last executing test programs: 7.439088328s ago: executing program 4 (id=765): r0 = gettid() timer_create(0x1, &(0x7f00000001c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) fcntl$setlease(r3, 0x400, 0x1) r4 = syz_create_resource$binfmt(&(0x7f0000000300)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) 6.365287595s ago: executing program 4 (id=775): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r1 = dup(r0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x28011, r1, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 5.560457001s ago: executing program 1 (id=783): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80580, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x18, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 5.487520293s ago: executing program 4 (id=784): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f0000000440)='map_files\x00') mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/ttyACM0\x00', 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.411332594s ago: executing program 1 (id=785): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000000400)='PASV\r\n', 0x6) r3 = accept4(r0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) 5.36400372s ago: executing program 2 (id=786): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002580)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002600)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f0000002640)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004740)="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", 0x2000, &(0x7f0000006740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006800)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x20000003, 0x8, 0x4, 0x8, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0xc000, 0x0, r2, r3, 0x80, 0x8}}, {0xffffdfffffffffff, 0x401, 0x6, 0x8100008, '\x9e\xaf\x82\xa7\x13&'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000068c0)={0x2f, 0x6, 0x0, {0x1, 0x20000003, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) 5.195292801s ago: executing program 2 (id=788): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x3, &(0x7f0000000640)={0x0, 0x4}, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000ac0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000b00)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x204}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf0b, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4.971264691s ago: executing program 0 (id=790): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x284140, 0x82, 0x4}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x200400c4}, 0x8094) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.952988792s ago: executing program 2 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, 0x0, &(0x7f00000002c0)) 4.875105641s ago: executing program 0 (id=792): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_clone(0x40000080, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.949417995s ago: executing program 1 (id=793): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.867297976s ago: executing program 2 (id=795): r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$futex(&(0x7f00000000c0)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(r1, 0xb, 0x1, &(0x7f0000000180)={r3, r4+10000000}, r2, 0x2) futex(r1, 0xc, 0x1, 0x0, r2, 0x1) 3.835402701s ago: executing program 0 (id=796): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 3.355371136s ago: executing program 2 (id=799): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=@base={0xb, 0xf, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000002740)={r3, &(0x7f0000002780), &(0x7f00000027c0)=""/183}, 0x20) 3.043349802s ago: executing program 3 (id=801): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, &(0x7f0000000240)) ioctl$GET_ARRAY_INFO(r1, 0x80480911, &(0x7f0000000280)) pwrite64(r1, &(0x7f0000000300)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) ioctl$GET_DISK_INFO(r1, 0x80140912, &(0x7f0000000340)={0x1}) ioctl$STOP_ARRAY(r1, 0x932, 0x0) 2.99603407s ago: executing program 1 (id=802): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='usbip-vudc.0', 0xc) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4) write(r0, &(0x7f0000000400)='\n', 0x1) 2.85963633s ago: executing program 0 (id=803): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2d, 0x2, 0x0) setsockopt(r0, 0x11d, 0x1, &(0x7f00000000c0)="01000000", 0x4) sendto(r0, 0x0, 0x42, 0x40040, &(0x7f0000000280)=@generic={0x2d, "00000000000000000800010000000600"}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008"], 0x20}}, 0x0) r2 = socket(0x2d, 0x2, 0x0) bind(r2, &(0x7f0000000440)=@generic={0x2d, "00000100000008010800"}, 0x80) r3 = socket(0x2d, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000640)=@generic={0x2d, "00000100000008010800"}, 0x80) 2.679222021s ago: executing program 3 (id=804): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) fsopen(&(0x7f0000000480)='pstore\x00', 0x0) 2.665301622s ago: executing program 0 (id=805): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x0, @loopback}}, 0x1e) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0x5678, @loopback}}, 0x1e) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="38000000010001", 0x7) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, 0x0, 0x800) 2.513801549s ago: executing program 3 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000100)='27', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060026008500000061000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180), 0x8) setns(0xc9, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x0, @broadcast}, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000140), 0x0, 0x2) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000000240)={0x3, 0xfffe, 0x12}}) 1.770885359s ago: executing program 0 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0x10) syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/ttyUSB0\x00', 0x2, 0x0) 1.721659742s ago: executing program 4 (id=808): openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x109100, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x24, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1.381560771s ago: executing program 3 (id=809): openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f00000026c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x10208, 0x91, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) r2 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x4) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) writev(r2, 0x0, 0x0) creat(&(0x7f0000008b80)='./file0\x00', 0x167) close_range(r0, 0xffffffffffffffff, 0x0) 1.381034168s ago: executing program 1 (id=810): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)="96", 0x1}], 0x1}, 0x4048042) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000300)={'lo\x00', 0x3}) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) socket$inet(0x2, 0x2, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000380)={0x7, 0x1b, 0x2}, 0xffffff9a) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000440)={@empty, @dev={0xac, 0x14, 0x14, 0x23}, 0xb, 0x20}}) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 1.379535429s ago: executing program 4 (id=811): link(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x0, 0x200000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) 1.166347325s ago: executing program 3 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./myproc\x00', 0x103) mount(0x0, &(0x7f0000000180)='./myproc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./myproc/scsi/device_info\x00', 0x40000, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x3, 0x24) 135.258583ms ago: executing program 2 (id=813): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 101.093503ms ago: executing program 3 (id=814): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x800004, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000340)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='zstd', 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 76.551163ms ago: executing program 1 (id=815): syz_usb_connect(0x0, 0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) add_key$user(&(0x7f0000000800), 0x0, &(0x7f0000000880)="01", 0x1, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b80)=0x7) mq_open(0x0, 0x42, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x40000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8bf8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffdffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2000000000, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf, 0x0, 0x4, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x80000001]}) 0s ago: executing program 4 (id=816): syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22400) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f000001b400)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f000001b440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f000001b480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b4c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001b500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f000001b580), 0x651, 0x0) recvmmsg(r1, &(0x7f000001b5c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) kernel console output (not intermixed with test programs): you have exceeded the maximum number of cluster nodes (524288 > 32) [ 192.864878][ T10] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 192.882608][ T4939] Bluetooth: hci3: command 0x0406 tx timeout [ 193.195920][ T10] imon_raw 2-1:0.0: probe with driver imon_raw failed with error -90 [ 193.534982][ T10] usb 2-1: USB disconnect, device number 7 [ 193.925003][ T31] audit: type=1400 audit(1794197281.726:691): avc: denied { mounton } for pid=7135 comm="syz.4.413" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 193.925994][ T7136] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 193.926710][ T7136] qnx6: wrong signature (magic) in superblock #1. [ 193.926720][ T7136] qnx6: unable to read the first superblock [ 194.437222][ T31] audit: type=1400 audit(1794197282.236:692): avc: denied { unmount } for pid=5624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 194.510918][ T7145] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 194.616151][ T7150] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.617266][ T7150] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.619087][ T7150] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.620101][ T7150] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.624033][ T7150] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.625107][ T7150] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.626775][ T7150] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.627793][ T7150] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.628625][ T7150] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.629468][ T7150] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.184237][ T31] audit: type=1400 audit(1794197282.986:693): avc: denied { mount } for pid=7152 comm="syz.1.420" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 195.251911][ T31] audit: type=1400 audit(1794197283.046:694): avc: denied { create } for pid=7152 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.303806][ T31] audit: type=1400 audit(1794197283.106:695): avc: denied { bind } for pid=7152 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.305803][ T31] audit: type=1400 audit(1794197283.106:696): avc: denied { write } for pid=7152 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.391921][ T7153] FAULT_INJECTION: forcing a failure. [ 195.391921][ T7153] name failslab, interval 1, probability 0, space 0, times 0 [ 195.391981][ T7153] CPU: 0 UID: 0 PID: 7153 Comm: syz.1.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.392008][ T7153] Tainted: [L]=SOFTLOCKUP [ 195.392015][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 195.392027][ T7153] Call Trace: [ 195.392034][ T7153] [ 195.392042][ T7153] dump_stack_lvl+0x100/0x190 [ 195.392079][ T7153] should_fail_ex.cold+0x5/0xa [ 195.392112][ T7153] should_failslab+0xc2/0x120 [ 195.392138][ T7153] __kmalloc_cache_noprof+0x91/0x6d0 [ 195.392163][ T7153] ? __alloc_workqueue+0x165/0x1900 [ 195.392194][ T7153] __alloc_workqueue+0x165/0x1900 [ 195.392219][ T7153] ? rcu_is_watching+0x13/0xc0 [ 195.392240][ T7153] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 195.392261][ T7153] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.392283][ T7153] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 195.392304][ T7153] ? __debug_object_init+0x2de/0x3d0 [ 195.392336][ T7153] alloc_workqueue_noprof+0xc7/0x130 [ 195.392363][ T7153] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 195.392395][ T7153] ? lockdep_init_map_type+0x5c/0x250 [ 195.392424][ T7153] ? lockdep_init_map_type+0x5c/0x250 [ 195.392455][ T7153] __rds_conn_create+0x1290/0x2650 [ 195.392497][ T7153] ? __pfx___rds_conn_create+0x10/0x10 [ 195.392524][ T7153] ? trace_kmalloc+0xeb/0x110 [ 195.392544][ T7153] ? __kasan_kmalloc+0xaa/0xb0 [ 195.392564][ T7153] ? lockdep_init_map_type+0x5c/0x250 [ 195.392595][ T7153] rds_conn_create_outgoing+0x44/0x60 [ 195.392629][ T7153] rds_sendmsg+0x1140/0x3590 [ 195.392662][ T7153] ? __pfx_rds_sendmsg+0x10/0x10 [ 195.392697][ T7153] ? selinux_socket_sendmsg+0x198/0x2f0 [ 195.392734][ T7153] ? ____sys_sendmsg+0xa99/0xc30 [ 195.392762][ T7153] ____sys_sendmsg+0xa99/0xc30 [ 195.392788][ T7153] ? __pfx_rds_sendmsg+0x10/0x10 [ 195.392813][ T7153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.392855][ T7153] ___sys_sendmsg+0x190/0x1e0 [ 195.392888][ T7153] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.392919][ T7153] ? futex_wait+0x11e/0x370 [ 195.392955][ T7153] ? find_held_lock+0x2b/0x80 [ 195.392994][ T7153] __sys_sendmsg+0x160/0x210 [ 195.393020][ T7153] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.393058][ T7153] do_syscall_64+0x123/0x7b0 [ 195.393082][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.393103][ T7153] RIP: 0033:0x7f2c9fb9fb19 [ 195.393120][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.393137][ T7153] RSP: 002b:00007f2ca0ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.393156][ T7153] RAX: ffffffffffffffda RBX: 00007f2c9fe25fa0 RCX: 00007f2c9fb9fb19 [ 195.393169][ T7153] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000009 [ 195.393180][ T7153] RBP: 00007f2c9fc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 195.393191][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.393201][ T7153] R13: 00007f2c9fe26038 R14: 00007f2c9fe25fa0 R15: 00007fffccd565c8 [ 195.393225][ T7153] [ 195.693129][ T31] audit: type=1400 audit(1794197283.496:697): avc: denied { unmount } for pid=5625 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 195.829561][ T7158] Bluetooth: MGMT ver 1.23 [ 195.846247][ T31] audit: type=1400 audit(1794197283.646:698): avc: denied { create } for pid=7159 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 196.017188][ T7164] netlink: 32 bytes leftover after parsing attributes in process `syz.3.424'. [ 196.134076][ T7168] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 196.138196][ T7168] qnx6: wrong signature (magic) in superblock #1. [ 196.138207][ T7168] qnx6: unable to read the first superblock [ 196.424480][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 196.572342][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 196.573100][ T25] usb 4-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 196.574169][ T25] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 196.574189][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 196.574207][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 196.574245][ T25] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 196.574261][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 196.574278][ T25] usb 4-1: config 0 has no interface number 0 [ 196.574308][ T25] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 196.574332][ T25] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 196.574351][ T25] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.574404][ T25] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.574427][ T25] usb 4-1: config 0 interface 125 has no altsetting 0 [ 196.574443][ T25] usb 4-1: config 0 interface 125 has no altsetting 2 [ 196.576708][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.576729][ T25] usb 4-1: Product: syz [ 196.576763][ T25] usb 4-1: Manufacturer: syz [ 196.576775][ T25] usb 4-1: SerialNumber: syz [ 196.581048][ T25] usb 4-1: config 0 descriptor?? [ 196.594399][ T25] usb 4-1: selecting invalid altsetting 2 [ 196.791232][ C1] usb 4-1: async_complete: urb error -71 [ 196.791367][ C1] usb 4-1: async_complete: urb error -71 [ 196.791465][ C1] usb 4-1: async_complete: urb error -71 [ 196.791553][ C1] usb 4-1: async_complete: urb error -71 [ 196.793445][ T25] get_1284_register: usb error -71 [ 196.806809][ T25] usb 4-1: USB disconnect, device number 8 [ 197.636344][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 197.636381][ T31] audit: type=1400 audit(1794197285.436:701): avc: denied { read write } for pid=7183 comm="syz.3.436" name="sg0" dev="devtmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.687017][ T31] audit: type=1400 audit(1794197285.486:702): avc: denied { ioctl } for pid=7187 comm="syz.4.443" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13527 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 197.759406][ T7193] ======================================================= [ 197.759406][ T7193] WARNING: The mand mount option has been deprecated and [ 197.759406][ T7193] and is ignored by this kernel. Remove the mand [ 197.759406][ T7193] option from the mount to silence this warning. [ 197.759406][ T7193] ======================================================= [ 197.872804][ T5753] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 198.807940][ T31] audit: type=1400 audit(1794197285.966:703): avc: denied { write } for pid=7191 comm="syz.3.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.852335][ T5753] usb 3-1: Using ep0 maxpacket: 32 [ 198.854644][ T5753] usb 3-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 198.860825][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.878243][ T5753] usb 3-1: config 0 descriptor?? [ 198.991997][ T31] audit: type=1400 audit(1794197286.786:704): avc: denied { write } for pid=7199 comm="syz.4.439" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 199.706394][ T5753] as10x_usb: device has been detected [ 199.706995][ T5753] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 200.039289][ T5753] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 200.123505][ T31] audit: type=1400 audit(1794197287.926:705): avc: denied { write } for pid=7209 comm="syz.1.444" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.185039][ T31] audit: type=1400 audit(1794197287.976:706): avc: denied { firmware_load } for pid=5753 comm="kworker/0:7" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 200.185102][ T7205] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 200.187496][ T5753] as10x_usb: error during firmware upload part1 [ 200.187884][ T7205] qnx6: wrong signature (magic) in superblock #1. [ 200.187892][ T7205] qnx6: unable to read the first superblock [ 200.191811][ T5753] Registered device nBox DVB-T Dongle [ 200.201142][ T5753] usb 3-1: USB disconnect, device number 6 [ 200.321362][ T31] audit: type=1400 audit(1794197288.116:707): avc: denied { mount } for pid=7212 comm="syz.2.445" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 200.326405][ T5753] Unregistered device nBox DVB-T Dongle [ 200.341530][ T31] audit: type=1400 audit(1794197288.136:708): avc: denied { search } for pid=7212 comm="syz.2.445" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 200.341570][ T31] audit: type=1400 audit(1794197288.136:709): avc: denied { search } for pid=7212 comm="syz.2.445" name="events" dev="tracefs" ino=1748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 200.341599][ T31] audit: type=1400 audit(1794197288.136:710): avc: denied { search } for pid=7212 comm="syz.2.445" name="dwc3" dev="tracefs" ino=9595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 200.345722][ T5753] as10x_usb: device has been disconnected [ 200.866092][ T7244] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.460'. [ 200.866166][ T7244] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.460'. [ 201.607487][ T7254] FAULT_INJECTION: forcing a failure. [ 201.607487][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 201.607518][ T7254] CPU: 0 UID: 0 PID: 7254 Comm: syz.2.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.607543][ T7254] Tainted: [L]=SOFTLOCKUP [ 201.607550][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 201.607560][ T7254] Call Trace: [ 201.607566][ T7254] [ 201.607573][ T7254] dump_stack_lvl+0x100/0x190 [ 201.607608][ T7254] should_fail_ex.cold+0x5/0xa [ 201.607638][ T7254] should_failslab+0xc2/0x120 [ 201.607669][ T7254] __kmalloc_cache_noprof+0x91/0x6d0 [ 201.607696][ T7254] ? init_srcu_struct_fields+0xb16/0x1060 [ 201.607730][ T7254] init_srcu_struct_fields+0xb16/0x1060 [ 201.607757][ T7254] ? lockdep_init_map_type+0x5c/0x250 [ 201.607788][ T7254] dm_create+0x2a6/0x1530 [ 201.607817][ T7254] dev_create+0x121/0x2a0 [ 201.607845][ T7254] ? __pfx_dev_create+0x10/0x10 [ 201.607880][ T7254] ctl_ioctl+0x4d2/0xcc0 [ 201.607905][ T7254] ? __pfx_dev_create+0x10/0x10 [ 201.607934][ T7254] ? __pfx_ctl_ioctl+0x10/0x10 [ 201.607988][ T7254] ? selinux_file_ioctl+0x1e0/0x290 [ 201.608011][ T7254] dm_ctl_ioctl+0x22/0x30 [ 201.608036][ T7254] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 201.608062][ T7254] __x64_sys_ioctl+0x18e/0x210 [ 201.608085][ T7254] do_syscall_64+0x123/0x7b0 [ 201.608108][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.608126][ T7254] RIP: 0033:0x7f17d1b9fb19 [ 201.608145][ T7254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.608160][ T7254] RSP: 002b:00007f17d29be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.608179][ T7254] RAX: ffffffffffffffda RBX: 00007f17d1e26090 RCX: 00007f17d1b9fb19 [ 201.608190][ T7254] RDX: 0000200000000740 RSI: 00000000c138fd03 RDI: 000000000000000a [ 201.608201][ T7254] RBP: 00007f17d1c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 201.608212][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.608223][ T7254] R13: 00007f17d1e26128 R14: 00007f17d1e26090 R15: 00007ffe4c53c4b8 [ 201.608249][ T7254] [ 201.928788][ T7272] x_tables: ip6_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 16 [ 202.054694][ T7276] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 202.200187][ T7289] : renamed from bond0 (while UP) [ 202.308796][ T7292] smpboot: CPU 1 is now offline [ 202.324111][ T7296] device-mapper: raid: Choosing default region size of 4MiB [ 202.324739][ T7296] device-mapper: table: 248:3: raid: RAID metadata device lookup failure (-ENOENT) [ 202.324752][ T7296] device-mapper: ioctl: error adding target to table [ 202.687209][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 202.687222][ T31] audit: type=1400 audit(1794197290.486:728): avc: denied { create } for pid=7304 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 203.909132][ T31] audit: type=1400 audit(1794197291.706:729): avc: denied { shutdown } for pid=7318 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.941151][ T31] audit: type=1400 audit(1794197291.736:730): avc: denied { read } for pid=7318 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.995102][ T31] audit: type=1400 audit(1794197291.796:731): avc: denied { create } for pid=7320 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.999423][ T31] audit: type=1400 audit(1794197291.796:732): avc: denied { ioctl } for pid=7320 comm="syz.0.492" path="socket:[14383]" dev="sockfs" ino=14383 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.053731][ T31] audit: type=1400 audit(1794197291.856:733): avc: denied { watch_mount watch_reads } for pid=7312 comm="syz.2.489" path="/103" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 204.054437][ T31] audit: type=1400 audit(1794197291.856:734): avc: denied { connect } for pid=7320 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.102034][ T31] audit: type=1400 audit(1794197291.896:735): avc: denied { write } for pid=7320 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.133097][ T31] audit: type=1400 audit(1794197291.936:736): avc: denied { mount } for pid=7323 comm="syz.3.493" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 204.195692][ T7325] ima: policy update failed [ 204.195821][ T31] audit: type=1802 audit(1794197291.996:737): pid=7325 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.493" res=0 errno=-22 [ 204.227140][ T7313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'. [ 204.509010][ T5753] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 204.672721][ T5753] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 204.673540][ T5753] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.673562][ T5753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 204.673576][ T5753] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 204.673596][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.792322][ T4939] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 204.872307][ T4939] Bluetooth: hci0: command 0x0406 tx timeout [ 204.872353][ T974] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 205.022607][ T974] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 205.023344][ T974] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 205.023358][ T974] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.024788][ T974] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 205.024799][ T974] usb 3-1: Product: syz [ 205.024807][ T974] usb 3-1: Manufacturer: syz [ 205.024815][ T974] usb 3-1: SerialNumber: syz [ 205.026236][ T974] usb 3-1: config 0 descriptor?? [ 205.032111][ T974] usb 3-1: selecting invalid altsetting 0 [ 205.097834][ T5753] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 205.097848][ T5753] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 205.135748][ T5753] cxacru 2-1:1.0: probe with driver cxacru failed with error -71 [ 205.163246][ T5753] usb 2-1: USB disconnect, device number 8 [ 205.265295][ T974] usb 3-1: USB disconnect, device number 7 [ 205.384337][ T6641] udevd[6641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 205.675032][ T7368] misc userio: Invalid payload size [ 206.272225][ T974] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 206.382194][ T5764] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 206.427771][ T974] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.429773][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.429790][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 64 [ 206.429809][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.431873][ T974] usb 3-1: config 0 descriptor?? [ 206.483319][ T7379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.557980][ T5764] usb 4-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 206.558019][ T5764] usb 4-1: too many configurations: 181, using maximum allowed: 8 [ 206.558604][ T5764] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 206.558621][ T5764] usb 4-1: can't read configurations, error -71 [ 206.603199][ T7391] FAULT_INJECTION: forcing a failure. [ 206.603199][ T7391] name fail_futex, interval 1, probability 0, space 0, times 0 [ 206.603218][ T7391] CPU: 0 UID: 0 PID: 7391 Comm: syz.1.524 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.603232][ T7391] Tainted: [L]=SOFTLOCKUP [ 206.603235][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 206.603241][ T7391] Call Trace: [ 206.603245][ T7391] [ 206.603250][ T7391] dump_stack_lvl+0x100/0x190 [ 206.603272][ T7391] should_fail_ex.cold+0x5/0xa [ 206.603290][ T7391] get_futex_key+0x1c9/0x13e0 [ 206.603306][ T7391] ? __pfx_get_futex_key+0x10/0x10 [ 206.603320][ T7391] ? _raw_write_unlock+0x28/0x50 [ 206.603332][ T7391] ? keyring_instantiate+0xfc/0x300 [ 206.603347][ T7391] futex_wake+0xf4/0x5e0 [ 206.603363][ T7391] ? __pfx___key_instantiate_and_link+0x10/0x10 [ 206.603376][ T7391] ? __pfx_futex_wake+0x10/0x10 [ 206.603392][ T7391] ? irqentry_exit+0x202/0xab0 [ 206.603408][ T7391] do_futex+0x2b2/0x440 [ 206.603423][ T7391] ? __pfx_do_futex+0x10/0x10 [ 206.603436][ T7391] ? commit_creds+0x6fa/0x10e0 [ 206.603450][ T7391] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 206.603462][ T7391] __x64_sys_futex+0x34f/0x4d0 [ 206.603476][ T7391] ? __pfx___x64_sys_futex+0x10/0x10 [ 206.603494][ T7391] do_syscall_64+0x123/0x7b0 [ 206.603508][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.603518][ T7391] RIP: 0033:0x7f2c9fb9fb19 [ 206.603528][ T7391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.603537][ T7391] RSP: 002b:00007f2ca0ac70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.603548][ T7391] RAX: ffffffffffffffda RBX: 00007f2c9fe25fa8 RCX: 00007f2c9fb9fb19 [ 206.603555][ T7391] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2c9fe25fac [ 206.603561][ T7391] RBP: 00007f2c9fe25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 206.603567][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.603573][ T7391] R13: 00007f2c9fe26038 R14: 00007fffccd564e0 R15: 00007fffccd565c8 [ 206.603587][ T7391] [ 206.854158][ T974] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 207.070095][ T974] usb 3-1: USB disconnect, device number 8 [ 207.659908][ T7422] FAULT_INJECTION: forcing a failure. [ 207.659908][ T7422] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 207.659931][ T7422] CPU: 0 UID: 0 PID: 7422 Comm: syz.1.537 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.659946][ T7422] Tainted: [L]=SOFTLOCKUP [ 207.659949][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 207.659955][ T7422] Call Trace: [ 207.659959][ T7422] [ 207.659964][ T7422] dump_stack_lvl+0x100/0x190 [ 207.659986][ T7422] should_fail_ex.cold+0x5/0xa [ 207.660004][ T7422] core_sys_select+0x5d1/0xc20 [ 207.660020][ T7422] ? __pfx_core_sys_select+0x10/0x10 [ 207.660034][ T7422] ? futex_wake+0x4ea/0x5e0 [ 207.660063][ T7422] ? __pfx_set_user_sigmask+0x10/0x10 [ 207.660078][ T7422] ? __pfx_do_futex+0x10/0x10 [ 207.660092][ T7422] do_pselect.constprop.0+0x238/0x270 [ 207.660106][ T7422] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 207.660119][ T7422] ? __x64_sys_futex+0x358/0x4d0 [ 207.660132][ T7422] ? xfd_validate_state+0x129/0x190 [ 207.660148][ T7422] __x64_sys_pselect6+0x149/0x1c0 [ 207.660163][ T7422] do_syscall_64+0x123/0x7b0 [ 207.660177][ T7422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.660188][ T7422] RIP: 0033:0x7f2c9fb9fb19 [ 207.660197][ T7422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.660207][ T7422] RSP: 002b:00007f2ca0ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 207.660217][ T7422] RAX: ffffffffffffffda RBX: 00007f2c9fe25fa0 RCX: 00007f2c9fb9fb19 [ 207.660224][ T7422] RDX: 0000200000000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.660230][ T7422] RBP: 00007f2c9fc37b70 R08: 0000200000000380 R09: 0000000000000000 [ 207.660236][ T7422] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 207.660242][ T7422] R13: 00007f2c9fe26038 R14: 00007f2c9fe25fa0 R15: 00007fffccd565c8 [ 207.660256][ T7422] [ 207.901821][ T7423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.003868][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 208.003880][ T31] audit: type=1400 audit(1794197295.806:750): avc: denied { read } for pid=7429 comm="syz.4.541" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 208.131211][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.141463][ T31] audit: type=1400 audit(1794197295.936:751): avc: denied { create } for pid=7436 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 208.167039][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.583283][ T7453] FAULT_INJECTION: forcing a failure. [ 208.583283][ T7453] name failslab, interval 1, probability 0, space 0, times 0 [ 208.583305][ T7453] CPU: 0 UID: 0 PID: 7453 Comm: syz.1.548 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.583321][ T7453] Tainted: [L]=SOFTLOCKUP [ 208.583325][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 208.583333][ T7453] Call Trace: [ 208.583337][ T7453] [ 208.583342][ T7453] dump_stack_lvl+0x100/0x190 [ 208.583365][ T7453] should_fail_ex.cold+0x5/0xa [ 208.583384][ T7453] should_failslab+0xc2/0x120 [ 208.583397][ T7453] kmem_cache_alloc_noprof+0x92/0x6a0 [ 208.583415][ T7453] ? __kernfs_new_node+0xd2/0xa10 [ 208.583430][ T7453] __kernfs_new_node+0xd2/0xa10 [ 208.583444][ T7453] ? __pfx___kernfs_new_node+0x10/0x10 [ 208.583457][ T7453] ? lock_acquire+0x1d1/0x380 [ 208.583470][ T7453] ? kernfs_root+0x23/0x2a0 [ 208.583489][ T7453] ? find_held_lock+0x2b/0x80 [ 208.583500][ T7453] ? kernfs_root+0xee/0x2a0 [ 208.583514][ T7453] ? kernfs_root+0xee/0x2a0 [ 208.583533][ T7453] kernfs_new_node+0x194/0x200 [ 208.583545][ T7453] ? __pfx_kernfs_new_node+0x10/0x10 [ 208.583557][ T7453] ? kernfs_add_one+0x213/0xb40 [ 208.583570][ T7453] __kernfs_create_file+0x53/0x350 [ 208.583585][ T7453] sysfs_add_file_mode_ns+0x207/0x3c0 [ 208.583604][ T7453] internal_create_group+0x593/0xfb0 [ 208.583624][ T7453] ? __pfx_internal_create_group+0x10/0x10 [ 208.583642][ T7453] ? kernfs_create_link+0x1f1/0x280 [ 208.583658][ T7453] internal_create_groups+0x9d/0x150 [ 208.583676][ T7453] device_add+0xf60/0x1970 [ 208.583692][ T7453] ? __pfx_device_add+0x10/0x10 [ 208.583707][ T7453] ? lockdep_init_map_type+0x5c/0x250 [ 208.583723][ T7453] ? __init_waitqueue_head+0xca/0x150 [ 208.583742][ T7453] netdev_register_kobject+0x1df/0x410 [ 208.583756][ T7453] register_netdevice+0x1313/0x26b0 [ 208.583774][ T7453] ? __pfx_register_netdevice+0x10/0x10 [ 208.583789][ T7453] ? slip_open+0xb49/0x1120 [ 208.583802][ T7453] ? kfree+0x1e5/0x6d0 [ 208.583817][ T7453] ? __local_bh_enable_ip+0xa5/0x120 [ 208.583832][ T7453] slip_open+0xb8a/0x1120 [ 208.583845][ T7453] ? __pfx_slip_open+0x10/0x10 [ 208.583856][ T7453] ? down_write+0x141/0x1f0 [ 208.583871][ T7453] ? __pfx_slip_open+0x10/0x10 [ 208.583880][ T7453] tty_ldisc_open+0xa2/0x120 [ 208.583898][ T7453] tty_set_ldisc+0x325/0x740 [ 208.583909][ T7453] tty_ioctl+0x699/0x1870 [ 208.583922][ T7453] ? __pfx_tty_ioctl+0x10/0x10 [ 208.583932][ T7453] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 208.583945][ T7453] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 208.583958][ T7453] ? __fget_files+0x34/0x3d0 [ 208.583977][ T7453] ? selinux_file_ioctl+0x1e0/0x290 [ 208.583987][ T7453] ? selinux_file_ioctl+0x1e7/0x290 [ 208.583998][ T7453] ? __pfx_tty_ioctl+0x10/0x10 [ 208.584010][ T7453] __x64_sys_ioctl+0x18e/0x210 [ 208.584022][ T7453] do_syscall_64+0x123/0x7b0 [ 208.584036][ T7453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.584047][ T7453] RIP: 0033:0x7f2c9fb9fb19 [ 208.584056][ T7453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.584067][ T7453] RSP: 002b:00007f2ca0ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.584085][ T7453] RAX: ffffffffffffffda RBX: 00007f2c9fe25fa0 RCX: 00007f2c9fb9fb19 [ 208.584092][ T7453] RDX: 0000200000000600 RSI: 0000000000005423 RDI: 0000000000000004 [ 208.584099][ T7453] RBP: 00007f2c9fc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 208.584106][ T7453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.584114][ T7453] R13: 00007f2c9fe26038 R14: 00007f2c9fe25fa0 R15: 00007fffccd565c8 [ 208.584130][ T7453] [ 209.124711][ T31] audit: type=1400 audit(1794197296.926:752): avc: denied { watch } for pid=7456 comm="syz.4.550" path="/99" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 209.342927][ T31] audit: type=1400 audit(1794197297.146:753): avc: denied { create } for pid=7461 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.371230][ T7463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.381795][ T7463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.423071][ T31] audit: type=1400 audit(1794197297.216:754): avc: denied { associate } for pid=7465 comm="syz.4.554" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 209.457693][ T31] audit: type=1400 audit(1794197297.256:755): avc: denied { mounton } for pid=7462 comm="syz.4.554" path="/proc/281/task" dev="proc" ino=14971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 209.509917][ T31] audit: type=1400 audit(1794197297.306:756): avc: denied { bind } for pid=7461 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.536515][ T31] audit: type=1400 audit(1794197297.336:757): avc: denied { listen } for pid=7461 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.538809][ T31] audit: type=1400 audit(1794197297.336:758): avc: denied { connect } for pid=7461 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.876063][ T31] audit: type=1400 audit(1794197297.676:759): avc: denied { create } for pid=7476 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 210.582405][ T974] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 210.703693][ T5764] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 210.732644][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 210.733078][ T974] usb 4-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 210.733892][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.733906][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.733923][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.735583][ T974] usb 4-1: config 0 descriptor?? [ 210.852211][ T5764] usb 3-1: Using ep0 maxpacket: 16 [ 210.852821][ T5764] usb 3-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 210.854046][ T5764] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.854078][ T5764] usb 3-1: config 0 interface 0 has no altsetting 0 [ 210.855725][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.855737][ T5764] usb 3-1: Product: syz [ 210.855744][ T5764] usb 3-1: Manufacturer: syz [ 210.855751][ T5764] usb 3-1: SerialNumber: syz [ 210.859008][ T5764] usb 3-1: config 0 descriptor?? [ 210.877414][ T5753] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 211.067110][ T5764] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 211.085929][ T5753] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 211.096221][ T5753] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.096247][ T5753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.097888][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.097920][ T5753] usb 2-1: Product: syz [ 211.097928][ T5753] usb 2-1: Manufacturer: syz [ 211.097935][ T5753] usb 2-1: SerialNumber: syz [ 211.157283][ T974] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 211.157308][ T974] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 211.333125][ T5764] rc_core: IR keymap rc-imon-pad not found [ 211.333137][ T5764] Registered IR keymap rc-empty [ 211.333518][ T5764] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 211.333527][ T5764] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 211.373888][ T974] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 211.483551][ T5764] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 211.484794][ T5764] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 211.486413][ T5764] imon 3-1:0.0: iMON device (15c2:0041) on usb<3:9> initialized [ 211.815917][ T974] usb 4-1: USB disconnect, device number 11 [ 211.871590][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 211.871980][ T5764] usb 3-1: USB disconnect, device number 9 [ 212.138752][ T5753] cdc_ncm 2-1:1.0: bind() failure [ 212.151668][ T5753] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 212.151690][ T5753] cdc_ncm 2-1:1.1: bind() failure [ 212.174642][ T5753] usb 2-1: USB disconnect, device number 9 [ 212.299371][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.299596][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.488044][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 213.488056][ T31] audit: type=1400 audit(1794197301.286:768): avc: denied { prog_load } for pid=7520 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.488078][ T31] audit: type=1400 audit(1794197301.286:769): avc: denied { bpf } for pid=7520 comm="syz.2.577" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.488323][ T31] audit: type=1400 audit(1794197301.286:770): avc: denied { mounton } for pid=7521 comm="syz.0.578" path="/111/proc" dev="tmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 213.514658][ T31] audit: type=1400 audit(1794197301.316:771): avc: denied { mount } for pid=7521 comm="syz.0.578" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 213.586779][ T31] audit: type=1400 audit(1794197301.386:772): avc: denied { mount } for pid=7520 comm="syz.2.577" name="/" dev="configfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 213.589600][ T31] audit: type=1400 audit(1794197301.386:773): avc: denied { search } for pid=7520 comm="syz.2.577" name="/" dev="configfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.613181][ T31] audit: type=1400 audit(1794197301.416:774): avc: denied { search } for pid=7520 comm="syz.2.577" name="usb_gadget" dev="configfs" ino=1349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.613207][ T31] audit: type=1400 audit(1794197301.416:775): avc: denied { search } for pid=7520 comm="syz.2.577" name="g1" dev="configfs" ino=10089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.613229][ T31] audit: type=1400 audit(1794197301.416:776): avc: denied { search } for pid=7520 comm="syz.2.577" name="configs" dev="configfs" ino=10091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.613248][ T31] audit: type=1400 audit(1794197301.416:777): avc: denied { search } for pid=7520 comm="syz.2.577" name="c.1" dev="configfs" ino=10095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.744292][ T7522] FAULT_INJECTION: forcing a failure. [ 213.744292][ T7522] name failslab, interval 1, probability 0, space 0, times 0 [ 213.744312][ T7522] CPU: 0 UID: 0 PID: 7522 Comm: syz.0.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.744328][ T7522] Tainted: [L]=SOFTLOCKUP [ 213.744332][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 213.744339][ T7522] Call Trace: [ 213.744343][ T7522] [ 213.744348][ T7522] dump_stack_lvl+0x100/0x190 [ 213.744369][ T7522] should_fail_ex.cold+0x5/0xa [ 213.744388][ T7522] should_failslab+0xc2/0x120 [ 213.744402][ T7522] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 213.744416][ T7522] ? kstrdup_const+0x63/0x80 [ 213.744432][ T7522] kstrdup+0x51/0xe0 [ 213.744446][ T7522] kstrdup_const+0x63/0x80 [ 213.744457][ T7522] __kernfs_new_node+0x9b/0xa10 [ 213.744472][ T7522] ? __pfx___kernfs_new_node+0x10/0x10 [ 213.744484][ T7522] ? lock_acquire+0x1d1/0x380 [ 213.744498][ T7522] ? kernfs_root+0x23/0x2a0 [ 213.744513][ T7522] ? find_held_lock+0x2b/0x80 [ 213.744530][ T7522] ? kernfs_root+0xee/0x2a0 [ 213.744544][ T7522] ? kernfs_root+0xee/0x2a0 [ 213.744563][ T7522] kernfs_create_dir_ns+0xa4/0x2b0 [ 213.744579][ T7522] sysfs_create_dir_ns+0x13a/0x2b0 [ 213.744596][ T7522] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 213.744612][ T7522] ? find_held_lock+0x2b/0x80 [ 213.744623][ T7522] ? kobject_add_internal+0x25f/0x930 [ 213.744640][ T7522] ? kobject_add_internal+0x25f/0x930 [ 213.744656][ T7522] ? net_namespace+0x12/0x50 [ 213.744667][ T7522] ? device_namespace+0x76/0xa0 [ 213.744684][ T7522] kobject_add_internal+0x2c8/0x930 [ 213.744704][ T7522] kobject_add+0x16a/0x1e0 [ 213.744714][ T7522] ? __pfx_kobject_add+0x10/0x10 [ 213.744724][ T7522] ? preempt_schedule_thunk+0x16/0x40 [ 213.744740][ T7522] ? kobject_put+0xb9/0x640 [ 213.744759][ T7522] device_add+0x294/0x1970 [ 213.744774][ T7522] ? __pfx_dev_set_name+0x10/0x10 [ 213.744783][ T7522] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 213.744800][ T7522] ? __pfx_device_add+0x10/0x10 [ 213.744814][ T7522] ? lockdep_init_map_type+0x5c/0x250 [ 213.744829][ T7522] ? __init_waitqueue_head+0xca/0x150 [ 213.744849][ T7522] netdev_register_kobject+0x1df/0x410 [ 213.744863][ T7522] register_netdevice+0x1313/0x26b0 [ 213.744880][ T7522] ? __pfx_register_netdevice+0x10/0x10 [ 213.744899][ T7522] register_vlan_dev+0x36c/0x910 [ 213.744914][ T7522] vlan_ioctl_handler+0x8e9/0xa70 [ 213.744926][ T7522] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 213.744941][ T7522] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 213.744955][ T7522] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 213.744967][ T7522] sock_ioctl+0x5e9/0x6b0 [ 213.744977][ T7522] ? __pfx_sock_ioctl+0x10/0x10 [ 213.744991][ T7522] ? selinux_file_ioctl+0x1e0/0x290 [ 213.745002][ T7522] ? selinux_file_ioctl+0x1e7/0x290 [ 213.745013][ T7522] ? __pfx_sock_ioctl+0x10/0x10 [ 213.745024][ T7522] __x64_sys_ioctl+0x18e/0x210 [ 213.745036][ T7522] do_syscall_64+0x123/0x7b0 [ 213.745050][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.745061][ T7522] RIP: 0033:0x7f0d7f99fb19 [ 213.745071][ T7522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.745081][ T7522] RSP: 002b:00007f0d8091b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.745092][ T7522] RAX: ffffffffffffffda RBX: 00007f0d7fc25fa0 RCX: 00007f0d7f99fb19 [ 213.745098][ T7522] RDX: 0000200000000480 RSI: 0000000000008983 RDI: 0000000000000004 [ 213.745104][ T7522] RBP: 00007f0d7fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 213.745110][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.745116][ T7522] R13: 00007f0d7fc26038 R14: 00007f0d7fc25fa0 R15: 00007ffe8a869b88 [ 213.745131][ T7522] [ 213.745153][ T7522] kobject: kobject_add_internal failed for veth0_vlan.4 (error: -12 parent: net) [ 213.958463][ T5753] libceph: connect (1)[c::]:6789 error -101 [ 213.958587][ T5753] libceph: mon0 (1)[c::]:6789 connect error [ 214.213418][ T5753] libceph: connect (1)[c::]:6789 error -101 [ 214.213514][ T5753] libceph: mon0 (1)[c::]:6789 connect error [ 214.281800][ T7518] ceph: No mds server is up or the cluster is laggy [ 214.488065][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.488266][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.523574][ T7539] kvm: debugfs: duplicate directory 7539-4 [ 214.570594][ T7534] dlm: no local IP address has been set [ 214.570602][ T7534] dlm: cannot start dlm midcomms -107 [ 214.773022][ T7554] FAULT_INJECTION: forcing a failure. [ 214.773022][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 214.773041][ T7554] CPU: 0 UID: 0 PID: 7554 Comm: syz.2.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.773056][ T7554] Tainted: [L]=SOFTLOCKUP [ 214.773059][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 214.773065][ T7554] Call Trace: [ 214.773069][ T7554] [ 214.773074][ T7554] dump_stack_lvl+0x100/0x190 [ 214.773095][ T7554] should_fail_ex.cold+0x5/0xa [ 214.773112][ T7554] should_failslab+0xc2/0x120 [ 214.773125][ T7554] __kmalloc_cache_noprof+0x91/0x6d0 [ 214.773144][ T7554] ? bpf_prog_alloc_no_stats+0x161/0x690 [ 214.773160][ T7554] bpf_prog_alloc_no_stats+0x161/0x690 [ 214.773174][ T7554] bpf_prog_alloc+0x3b/0x200 [ 214.773187][ T7554] bpf_prog_create_from_user+0xb4/0x2e0 [ 214.773203][ T7554] ? __pfx_seccomp_check_filter+0x10/0x10 [ 214.773218][ T7554] do_seccomp+0x82d/0x27d0 [ 214.773230][ T7554] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.773247][ T7554] ? __pfx_do_seccomp+0x10/0x10 [ 214.773260][ T7554] ? __x64_sys_openat+0x12d/0x210 [ 214.773276][ T7554] ? xfd_validate_state+0x129/0x190 [ 214.773294][ T7554] do_syscall_64+0x123/0x7b0 [ 214.773308][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.773319][ T7554] RIP: 0033:0x7f17d1b9fb19 [ 214.773328][ T7554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.773339][ T7554] RSP: 002b:00007f17d29df028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 214.773351][ T7554] RAX: ffffffffffffffda RBX: 00007f17d1e25fa0 RCX: 00007f17d1b9fb19 [ 214.773358][ T7554] RDX: 00002000000003c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 214.773364][ T7554] RBP: 00007f17d1c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 214.773370][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.773376][ T7554] R13: 00007f17d1e26038 R14: 00007f17d1e25fa0 R15: 00007ffe4c53c4b8 [ 214.773389][ T7554] [ 215.140417][ T7559] tmpfs: Using encoding : utf8-12.1.0 [ 215.275297][ T7567] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7569] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7567] [ 215.294812][ T7567] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7569] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7567] [ 215.938668][ T7601] syzkaller1: entered promiscuous mode [ 215.938682][ T7601] syzkaller1: entered allmulticast mode [ 216.153171][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.153407][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.402489][ T7618] kvm: pic: non byte read [ 216.402810][ T7618] kvm: pic: non byte read [ 216.403052][ T7618] kvm: pic: non byte read [ 216.403305][ T7618] kvm: pic: non byte read [ 216.406727][ T7618] kvm: pic: non byte read [ 216.431923][ T7618] kvm: pic: single mode not supported [ 216.432014][ T7618] kvm: pic: non byte read [ 216.445250][ T7618] kvm: pic: single mode not supported [ 216.445291][ T7618] kvm: pic: non byte read [ 216.445630][ T7618] kvm: pic: level sensitive irq not supported [ 216.445672][ T7618] kvm: pic: non byte read [ 216.448766][ T7618] kvm: pic: single mode not supported [ 216.448856][ T7618] kvm: pic: non byte read [ 216.449083][ T7618] kvm: pic: non byte read [ 216.491375][ T7618] kvm: pic: level sensitive irq not supported [ 216.492271][ T7618] kvm: pic: single mode not supported [ 216.494951][ T7618] kvm: pic: level sensitive irq not supported [ 216.496448][ T7618] kvm: pic: single mode not supported [ 216.496470][ T7618] kvm: pic: level sensitive irq not supported [ 216.499655][ T7618] kvm: pic: single mode not supported [ 216.499662][ T7618] kvm: pic: level sensitive irq not supported [ 216.500735][ T7618] kvm: pic: single mode not supported [ 216.500740][ T7618] kvm: pic: level sensitive irq not supported [ 216.558636][ T7618] kvm: pic: single mode not supported [ 216.558643][ T7618] kvm: pic: level sensitive irq not supported [ 216.559199][ T7618] kvm: pic: single mode not supported [ 216.559204][ T7618] kvm: pic: level sensitive irq not supported [ 216.595698][ T7618] kvm: pic: single mode not supported [ 216.595706][ T7618] kvm: pic: level sensitive irq not supported [ 216.595975][ T7618] kvm: pic: level sensitive irq not supported [ 216.747597][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.621'. [ 217.049911][ T7642] FAULT_INJECTION: forcing a failure. [ 217.049911][ T7642] name failslab, interval 1, probability 0, space 0, times 0 [ 217.049933][ T7642] CPU: 0 UID: 0 PID: 7642 Comm: syz.0.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.049948][ T7642] Tainted: [L]=SOFTLOCKUP [ 217.049953][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 217.049960][ T7642] Call Trace: [ 217.049964][ T7642] [ 217.049969][ T7642] dump_stack_lvl+0x100/0x190 [ 217.049989][ T7642] should_fail_ex.cold+0x5/0xa [ 217.050008][ T7642] should_failslab+0xc2/0x120 [ 217.050022][ T7642] __kmalloc_noprof+0xfc/0x840 [ 217.050038][ T7642] ? nft_obj_init+0x1cc/0x390 [ 217.050056][ T7642] nft_obj_init+0x1cc/0x390 [ 217.050070][ T7642] ? nft_obj_type_get+0x213/0x480 [ 217.050083][ T7642] nf_tables_newobj+0xa87/0x2850 [ 217.050101][ T7642] ? __pfx___nla_validate_parse+0x10/0x10 [ 217.050116][ T7642] ? __pfx_nf_tables_newobj+0x10/0x10 [ 217.050130][ T7642] ? net_generic+0x25/0x2a0 [ 217.050143][ T7642] ? __nla_parse+0x40/0x60 [ 217.050157][ T7642] nfnetlink_rcv_batch+0x1410/0x2880 [ 217.050175][ T7642] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 217.050189][ T7642] ? lock_acquire+0x1d1/0x380 [ 217.050203][ T7642] ? avc_has_perm_noaudit+0x56/0x470 [ 217.050222][ T7642] ? avc_has_perm_noaudit+0x145/0x470 [ 217.050248][ T7642] ? __nla_parse+0x40/0x60 [ 217.050262][ T7642] nfnetlink_rcv+0x3bd/0x440 [ 217.050273][ T7642] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 217.050288][ T7642] netlink_unicast+0x668/0x950 [ 217.050304][ T7642] ? __pfx_netlink_unicast+0x10/0x10 [ 217.050322][ T7642] netlink_sendmsg+0x9ac/0x10c0 [ 217.050338][ T7642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.050355][ T7642] ? selinux_socket_sendmsg+0x198/0x2f0 [ 217.050372][ T7642] ? ____sys_sendmsg+0xa99/0xc30 [ 217.050387][ T7642] ____sys_sendmsg+0xa99/0xc30 [ 217.050402][ T7642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.050417][ T7642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.050439][ T7642] ___sys_sendmsg+0x190/0x1e0 [ 217.050457][ T7642] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.050473][ T7642] ? futex_wait+0x11e/0x370 [ 217.050493][ T7642] ? find_held_lock+0x2b/0x80 [ 217.050517][ T7642] __sys_sendmsg+0x160/0x210 [ 217.050540][ T7642] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.050562][ T7642] do_syscall_64+0x123/0x7b0 [ 217.050577][ T7642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.050589][ T7642] RIP: 0033:0x7f0d7f99fb19 [ 217.050599][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.050610][ T7642] RSP: 002b:00007f0d8091b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.050621][ T7642] RAX: ffffffffffffffda RBX: 00007f0d7fc25fa0 RCX: 00007f0d7f99fb19 [ 217.050629][ T7642] RDX: 0000000000000010 RSI: 00002000000014c0 RDI: 0000000000000005 [ 217.050635][ T7642] RBP: 00007f0d7fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 217.050641][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.050647][ T7642] R13: 00007f0d7fc26038 R14: 00007f0d7fc25fa0 R15: 00007ffe8a869b88 [ 217.050662][ T7642] [ 217.122484][ T5753] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.293862][ T11] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 217.378723][ T5753] usb 2-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 217.407151][ T5753] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 217.407167][ T5753] usb 2-1: config 1 has no interface number 0 [ 217.407201][ T5753] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 217.407216][ T5753] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 217.407229][ T5753] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.409875][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.409888][ T5753] usb 2-1: Product: syz [ 217.409896][ T5753] usb 2-1: Manufacturer: syz [ 217.409903][ T5753] usb 2-1: SerialNumber: syz [ 217.489503][ T7634] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.502765][ T11] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 217.505664][ T11] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.505678][ T11] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 217.505689][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.505709][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 217.505723][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 217.508960][ T11] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.508972][ T11] usb 3-1: Product: syz [ 217.508980][ T11] usb 3-1: Manufacturer: syz [ 217.581865][ T11] cdc_wdm 3-1:1.0: skipping garbage [ 217.581876][ T11] cdc_wdm 3-1:1.0: skipping garbage [ 217.616949][ T11] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 217.616962][ T11] cdc_wdm 3-1:1.0: Unknown control protocol [ 217.704914][ T7634] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.711128][ T7645] FAULT_INJECTION: forcing a failure. [ 217.711128][ T7645] name fail_futex, interval 1, probability 0, space 0, times 0 [ 217.711145][ T7645] CPU: 0 UID: 0 PID: 7645 Comm: syz.0.628 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.711162][ T7645] Tainted: [L]=SOFTLOCKUP [ 217.711167][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 217.711174][ T7645] Call Trace: [ 217.711178][ T7645] [ 217.711183][ T7645] dump_stack_lvl+0x100/0x190 [ 217.711204][ T7645] should_fail_ex.cold+0x5/0xa [ 217.711221][ T7645] get_futex_key+0x1c9/0x13e0 [ 217.711236][ T7645] ? __pfx_get_futex_key+0x10/0x10 [ 217.711248][ T7645] ? ___sys_sendmsg+0x127/0x1e0 [ 217.711266][ T7645] futex_wake+0xf4/0x5e0 [ 217.711280][ T7645] ? futex_wait+0x11e/0x370 [ 217.711296][ T7645] ? __pfx_futex_wake+0x10/0x10 [ 217.711312][ T7645] ? find_held_lock+0x2b/0x80 [ 217.711328][ T7645] do_futex+0x2b2/0x440 [ 217.711341][ T7645] ? __pfx_do_futex+0x10/0x10 [ 217.711354][ T7645] ? fput+0x7c/0x100 [ 217.711369][ T7645] __x64_sys_futex+0x34f/0x4d0 [ 217.711383][ T7645] ? __pfx___x64_sys_futex+0x10/0x10 [ 217.711401][ T7645] do_syscall_64+0x123/0x7b0 [ 217.711415][ T7645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.711426][ T7645] RIP: 0033:0x7f0d7f99fb19 [ 217.711435][ T7645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.711445][ T7645] RSP: 002b:00007f0d8091b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 217.711456][ T7645] RAX: ffffffffffffffda RBX: 00007f0d7fc25fa8 RCX: 00007f0d7f99fb19 [ 217.711463][ T7645] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0d7fc25fac [ 217.711469][ T7645] RBP: 00007f0d7fc25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 217.711475][ T7645] R10: 000000000000007c R11: 0000000000000246 R12: 0000000000000000 [ 217.711481][ T7645] R13: 00007f0d7fc26038 R14: 00007ffe8a869aa0 R15: 00007ffe8a869b88 [ 217.711496][ T7645] [ 217.994866][ T5753] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 218.030334][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 218.030377][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 218.030565][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 218.030576][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 218.030736][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 218.030745][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 218.030801][ T11] usb 3-1: USB disconnect, device number 10 [ 218.030902][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 218.030911][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 218.030918][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 218.168532][ T7651] syzkaller1: entered promiscuous mode [ 218.168545][ T7651] syzkaller1: entered allmulticast mode [ 218.589372][ T5753] usb 2-1: USB disconnect, device number 10 [ 218.606752][ T5753] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 218.733634][ T5753] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 218.780324][ T31] kauditd_printk_skb: 125 callbacks suppressed [ 218.780336][ T31] audit: type=1400 audit(1794197306.576:903): avc: denied { bind } for pid=7671 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.840285][ T31] audit: type=1400 audit(1794197306.636:904): avc: denied { write } for pid=7655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.867193][ T31] audit: type=1400 audit(1794197306.666:905): avc: denied { add_name } for pid=7655 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.867219][ T31] audit: type=1400 audit(1794197306.666:906): avc: denied { create } for pid=7655 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.892997][ T31] audit: type=1400 audit(1794197306.696:907): avc: denied { write } for pid=7655 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.syzkaller1.link" dev="tmpfs" ino=2501 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.945289][ T31] audit: type=1400 audit(1794197306.716:908): avc: denied { append } for pid=7655 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller1.link" dev="tmpfs" ino=2501 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.169637][ T31] audit: type=1400 audit(1794197306.966:909): avc: denied { write } for pid=7679 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.169665][ T31] audit: type=1400 audit(1794197306.966:910): avc: denied { remove_name } for pid=7679 comm="rm" name="resolv.conf.syzkaller1.link" dev="tmpfs" ino=2501 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.169685][ T31] audit: type=1400 audit(1794197306.966:911): avc: denied { unlink } for pid=7679 comm="rm" name="resolv.conf.syzkaller1.link" dev="tmpfs" ino=2501 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.344789][ T31] audit: type=1400 audit(1794197307.146:912): avc: denied { append } for pid=7685 comm="syz.0.638" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 219.608721][ T7697] ip6t_hbh: unknown flags 38 [ 219.739898][ T7698] FAULT_INJECTION: forcing a failure. [ 219.739898][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 219.739918][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.3.641 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.739934][ T7698] Tainted: [L]=SOFTLOCKUP [ 219.739937][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 219.739944][ T7698] Call Trace: [ 219.739948][ T7698] [ 219.739953][ T7698] dump_stack_lvl+0x100/0x190 [ 219.739974][ T7698] should_fail_ex.cold+0x5/0xa [ 219.739991][ T7698] should_failslab+0xc2/0x120 [ 219.740007][ T7698] __kvmalloc_node_noprof+0x113/0x9b0 [ 219.740018][ T7698] ? trace_contention_end+0x126/0x160 [ 219.740034][ T7698] ? fuse_dev_splice_read+0x109/0x5f0 [ 219.740050][ T7698] fuse_dev_splice_read+0x109/0x5f0 [ 219.740064][ T7698] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 219.740078][ T7698] ? __pfx_futex_wake_mark+0x10/0x10 [ 219.740099][ T7698] ? avc_policy_seqno+0x9/0x20 [ 219.740113][ T7698] ? __pfx_fuse_dev_splice_read+0x10/0x10 [ 219.740126][ T7698] do_splice_read+0x285/0x370 [ 219.740143][ T7698] splice_file_to_pipe+0x82/0x120 [ 219.740159][ T7698] do_splice+0xda7/0x2090 [ 219.740173][ T7698] ? __lock_acquire+0x5c0/0x1f40 [ 219.740188][ T7698] ? ksys_write+0x190/0x250 [ 219.740203][ T7698] ? __pfx_do_splice+0x10/0x10 [ 219.740217][ T7698] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 219.740230][ T7698] ? __fget_files+0x34/0x3d0 [ 219.740244][ T7698] ? find_held_lock+0x2b/0x80 [ 219.740257][ T7698] __do_splice+0x113/0x370 [ 219.740273][ T7698] ? __pfx___do_splice+0x10/0x10 [ 219.740291][ T7698] __x64_sys_splice+0x187/0x250 [ 219.740308][ T7698] do_syscall_64+0x123/0x7b0 [ 219.740323][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.740334][ T7698] RIP: 0033:0x7f982eb9fb19 [ 219.740343][ T7698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.740352][ T7698] RSP: 002b:00007f982fb21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 219.740363][ T7698] RAX: ffffffffffffffda RBX: 00007f982ee25fa0 RCX: 00007f982eb9fb19 [ 219.740370][ T7698] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 219.740376][ T7698] RBP: 00007f982ec37b70 R08: 000000000000f55f R09: 0000000000000000 [ 219.740382][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.740388][ T7698] R13: 00007f982ee26038 R14: 00007f982ee25fa0 R15: 00007ffca98bde98 [ 219.740403][ T7698] [ 220.323975][ T7715] af_packet: packet size is too long (65369 > 2016) [ 220.962628][ T7746] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 221.808724][ T7767] tipc: Enabling of bearer rejected, failed to enable media [ 222.952266][ T5628] Bluetooth: hci5: command 0x1003 tx timeout [ 222.952326][ T4939] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 224.155449][ T974] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 224.223414][ T31] kauditd_printk_skb: 31 callbacks suppressed [ 224.223440][ T31] audit: type=1400 audit(1794197312.026:944): avc: denied { create } for pid=7805 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.280983][ T31] audit: type=1400 audit(1794197312.076:945): avc: denied { setopt } for pid=7805 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.304305][ T31] audit: type=1400 audit(1794197312.106:946): avc: denied { write } for pid=7794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.329082][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 224.329902][ T974] usb 2-1: New USB device found: idVendor=046d, idProduct=c215, bcdDevice=0.00 [ 224.330498][ T31] audit: type=1400 audit(1794197312.126:947): avc: denied { ioctl } for pid=7805 comm="syz.4.667" path="socket:[16887]" dev="sockfs" ino=16887 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.346982][ T974] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.347000][ T974] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.347012][ T974] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.347025][ T974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.347042][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.388878][ T974] usb 2-1: config 0 descriptor?? [ 224.413605][ T31] audit: type=1400 audit(1794197312.216:948): avc: denied { bind } for pid=7805 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.457664][ T31] audit: type=1400 audit(1794197312.256:949): avc: denied { write } for pid=7805 comm="syz.4.667" path="socket:[16885]" dev="sockfs" ino=16885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.708536][ T31] audit: type=1400 audit(1794197312.506:950): avc: denied { write } for pid=7811 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.825943][ T31] audit: type=1400 audit(1794197312.626:951): avc: denied { create } for pid=7819 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 224.848213][ T31] audit: type=1400 audit(1794197312.646:952): avc: denied { read } for pid=7819 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 224.879548][ T31] audit: type=1400 audit(1794197312.676:953): avc: denied { write } for pid=7819 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 224.951992][ T974] input: HID 046d:c215 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C215.0003/input/input18 [ 224.973760][ T5753] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 225.080568][ T974] logitech 0003:046D:C215.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.1-1/input0 [ 225.123050][ T5753] usb 3-1: Using ep0 maxpacket: 32 [ 225.126427][ T5753] usb 3-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 225.127773][ T5753] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 225.127790][ T5753] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.127801][ T5753] usb 3-1: config 0 interface 0 has no altsetting 0 [ 225.127816][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.130335][ T5753] usb 3-1: config 0 descriptor?? [ 225.257911][ T974] usb 2-1: USB disconnect, device number 11 [ 225.356176][ T7832] FAULT_INJECTION: forcing a failure. [ 225.356176][ T7832] name failslab, interval 1, probability 0, space 0, times 0 [ 225.356195][ T7832] CPU: 0 UID: 0 PID: 7832 Comm: syz.0.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.356211][ T7832] Tainted: [L]=SOFTLOCKUP [ 225.356215][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 225.356221][ T7832] Call Trace: [ 225.356225][ T7832] [ 225.356229][ T7832] dump_stack_lvl+0x100/0x190 [ 225.356251][ T7832] should_fail_ex.cold+0x5/0xa [ 225.356269][ T7832] should_failslab+0xc2/0x120 [ 225.356283][ T7832] __kmalloc_cache_noprof+0x91/0x6d0 [ 225.356299][ T7832] ? fscontext_alloc_log+0x4a/0x1b0 [ 225.356314][ T7832] fscontext_alloc_log+0x4a/0x1b0 [ 225.356326][ T7832] __x64_sys_fsopen+0x1d7/0x2d0 [ 225.356338][ T7832] do_syscall_64+0x123/0x7b0 [ 225.356353][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.356364][ T7832] RIP: 0033:0x7f0d7f99fb19 [ 225.356373][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.356383][ T7832] RSP: 002b:00007f0d8091b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 225.356394][ T7832] RAX: ffffffffffffffda RBX: 00007f0d7fc25fa0 RCX: 00007f0d7f99fb19 [ 225.356407][ T7832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000004c0 [ 225.356413][ T7832] RBP: 00007f0d7fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 225.356419][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.356424][ T7832] R13: 00007f0d7fc26038 R14: 00007f0d7fc25fa0 R15: 00007ffe8a869b88 [ 225.356438][ T7832] [ 225.552735][ T5753] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 225.552755][ T5753] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 225.552766][ T5753] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 225.552778][ T5753] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 225.552789][ T5753] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 225.553388][ T7829] fido_id[7829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 225.624428][ T5753] corsair-psu 0003:1B1C:1C09.0004: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 225.624483][ T5753] corsair-psu 0003:1B1C:1C09.0004: unable to initialize device (-90) [ 225.673653][ T5753] corsair-psu 0003:1B1C:1C09.0004: probe with driver corsair-psu failed with error -90 [ 225.772416][ T5753] usb 3-1: USB disconnect, device number 11 [ 225.804796][ T7834] fido_id[7834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 225.897373][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.677'. [ 226.033750][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.041868][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.164945][ T4939] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 226.972294][ T5732] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 227.122649][ T5732] usb 2-1: New USB device found: idVendor=1294, idProduct=1320, bcdDevice=0.00 [ 227.135370][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.135393][ T5732] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 227.135413][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.136792][ T5732] usb 2-1: config 0 descriptor?? [ 227.382050][ T7892] FAULT_INJECTION: forcing a failure. [ 227.382050][ T7892] name fail_futex, interval 1, probability 0, space 0, times 0 [ 227.382069][ T7892] CPU: 0 UID: 0 PID: 7892 Comm: syz.4.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.382085][ T7892] Tainted: [L]=SOFTLOCKUP [ 227.382091][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 227.382098][ T7892] Call Trace: [ 227.382102][ T7892] [ 227.382106][ T7892] dump_stack_lvl+0x100/0x190 [ 227.382127][ T7892] should_fail_ex.cold+0x5/0xa [ 227.382144][ T7892] get_futex_key+0x1c9/0x13e0 [ 227.382159][ T7892] ? __pfx_get_futex_key+0x10/0x10 [ 227.382175][ T7892] futex_wake+0xf4/0x5e0 [ 227.382191][ T7892] ? __pfx_futex_wake+0x10/0x10 [ 227.382203][ T7892] ? kasan_quarantine_put+0x104/0x240 [ 227.382217][ T7892] ? putname+0xb1/0x110 [ 227.382229][ T7892] ? kmem_cache_free+0x127/0x6c0 [ 227.382246][ T7892] do_futex+0x2b2/0x440 [ 227.382259][ T7892] ? __pfx_do_futex+0x10/0x10 [ 227.382270][ T7892] ? __pfx_do_sys_openat2+0x10/0x10 [ 227.382288][ T7892] __x64_sys_futex+0x34f/0x4d0 [ 227.382301][ T7892] ? __x64_sys_openat+0x12d/0x210 [ 227.382316][ T7892] ? __pfx___x64_sys_futex+0x10/0x10 [ 227.382334][ T7892] do_syscall_64+0x123/0x7b0 [ 227.382348][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.382358][ T7892] RIP: 0033:0x7f821179fb19 [ 227.382368][ T7892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.382385][ T7892] RSP: 002b:00007f82126a10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 227.382397][ T7892] RAX: ffffffffffffffda RBX: 00007f8211a25fa8 RCX: 00007f821179fb19 [ 227.382404][ T7892] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8211a25fac [ 227.382411][ T7892] RBP: 00007f8211a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 227.382418][ T7892] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 227.382425][ T7892] R13: 00007f8211a26038 R14: 00007fff9ddda730 R15: 00007fff9ddda818 [ 227.382441][ T7892] [ 227.611037][ T5732] hid (null): global environment stack underflow [ 227.623783][ T5732] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 227.623801][ T5732] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 227.623812][ T5732] hid-led 0003:1294:1320.0005: unknown main item tag 0x0 [ 227.623824][ T5732] hid-led 0003:1294:1320.0005: global environment stack underflow [ 227.623831][ T5732] hid-led 0003:1294:1320.0005: item 0 4 1 11 parsing failed [ 227.624143][ T5732] hid-led 0003:1294:1320.0005: probe with driver hid-led failed with error -22 [ 227.787310][ T7897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.787320][ T7897] IPv6: NLM_F_CREATE should be set when creating new route [ 227.914462][ T5753] usb 2-1: USB disconnect, device number 12 [ 227.997490][ T7905] netfs: Cache "CacheFiles" added (type cachefiles) [ 227.997514][ T7905] CacheFiles: File cache on CacheFiles registered [ 227.998985][ T7904] CacheFiles: File cache on CacheFiles unregistering [ 227.999004][ T7904] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 228.692048][ T7929] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 229.147649][ T7940] FAULT_INJECTION: forcing a failure. [ 229.147649][ T7940] name failslab, interval 1, probability 0, space 0, times 0 [ 229.147684][ T7940] CPU: 0 UID: 0 PID: 7940 Comm: syz.0.716 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.147700][ T7940] Tainted: [L]=SOFTLOCKUP [ 229.147704][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 229.147711][ T7940] Call Trace: [ 229.147715][ T7940] [ 229.147722][ T7940] dump_stack_lvl+0x100/0x190 [ 229.147744][ T7940] should_fail_ex.cold+0x5/0xa [ 229.147762][ T7940] should_failslab+0xc2/0x120 [ 229.147776][ T7940] kmem_cache_alloc_noprof+0x92/0x6a0 [ 229.147794][ T7940] ? mas_preallocate+0xc22/0xee0 [ 229.147812][ T7940] mas_preallocate+0xc22/0xee0 [ 229.147828][ T7940] ? __pfx_mas_preallocate+0x10/0x10 [ 229.147847][ T7940] ? anon_vma_name+0x5a/0x250 [ 229.147860][ T7940] ? vma_add_pgoff+0x1fd/0xa90 [ 229.147875][ T7940] __split_vma+0x447/0xce0 [ 229.147891][ T7940] ? __pfx___split_vma+0x10/0x10 [ 229.147914][ T7940] vma_modify+0x1385/0x2aa0 [ 229.147933][ T7940] ? __pfx_vma_modify+0x10/0x10 [ 229.147947][ T7940] ? __lock_acquire+0x5c0/0x1f40 [ 229.147969][ T7940] vma_modify_flags_uffd+0x312/0x470 [ 229.147985][ T7940] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 229.148006][ T7940] ? __pfx_vma_can_userfault+0x10/0x10 [ 229.148023][ T7940] ? __pfx___might_resched+0x10/0x10 [ 229.148038][ T7940] userfaultfd_register_range+0x66e/0xc50 [ 229.148060][ T7940] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 229.148076][ T7940] ? __lock_acquire+0x5c0/0x1f40 [ 229.148094][ T7940] ? mtree_range_walk+0x72b/0xb70 [ 229.148106][ T7940] ? anon_can_userfault+0x24/0x40 [ 229.148120][ T7940] ? vma_can_userfault+0x2c4/0x6b0 [ 229.148136][ T7940] ? __pfx_vma_can_userfault+0x10/0x10 [ 229.148152][ T7940] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.148172][ T7940] userfaultfd_register+0x8fb/0xe60 [ 229.148192][ T7940] ? __pfx_userfaultfd_register+0x10/0x10 [ 229.148215][ T7940] ? tomoyo_path_number_perm+0x188/0x580 [ 229.148235][ T7940] userfaultfd_ioctl+0x2e6f/0x6550 [ 229.148254][ T7940] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.148272][ T7940] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 229.148287][ T7940] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 229.148297][ T7940] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 229.148309][ T7940] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 229.148322][ T7940] ? __fget_files+0x34/0x3d0 [ 229.148341][ T7940] ? selinux_file_ioctl+0x1e0/0x290 [ 229.148351][ T7940] ? selinux_file_ioctl+0x1e7/0x290 [ 229.148361][ T7940] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 229.148385][ T7940] ? __x64_sys_ioctl+0x18e/0x210 [ 229.148395][ T7940] __x64_sys_ioctl+0x18e/0x210 [ 229.148408][ T7940] do_syscall_64+0x123/0x7b0 [ 229.148423][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.148435][ T7940] RIP: 0033:0x7f0d7f99fb19 [ 229.148444][ T7940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.148454][ T7940] RSP: 002b:00007f0d8091b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.148465][ T7940] RAX: ffffffffffffffda RBX: 00007f0d7fc25fa0 RCX: 00007f0d7f99fb19 [ 229.148472][ T7940] RDX: 0000200000009380 RSI: 00000000c020aa00 RDI: 0000000000000004 [ 229.148478][ T7940] RBP: 00007f0d7fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 229.148484][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.148490][ T7940] R13: 00007f0d7fc26038 R14: 00007f0d7fc25fa0 R15: 00007ffe8a869b88 [ 229.148504][ T7940] [ 229.178174][ T11] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 229.528882][ T11] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 229.555041][ T11] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 229.555082][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.704054][ T7930] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 229.813696][ T11] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 229.984289][ T7952] netlink: 'syz.2.721': attribute type 1 has an invalid length. [ 230.030114][ T7952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.041915][ T4939] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 230.041931][ T4939] CPU: 0 UID: 0 PID: 4939 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.041947][ T4939] Tainted: [L]=SOFTLOCKUP [ 230.041951][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 230.041958][ T4939] Workqueue: hci0 hci_rx_work [ 230.041977][ T4939] Call Trace: [ 230.041981][ T4939] [ 230.041986][ T4939] dump_stack_lvl+0x100/0x190 [ 230.042005][ T4939] sysfs_warn_dup.cold+0x1c/0x28 [ 230.042023][ T4939] sysfs_create_dir_ns+0x24b/0x2b0 [ 230.042039][ T4939] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 230.042054][ T4939] ? find_held_lock+0x2b/0x80 [ 230.042066][ T4939] ? kobject_add_internal+0x25f/0x930 [ 230.042084][ T4939] ? kobject_add_internal+0x25f/0x930 [ 230.042103][ T4939] ? do_raw_spin_unlock+0x145/0x1e0 [ 230.042115][ T4939] kobject_add_internal+0x2c8/0x930 [ 230.042134][ T4939] kobject_add+0x16a/0x1e0 [ 230.042143][ T4939] ? __pfx_kobject_add+0x10/0x10 [ 230.042152][ T4939] ? class_to_subsys+0x10f/0x150 [ 230.042170][ T4939] ? kobject_put+0xb9/0x640 [ 230.042185][ T4939] ? _raw_spin_unlock+0x28/0x50 [ 230.042198][ T4939] device_add+0x294/0x1970 [ 230.042213][ T4939] ? __pfx_dev_set_name+0x10/0x10 [ 230.042223][ T4939] ? __pfx_device_add+0x10/0x10 [ 230.042238][ T4939] ? mgmt_send_event_skb+0x2fb/0x460 [ 230.042256][ T4939] hci_conn_add_sysfs+0x1a3/0x260 [ 230.042272][ T4939] le_conn_complete_evt+0x12f9/0x2310 [ 230.042289][ T4939] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 230.042302][ T4939] ? hci_event_packet+0x186/0xcd0 [ 230.042320][ T4939] hci_le_conn_complete_evt+0x23c/0x3a0 [ 230.042334][ T4939] ? skb_pull_data+0x15f/0x1e0 [ 230.042352][ T4939] hci_le_meta_evt+0x34a/0x5f0 [ 230.042386][ T4939] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 230.042407][ T4939] hci_event_packet+0x51c/0xcd0 [ 230.042422][ T4939] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 230.042436][ T4939] ? __pfx_hci_event_packet+0x10/0x10 [ 230.042454][ T4939] ? lockdep_hardirqs_on+0x7d/0x110 [ 230.042470][ T4939] hci_rx_work+0x6ea/0x10c0 [ 230.042486][ T4939] process_one_work+0xac7/0x1b10 [ 230.042506][ T4939] ? __pfx_process_one_work+0x10/0x10 [ 230.042520][ T4939] ? lock_acquire+0x1d1/0x380 [ 230.042538][ T4939] ? __pfx_hci_rx_work+0x10/0x10 [ 230.042552][ T4939] worker_thread+0x5ef/0xe50 [ 230.042568][ T4939] ? __pfx_worker_thread+0x10/0x10 [ 230.042580][ T4939] ? kthread+0x13a/0x450 [ 230.042589][ T4939] ? __pfx_worker_thread+0x10/0x10 [ 230.042600][ T4939] kthread+0x373/0x450 [ 230.042609][ T4939] ? __pfx_kthread+0x10/0x10 [ 230.042621][ T4939] ret_from_fork+0x730/0xd60 [ 230.042635][ T4939] ? __pfx_ret_from_fork+0x10/0x10 [ 230.042650][ T4939] ? __switch_to+0x800/0x10e0 [ 230.042660][ T4939] ? __pfx_kthread+0x10/0x10 [ 230.042671][ T4939] ret_from_fork_asm+0x1a/0x30 [ 230.042691][ T4939] [ 230.052294][ T4939] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 230.052317][ T4939] Bluetooth: hci0: failed to register connection device [ 230.435991][ T11] usb 2-1: USB disconnect, device number 13 [ 230.646337][ T7964] FAULT_INJECTION: forcing a failure. [ 230.646337][ T7964] name failslab, interval 1, probability 0, space 0, times 0 [ 230.646378][ T7964] CPU: 0 UID: 0 PID: 7964 Comm: syz.0.724 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.646395][ T7964] Tainted: [L]=SOFTLOCKUP [ 230.646400][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 230.646408][ T7964] Call Trace: [ 230.646412][ T7964] [ 230.646417][ T7964] dump_stack_lvl+0x100/0x190 [ 230.646439][ T7964] should_fail_ex.cold+0x5/0xa [ 230.646457][ T7964] should_failslab+0xc2/0x120 [ 230.646471][ T7964] __kmalloc_noprof+0xfc/0x840 [ 230.646487][ T7964] ? sock_kmalloc+0x111/0x170 [ 230.646507][ T7964] sock_kmalloc+0x111/0x170 [ 230.646523][ T7964] __tcp_md5_do_add+0x15f/0x500 [ 230.646541][ T7964] tcp_md5_do_add+0xae/0x430 [ 230.646558][ T7964] tcp_v6_parse_md5_keys+0x264/0x860 [ 230.646571][ T7964] ? __pfx_tcp_v6_parse_md5_keys+0x10/0x10 [ 230.646594][ T7964] ? __local_bh_enable_ip+0xa5/0x120 [ 230.646607][ T7964] ? lockdep_hardirqs_on+0x7d/0x110 [ 230.646623][ T7964] do_tcp_setsockopt+0x1a78/0x2b50 [ 230.646640][ T7964] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 230.646660][ T7964] ? __pfx_sock_has_perm+0x10/0x10 [ 230.646676][ T7964] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 230.646688][ T7964] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 230.646703][ T7964] ? find_held_lock+0x2b/0x80 [ 230.646714][ T7964] ? __fget_files+0x215/0x3d0 [ 230.646729][ T7964] tcp_setsockopt+0xe2/0x100 [ 230.646744][ T7964] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 230.646760][ T7964] do_sock_setsockopt+0xf3/0x1d0 [ 230.646777][ T7964] __sys_setsockopt+0x195/0x220 [ 230.646792][ T7964] __x64_sys_setsockopt+0xbd/0x160 [ 230.646804][ T7964] ? do_syscall_64+0xae/0x7b0 [ 230.646816][ T7964] ? lockdep_hardirqs_on+0x7d/0x110 [ 230.646828][ T7964] do_syscall_64+0x123/0x7b0 [ 230.646841][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.646852][ T7964] RIP: 0033:0x7f0d7f99fb19 [ 230.646861][ T7964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.646871][ T7964] RSP: 002b:00007f0d8091b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 230.646882][ T7964] RAX: ffffffffffffffda RBX: 00007f0d7fc25fa0 RCX: 00007f0d7f99fb19 [ 230.646889][ T7964] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000004 [ 230.646895][ T7964] RBP: 00007f0d7fa37b70 R08: 00000000000000d8 R09: 0000000000000000 [ 230.646901][ T7964] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 230.646907][ T7964] R13: 00007f0d7fc26038 R14: 00007f0d7fc25fa0 R15: 00007ffe8a869b88 [ 230.646922][ T7964] [ 231.146091][ T7969] FAULT_INJECTION: forcing a failure. [ 231.146091][ T7969] name failslab, interval 1, probability 0, space 0, times 0 [ 231.146126][ T7969] CPU: 0 UID: 0 PID: 7969 Comm: syz.0.726 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.146140][ T7969] Tainted: [L]=SOFTLOCKUP [ 231.146145][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 231.146151][ T7969] Call Trace: [ 231.146155][ T7969] [ 231.146159][ T7969] dump_stack_lvl+0x100/0x190 [ 231.146181][ T7969] should_fail_ex.cold+0x5/0xa [ 231.146198][ T7969] should_failslab+0xc2/0x120 [ 231.146212][ T7969] kmem_cache_alloc_noprof+0x92/0x6a0 [ 231.146229][ T7969] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 231.146245][ T7969] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 231.146256][ T7969] ? kvm_msr_allowed+0x2d0/0x450 [ 231.146272][ T7969] kvm_mmu_load+0xe3/0x25b0 [ 231.146286][ T7969] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 231.146297][ T7969] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 231.146310][ T7969] ? __pfx_kvm_mmu_load+0x10/0x10 [ 231.146323][ T7969] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 231.146337][ T7969] ? kvm_check_and_inject_events+0x896/0x1050 [ 231.146353][ T7969] vcpu_run+0x4009/0x60d0 [ 231.146380][ T7969] ? __pfx_vcpu_run+0x10/0x10 [ 231.146393][ T7969] ? kvm_arch_vcpu_load+0x15e/0xcf0 [ 231.146406][ T7969] ? lock_acquire+0x1d1/0x380 [ 231.146420][ T7969] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1de0 [ 231.146436][ T7969] ? fpu_swap_kvm_fpstate+0x25e/0x4b0 [ 231.146447][ T7969] ? __local_bh_enable_ip+0xa5/0x120 [ 231.146462][ T7969] ? kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 231.146476][ T7969] kvm_arch_vcpu_ioctl_run+0x1355/0x1de0 [ 231.146495][ T7969] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 231.146510][ T7969] ? lock_acquire+0x1d1/0x380 [ 231.146525][ T7969] ? do_raw_write_lock+0x11e/0x260 [ 231.146535][ T7969] ? find_held_lock+0x2b/0x80 [ 231.146546][ T7969] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 231.146560][ T7969] ? kvm_vcpu_ioctl+0x15c6/0x17b0 [ 231.146579][ T7969] kvm_vcpu_ioctl+0x735/0x17b0 [ 231.146596][ T7969] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 231.146612][ T7969] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.146630][ T7969] ? do_vfs_ioctl+0x226/0x13e0 [ 231.146642][ T7969] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 231.146651][ T7969] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 231.146664][ T7969] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 231.146677][ T7969] ? __fget_files+0x34/0x3d0 [ 231.146697][ T7969] ? selinux_file_ioctl+0x1e0/0x290 [ 231.146707][ T7969] ? selinux_file_ioctl+0x1e7/0x290 [ 231.146718][ T7969] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 231.146734][ T7969] __x64_sys_ioctl+0x18e/0x210 [ 231.146746][ T7969] do_syscall_64+0x123/0x7b0 [ 231.146760][ T7969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.146771][ T7969] RIP: 0033:0x7f0d7f99fb19 [ 231.146781][ T7969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.146792][ T7969] RSP: 002b:00007f0d8091b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.146804][ T7969] RAX: ffffffffffffffda RBX: 00007f0d7fc25fa0 RCX: 00007f0d7f99fb19 [ 231.146812][ T7969] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 231.146818][ T7969] RBP: 00007f0d7fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 231.146825][ T7969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.146831][ T7969] R13: 00007f0d7fc26038 R14: 00007f0d7fc25fa0 R15: 00007ffe8a869b88 [ 231.146846][ T7969] [ 231.277591][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 231.277602][ T31] audit: type=1400 audit(1794197319.076:986): avc: denied { mount } for pid=7972 comm="syz.2.728" name="/" dev="gadgetfs" ino=7786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 231.586100][ T7973] FAULT_INJECTION: forcing a failure. [ 231.586100][ T7973] name failslab, interval 1, probability 0, space 0, times 0 [ 231.586122][ T7973] CPU: 0 UID: 0 PID: 7973 Comm: syz.2.728 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.586138][ T7973] Tainted: [L]=SOFTLOCKUP [ 231.586142][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 231.586149][ T7973] Call Trace: [ 231.586154][ T7973] [ 231.586159][ T7973] dump_stack_lvl+0x100/0x190 [ 231.586181][ T7973] should_fail_ex.cold+0x5/0xa [ 231.586200][ T7973] should_failslab+0xc2/0x120 [ 231.586214][ T7973] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 231.586231][ T7973] ? __d_alloc+0x34/0xad0 [ 231.586248][ T7973] __d_alloc+0x34/0xad0 [ 231.586264][ T7973] d_alloc+0x4a/0x1e0 [ 231.586280][ T7973] lookup_one_qstr_excl+0x171/0x250 [ 231.586297][ T7973] start_dirop+0x59/0xb0 [ 231.586309][ T7973] simple_start_creating+0xf9/0x110 [ 231.586323][ T7973] ? __pfx_simple_start_creating+0x10/0x10 [ 231.586344][ T7973] ? gadgetfs_make_inode+0x15b/0x1c0 [ 231.586362][ T7973] gadgetfs_create_file+0x72/0xe0 [ 231.586379][ T7973] gadgetfs_bind+0x4a7/0x940 [ 231.586401][ T7973] gadget_bind_driver+0x28c/0xbf0 [ 231.586412][ T7973] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 231.586430][ T7973] ? __pfx_gadget_bind_driver+0x10/0x10 [ 231.586443][ T7973] really_probe+0x241/0xa60 [ 231.586459][ T7973] __driver_probe_device+0x210/0x460 [ 231.586472][ T7973] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 231.586486][ T7973] driver_probe_device+0x4a/0x140 [ 231.586500][ T7973] __driver_attach+0x231/0x5b0 [ 231.586513][ T7973] ? __pfx___driver_attach+0x10/0x10 [ 231.586526][ T7973] bus_for_each_dev+0x13e/0x1d0 [ 231.586536][ T7973] ? __pfx_bus_for_each_dev+0x10/0x10 [ 231.586546][ T7973] ? bus_add_driver+0x306/0x620 [ 231.586561][ T7973] bus_add_driver+0x4bf/0x620 [ 231.586575][ T7973] driver_register+0x1e2/0x360 [ 231.586591][ T7973] usb_gadget_register_driver_owner+0x132/0x210 [ 231.586603][ T7973] dev_config+0xdce/0x1610 [ 231.586620][ T7973] ? __lock_acquire+0x1f20/0x1f40 [ 231.586635][ T7973] ? __pfx_dev_config+0x10/0x10 [ 231.586654][ T7973] vfs_write+0x2aa/0x1040 [ 231.586665][ T7973] ? __pfx_dev_config+0x10/0x10 [ 231.586680][ T7973] ? lock_acquire+0x1d1/0x380 [ 231.586693][ T7973] ? __fget_files+0x34/0x3d0 [ 231.586705][ T7973] ? __pfx_vfs_write+0x10/0x10 [ 231.586715][ T7973] ? find_held_lock+0x2b/0x80 [ 231.586727][ T7973] ? __fget_files+0x215/0x3d0 [ 231.586742][ T7973] ? __fget_files+0x21f/0x3d0 [ 231.586760][ T7973] ksys_write+0x12a/0x250 [ 231.586770][ T7973] ? __pfx_ksys_write+0x10/0x10 [ 231.586786][ T7973] do_syscall_64+0x123/0x7b0 [ 231.586800][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.586811][ T7973] RIP: 0033:0x7f17d1b9fb19 [ 231.586821][ T7973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.586832][ T7973] RSP: 002b:00007f17d29df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.586842][ T7973] RAX: ffffffffffffffda RBX: 00007f17d1e25fa0 RCX: 00007f17d1b9fb19 [ 231.586849][ T7973] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 0000000000000004 [ 231.586855][ T7973] RBP: 00007f17d1c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 231.586861][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.586867][ T7973] R13: 00007f17d1e26038 R14: 00007f17d1e25fa0 R15: 00007ffe4c53c4b8 [ 231.586882][ T7973] [ 231.959805][ T7973] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 231.959823][ T7973] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 232.016174][ T31] audit: type=1400 audit(1794197319.816:987): avc: denied { unmount } for pid=5625 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 232.049780][ T7973] gadgetfs: bound to dummy_udc driver [ 232.081676][ T31] audit: type=1400 audit(1794197319.876:988): avc: denied { read } for pid=7976 comm="syz.3.729" path="socket:[18233]" dev="sockfs" ino=18233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.172740][ T31] audit: type=1400 audit(1794197319.966:989): avc: denied { unmount } for pid=5624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 232.210446][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 232.210462][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 232.210471][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2172 instead [ 232.210482][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8fd5 instead [ 232.210490][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 232.210498][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 232.210507][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 232.210518][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 232.210536][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 232.210567][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 232.210575][ T7982] jffs2: Further such events for this erase block will not be printed [ 232.210775][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 232.210783][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 232.210792][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2172 instead [ 232.210801][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8fd5 instead [ 232.210808][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 232.210829][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 232.210837][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 232.210847][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 232.210862][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 232.210878][ T7982] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 232.210886][ T7982] jffs2: Further such events for this erase block will not be printed [ 232.211135][ T7982] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 232.211140][ T7982] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 232.694568][ T31] audit: type=1400 audit(1794197320.496:990): avc: denied { sys_module } for pid=7990 comm="syz.0.734" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 233.009312][ T31] audit: type=1400 audit(1794197320.806:991): avc: denied { read } for pid=7999 comm="syz.2.738" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 233.068044][ T4939] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 233.148110][ T31] audit: type=1400 audit(1794197320.946:992): avc: denied { create } for pid=8004 comm="syz.3.740" name="#10" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 233.177620][ T31] audit: type=1400 audit(1794197320.976:993): avc: denied { link } for pid=8004 comm="syz.3.740" name="#10" dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 233.206007][ T8001] svc: failed to register lockdv1 RPC service (errno 5). [ 233.206143][ T8001] lockd_up: makesock failed, error=-5 [ 233.216853][ T31] audit: type=1400 audit(1794197321.016:994): avc: denied { rename } for pid=8004 comm="syz.3.740" name="#11" dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 233.415224][ T8001] svc: failed to register nfsdv3 RPC service (errno 5). [ 233.415238][ T8001] failed to unregister tcp with rpcbind [ 233.598009][ T31] audit: type=1400 audit(1794197321.396:995): avc: denied { read } for pid=8015 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 233.964908][ T8034] loop7: detected capacity change from 0 to 7 [ 233.965043][ T8034] FAULT_INJECTION: forcing a failure. [ 233.965043][ T8034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.965058][ T8034] CPU: 0 UID: 0 PID: 8034 Comm: syz.2.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.965075][ T8034] Tainted: [L]=SOFTLOCKUP [ 233.965079][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 233.965086][ T8034] Call Trace: [ 233.965092][ T8034] [ 233.965096][ T8034] dump_stack_lvl+0x100/0x190 [ 233.965117][ T8034] should_fail_ex.cold+0x5/0xa [ 233.965135][ T8034] should_fail_alloc_page+0xeb/0x140 [ 233.965151][ T8034] prepare_alloc_pages+0x1f0/0x5b0 [ 233.965163][ T8034] ? is_bpf_text_address+0x94/0x1a0 [ 233.965178][ T8034] __alloc_frozen_pages_noprof+0x1ae/0x31e0 [ 233.965200][ T8034] ? stack_trace_save+0x8e/0xc0 [ 233.965216][ T8034] ? __pfx_stack_trace_save+0x10/0x10 [ 233.965232][ T8034] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 233.965251][ T8034] ? kasan_save_stack+0x3f/0x50 [ 233.965261][ T8034] ? kasan_save_stack+0x30/0x50 [ 233.965271][ T8034] ? kasan_save_track+0x14/0x30 [ 233.965281][ T8034] ? __kasan_slab_alloc+0x89/0x90 [ 233.965291][ T8034] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 233.965307][ T8034] ? alloc_vmap_area+0x1829/0x2bc0 [ 233.965321][ T8034] ? __get_vm_area_node+0x1ed/0x350 [ 233.965332][ T8034] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 233.965344][ T8034] ? __vmalloc_node_noprof+0xad/0xf0 [ 233.965355][ T8034] ? bdev_disk_changed+0x448/0xd30 [ 233.965366][ T8034] ? loop_reread_partitions+0x68/0xe0 [ 233.965377][ T8034] ? loop_configure+0x1936/0x1f70 [ 233.965388][ T8034] ? lo_ioctl+0x9d3/0x1050 [ 233.965398][ T8034] ? blkdev_ioctl+0x5ad/0x6f0 [ 233.965409][ T8034] ? __x64_sys_ioctl+0x18e/0x210 [ 233.965420][ T8034] ? do_syscall_64+0x123/0x7b0 [ 233.965434][ T8034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.965452][ T8034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.965470][ T8034] ? policy_nodemask+0xed/0x5e0 [ 233.965484][ T8034] alloc_pages_mpol+0x201/0x560 [ 233.965498][ T8034] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 233.965515][ T8034] alloc_pages_noprof+0x1a/0x160 [ 233.965529][ T8034] get_free_pages_noprof+0x10/0xb0 [ 233.965539][ T8034] __kasan_populate_vmalloc+0xa0/0x210 [ 233.965559][ T8034] alloc_vmap_area+0x963/0x2bc0 [ 233.965574][ T8034] ? kasan_save_track+0x14/0x30 [ 233.965584][ T8034] ? __kasan_kmalloc+0xaa/0xb0 [ 233.965594][ T8034] ? __pfx_alloc_vmap_area+0x10/0x10 [ 233.965611][ T8034] ? kasan_save_track+0x14/0x30 [ 233.965621][ T8034] ? __get_vm_area_node+0x124/0x350 [ 233.965633][ T8034] __get_vm_area_node+0x1ed/0x350 [ 233.965647][ T8034] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 233.965659][ T8034] ? bdev_disk_changed+0x448/0xd30 [ 233.965673][ T8034] ? bdev_disk_changed+0x448/0xd30 [ 233.965687][ T8034] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.965701][ T8034] ? kasan_save_track+0x14/0x30 [ 233.965711][ T8034] ? __kasan_kmalloc+0xaa/0xb0 [ 233.965723][ T8034] ? bdev_disk_changed+0x448/0xd30 [ 233.965733][ T8034] __vmalloc_node_noprof+0xad/0xf0 [ 233.965744][ T8034] ? bdev_disk_changed+0x448/0xd30 [ 233.965756][ T8034] bdev_disk_changed+0x448/0xd30 [ 233.965772][ T8034] ? __pfx_bdev_disk_changed+0x10/0x10 [ 233.965782][ T8034] ? kobject_uevent_env+0x2e7/0x18b0 [ 233.965796][ T8034] loop_reread_partitions+0x68/0xe0 [ 233.965807][ T8034] loop_configure+0x1936/0x1f70 [ 233.965823][ T8034] ? __pfx_loop_configure+0x10/0x10 [ 233.965842][ T8034] ? bpf_ksym_find+0x128/0x1c0 [ 233.965857][ T8034] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 233.965885][ T8034] lo_ioctl+0x9d3/0x1050 [ 233.965898][ T8034] ? __lock_acquire+0x5c0/0x1f40 [ 233.965913][ T8034] ? __kasan_slab_free+0x5f/0x80 [ 233.965923][ T8034] ? kfree+0x22b/0x6d0 [ 233.965935][ T8034] ? tomoyo_path_number_perm+0x46d/0x580 [ 233.965951][ T8034] ? security_file_ioctl+0xd3/0x230 [ 233.965966][ T8034] ? __x64_sys_ioctl+0xb7/0x210 [ 233.965975][ T8034] ? do_syscall_64+0x123/0x7b0 [ 233.965986][ T8034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.966000][ T8034] ? __pfx_lo_ioctl+0x10/0x10 [ 233.966010][ T8034] ? avc_has_extended_perms+0x201/0x10b0 [ 233.966024][ T8034] ? find_held_lock+0x2b/0x80 [ 233.966034][ T8034] ? avc_has_extended_perms+0x33a/0x10b0 [ 233.966047][ T8034] ? avc_has_extended_perms+0x33a/0x10b0 [ 233.966063][ T8034] ? avc_has_extended_perms+0x4a5/0x10b0 [ 233.966079][ T8034] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 233.966094][ T8034] ? kasan_quarantine_put+0x104/0x240 [ 233.966104][ T8034] ? blk_get_meta_cap+0xd4/0x6c0 [ 233.966118][ T8034] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 233.966129][ T8034] ? tomoyo_path_number_perm+0x28f/0x580 [ 233.966148][ T8034] ? blkdev_common_ioctl+0x515/0x2b80 [ 233.966175][ T8034] ? __fget_files+0x34/0x3d0 [ 233.966190][ T8034] ? __pfx_lo_ioctl+0x10/0x10 [ 233.966202][ T8034] blkdev_ioctl+0x5ad/0x6f0 [ 233.966214][ T8034] ? __pfx_blkdev_ioctl+0x10/0x10 [ 233.966225][ T8034] ? selinux_file_ioctl+0x1e0/0x290 [ 233.966236][ T8034] ? selinux_file_ioctl+0x1e7/0x290 [ 233.966247][ T8034] ? __pfx_blkdev_ioctl+0x10/0x10 [ 233.966259][ T8034] __x64_sys_ioctl+0x18e/0x210 [ 233.966271][ T8034] do_syscall_64+0x123/0x7b0 [ 233.966284][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.966295][ T8034] RIP: 0033:0x7f17d1b9fb19 [ 233.966304][ T8034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.966320][ T8034] RSP: 002b:00007f17d29df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.966333][ T8034] RAX: ffffffffffffffda RBX: 00007f17d1e25fa0 RCX: 00007f17d1b9fb19 [ 233.966340][ T8034] RDX: 00002000000000c0 RSI: 0000000000004c0a RDI: 0000000000000005 [ 233.966347][ T8034] RBP: 00007f17d1c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 233.966354][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.966360][ T8034] R13: 00007f17d1e26038 R14: 00007f17d1e25fa0 R15: 00007ffe4c53c4b8 [ 233.966376][ T8034] [ 233.972073][ T8034] syz.2.749: vmalloc error: size 32768, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 234.003848][ T8034] CPU: 0 UID: 0 PID: 8034 Comm: syz.2.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.003864][ T8034] Tainted: [L]=SOFTLOCKUP [ 234.003868][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 234.003874][ T8034] Call Trace: [ 234.003879][ T8034] [ 234.003884][ T8034] dump_stack_lvl+0x100/0x190 [ 234.003905][ T8034] warn_alloc.cold+0x9e/0xb2 [ 234.003917][ T8034] ? __pfx_warn_alloc+0x10/0x10 [ 234.003936][ T8034] ? lockdep_hardirqs_on+0x7d/0x110 [ 234.003951][ T8034] ? __get_vm_area_node+0x2f0/0x350 [ 234.003966][ T8034] ? __get_vm_area_node+0x22b/0x350 [ 234.003980][ T8034] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 234.003997][ T8034] ? bdev_disk_changed+0x448/0xd30 [ 234.004013][ T8034] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 234.004028][ T8034] ? kasan_save_track+0x14/0x30 [ 234.004039][ T8034] ? __kasan_kmalloc+0xaa/0xb0 [ 234.004051][ T8034] ? bdev_disk_changed+0x448/0xd30 [ 234.004060][ T8034] __vmalloc_node_noprof+0xad/0xf0 [ 234.004072][ T8034] ? bdev_disk_changed+0x448/0xd30 [ 234.004083][ T8034] bdev_disk_changed+0x448/0xd30 [ 234.004100][ T8034] ? __pfx_bdev_disk_changed+0x10/0x10 [ 234.004110][ T8034] ? kobject_uevent_env+0x2e7/0x18b0 [ 234.004127][ T8034] loop_reread_partitions+0x68/0xe0 [ 234.004139][ T8034] loop_configure+0x1936/0x1f70 [ 234.004154][ T8034] ? __pfx_loop_configure+0x10/0x10 [ 234.004174][ T8034] ? bpf_ksym_find+0x128/0x1c0 [ 234.004189][ T8034] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 234.004218][ T8034] lo_ioctl+0x9d3/0x1050 [ 234.004231][ T8034] ? __lock_acquire+0x5c0/0x1f40 [ 234.004246][ T8034] ? __kasan_slab_free+0x5f/0x80 [ 234.004257][ T8034] ? kfree+0x22b/0x6d0 [ 234.004269][ T8034] ? tomoyo_path_number_perm+0x46d/0x580 [ 234.004284][ T8034] ? security_file_ioctl+0xd3/0x230 [ 234.004299][ T8034] ? __x64_sys_ioctl+0xb7/0x210 [ 234.004309][ T8034] ? do_syscall_64+0x123/0x7b0 [ 234.004326][ T8034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.004340][ T8034] ? __pfx_lo_ioctl+0x10/0x10 [ 234.004352][ T8034] ? avc_has_extended_perms+0x201/0x10b0 [ 234.004366][ T8034] ? find_held_lock+0x2b/0x80 [ 234.004378][ T8034] ? avc_has_extended_perms+0x33a/0x10b0 [ 234.004391][ T8034] ? avc_has_extended_perms+0x33a/0x10b0 [ 234.004408][ T8034] ? avc_has_extended_perms+0x4a5/0x10b0 [ 234.004425][ T8034] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 234.004441][ T8034] ? kasan_quarantine_put+0x104/0x240 [ 234.004452][ T8034] ? blk_get_meta_cap+0xd4/0x6c0 [ 234.004466][ T8034] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 234.004478][ T8034] ? tomoyo_path_number_perm+0x28f/0x580 [ 234.004499][ T8034] ? blkdev_common_ioctl+0x515/0x2b80 [ 234.004526][ T8034] ? __fget_files+0x34/0x3d0 [ 234.004541][ T8034] ? __pfx_lo_ioctl+0x10/0x10 [ 234.004553][ T8034] blkdev_ioctl+0x5ad/0x6f0 [ 234.004565][ T8034] ? __pfx_blkdev_ioctl+0x10/0x10 [ 234.004577][ T8034] ? selinux_file_ioctl+0x1e0/0x290 [ 234.004587][ T8034] ? selinux_file_ioctl+0x1e7/0x290 [ 234.004598][ T8034] ? __pfx_blkdev_ioctl+0x10/0x10 [ 234.004610][ T8034] __x64_sys_ioctl+0x18e/0x210 [ 234.004622][ T8034] do_syscall_64+0x123/0x7b0 [ 234.004635][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.004646][ T8034] RIP: 0033:0x7f17d1b9fb19 [ 234.004656][ T8034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.004666][ T8034] RSP: 002b:00007f17d29df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.004677][ T8034] RAX: ffffffffffffffda RBX: 00007f17d1e25fa0 RCX: 00007f17d1b9fb19 [ 234.004683][ T8034] RDX: 00002000000000c0 RSI: 0000000000004c0a RDI: 0000000000000005 [ 234.004689][ T8034] RBP: 00007f17d1c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 234.004695][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.004701][ T8034] R13: 00007f17d1e26038 R14: 00007f17d1e25fa0 R15: 00007ffe4c53c4b8 [ 234.004715][ T8034] [ 234.004741][ T8034] Mem-Info: [ 234.004746][ T8034] active_anon:11205 inactive_anon:169 isolated_anon:0 [ 234.004746][ T8034] active_file:12581 inactive_file:43305 isolated_file:0 [ 234.004746][ T8034] unevictable:0 dirty:338 writeback:0 [ 234.004746][ T8034] slab_reclaimable:10977 slab_unreclaimable:99523 [ 234.004746][ T8034] mapped:30817 shmem:530 pagetables:1290 [ 234.004746][ T8034] sec_pagetables:0 bounce:0 [ 234.004746][ T8034] kernel_misc_reclaimable:0 [ 234.004746][ T8034] free:1269769 free_pcp:12262 free_cma:0 [ 234.004773][ T8034] Node 0 active_anon:44820kB inactive_anon:676kB active_file:50324kB inactive_file:173028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123268kB dirty:1348kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12768kB pagetables:5044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 234.004802][ T8034] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 234.333193][ T8034] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.333228][ T8034] lowmem_reserve[]: 0 2447 2449 2449 2449 [ 234.333247][ T8034] Node 0 DMA32 free:1127112kB boost:0kB min:33784kB low:42228kB high:50672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44820kB inactive_anon:676kB active_file:50324kB inactive_file:173028kB unevictable:0kB writepending:1400kB zspages:0kB present:3129332kB managed:2506148kB mlocked:0kB bounce:0kB free_pcp:49080kB local_pcp:49080kB free_cma:0kB [ 234.333293][ T8034] lowmem_reserve[]: 0 0 1 1 1 [ 234.333311][ T8034] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1748kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.333341][ T8034] lowmem_reserve[]: 0 0 0 0 0 [ 234.333358][ T8034] Node 1 Normal free:3936416kB boost:0kB min:56092kB low:70112kB high:84132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.333385][ T8034] lowmem_reserve[]: 0 0 0 0 0 [ 234.333402][ T8034] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 234.333471][ T8034] Node 0 DMA32: 1890*4kB (UME) 1028*8kB (UME) 488*16kB (UME) 851*32kB (UME) 703*64kB (UME) 543*128kB (UME) 331*256kB (UME) 133*512kB (UME) 36*1024kB (ME) 9*2048kB (UME) 184*4096kB (UM) = 1127112kB [ 234.333548][ T8034] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 234.333608][ T8034] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 6*16kB (UM) 11*32kB (UM) 5*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 960*4096kB (UM) = 3936416kB [ 234.333681][ T8034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.333703][ T8034] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.333711][ T8034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.333718][ T8034] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.333725][ T8034] 56412 total pagecache pages [ 234.333729][ T8034] 0 pages in swap cache [ 234.333732][ T8034] Free swap = 124996kB [ 234.333735][ T8034] Total swap = 124996kB [ 234.333739][ T8034] 2097051 pages RAM [ 234.333742][ T8034] 0 pages HighMem/MovableOnly [ 234.333746][ T8034] 438461 pages reserved [ 234.333749][ T8034] 0 pages cma reserved [ 234.793712][ C0] blk_print_req_error: 5 callbacks suppressed [ 234.793725][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 234.931404][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 234.931448][ C0] buffer_io_error: 5 callbacks suppressed [ 234.931455][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.965693][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 234.965736][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.007961][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 235.008004][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.053307][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 235.053361][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.117444][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 235.117491][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 236.051110][ T8060] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 236.472263][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 237.271662][ T5764] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 237.307208][ T5764] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 237.332231][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 237.332242][ T31] audit: type=1400 audit(1794197325.126:998): avc: denied { create } for pid=8074 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.380266][ T31] audit: type=1400 audit(1794197325.176:999): avc: denied { listen } for pid=8074 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.407973][ T31] audit: type=1400 audit(1794197325.206:1000): avc: denied { accept } for pid=8074 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.464102][ T5764] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 237.531737][ T31] audit: type=1400 audit(1794197325.326:1001): avc: denied { execute } for pid=8077 comm="syz.4.765" name="file0" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 237.662918][ T5764] usb 3-1: Using ep0 maxpacket: 32 [ 237.663396][ T5764] usb 3-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 237.664224][ T5764] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 237.664240][ T5764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 237.664268][ T5764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 237.664280][ T5764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 237.664293][ T5764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 237.665745][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.665771][ T5764] usb 3-1: Product: syz [ 237.665779][ T5764] usb 3-1: Manufacturer: syz [ 237.665787][ T5764] usb 3-1: SerialNumber: syz [ 237.670253][ T5764] usb 3-1: config 0 descriptor?? [ 237.988929][ T31] audit: type=1400 audit(1794197325.786:1002): avc: denied { accept } for pid=8089 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 238.009371][ T31] audit: type=1400 audit(1794197325.806:1003): avc: denied { setopt } for pid=8089 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 238.100706][ T5764] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 238.100731][ T5764] input input19: Device does not respond to id packet M [ 238.101167][ T5764] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 238.101188][ T5764] input input19: Device does not respond to id packet P [ 238.102074][ T5764] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 238.124712][ T5764] input input19: Device does not respond to id packet B [ 238.148351][ T5764] input input19: Limiting number of effects to 32 (device reports 85) [ 238.174764][ T31] audit: type=1400 audit(1794197325.976:1004): avc: denied { read } for pid=8091 comm="syz.0.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 238.236003][ T8094] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2086850833 (33389613328 ns) > initial count (28737999776 ns). Using initial count to start timer. [ 238.270971][ T8094] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 238.353281][ T8071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.353501][ T8071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.379002][ T5764] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 238.379263][ T5764] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 238.381114][ T5764] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 238.382010][ T5764] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 238.420476][ T5764] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 238.464129][ T5764] usb 3-1: USB disconnect, device number 12 [ 238.476824][ T4973] iforce 3-1:0.0: usb_submit_urb failed -19 [ 238.492041][ T4973] iforce 3-1:0.0: usb_submit_urb failed -19 [ 238.580883][ T8100] picdev_read: 25 callbacks suppressed [ 238.580895][ T8100] kvm: pic: non byte read [ 238.580956][ T8100] kvm: pic: non byte read [ 238.581056][ T8100] kvm: pic: non byte read [ 238.763984][ T8100] kvm: pic: non byte read [ 239.025075][ T31] audit: type=1400 audit(1794197326.826:1005): avc: denied { mount } for pid=8114 comm="syz.0.778" name="/" dev="autofs" ino=19568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 239.230935][ T31] audit: type=1400 audit(1794197327.026:1006): avc: denied { relabelfrom } for pid=8121 comm="syz.2.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 239.253604][ T31] audit: type=1400 audit(1794197327.056:1007): avc: denied { relabelto } for pid=8121 comm="syz.2.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 239.401258][ T8126] syzkaller1: entered promiscuous mode [ 239.401272][ T8126] syzkaller1: entered allmulticast mode [ 239.491853][ T6067] IPVS: starting estimator thread 0... [ 239.500766][ T8130] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 239.572196][ T8131] IPVS: using max 76 ests per chain, 182400 per kthread [ 240.552371][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 242.017993][ T5764] usb 1-1: USB disconnect, device number 3 [ 242.056969][ T8185] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 242.056982][ T8185] block device autoloading is deprecated and will be removed. [ 242.087056][ T8184] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 242.446410][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 242.446421][ T31] audit: type=1400 audit(1794197330.246:1021): avc: denied { write } for pid=8199 comm="syz.0.805" path="socket:[20033]" dev="sockfs" ino=20033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.495375][ T31] audit: type=1400 audit(1794197330.296:1022): avc: denied { create } for pid=8199 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 242.497151][ T8202] FAULT_INJECTION: forcing a failure. [ 242.497151][ T8202] name failslab, interval 1, probability 0, space 0, times 0 [ 242.497169][ T8202] CPU: 0 UID: 0 PID: 8202 Comm: syz.3.806 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.497185][ T8202] Tainted: [L]=SOFTLOCKUP [ 242.497189][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 242.497196][ T8202] Call Trace: [ 242.497200][ T8202] [ 242.497205][ T8202] dump_stack_lvl+0x100/0x190 [ 242.497244][ T8202] should_fail_ex.cold+0x5/0xa [ 242.497262][ T8202] should_failslab+0xc2/0x120 [ 242.497275][ T8202] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 242.497295][ T8202] ? alloc_vmap_area+0x643/0x2bc0 [ 242.497307][ T8202] alloc_vmap_area+0x643/0x2bc0 [ 242.497321][ T8202] ? kasan_save_track+0x14/0x30 [ 242.497332][ T8202] ? __kasan_kmalloc+0xaa/0xb0 [ 242.497345][ T8202] ? __pfx_alloc_vmap_area+0x10/0x10 [ 242.497362][ T8202] ? __get_vm_area_node+0x124/0x350 [ 242.497374][ T8202] __get_vm_area_node+0x1ed/0x350 [ 242.497388][ T8202] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 242.497400][ T8202] ? bpf_prog_calc_tag+0x65/0x380 [ 242.497413][ T8202] ? kasan_save_stack+0x3f/0x50 [ 242.497422][ T8202] ? kasan_save_stack+0x30/0x50 [ 242.497432][ T8202] ? kasan_save_track+0x14/0x30 [ 242.497442][ T8202] ? __kasan_kmalloc+0xaa/0xb0 [ 242.497452][ T8202] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 242.497461][ T8202] ? bpf_check+0x1fa5/0xa0f0 [ 242.497470][ T8202] ? bpf_prog_load+0x1baf/0x2b20 [ 242.497484][ T8202] ? __sys_bpf+0x146f/0x4b60 [ 242.497494][ T8202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.497506][ T8202] ? bpf_prog_calc_tag+0x65/0x380 [ 242.497522][ T8202] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 242.497539][ T8202] ? bpf_prog_calc_tag+0x65/0x380 [ 242.497551][ T8202] __vmalloc_node_noprof+0xad/0xf0 [ 242.497562][ T8202] ? bpf_prog_calc_tag+0x65/0x380 [ 242.497576][ T8202] __vmalloc_noprof+0xa3/0x120 [ 242.497587][ T8202] ? __pfx___vmalloc_noprof+0x10/0x10 [ 242.497600][ T8202] ? add_subprog+0x3aa/0x490 [ 242.497613][ T8202] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 242.497626][ T8202] bpf_prog_calc_tag+0x65/0x380 [ 242.497641][ T8202] bpf_check+0x2ea7/0xa0f0 [ 242.497661][ T8202] ? __pfx_bpf_check+0x10/0x10 [ 242.497670][ T8202] ? lock_acquire+0x1d1/0x380 [ 242.497684][ T8202] ? bpf_prog_load+0x1af0/0x2b20 [ 242.497700][ T8202] ? find_held_lock+0x2b/0x80 [ 242.497711][ T8202] ? bpf_prog_load+0x1af0/0x2b20 [ 242.497728][ T8202] ? __asan_memset+0x23/0x50 [ 242.497745][ T8202] ? bpf_prog_load+0x1baf/0x2b20 [ 242.497760][ T8202] bpf_prog_load+0x1baf/0x2b20 [ 242.497774][ T8202] ? avc_has_perm_noaudit+0x11e/0x470 [ 242.497791][ T8202] ? __pfx_bpf_prog_load+0x10/0x10 [ 242.497819][ T8202] __sys_bpf+0x146f/0x4b60 [ 242.497832][ T8202] ? __pfx___sys_bpf+0x10/0x10 [ 242.497841][ T8202] ? find_held_lock+0x2b/0x80 [ 242.497851][ T8202] ? futex_wake+0x4ea/0x5e0 [ 242.497875][ T8202] ? rcu_read_lock_any_held+0x6a/0x90 [ 242.497887][ T8202] ? find_held_lock+0x2b/0x80 [ 242.497898][ T8202] ? ksys_write+0x190/0x250 [ 242.497909][ T8202] ? ksys_write+0x190/0x250 [ 242.497929][ T8202] ? __x64_sys_futex+0x34f/0x4d0 [ 242.497942][ T8202] ? __x64_sys_futex+0x358/0x4d0 [ 242.497956][ T8202] ? xfd_validate_state+0x129/0x190 [ 242.497971][ T8202] ? __x64_sys_bpf+0xce/0x140 [ 242.497980][ T8202] __x64_sys_bpf+0xce/0x140 [ 242.497991][ T8202] ? do_syscall_64+0xae/0x7b0 [ 242.498004][ T8202] do_syscall_64+0x123/0x7b0 [ 242.498017][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.498028][ T8202] RIP: 0033:0x7f982eb9fb19 [ 242.498038][ T8202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.498048][ T8202] RSP: 002b:00007f982fb21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.498059][ T8202] RAX: ffffffffffffffda RBX: 00007f982ee25fa0 RCX: 00007f982eb9fb19 [ 242.498066][ T8202] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 242.498073][ T8202] RBP: 00007f982ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 242.498080][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.498087][ T8202] R13: 00007f982ee26038 R14: 00007f982ee25fa0 R15: 00007ffca98bde98 [ 242.498102][ T8202] [ 242.987873][ T31] audit: type=1400 audit(1794197330.786:1023): avc: denied { read write } for pid=8201 comm="syz.3.806" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 242.987900][ T31] audit: type=1400 audit(1794197330.786:1024): avc: denied { open } for pid=8201 comm="syz.3.806" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 243.047110][ T8202] 0x000000000003-0x000000010001 : "" [ 243.049243][ T31] audit: type=1400 audit(1794197330.846:1025): avc: denied { ioctl } for pid=8201 comm="syz.3.806" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 243.206323][ T8202] ftl_cs: FTL header corrupt! [ 243.315392][ T31] audit: type=1400 audit(1794197331.116:1026): avc: denied { write } for pid=8186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.557291][ T31] audit: type=1400 audit(1794197331.356:1027): avc: denied { write } for pid=8213 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.624774][ T31] audit: type=1400 audit(1794197331.426:1028): avc: denied { ioctl } for pid=8217 comm="syz.1.810" path="socket:[20146]" dev="sockfs" ino=20146 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.659563][ T11] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 243.812802][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 243.818746][ T11] usb 1-1: New USB device found: idVendor=0d46, idProduct=2011, bcdDevice=1.00 [ 243.820126][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 243.820143][ T11] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 243.820161][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.690405][ T11] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 244.714185][ T11] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 244.919227][ T31] audit: type=1400 audit(1794197332.716:1029): avc: denied { connect } for pid=8232 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.956840][ T31] audit: type=1400 audit(1794197332.756:1030): avc: denied { append } for pid=8238 comm="syz.4.816" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.885861][ T11] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 245.912031][ C0] ================================================================== [ 245.912040][ C0] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 245.912060][ C0] Read of size 1 at addr ffff88801dfb44e8 by task syz-executor/5617 [ 245.912068][ C0] [ 245.912075][ C0] CPU: 0 UID: 0 PID: 5617 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 245.912090][ C0] Tainted: [L]=SOFTLOCKUP [ 245.912093][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 245.912099][ C0] Call Trace: [ 245.912103][ C0] [ 245.912107][ C0] dump_stack_lvl+0x100/0x190 [ 245.912126][ C0] print_report+0x13d/0x4b0 [ 245.912142][ C0] ? __virt_addr_valid+0x239/0x430 [ 245.912156][ C0] ? find_endpoint+0x2a3/0x2c0 [ 245.912169][ C0] kasan_report+0xdf/0x1c0 [ 245.912182][ C0] ? find_endpoint+0x2a3/0x2c0 [ 245.912203][ C0] find_endpoint+0x2a3/0x2c0 [ 245.912217][ C0] dummy_timer+0x506/0x3840 [ 245.912228][ C0] ? do_raw_spin_lock+0x128/0x260 [ 245.912238][ C0] ? find_held_lock+0x2b/0x80 [ 245.912249][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 245.912265][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 245.912281][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 245.912293][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 245.912308][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 245.912324][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 245.912333][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 245.912343][ C0] ? mark_held_locks+0x40/0x70 [ 245.912356][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 245.912367][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 245.912376][ C0] __hrtimer_run_queues+0x448/0x9a0 [ 245.912391][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 245.912404][ C0] handle_softirqs+0x216/0xa20 [ 245.912417][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 245.912428][ C0] ? _raw_spin_unlock+0x28/0x50 [ 245.912438][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 245.912452][ C0] __irq_exit_rcu+0x178/0x220 [ 245.912463][ C0] irq_exit_rcu+0x9/0x30 [ 245.912473][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 245.912485][ C0] [ 245.912489][ C0] [ 245.912493][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 245.912504][ C0] RIP: 0010:__rcu_read_lock+0x17/0x70 [ 245.912516][ C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 53 65 48 8b 1d 91 ec c8 13 <48> 8d bb c4 04 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 [ 245.912526][ C0] RSP: 0018:ffffc90003dff528 EFLAGS: 00000246 [ 245.912535][ C0] RAX: dffffc0000000000 RBX: ffff88803513a580 RCX: ffffc90003dff4fc [ 245.912542][ C0] RDX: 1ffff920007bfebc RSI: ffffffff8288be34 RDI: ffffc90003dff5a8 [ 245.912549][ C0] RBP: ffffc90003dff5f0 R08: 0000000000000001 R09: 0000000000000007 [ 245.912555][ C0] R10: 0000000000000200 R11: 00000000000188bd R12: ffffffff81f829c0 [ 245.912562][ C0] R13: ffffc90003dff5a8 R14: 0000000000000000 R15: ffff88803513a580 [ 245.912569][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 245.912585][ C0] ? kasan_save_track+0x14/0x30 [ 245.912597][ C0] unwind_next_frame+0xae/0x2090 [ 245.912607][ C0] ? kasan_save_track+0x14/0x30 [ 245.912618][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 245.912632][ C0] arch_stack_walk+0x94/0xf0 [ 245.912648][ C0] ? kasan_save_track+0x14/0x30 [ 245.912659][ C0] ? vfree+0x12a/0x850 [ 245.912669][ C0] stack_trace_save+0x8e/0xc0 [ 245.912682][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 245.912696][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 245.912710][ C0] ? vfree+0x122/0x850 [ 245.912719][ C0] kasan_save_stack+0x30/0x50 [ 245.912729][ C0] ? kasan_save_stack+0x30/0x50 [ 245.912739][ C0] ? kasan_save_track+0x14/0x30 [ 245.912757][ C0] kasan_save_track+0x14/0x30 [ 245.912768][ C0] kasan_save_free_info+0x3b/0x70 [ 245.912781][ C0] __kasan_slab_free+0x5f/0x80 [ 245.912792][ C0] ? vfree+0x60/0x850 [ 245.912801][ C0] kfree+0x22b/0x6d0 [ 245.912815][ C0] vfree+0x12a/0x850 [ 245.912824][ C0] ? xt_data_to_user+0x157/0x180 [ 245.912835][ C0] ? xt_target_to_user+0xc2/0x210 [ 245.912844][ C0] ? _copy_to_user+0xaf/0xd0 [ 245.912857][ C0] do_ip6t_get_ctl+0xa0b/0xc30 [ 245.912870][ C0] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 245.912881][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 245.912896][ C0] ? nf_sockopt_find.isra.0+0x222/0x290 [ 245.912913][ C0] nf_getsockopt+0x7c/0xe0 [ 245.912928][ C0] ipv6_getsockopt+0x207/0x2a0 [ 245.912940][ C0] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 245.912952][ C0] ? _copy_from_user+0x59/0xd0 [ 245.912964][ C0] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 245.912980][ C0] tcp_getsockopt+0xa1/0x110 [ 245.912995][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 245.913011][ C0] do_sock_getsockopt+0x415/0x570 [ 245.913023][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 245.913036][ C0] ? nf_sockopt_find.isra.0+0x222/0x290 [ 245.913052][ C0] ? nf_setsockopt+0xb9/0xf0 [ 245.913068][ C0] ? do_sock_setsockopt+0x101/0x1d0 [ 245.913081][ C0] ? kfree+0x1e5/0x6d0 [ 245.913093][ C0] ? tcp_setsockopt+0xae/0x100 [ 245.913108][ C0] __sys_getsockopt+0x148/0x260 [ 245.913121][ C0] ? __x64_sys_getsockopt+0xbd/0x160 [ 245.913133][ C0] __x64_sys_getsockopt+0xbd/0x160 [ 245.913145][ C0] ? do_syscall_64+0xae/0x7b0 [ 245.913156][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 245.913167][ C0] do_syscall_64+0x123/0x7b0 [ 245.913179][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.913193][ C0] RIP: 0033:0x7f82117a12ea [ 245.913201][ C0] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 245.913211][ C0] RSP: 002b:00007fff9ddda488 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 245.913221][ C0] RAX: ffffffffffffffda RBX: 00007fff9ddda510 RCX: 00007f82117a12ea [ 245.913227][ C0] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 245.913233][ C0] RBP: 0000000000000003 R08: 00007fff9ddda4ac R09: 0000000000000000 [ 245.913239][ C0] R10: 00007fff9ddda510 R11: 0000000000000216 R12: 00007f82119f64c0 [ 245.913246][ C0] R13: 00007fff9ddda4ac R14: 0000000000000000 R15: 00007f82119f7fc0 [ 245.913255][ C0] [ 245.913259][ C0] [ 245.913261][ C0] Allocated by task 6534: [ 245.913266][ C0] kasan_save_stack+0x30/0x50 [ 245.913276][ C0] kasan_save_track+0x14/0x30 [ 245.913285][ C0] __kasan_kmalloc+0xaa/0xb0 [ 245.913294][ C0] __kmalloc_noprof+0x32f/0x840 [ 245.913308][ C0] usb_copy_descriptors+0xcd/0x320 [ 245.913319][ C0] f_midi2_bind+0x1dad/0x2770 [ 245.913331][ C0] usb_add_function+0x219/0x890 [ 245.913343][ C0] configfs_composite_bind+0xd83/0x1960 [ 245.913355][ C0] gadget_bind_driver+0x28c/0xbf0 [ 245.913364][ C0] really_probe+0x241/0xa60 [ 245.913375][ C0] __driver_probe_device+0x210/0x460 [ 245.913386][ C0] driver_probe_device+0x4a/0x140 [ 245.913397][ C0] __driver_attach+0x231/0x5b0 [ 245.913408][ C0] bus_for_each_dev+0x13e/0x1d0 [ 245.913416][ C0] bus_add_driver+0x4bf/0x620 [ 245.913426][ C0] driver_register+0x1e2/0x360 [ 245.913438][ C0] usb_gadget_register_driver_owner+0x132/0x210 [ 245.913447][ C0] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 245.913458][ C0] configfs_write_iter+0x302/0x4e0 [ 245.913467][ C0] vfs_write+0x6af/0x1040 [ 245.913476][ C0] ksys_write+0x12a/0x250 [ 245.913485][ C0] do_syscall_64+0x123/0x7b0 [ 245.913495][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.913504][ C0] [ 245.913506][ C0] Freed by task 8188: [ 245.913510][ C0] kasan_save_stack+0x30/0x50 [ 245.913519][ C0] kasan_save_track+0x14/0x30 [ 245.913528][ C0] kasan_save_free_info+0x3b/0x70 [ 245.913541][ C0] __kasan_slab_free+0x5f/0x80 [ 245.913550][ C0] kfree+0x22b/0x6d0 [ 245.913561][ C0] usb_free_all_descriptors+0x81/0x1a0 [ 245.913573][ C0] purge_configs_funcs+0x285/0x510 [ 245.913584][ C0] configfs_composite_unbind+0xae/0x210 [ 245.913596][ C0] gadget_unbind_driver+0x20c/0x4f0 [ 245.913605][ C0] device_remove+0xcb/0x180 [ 245.913615][ C0] device_release_driver_internal+0x441/0x610 [ 245.913628][ C0] driver_detach+0xd8/0x1b0 [ 245.913639][ C0] bus_remove_driver+0x13b/0x2e0 [ 245.913649][ C0] driver_unregister+0x76/0xb0 [ 245.913660][ C0] usb_gadget_unregister_driver+0x49/0x70 [ 245.913670][ C0] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 245.913681][ C0] configfs_write_iter+0x302/0x4e0 [ 245.913689][ C0] vfs_write+0x6af/0x1040 [ 245.913698][ C0] ksys_write+0x12a/0x250 [ 245.913706][ C0] do_syscall_64+0x123/0x7b0 [ 245.913717][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.913726][ C0] [ 245.913728][ C0] The buggy address belongs to the object at ffff88801dfb4400 [ 245.913728][ C0] which belongs to the cache kmalloc-512 of size 512 [ 245.913736][ C0] The buggy address is located 232 bytes inside of [ 245.913736][ C0] freed 512-byte region [ffff88801dfb4400, ffff88801dfb4600) [ 245.913745][ C0] [ 245.913748][ C0] The buggy address belongs to the physical page: [ 245.913752][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1dfb4 [ 245.913762][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 245.913769][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 245.913779][ C0] page_type: f5(slab) [ 245.913788][ C0] raw: 00fff00000000040 ffff88813ff10c80 dead000000000100 dead000000000122 [ 245.913797][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 245.913805][ C0] head: 00fff00000000040 ffff88813ff10c80 dead000000000100 dead000000000122 [ 245.913813][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 245.913822][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 245.913830][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 245.913835][ C0] page dumped because: kasan: bad access detected [ 245.913840][ C0] page_owner tracks the page as allocated [ 245.913843][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2862422954 [ 245.913858][ C0] post_alloc_hook+0xfd/0x120 [ 245.913870][ C0] get_page_from_freelist+0x112f/0x3640 [ 245.913883][ C0] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 245.913896][ C0] new_slab+0xb1/0x6d0 [ 245.913908][ C0] refill_objects+0xe3/0x410 [ 245.913920][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 245.913932][ C0] __kmalloc_cache_noprof+0x4ef/0x6d0 [ 245.913944][ C0] device_add+0xd3f/0x1970 [ 245.913957][ C0] tty_register_device_attr+0x388/0x810 [ 245.913967][ C0] tty_register_driver+0x769/0xb50 [ 245.913976][ C0] vty_init+0x32c/0x370 [ 245.913986][ C0] tty_init+0x1a3/0x1b0 [ 245.913995][ C0] chr_dev_init+0x12a/0x140 [ 245.914007][ C0] do_one_initcall+0x11c/0x6f0 [ 245.914019][ C0] kernel_init_freeable+0x6ea/0x7b0 [ 245.914031][ C0] kernel_init+0x21/0x1e0 [ 245.914043][ C0] page_owner free stack trace missing [ 245.914046][ C0] [ 245.914049][ C0] Memory state around the buggy address: [ 245.914053][ C0] ffff88801dfb4380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 245.914060][ C0] ffff88801dfb4400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.914066][ C0] >ffff88801dfb4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.914071][ C0] ^ [ 245.914077][ C0] ffff88801dfb4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.914083][ C0] ffff88801dfb4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 245.914088][ C0] ================================================================== [ 245.914094][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 247.046846][ C0] CPU: 0 UID: 0 PID: 5617 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 247.057833][ C0] Tainted: [L]=SOFTLOCKUP [ 247.062125][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 247.072148][ C0] Call Trace: [ 247.075407][ C0] [ 247.078222][ C0] dump_stack_lvl+0x100/0x190 [ 247.082874][ C0] vpanic+0x2dc/0x6f8 [ 247.086824][ C0] panic+0xd1/0xe0 [ 247.090523][ C0] ? __pfx_panic+0x10/0x10 [ 247.094908][ C0] ? end_report.part.0+0x23/0x90 [ 247.099816][ C0] ? rcu_is_watching+0x13/0xc0 [ 247.104548][ C0] ? end_report.part.0+0x23/0x90 [ 247.109457][ C0] check_panic_on_warn.cold+0x19/0x34 [ 247.114795][ C0] end_report.part.0+0x3a/0x90 [ 247.119530][ C0] kasan_report.cold+0xe/0x18 [ 247.124183][ C0] ? find_endpoint+0x2a3/0x2c0 [ 247.128919][ C0] find_endpoint+0x2a3/0x2c0 [ 247.133481][ C0] dummy_timer+0x506/0x3840 [ 247.137952][ C0] ? do_raw_spin_lock+0x128/0x260 [ 247.142943][ C0] ? find_held_lock+0x2b/0x80 [ 247.147598][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 247.153203][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 247.158808][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 247.164584][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 247.170187][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 247.176138][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 247.181042][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 247.185947][ C0] ? mark_held_locks+0x40/0x70 [ 247.190680][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 247.196454][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 247.201358][ C0] __hrtimer_run_queues+0x448/0x9a0 [ 247.206528][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 247.211610][ C0] handle_softirqs+0x216/0xa20 [ 247.216347][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 247.221600][ C0] ? _raw_spin_unlock+0x28/0x50 [ 247.226418][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 247.232021][ C0] __irq_exit_rcu+0x178/0x220 [ 247.236666][ C0] irq_exit_rcu+0x9/0x30 [ 247.240888][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 247.246490][ C0] [ 247.249390][ C0] [ 247.252302][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.258262][ C0] RIP: 0010:__rcu_read_lock+0x17/0x70 [ 247.263603][ C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 53 65 48 8b 1d 91 ec c8 13 <48> 8d bb c4 04 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 [ 247.283179][ C0] RSP: 0018:ffffc90003dff528 EFLAGS: 00000246 [ 247.289222][ C0] RAX: dffffc0000000000 RBX: ffff88803513a580 RCX: ffffc90003dff4fc [ 247.297180][ C0] RDX: 1ffff920007bfebc RSI: ffffffff8288be34 RDI: ffffc90003dff5a8 [ 247.305127][ C0] RBP: ffffc90003dff5f0 R08: 0000000000000001 R09: 0000000000000007 [ 247.313067][ C0] R10: 0000000000000200 R11: 00000000000188bd R12: ffffffff81f829c0 [ 247.321006][ C0] R13: ffffc90003dff5a8 R14: 0000000000000000 R15: ffff88803513a580 [ 247.328958][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.335093][ C0] ? kasan_save_track+0x14/0x30 [ 247.339915][ C0] unwind_next_frame+0xae/0x2090 [ 247.344820][ C0] ? kasan_save_track+0x14/0x30 [ 247.349639][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 247.355772][ C0] arch_stack_walk+0x94/0xf0 [ 247.360350][ C0] ? kasan_save_track+0x14/0x30 [ 247.365171][ C0] ? vfree+0x12a/0x850 [ 247.369209][ C0] stack_trace_save+0x8e/0xc0 [ 247.373857][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 247.379201][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 247.384124][ C0] ? vfree+0x122/0x850 [ 247.388161][ C0] kasan_save_stack+0x30/0x50 [ 247.392818][ C0] ? kasan_save_stack+0x30/0x50 [ 247.397637][ C0] ? kasan_save_track+0x14/0x30 [ 247.402466][ C0] kasan_save_track+0x14/0x30 [ 247.407114][ C0] kasan_save_free_info+0x3b/0x70 [ 247.412111][ C0] __kasan_slab_free+0x5f/0x80 [ 247.416854][ C0] ? vfree+0x60/0x850 [ 247.420806][ C0] kfree+0x22b/0x6d0 [ 247.424674][ C0] vfree+0x12a/0x850 [ 247.428549][ C0] ? xt_data_to_user+0x157/0x180 [ 247.433460][ C0] ? xt_target_to_user+0xc2/0x210 [ 247.438454][ C0] ? _copy_to_user+0xaf/0xd0 [ 247.443016][ C0] do_ip6t_get_ctl+0xa0b/0xc30 [ 247.447768][ C0] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 247.453034][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 247.458989][ C0] ? nf_sockopt_find.isra.0+0x222/0x290 [ 247.464511][ C0] nf_getsockopt+0x7c/0xe0 [ 247.468904][ C0] ipv6_getsockopt+0x207/0x2a0 [ 247.473650][ C0] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 247.478905][ C0] ? _copy_from_user+0x59/0xd0 [ 247.483648][ C0] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 247.490296][ C0] tcp_getsockopt+0xa1/0x110 [ 247.494860][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 247.500725][ C0] do_sock_getsockopt+0x415/0x570 [ 247.505731][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 247.511247][ C0] ? nf_sockopt_find.isra.0+0x222/0x290 [ 247.516766][ C0] ? nf_setsockopt+0xb9/0xf0 [ 247.521341][ C0] ? do_sock_setsockopt+0x101/0x1d0 [ 247.526510][ C0] ? kfree+0x1e5/0x6d0 [ 247.530550][ C0] ? tcp_setsockopt+0xae/0x100 [ 247.535288][ C0] __sys_getsockopt+0x148/0x260 [ 247.540110][ C0] ? __x64_sys_getsockopt+0xbd/0x160 [ 247.545366][ C0] __x64_sys_getsockopt+0xbd/0x160 [ 247.550447][ C0] ? do_syscall_64+0xae/0x7b0 [ 247.555093][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 247.560270][ C0] do_syscall_64+0x123/0x7b0 [ 247.564834][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.570696][ C0] RIP: 0033:0x7f82117a12ea [ 247.575082][ C0] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 247.594658][ C0] RSP: 002b:00007fff9ddda488 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 247.603050][ C0] RAX: ffffffffffffffda RBX: 00007fff9ddda510 RCX: 00007f82117a12ea [ 247.610990][ C0] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 247.618928][ C0] RBP: 0000000000000003 R08: 00007fff9ddda4ac R09: 0000000000000000 [ 247.626866][ C0] R10: 00007fff9ddda510 R11: 0000000000000216 R12: 00007f82119f64c0 [ 247.634805][ C0] R13: 00007fff9ddda4ac R14: 0000000000000000 R15: 00007f82119f7fc0 [ 247.642749][ C0] [ 247.645782][ C0] Kernel Offset: disabled [ 247.650092][ C0] Rebooting in 86400 seconds..