_css_alloc+0x8cd/0x1d10 [ 234.514642][T11142] cgroup_apply_control_enable+0x602/0xdd0 [ 234.514678][T11142] cgroup_mkdir+0x57f/0x1330 [ 234.514707][T11142] ? __pfx_cgroup_mkdir+0x10/0x10 [ 234.514731][T11142] kernfs_iop_mkdir+0x111/0x190 [ 234.514751][T11142] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 234.514778][T11142] vfs_mkdir+0x364/0x850 [ 234.514802][T11142] filename_mkdirat+0x48b/0x5e0 [ 234.514833][T11142] ? __pfx_filename_mkdirat+0x10/0x10 [ 234.514870][T11142] ? strncpy_from_user+0x19d/0x2d0 [ 234.514900][T11142] ? do_getname+0x191/0x390 [ 234.514923][T11142] __x64_sys_mkdirat+0x89/0xc0 [ 234.514952][T11142] do_syscall_64+0x123/0x790 [ 234.514976][T11142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.514996][T11142] RIP: 0033:0x7f4e2cf9e159 [ 234.515015][T11142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.515033][T11142] RSP: 002b:00007f4e2ddee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 234.515054][T11142] RAX: ffffffffffffffda RBX: 00007f4e2d225fa0 RCX: 00007f4e2cf9e159 [ 234.515066][T11142] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 234.515078][T11142] RBP: 00007f4e2d03506b R08: 0000000000000000 R09: 0000000000000000 [ 234.515088][T11142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.515100][T11142] R13: 00007f4e2d226038 R14: 00007f4e2d225fa0 R15: 00007ffe07047e78 [ 234.515130][T11142] [ 234.520589][T11142] memory: usage 0kB, limit 0kB, failcnt 19 [ 234.520605][T11142] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 234.520618][T11142] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 234.520630][T11142] Memory cgroup stats for /syz5/test: [ 234.522082][T11142] cache 0 [ 234.522093][T11142] rss 0 [ 234.522100][T11142] rss_huge 0 [ 234.522107][T11142] shmem 0 [ 234.522113][T11142] mapped_file 0 [ 234.522120][T11142] dirty 0 [ 234.522126][T11142] writeback 0 [ 234.522133][T11142] workingset_refault_anon 0 [ 234.522141][T11142] workingset_refault_file 0 [ 234.522149][T11142] swap 0 [ 234.522155][T11142] swapcached 0 [ 234.522163][T11142] pgpgin 0 [ 234.522169][T11142] pgpgout 0 [ 234.522177][T11142] pgfault 0 [ 234.522184][T11142] pgmajfault 0 [ 234.522191][T11142] inactive_anon 0 [ 234.522198][T11142] active_anon 0 [ 234.522225][T11142] inactive_file 0 [ 234.522233][T11142] active_file 0 [ 234.522240][T11142] unevictable 0 [ 234.522247][T11142] hierarchical_memory_limit 0 [ 234.522255][T11142] hierarchical_memsw_limit 9223372036854771712 [ 234.522263][T11142] total_cache 0 [ 234.522271][T11142] total_rss 0 [ 234.522277][T11142] total_rss_huge 0 [ 234.522284][T11142] total_shmem 0 [ 234.522291][T11142] total_mapped_file 0 [ 234.522299][T11142] total_dirty 0 [ 234.522306][T11142] total_writeback 0 [ 234.522313][T11142] total_workingset_refault_anon 0 [ 234.522322][T11142] total_workingset_refault_file 0 [ 234.522330][T11142] total_swap 0 [ 234.522338][T11142] total_swapcached 0 [ 234.522345][T11142] total_pgpgin 0 [ 234.522352][T11142] total_pgpgout 0 [ 234.522359][T11142] total_pgfault 0 [ 234.522366][T11142] total_pgmajfault 0 [ 234.522372][T11142] total_inactive_anon 0 [ 234.522380][T11142] total_active_anon 0 [ 234.522386][T11142] total_inactive_file 0 [ 234.522394][T11142] total_active_file 0 [ 234.522401][T11142] total_unevictable 0 [ 234.522409][T11142] anon_cost 0 [ 234.522415][T11142] file_cost 0 [ 234.522423][T11142] Out of memory and no killable processes... [ 235.119510][T11153] gre0: entered allmulticast mode [ 235.120014][T11153] gre0: left allmulticast mode [ 235.674352][ T974] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 235.695257][T11170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.725033][ T5821] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 235.742262][T11172] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2189'. [ 235.773803][ T5607] usb 3-1: USB disconnect, device number 29 [ 235.826133][ T974] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 235.827084][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.827113][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.827141][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.829881][ T974] usb 6-1: config 0 descriptor?? [ 235.895110][ T5821] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 235.896344][ T5821] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 235.896372][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 235.896397][ T5821] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 235.898977][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.899000][ T5821] usb 4-1: Product: syz [ 235.899015][ T5821] usb 4-1: Manufacturer: syz [ 235.899028][ T5821] usb 4-1: SerialNumber: syz [ 235.935279][ T31] audit: type=1400 audit(1791072644.271:783): avc: denied { mount } for pid=11179 comm="syz.2.2193" name="/" dev="hugetlbfs" ino=37086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 235.935331][ T31] audit: type=1400 audit(1791072644.271:784): avc: denied { mounton } for pid=11179 comm="syz.2.2193" path="/" dev="hugetlbfs" ino=37086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 235.955524][ T31] audit: type=1400 audit(1791072644.291:785): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 235.958979][T11166] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 235.959076][T11166] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 236.053681][ T5821] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 236.053733][ T5821] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 236.053772][ T5821] usbserial_generic 4-1:1.0: generic converter detected [ 236.090498][ T5821] usb 4-1: generic converter now attached to ttyUSB0 [ 236.106004][ T5794] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 236.201088][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 236.201664][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 236.204370][ T5725] usb 4-1: USB disconnect, device number 28 [ 236.209978][ T5725] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 236.210655][ T5725] usbserial_generic 4-1:1.0: device disconnected [ 236.250792][ T31] audit: type=1400 audit(1791072644.591:786): avc: denied { bind } for pid=11187 comm="syz.2.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 236.251016][ T31] audit: type=1400 audit(1791072644.591:787): avc: denied { node_bind } for pid=11187 comm="syz.2.2197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 236.276616][ T5794] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 236.306769][ T5794] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.306799][ T5794] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 236.306836][ T5794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.337760][ T974] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 236.337791][ T974] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 236.337815][ T974] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 236.337837][ T974] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 236.337869][ T974] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 236.399662][ T974] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 236.426437][ T5794] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 236.531412][ T5725] usb 6-1: USB disconnect, device number 23 [ 237.085353][ T5725] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 237.256273][ T5725] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 237.257958][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.257989][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.258055][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 237.261798][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.261852][ T5725] usb 4-1: Product: syz [ 237.261867][ T5725] usb 4-1: Manufacturer: syz [ 237.261882][ T5725] usb 4-1: SerialNumber: syz [ 237.267012][ T5725] usb 4-1: config 0 descriptor?? [ 237.271582][T11208] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 237.356971][ T5725] rc_core: IR keymap rc-streamzap not found [ 237.356989][ T5725] Registered IR keymap rc-empty [ 237.362504][ T5725] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 237.367511][ T5725] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 237.513506][ T5794] usb 4-1: USB disconnect, device number 29 [ 238.020095][ T5794] usb 7-1: USB disconnect, device number 30 [ 238.031294][ T5794] idmouse 7-1:1.0: disconnected [ 238.044461][ T5821] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 238.195220][ T5821] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 238.196146][ T5821] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 238.196164][ T5821] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 238.197730][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.197745][ T5821] usb 6-1: Product: syz [ 238.197753][ T5821] usb 6-1: Manufacturer: syz [ 238.197761][ T5821] usb 6-1: SerialNumber: syz [ 238.199585][ T5821] usb 6-1: config 0 descriptor?? [ 238.200157][T11230] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 238.200281][T11230] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 238.404029][T11230] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 238.404124][T11230] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 238.563067][ T31] audit: type=1326 audit(1791072646.901:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.6.2218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc619e159 code=0x7ffc0000 [ 238.564766][ T31] audit: type=1326 audit(1791072646.901:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.6.2218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc619e159 code=0x7ffc0000 [ 238.564811][ T31] audit: type=1326 audit(1791072646.901:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.6.2218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc619e159 code=0x7ffc0000 [ 238.564869][ T31] audit: type=1326 audit(1791072646.901:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.6.2218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7febc619e159 code=0x7ffc0000 [ 238.564907][ T31] audit: type=1326 audit(1791072646.901:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.6.2218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc619e159 code=0x7ffc0000 [ 238.853492][ T5821] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 239.259450][ T5821] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 239.269092][ T5821] usb 6-1: USB disconnect, device number 24 [ 239.283620][ T5621] udevd[5621]: setting mode of /dev/bus/usb/006/024 to 020664 failed: No such file or directory [ 239.283725][ T5621] udevd[5621]: setting owner of /dev/bus/usb/006/024 to uid=0, gid=0 failed: No such file or directory [ 239.284382][ T968] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 239.434914][ T968] usb 4-1: Using ep0 maxpacket: 32 [ 239.435637][ T968] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 239.436754][ T968] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 239.438649][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.438673][ T968] usb 4-1: Product: syz [ 239.438688][ T968] usb 4-1: Manufacturer: syz [ 239.438703][ T968] usb 4-1: SerialNumber: syz [ 239.441354][ T968] usb 4-1: config 0 descriptor?? [ 239.442192][T11241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 239.443669][ T968] hub 4-1:0.0: bad descriptor, ignoring hub [ 239.443692][ T968] hub 4-1:0.0: probe with driver hub failed with error -5 [ 239.453703][ T968] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input49 [ 239.799339][ T5821] usb 4-1: USB disconnect, device number 30 [ 239.799440][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 239.898111][T11257] ip_vti0: Master is either lo or non-ether device [ 240.101137][T11264] o2cb: This node has not been configured. [ 240.101151][T11264] o2cb: Cluster check failed. Fix errors before retrying. [ 240.101175][T11264] (syz.5.2228,11264,0):user_dlm_register:674 ERROR: status = -22 [ 240.101230][T11264] (syz.5.2228,11264,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 240.161799][T11270] device-mapper: table: 248:3: multipath: not enough priority group arguments (-EINVAL) [ 240.161829][T11270] device-mapper: ioctl: error adding target to table [ 240.259818][T11277] ublk4: read batch cmd buffer failed [ 240.259917][T11277] ublk4: read batch cmd buffer failed [ 240.279534][T11277] ublk4: read batch cmd buffer failed [ 240.279631][T11277] ublk4: read batch cmd buffer failed [ 241.004403][ T5725] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 241.174368][ T5725] usb 6-1: Using ep0 maxpacket: 32 [ 241.175091][ T5725] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 241.176296][ T5725] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 241.176320][ T5725] usb 6-1: config 0 has no interface number 0 [ 241.178256][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.178283][ T5725] usb 6-1: Product: syz [ 241.178301][ T5725] usb 6-1: Manufacturer: syz [ 241.178321][ T5725] usb 6-1: SerialNumber: syz [ 241.181067][ T5725] usb 6-1: config 0 descriptor?? [ 241.183360][ T31] kauditd_printk_skb: 4420 callbacks suppressed [ 241.183375][ T31] audit: type=1400 audit(1791072649.521:5213): avc: denied { mounton } for pid=11300 comm="syz.4.2245" path="/418/dir0/per_cpu/cpu0/trace_pipe" dev="tracefs" ino=354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 241.273016][ T5725] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 241.290290][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 241.399565][ T5725] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 241.403786][ T5725] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 241.459360][T11305] FAULT_INJECTION: forcing a failure. [ 241.459360][T11305] name failslab, interval 1, probability 0, space 0, times 0 [ 241.459407][T11305] CPU: 1 UID: 0 PID: 11305 Comm: syz.6.2247 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.459437][T11305] Tainted: [L]=SOFTLOCKUP [ 241.459445][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 241.459457][T11305] Call Trace: [ 241.459464][T11305] [ 241.459472][T11305] dump_stack_lvl+0x100/0x190 [ 241.459507][T11305] should_fail_ex.cold+0x5/0xa [ 241.459537][T11305] should_failslab+0xc2/0x120 [ 241.459567][T11305] __kmalloc_cache_noprof+0x91/0x6d0 [ 241.459590][T11305] ? proc_self_get_link+0x189/0x1f0 [ 241.459626][T11305] proc_self_get_link+0x189/0x1f0 [ 241.459657][T11305] pick_link+0xac2/0x13c0 [ 241.459678][T11305] ? selinux_inode_permission+0x14a/0x1130 [ 241.459710][T11305] ? __pfx_proc_self_get_link+0x10/0x10 [ 241.459747][T11305] step_into_slowpath+0x9ba/0xf90 [ 241.459778][T11305] ? __pfx_step_into_slowpath+0x10/0x10 [ 241.459808][T11305] ? lookup_fast+0x2da/0x600 [ 241.459828][T11305] ? inode_permission+0x374/0x620 [ 241.459851][T11305] link_path_walk+0xf28/0x1cc0 [ 241.459886][T11305] path_openat+0x1ac/0x2440 [ 241.459917][T11305] ? __pfx_path_openat+0x10/0x10 [ 241.459952][T11305] do_file_open+0x20e/0x430 [ 241.459981][T11305] ? __pfx_do_file_open+0x10/0x10 [ 241.460028][T11305] ? _raw_spin_unlock+0x28/0x50 [ 241.460058][T11305] ? alloc_fd+0x471/0x7a0 [ 241.460094][T11305] do_sys_openat2+0x10f/0x1e0 [ 241.460123][T11305] ? __pfx_do_sys_openat2+0x10/0x10 [ 241.460155][T11305] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.460189][T11305] __x64_sys_openat+0x12d/0x210 [ 241.460219][T11305] ? __pfx___x64_sys_openat+0x10/0x10 [ 241.460259][T11305] do_syscall_64+0x123/0x790 [ 241.460284][T11305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.460306][T11305] RIP: 0033:0x7febc615e98e [ 241.460325][T11305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 241.460353][T11305] RSP: 002b:00007febc7149ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 241.460375][T11305] RAX: ffffffffffffffda RBX: 00007febc714a6c0 RCX: 00007febc615e98e [ 241.460389][T11305] RDX: 0000000000000002 RSI: 00007febc7149f90 RDI: ffffffffffffff9c [ 241.460402][T11305] RBP: 00007febc623506b R08: 0000000000000000 R09: 0000000000000000 [ 241.460414][T11305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.460427][T11305] R13: 00007febc6426038 R14: 00007febc6425fa0 R15: 00007ffc48876de8 [ 241.460455][T11305] [ 241.882166][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 241.882570][ T5607] usb 6-1: USB disconnect, device number 25 [ 241.900930][ T5607] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 241.916551][ T5607] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 241.917237][ T5607] quatech2 6-1:0.51: device disconnected [ 242.300947][ T31] audit: type=1400 audit(1791072650.641:5214): avc: denied { lock } for pid=11316 comm="syz.3.2252" path="socket:[36551]" dev="sockfs" ino=36551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 242.333845][T11320] block nbd6: shutting down sockets [ 242.681945][T11338] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2261'. [ 242.835505][ T968] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 242.994422][ T968] usb 6-1: Using ep0 maxpacket: 8 [ 243.007420][ T968] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 243.008895][ T968] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 243.008942][ T968] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 243.008958][ T968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 243.008979][ T968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 243.019726][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.019751][ T968] usb 6-1: Product: syz [ 243.019765][ T968] usb 6-1: Manufacturer: syz [ 243.019780][ T968] usb 6-1: SerialNumber: syz [ 243.022231][ T968] usb 6-1: config 0 descriptor?? [ 243.023792][T11332] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 243.064695][ T5821] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 243.233990][ T968] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 243.237186][ T5821] usb 7-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 243.240909][ T5821] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.240938][ T5821] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.240964][ T5821] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.241057][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.250234][ T5821] usb 7-1: config 0 descriptor?? [ 243.250561][ T968] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input50 [ 243.284305][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.284338][ C1] bridge0: topology change detected, propagating [ 243.284643][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.284661][ C1] bridge0: topology change detected, propagating [ 243.460506][ C1] powermate: config urb returned -71 [ 243.460962][ C1] powermate: config urb returned -71 [ 243.461144][ C1] powermate: config urb returned -71 [ 243.461326][ C1] powermate: config urb returned -71 [ 243.461396][ T5607] usb 6-1: USB disconnect, device number 26 [ 243.461480][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 243.461523][ C1] powermate: config urb returned -71 [ 243.666172][T11353] ip6erspan0: entered allmulticast mode [ 243.731472][ T5821] playstation 0003:054C:09CC.0017: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.6-1/input0 [ 243.921179][ T5821] playstation 0003:054C:09CC.0017: Invalid reportID received, expected 18 got 0 [ 243.921210][ T5821] playstation 0003:054C:09CC.0017: Failed to retrieve DualShock4 pairing info: -22 [ 243.921256][ T5821] playstation 0003:054C:09CC.0017: Failed to get MAC address from DualShock4 [ 243.921277][ T5821] playstation 0003:054C:09CC.0017: Failed to create dualshock4. [ 243.924646][ T32] INFO: task syz.1.424:6843 blocked for more than 143 seconds. [ 243.924666][ T32] Tainted: G L syzkaller #0 ** replaying previous printk message ** [ 243.924666][ T32] Tainted: G L syzkaller #0 [ 243.924677][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.924683][ T32] task:syz.1.424 state:D stack:27944 pid:6843 tgid:6842 ppid:5604 task_flags:0x400140 flags:0x00080002 [ 243.924746][ T32] Call Trace: [ 243.924752][ T32] [ 243.924764][ T32] __schedule+0x1259/0x6920 [ 243.924787][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 243.924819][ T32] ? irqentry_exit+0x24d/0xa10 [ 243.924844][ T32] ? lock_acquire+0x1d1/0x380 [ 243.924868][ T32] ? __pfx___schedule+0x10/0x10 [ 243.924886][ T32] ? find_held_lock+0x2b/0x80 [ 243.924914][ T32] ? schedule+0x225/0x2c0 [ 243.924948][ T32] schedule+0xdd/0x2c0 [ 243.924987][ T32] schedule_preempt_disabled+0x13/0x30 [ 243.925008][ T32] __mutex_lock+0xccb/0x1bd0 [ 243.925031][ T32] ? write_versions+0x9d/0xba0 [ 243.925066][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 243.925101][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 243.925130][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 243.925155][ T32] ? write_versions+0x9d/0xba0 [ 243.925181][ T32] write_versions+0x9d/0xba0 [ 243.925235][ T32] ? find_held_lock+0x2b/0x80 [ 243.925262][ T32] ? __pfx_write_versions+0x10/0x10 [ 243.925288][ T32] ? __pfx_write_versions+0x10/0x10 [ 243.925317][ T32] ? _copy_from_user+0x59/0xd0 [ 243.925344][ T32] ? __pfx_write_versions+0x10/0x10 [ 243.925369][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 243.925394][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 243.925423][ T32] vfs_writev+0x5ed/0xdd0 [ 243.925453][ T32] ? __pfx_vfs_writev+0x10/0x10 [ 243.925480][ T32] ? lock_acquire+0x1d1/0x380 [ 243.925501][ T32] ? __fget_files+0x34/0x3d0 [ 243.925537][ T32] ? __fget_files+0x21f/0x3d0 [ 243.925569][ T32] ? do_writev+0x13e/0x340 [ 243.925587][ T32] do_writev+0x13e/0x340 [ 243.925609][ T32] ? __pfx_do_writev+0x10/0x10 [ 243.925635][ T32] do_syscall_64+0x123/0x790 [ 243.925660][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.925681][ T32] RIP: 0033:0x7fb18a19e159 [ 243.925698][ T32] RSP: 002b:00007fb18b08d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 243.925716][ T32] RAX: ffffffffffffffda RBX: 00007fb18a425fa0 RCX: 00007fb18a19e159 [ 243.925730][ T32] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 243.925742][ T32] RBP: 00007fb18a23506b R08: 0000000000000000 R09: 0000000000000000 [ 243.925754][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.925765][ T32] R13: 00007fb18a426038 R14: 00007fb18a425fa0 R15: 00007ffdab3dace8 [ 243.925792][ T32] [ 243.925832][ T32] [ 243.925832][ T32] Showing all locks held in the system: [ 243.925846][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 243.925861][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 243.925947][ T32] locks held by klogd/4965: 1, last CPU#1: [ 243.925960][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0x90/0x600 [ 243.926044][ T32] locks held by syz-executor/5606: 2, on CPU#0: [ 243.926058][ T32] #0: ffff888033f360e8 (&type->s_umount_key#77){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 243.926108][ T32] #1: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 243.926167][ T32] locks held by kworker/1:7/5821: 8, last CPU#1: [ 243.926181][ T32] #0: ffff8880242c8140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 243.926263][ T32] #1: ffffc900051e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 243.926317][ T32] #2: ffff88802c2d81d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 243.926360][ T32] #3: ffff8880352c51d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 243.926411][ T32] #4: ffff88805425b1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 243.926458][ T32] #5: ffff888043b91a58 (&dev->mutex){....}-{4:4} [ 243.926483][ T5821] playstation 0003:054C:09CC.0017: probe with driver playstation failed with error -22 [ 243.926484][ T32] , at: __device_attach+0x7e/0x4d0 [ 243.926506][ T32] #6: ffff88801d2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 243.926554][ T32] #7: ffff88801d2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 243.926601][ T32] locks held by syz.0.363/6692: 3, on CPU#0: [ 243.926614][ T32] #0: ffff8880377d97b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 243.926666][ T32] #1: ffff888035ca0460 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 243.926719][ T32] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 243.926770][ T32] locks held by syz.1.424/6843: 3, on CPU#1: [ 243.926785][ T32] #0: ffff888021323970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 243.926837][ T32] #1: ffff88803548a460 (sb_writers#16){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 243.975339][ T32] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 243.975403][ T32] locks held by getty/10505: 2, on CPU#1: [ 243.975416][ T32] #0: ffff888037ef50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 243.975492][ T32] #1: ffffc90004b2f2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 243.975536][ T32] locks held by syz.4.2269/11362: 1, on CPU#0: [ 243.975550][ T32] #0: ffff8880222fa800 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 243.975598][ T32] locks held by syz.4.2269/11363: 2, last CPU#1: [ 243.975611][ T32] #0: ffff8880222fa800 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x229/0x3a0 [ 243.975662][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 243.977170][ T32] [ 243.977177][ T32] ============================================= [ 243.977177][ T32] [ 243.977197][ T32] NMI backtrace for cpu 1 [ 243.977212][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 243.977239][ T32] Tainted: [L]=SOFTLOCKUP [ 243.977246][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.977257][ T32] Call Trace: [ 243.977263][ T32] [ 243.977270][ T32] dump_stack_lvl+0x100/0x190 [ 243.977300][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 243.977329][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 243.977352][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 243.977381][ T32] sys_info+0x141/0x190 [ 243.977405][ T32] watchdog+0xcb1/0x1030 [ 243.977441][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 243.977460][ T32] ? __pfx_watchdog+0x10/0x10 [ 243.977484][ T32] ? __kthread_parkme+0x18f/0x230 [ 243.977510][ T32] ? kthread+0x13a/0x450 [ 243.977533][ T32] ? __pfx_watchdog+0x10/0x10 [ 243.977554][ T32] kthread+0x373/0x450 [ 243.977579][ T32] ? __pfx_kthread+0x10/0x10 [ 243.977608][ T32] ret_from_fork+0x730/0xd60 [ 243.977630][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 243.977653][ T32] ? __switch_to+0x800/0x10f0 [ 243.977679][ T32] ? __pfx_kthread+0x10/0x10 [ 243.977706][ T32] ret_from_fork_asm+0x1a/0x30 [ 243.977739][ T32] [ 243.977769][ T32] Sending NMI from CPU 1 to CPUs 0: [ 243.977794][ C0] NMI backtrace for cpu 0 [ 243.977806][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.977829][ C0] Tainted: [L]=SOFTLOCKUP [ 243.977835][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.977845][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 243.977867][ C0] Code: 84 5a fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 58 fc cd fc eb a2 e8 e1 fc [ 243.977882][ C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 243.977895][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 243.977906][ C0] RDX: 00000000000003fd RSI: ffffffff85b1c5c0 RDI: ffffffff9bc76fa0 [ 243.977917][ C0] RBP: ffffffff9bc76f60 R08: 0000000000000001 R09: 000000000000001f [ 243.977931][ C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 243.977941][ C0] R13: 0000000000000020 R14: fffffbfff378ee49 R15: dffffc0000000000 [ 243.977975][ C0] FS: 0000000000000000(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 243.977992][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.978003][ C0] CR2: 0000001b3351dff8 CR3: 0000000075d6e000 CR4: 00000000003526f0 [ 243.978013][ C0] Call Trace: [ 243.978018][ C0] [ 243.978025][ C0] wait_for_lsr+0x13a/0x210 [ 243.978048][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 243.978074][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 243.978096][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 243.978118][ C0] serial8250_console_write+0xf46/0x1330 [ 243.978137][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 243.978154][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 243.978173][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 243.978195][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 243.978217][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 243.978235][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 243.978251][ C0] ? do_raw_spin_lock+0xb0/0x260 [ 243.978276][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 243.978298][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 243.978323][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 243.978340][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 243.978360][ C0] nbcon_kthread_func+0x613/0x7d0 [ 243.978379][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 243.978400][ C0] ? __kthread_parkme+0x18f/0x230 [ 243.978420][ C0] ? kthread+0x13a/0x450 [ 243.978441][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 243.978458][ C0] kthread+0x373/0x450 [ 243.978478][ C0] ? __pfx_kthread+0x10/0x10 [ 243.978501][ C0] ret_from_fork+0x730/0xd60 [ 243.978519][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 243.978538][ C0] ? __switch_to+0x800/0x10f0 [ 243.978560][ C0] ? __pfx_kthread+0x10/0x10 [ 243.978582][ C0] ret_from_fork_asm+0x1a/0x30 [ 243.978606][ C0] [ 243.979425][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 244.951088][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 244.961745][ T32] Tainted: [L]=SOFTLOCKUP [ 244.966049][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 244.976089][ T32] Call Trace: [ 244.979354][ T32] [ 244.982268][ T32] dump_stack_lvl+0x100/0x190 [ 244.986939][ T32] vpanic+0x553/0x970 [ 244.990901][ T32] ? __pfx_vpanic+0x10/0x10 [ 244.995391][ T32] panic+0xd1/0xe0 [ 244.999096][ T32] ? __pfx_panic+0x10/0x10 [ 245.003520][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 245.009662][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 245.015804][ T32] ? watchdog.cold+0x1ec/0x234 [ 245.020557][ T32] watchdog.cold+0x1fd/0x234 [ 245.025134][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 245.030921][ T32] ? __pfx_watchdog+0x10/0x10 [ 245.035584][ T32] ? __kthread_parkme+0x18f/0x230 [ 245.040594][ T32] ? kthread+0x13a/0x450 [ 245.044825][ T32] ? __pfx_watchdog+0x10/0x10 [ 245.049486][ T32] kthread+0x373/0x450 [ 245.053543][ T32] ? __pfx_kthread+0x10/0x10 [ 245.058121][ T32] ret_from_fork+0x730/0xd60 [ 245.062696][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 245.067793][ T32] ? __switch_to+0x800/0x10f0 [ 245.072466][ T32] ? __pfx_kthread+0x10/0x10 [ 245.077047][ T32] ret_from_fork_asm+0x1a/0x30 [ 245.081808][ T32] [ 245.085118][ T32] Kernel Offset: disabled [ 245.089423][ T32] Rebooting in 86400 seconds..