last executing test programs: 58.025031762s ago: executing program 4 (id=2316): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x1149, &(0x7f0000000780)=ANY=[], 0x0) 57.838062289s ago: executing program 4 (id=2320): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="e4", 0x1}], 0x1) sendfile(r0, r0, 0x0, 0x80000001) 57.548187561s ago: executing program 2 (id=2325): getxattr(0x0, &(0x7f0000000200)=@random={'user.', '6\x00\x8d\xf4\xb8\xa9\x8d\xc3\x85\xd2\xf6+\f\xf4\xfez\xda\x94(\x8fW\xa8\xec\v\x0fk\x13D\xcf\x8ao\x94\xef\xf4\xa2\x97\xa0\x1b\xad\xf4\x8d\xb4D\xe7|\xe5o\xb8g\x13\xf5\x15\xb5\x82\xcc\')\xfd\x1f\x88\xc6Gf\xa8?-\a\xdbd\xd6\xb3\xeb\xad!\x91\xf5\x8c\x97\a\xd0|\x01\xe7\xeaX=\xfa\x00sO\xdf\xf9@\xa26\xb6\xe2\xb3\xa6\xc9\rS\x15\xb5\x1b\xf8V\xcd\x9c\xf6\xaf\x1a3\xe2mi\xf330Q\xb9+)\xe86\xec\xe5\xca)\xe5\x1c\xf2\xf3\xcc\xc8\xc9t\xf7\x1a\xd7\x9d\xe4!\xd7BI\xa6\v\x9b1\xf7\\\x98\xd4\xe3\xf2\xd7M1\xe1\xef9\xc7/\x1f\x04\xca\x9dL\xdfU\xbd\xc2\xc3\xaf|\xfe\xc4\xf7\xbe\x92\x9b\xa8\x8d|\xc6\xc8\xa6\xea=\x86\xb5$5\x1c\xf4U\x8c\r\xd7vZ\v\x1ce\xf8^k\xeey\xaeX\x03\xab#\x0f\x80\xef]\x81\xac\xc7\xf6\xaa\xf8A\x04\x8b\x97g\xa4Q\xc1\xdaF(\xd8'}, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='c '], 0xc) 57.368073404s ago: executing program 2 (id=2327): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') openat$cgroup_subtree(r0, &(0x7f0000001280), 0x2, 0x0) 57.299586465s ago: executing program 4 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff070000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 57.172476483s ago: executing program 2 (id=2331): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r0, 0x80000, 0x4) 56.55211314s ago: executing program 4 (id=2333): r0 = semget$private(0x0, 0x6, 0x1a8) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}], 0x1) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 56.323732076s ago: executing program 0 (id=2337): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x5, @rand_addr=' \x01\x00', 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast2}], 0x10) 56.151032095s ago: executing program 0 (id=2339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000500)="0f01baeb5866b80500000066b90a0000000f01d90f2247b8ad000f00d80f0d2d36f20f1b2866b9800000c00f326635010000000f3066b80500000066b9c00000000f01c1f30fc7b702000f0135", 0x4d}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0x60000, 0xffff1000, 0x10, 0x49, 0x7d, 0x7, 0x81, 0xff, 0x0, 0x84, 0x80, 0xb}, {0xe000, 0x4000, 0x10, 0x3, 0x81, 0x7, 0x6, 0x9, 0x1, 0x6, 0xfe, 0x7}, {0xf000, 0xeeee8000, 0xf, 0x4, 0x14, 0x3, 0x4, 0x13, 0x5, 0x4, 0x40, 0x80}, {0x10000, 0x9f241c6d2d73e697, 0xc, 0x7, 0x1, 0x40, 0x2, 0x0, 0xed, 0x5, 0xc, 0x9}, {0x0, 0x0, 0x8, 0x9, 0xc8, 0x9, 0x9, 0xef, 0x2, 0x6e, 0x2, 0xc1}, {0x58000, 0x30000, 0xc, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0x8, 0x6, 0xa}, {0x10000, 0x60000, 0x8, 0x0, 0xb, 0x5, 0x5, 0x26, 0xa8, 0x0, 0xff, 0x6}, {0x1, 0xf000, 0xa, 0xe, 0x1, 0x7f, 0x3, 0x0, 0x7b, 0x1, 0xfc, 0x48}, {0x100000, 0x5}, {0x80a0000, 0xff7f}, 0x80000003, 0x0, 0x4000, 0x310071, 0x5, 0x0, 0x41000, 0x1, [0x6, 0x3, 0x8000000000000006, 0x49]}) 56.011236609s ago: executing program 3 (id=2341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x4800) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 55.914656606s ago: executing program 1 (id=2342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000500), &(0x7f0000004880)=@udp=r0}, 0x20) ioctl$COMEDI_CMD(r0, 0x80506409, 0x0) 55.8657854s ago: executing program 0 (id=2343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000500)) 55.823268244s ago: executing program 3 (id=2344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000380)='wlan0\x00', &(0x7f00000003c0)=@default_ibss_ssid, 0x6, 0x1) 55.813779435s ago: executing program 2 (id=2345): pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="c3", 0x1}]) io_destroy(r1) 55.740045091s ago: executing program 1 (id=2346): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) 55.599540719s ago: executing program 3 (id=2347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x98, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x62, 0xe, {{{}, {}, @broadcast, @broadcast, @random="ce99a8ba8228"}, 0x0, @default, 0x1, @void, @val, @void, @void, @val={0x6, 0x2, 0xfff}, @val={0x5, 0x3, {0xb, 0x1f}}, @val={0x25, 0x3, {0x1, 0x34, 0x3}}, @void, @val={0x3c, 0x4, {0x0, 0x8f, 0x84, 0x2}}, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7f}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}]}, 0x98}}, 0x20000014) 55.59264309s ago: executing program 1 (id=2348): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x14}, [@typed={0x8, 0x142, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 55.537015201s ago: executing program 4 (id=2349): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0200, 0x0) read(r0, &(0x7f0000000000), 0x10000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000001c0)={0xff, @multicast2, 0x4e21, 0x1, 'wlc\x00', 0x20, 0x2, 0x2c}, 0x2c) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 55.536441771s ago: executing program 0 (id=2359): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) dup3(r1, r0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000700)={"de5163ed7821457ab05c95983ac1d1a89e32a8f4b084e64e3ca3335bed41", 0x5, 0x1, 0x401, 0x4, 0x4, 0xec2, 0x8, 0x5, [0x4a, 0x9, 0x6, 0xe8, 0x1, 0x200, 0x493f, 0x40, 0x6, 0x6, 0x4, 0x3, 0x8001, 0x2, 0x3, 0x7, 0x8, 0x6, 0x92ba]}) 55.386415373s ago: executing program 1 (id=2350): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) 55.366880852s ago: executing program 2 (id=2351): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 55.357445259s ago: executing program 3 (id=2352): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 55.289149112s ago: executing program 0 (id=2353): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) socket$inet(0x2, 0x2, 0x11) 55.205248909s ago: executing program 3 (id=2354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 55.180361439s ago: executing program 1 (id=2355): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x1) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x2000974) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 55.156627916s ago: executing program 2 (id=2356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "d685bb670497418688ac68cb126474cd3660dab9fca22297e2bf24f44000", '\x00\x00=*'}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 54.852236079s ago: executing program 0 (id=2357): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x5, 0x0, 0x4, 0x80003e, 0x8f, 0xceb8, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x5, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x80200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x207, 0x53cf697b, 0x4, 0x6, 0x9, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x405, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 54.841049118s ago: executing program 4 (id=2358): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_0\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 46.426243496s ago: executing program 1 (id=2360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x7, 0x6, 0xaaca, 0x80000001, 0x2}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 0s ago: executing program 3 (id=2361): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) kernel console output (not intermixed with test programs): for pid=8578 comm="syz.1.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.931343][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 138.931376][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 139.826272][ T31] audit: type=1400 audit(1789860526.874:558): avc: denied { bind } for pid=8597 comm="syz.3.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 139.950835][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1277'. [ 140.142557][ C0] sched: DL replenish lagged too much [ 140.489865][ T8609] overlayfs: upper fs does not support tmpfile. [ 140.528260][ T8612] i2c i2c-0: delete_device: Can't parse I2C address [ 140.622175][ T31] audit: type=1400 audit(1789860527.664:559): avc: denied { write } for pid=8613 comm="syz.1.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.771315][ T31] audit: type=1400 audit(1789860527.814:560): avc: denied { bind } for pid=8615 comm="syz.0.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 140.800559][ T8618] capability: warning: `syz.2.1286' uses deprecated v2 capabilities in a way that may be insecure [ 140.801952][ T8618] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 140.801973][ T8618] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 140.802079][ T8618] overlayfs: failed to get uuid (248/file2, err=-13); falling back to uuid=null. [ 141.269039][ T8625] input: syz1 as /devices/virtual/input/input17 [ 141.552053][ T31] audit: type=1400 audit(1789860528.594:561): avc: denied { setopt } for pid=8630 comm="syz.3.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.587682][ T31] audit: type=1400 audit(1789860528.634:562): avc: denied { setopt } for pid=8629 comm="syz.2.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.602079][ T8642] SELinux: invalid class [ 142.872296][ T8642] SELinux: failed to load policy [ 143.621287][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 143.621306][ T31] audit: type=1400 audit(1789860530.664:565): avc: denied { listen } for pid=8679 comm="syz.0.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.412683][ T5712] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.563886][ T5712] usb 1-1: New USB device found, idVendor=045e, idProduct=6bdb, bcdDevice= 0.00 [ 145.565429][ T5712] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.565464][ T5712] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.565485][ T5712] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.565510][ T5712] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.565538][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.582507][ T5712] usb 1-1: config 0 descriptor?? [ 145.674390][ T31] audit: type=1400 audit(1789860532.724:566): avc: denied { bind } for pid=8709 comm="syz.2.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.995250][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 145.995271][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 145.995284][ T8714] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 145.995300][ T8714] iwpm_mapping_info_cb: Unable to parse nlmsg [ 146.109596][ T5712] hid (null): report_id 13821 is invalid [ 146.130231][ T5712] hid-generic 0003:045E:6BDB.0008: report_id 13821 is invalid [ 146.130252][ T5712] hid-generic 0003:045E:6BDB.0008: item 0 2 1 8 parsing failed [ 146.149507][ T5712] hid-generic 0003:045E:6BDB.0008: probe with driver hid-generic failed with error -22 [ 146.356675][ T5712] usb 1-1: USB disconnect, device number 8 [ 146.440876][ T8719] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 146.640775][ T31] audit: type=1400 audit(1789860533.684:567): avc: denied { associate } for pid=8722 comm="syz.4.1333" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 148.336685][ T31] audit: type=1326 audit(1789860535.374:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8759 comm="syz.0.1351" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08ecf9e159 code=0x0 [ 148.847959][ T5602] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 149.125892][ T31] audit: type=1400 audit(1789860536.174:569): avc: denied { read } for pid=5262 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 149.827769][ T31] audit: type=1326 audit(1789860536.874:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.4.1366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16e79e159 code=0x7ffc0000 [ 149.869361][ T31] audit: type=1326 audit(1789860536.914:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.4.1366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16e79e159 code=0x7ffc0000 [ 149.908283][ T31] audit: type=1326 audit(1789860536.954:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.4.1366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16e79e159 code=0x7ffc0000 [ 149.910202][ T31] audit: type=1326 audit(1789860536.954:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.4.1366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16e79e159 code=0x7ffc0000 [ 149.911233][ T31] audit: type=1326 audit(1789860536.954:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.4.1366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fa16e79e159 code=0x7ffc0000 [ 149.911278][ T31] audit: type=1326 audit(1789860536.954:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.4.1366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16e79e159 code=0x7ffc0000 [ 149.911317][ T31] audit: type=1326 audit(1789860536.954:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.4.1366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16e79e159 code=0x7ffc0000 [ 150.126336][ T31] audit: type=1326 audit(1789860537.174:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.4.1366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16e79e159 code=0x7ffc0000 [ 150.126393][ T31] audit: type=1326 audit(1789860537.174:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.4.1366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16e79e159 code=0x7ffc0000 [ 150.398037][ T8797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.522448][ T8800] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1369'. [ 150.562420][ T8800] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1369'. [ 150.862915][ T4917] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 150.878954][ T4917] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.959127][ T8809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1373'. [ 151.612963][ T5712] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 151.766786][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 151.767455][ T5712] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 151.790163][ T5712] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 151.790187][ T5712] usb 4-1: config 0 has no interface number 0 [ 151.790219][ T5712] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.790239][ T5712] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 151.790262][ T5712] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 11621, setting to 1024 [ 151.790286][ T5712] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 151.790308][ T5712] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.883426][ T750] tipc: Subscription rejected, illegal request [ 152.017263][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.017291][ T5712] usb 4-1: Product: syz [ 152.017306][ T5712] usb 4-1: Manufacturer: syz [ 152.017320][ T5712] usb 4-1: SerialNumber: syz [ 152.050113][ T5712] usb 4-1: config 0 descriptor?? [ 152.051686][ T8819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 152.100621][ T5712] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input19 [ 152.119817][ T4952] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 152.459566][ T5712] usb 4-1: USB disconnect, device number 11 [ 152.653711][ T8849] xt_hashlimit: size too large, truncated to 1048576 [ 154.044346][ T5698] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 154.048131][ T8874] bond1: entered allmulticast mode [ 154.048447][ T8874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.204812][ T5698] usb 5-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 154.231371][ T5698] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.231402][ T5698] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 154.231428][ T5698] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.231452][ T5698] usb 5-1: config 0 interface 0 has no altsetting 0 [ 154.231481][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.295300][ T5698] usb 5-1: Device is not authorized for usage [ 155.439110][ T8913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1420'. [ 155.681326][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 155.681343][ T31] audit: type=1400 audit(1789860542.724:593): avc: denied { execute } for pid=8916 comm="syz.3.1423" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=23334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 155.720208][ T31] audit: type=1400 audit(1789860542.774:594): avc: denied { mount } for pid=8914 comm="syz.2.1422" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 156.612407][ T5712] usb 5-1: USB disconnect, device number 8 [ 156.651517][ T8939] netlink: 'syz.2.1430': attribute type 10 has an invalid length. [ 156.684095][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.721900][ T8939] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 157.440440][ T31] audit: type=1400 audit(1789860544.484:595): avc: denied { write } for pid=8955 comm="syz.2.1436" name="core" dev="configfs" ino=3439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.872243][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 158.431483][ T8976] netlink: 'syz.2.1445': attribute type 12 has an invalid length. [ 158.615022][ T8988] loop5: detected capacity change from 0 to 7 [ 158.628088][ T8988] Dev loop5: unable to read RDB block 7 [ 158.628113][ T8988] loop5: AHDI p1 [ 158.628130][ T8988] loop5: partition table partially beyond EOD, truncated [ 158.954635][ T31] audit: type=1400 audit(1789860545.994:596): avc: denied { append } for pid=8997 comm="syz.0.1456" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 159.136608][ T9008] openvswitch: netlink: IPv4 tunnel dst address is zero [ 159.136634][ T9008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.225712][ T31] audit: type=1400 audit(1789860546.274:597): avc: denied { audit_write } for pid=9010 comm="syz.3.1462" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 159.318549][ T9018] jffs2: notice: (9018) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 159.322363][ T31] audit: type=1400 audit(1789860546.364:598): avc: denied { mount } for pid=9017 comm="syz.1.1464" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.384304][ T31] audit: type=1400 audit(1789860546.434:599): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.445906][ T9023] tunl0: Master is either lo or non-ether device [ 159.570581][ T31] audit: type=1400 audit(1789860546.614:600): avc: denied { write } for pid=9028 comm="syz.3.1468" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.570817][ T31] audit: type=1400 audit(1789860546.614:601): avc: denied { open } for pid=9028 comm="syz.3.1468" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.571039][ T9029] random: crng reseeded on system resumption [ 159.638141][ T9032] overlayfs: upper fs does not support file handles, falling back to index=off. [ 159.638153][ T9032] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 159.660804][ T31] audit: type=1400 audit(1789860546.694:602): avc: denied { ioctl } for pid=9028 comm="syz.3.1468" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 160.317322][ T9076] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 160.326195][ T9074] IPVS: stopping backup sync thread 9076 ... [ 160.463397][ T5733] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.614005][ T5733] usb 5-1: Using ep0 maxpacket: 16 [ 160.614488][ T5733] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 160.616209][ T5733] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.616255][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.616280][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 160.616300][ T5733] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 160.616320][ T5733] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.617789][ T5733] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 160.617810][ T5733] usb 5-1: Manufacturer: syz [ 160.627257][ T5733] usb 5-1: Device is not authorized for usage [ 160.722656][ T5712] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 160.872615][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 160.873102][ T5712] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.874004][ T5712] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 160.874032][ T5712] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.874054][ T5712] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.874075][ T5712] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.874107][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.012624][ T5698] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 161.031762][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 161.031777][ T31] audit: type=1400 audit(1789860548.074:605): avc: denied { ioctl } for pid=9102 comm="syz.2.1499" path="socket:[24679]" dev="sockfs" ino=24679 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 161.101730][ T5712] usb 2-1: GET_CAPABILITIES returned 0 [ 161.101770][ T5712] usbtmc 2-1:16.0: can't read capabilities [ 161.163070][ T5698] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 161.165124][ T5698] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 161.165148][ T5698] usb 4-1: config 0 has no interface number 0 [ 161.166873][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.166896][ T5698] usb 4-1: Product: syz [ 161.166910][ T5698] usb 4-1: Manufacturer: syz [ 161.166924][ T5698] usb 4-1: SerialNumber: syz [ 161.171694][ T5698] usb 4-1: config 0 descriptor?? [ 161.335832][ T5733] usb 2-1: USB disconnect, device number 12 [ 161.954984][ T9128] syz.0.1509 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 161.992976][ T5698] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 161.993007][ T5698] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 161.993204][ T5698] asix 4-1:0.251: probe with driver asix failed with error -71 [ 162.039055][ T5698] usb 4-1: USB disconnect, device number 12 [ 162.254451][ T31] audit: type=1400 audit(1789860549.304:606): avc: denied { map } for pid=9146 comm="syz.0.1518" path="socket:[24811]" dev="sockfs" ino=24811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 162.392614][ T9151] netlink: 'syz.0.1520': attribute type 14 has an invalid length. [ 162.671742][ T31] audit: type=1400 audit(1789860549.714:607): avc: denied { setopt } for pid=9158 comm="syz.0.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.827628][ T31] audit: type=1400 audit(1789860549.874:608): avc: denied { mount } for pid=9164 comm="syz.0.1527" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 162.857637][ T31] audit: type=1400 audit(1789860549.904:609): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 162.915869][ T31] audit: type=1400 audit(1789860549.964:610): avc: denied { append } for pid=9166 comm="syz.2.1528" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.292907][ T5760] usb 5-1: USB disconnect, device number 9 [ 163.419860][ T9187] ima: rule for LSM 'u' is undefined [ 163.427960][ T31] audit: type=1807 audit(1789860550.464:611): action=measure func=FILE_CHECK obj_type=u res=0 [ 163.448751][ T31] audit: type=1802 audit(1789860550.494:612): pid=9187 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.4.1536" res=0 errno=0 [ 163.450572][ T9186] ima: policy update failed [ 163.450836][ T31] audit: type=1802 audit(1789860550.494:613): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.1536" res=0 errno=0 [ 163.494704][ T31] audit: type=1400 audit(1789860550.534:614): avc: denied { write } for pid=9190 comm="syz.2.1538" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.967229][ T9218] overlay: ./proc/sys/net/mpls/platform_labels is not a directory [ 164.417131][ T3833] smpboot: CPU 1 is now offline [ 164.864053][ T5760] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 164.893285][ T5733] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.896633][ T3833] ACPI: \_SB_.C001: Eject incomplete - status 0xf [ 165.014548][ T5760] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 165.018872][ T5760] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.018898][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.021818][ T5760] usb 1-1: config 0 descriptor?? [ 165.061347][ T5760] pwc: Askey VC010 type 2 USB webcam detected. [ 165.072226][ T5733] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 165.083031][ T5733] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.083045][ T5733] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.083055][ T5733] usb 3-1: config 0 has no interface number 0 [ 165.083078][ T5733] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.083092][ T5733] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.083104][ T5733] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.083137][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.084519][ T5733] usb 3-1: config 0 descriptor?? [ 165.466200][ T5760] pwc: recv_control_msg error -32 req 02 val 2b00 [ 165.529256][ T5733] hid_parser_main: 466 callbacks suppressed [ 165.529272][ T5733] holtek_mouse 0003:04D9:A04A.0009: unknown main item tag 0x0 [ 165.529288][ T5733] holtek_mouse 0003:04D9:A04A.0009: unknown main item tag 0x0 [ 165.529301][ T5733] holtek_mouse 0003:04D9:A04A.0009: unknown main item tag 0x0 [ 165.529328][ T5733] holtek_mouse 0003:04D9:A04A.0009: unknown main item tag 0x0 [ 165.529341][ T5733] holtek_mouse 0003:04D9:A04A.0009: unknown main item tag 0x0 [ 165.529354][ T5733] holtek_mouse 0003:04D9:A04A.0009: unknown main item tag 0x0 [ 165.529367][ T5733] holtek_mouse 0003:04D9:A04A.0009: unexpected long global item [ 165.529650][ T5733] holtek_mouse 0003:04D9:A04A.0009: hid parse failed: -22 [ 165.529680][ T5733] holtek_mouse 0003:04D9:A04A.0009: probe with driver holtek_mouse failed with error -22 [ 165.675680][ T5760] pwc: recv_control_msg error -71 req 02 val 2c00 [ 165.677435][ T5760] pwc: recv_control_msg error -71 req 04 val 1000 [ 165.678410][ T5760] pwc: recv_control_msg error -71 req 04 val 1300 [ 165.678657][ T5760] pwc: recv_control_msg error -71 req 04 val 1400 [ 165.680947][ T5760] pwc: recv_control_msg error -71 req 02 val 2000 [ 165.681344][ T5760] pwc: recv_control_msg error -71 req 02 val 2100 [ 165.718384][ T5760] pwc: recv_control_msg error -71 req 04 val 1500 [ 165.725423][ T5760] pwc: recv_control_msg error -71 req 02 val 2500 [ 165.741080][ T5760] pwc: recv_control_msg error -71 req 02 val 2400 [ 165.750203][ T5760] pwc: recv_control_msg error -71 req 02 val 2600 [ 165.760610][ T5760] pwc: recv_control_msg error -71 req 02 val 2900 [ 165.762223][ T5760] pwc: recv_control_msg error -71 req 02 val 2800 [ 165.769036][ T5760] pwc: recv_control_msg error -71 req 04 val 1100 [ 165.784301][ T5760] pwc: recv_control_msg error -71 req 04 val 1200 [ 165.819755][ T5760] pwc: Registered as video103. [ 165.834561][ T5760] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 165.871003][ T5760] usb 1-1: USB disconnect, device number 9 [ 165.872164][ T5765] usb 3-1: USB disconnect, device number 8 [ 165.902696][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.902740][ T4917] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 166.408559][ T9291] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 166.442965][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 166.442975][ T31] audit: type=1400 audit(1789860553.494:617): avc: denied { getopt } for pid=9292 comm="syz.0.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.814228][ T31] audit: type=1400 audit(1789860553.864:618): avc: denied { ioctl } for pid=9310 comm="syz.1.1594" path="socket:[25293]" dev="sockfs" ino=25293 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 166.880206][ T31] audit: type=1400 audit(1789860553.924:619): avc: denied { append } for pid=9314 comm="syz.2.1595" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 166.929539][ T9315] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 166.963068][ T31] audit: type=1400 audit(1789860554.004:620): avc: denied { map } for pid=9314 comm="syz.2.1595" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 166.963097][ T31] audit: type=1400 audit(1789860554.004:621): avc: denied { execute } for pid=9314 comm="syz.2.1595" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 167.545292][ T9335] fuse: blksize only supported for fuseblk [ 167.784776][ T9345] WARNING! power/level is deprecated; use power/control instead [ 167.950185][ T31] audit: type=1400 audit(1789860554.994:622): avc: denied { bind } for pid=9351 comm="syz.0.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.950214][ T31] audit: type=1400 audit(1789860554.994:623): avc: denied { node_bind } for pid=9351 comm="syz.0.1612" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 168.014303][ T31] audit: type=1400 audit(1789860555.064:624): avc: denied { write } for pid=9351 comm="syz.0.1612" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.014330][ T31] audit: type=1400 audit(1789860555.064:625): avc: denied { connect } for pid=9351 comm="syz.0.1612" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.069046][ T31] audit: type=1400 audit(1789860555.114:626): avc: denied { read } for pid=9351 comm="syz.0.1612" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.178774][ T9359] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1614'. [ 168.178789][ T9359] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1614'. [ 168.178798][ T9359] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1614'. [ 168.416388][ T9370] openvswitch: netlink: IP tunnel dst address not specified [ 168.416405][ T9370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.008854][ T9393] option changes via remount are deprecated (pid=9392 comm=syz.0.1631) [ 169.008867][ T9393] cgroup: option or name mismatch, new: 0x0 "noprefix", old: 0x0 "" [ 169.053814][ T5760] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.213826][ T5760] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 169.214563][ T5760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.214588][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.215831][ T5760] usb 3-1: config 0 descriptor?? [ 169.459898][ T5760] usbhid 3-1:0.0: can't add hid device: -71 [ 169.459950][ T5760] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 169.477667][ T5760] usb 3-1: USB disconnect, device number 9 [ 169.925121][ T5760] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 170.084877][ T5760] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 1.00 [ 170.087542][ T5760] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 34, changing to 9 [ 170.087566][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.352163][ T9443] netlink: 'syz.0.1654': attribute type 10 has an invalid length. [ 170.352234][ T9443] tipc: Resetting bearer [ 170.362309][ T5760] pcwd_usb: Card did not acknowledge disable attempt [ 170.403609][ T9443] syz_tun: entered promiscuous mode [ 170.439947][ T9445] rdma_rxe: rxe_newlink: failed to add syz_tun [ 170.493372][ T9443] tipc: Resetting bearer [ 170.517943][ T9443] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 170.972740][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 171.135043][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 171.141558][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.165960][ T9] usb 1-1: config 0 descriptor?? [ 171.325007][ T5760] pcwd_usb: Found card (Firmware: ) with temp option [ 171.384380][ T9] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 171.737077][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 171.737093][ T9] [drm] Initialized udl on minor 1 [ 172.080195][ T5760] pcwd_usb: Option switches (0x00): Temperature Reset Enable=OFF, Power On Delay=OFF [ 172.448187][ T9492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.497395][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 172.497406][ T31] audit: type=1400 audit(1789860559.544:635): avc: denied { ioctl } for pid=9493 comm="syz.3.1678" path="socket:[26074]" dev="sockfs" ino=26074 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.021666][ T5760] pcwd_usb: initialized. heartbeat=5 sec (nowayout=0) [ 173.033330][ T9505] FAULT_INJECTION: forcing a failure. [ 173.033330][ T9505] name failslab, interval 1, probability 0, space 0, times 1 [ 173.033351][ T9505] CPU: 0 UID: 0 PID: 9505 Comm: syz.3.1683 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.033369][ T9505] Tainted: [L]=SOFTLOCKUP [ 173.033374][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 173.033381][ T9505] Call Trace: [ 173.033385][ T9505] [ 173.033391][ T9505] dump_stack_lvl+0x100/0x190 [ 173.033413][ T9505] should_fail_ex.cold+0x5/0xa [ 173.033430][ T9505] should_failslab+0xc2/0x120 [ 173.033446][ T9505] __kmalloc_noprof+0xfc/0x840 [ 173.033459][ T9505] ? trace_kmalloc+0xeb/0x110 [ 173.033473][ T9505] ? lsm_blob_alloc+0x68/0x90 [ 173.033492][ T9505] lsm_blob_alloc+0x68/0x90 [ 173.033508][ T9505] security_sk_alloc+0x2d/0x290 [ 173.033520][ T9505] sk_prot_alloc+0x12a/0x2a0 [ 173.033538][ T9505] sk_alloc+0x36/0xe80 [ 173.033551][ T9505] __netlink_create+0x5e/0x2c0 [ 173.033568][ T9505] ? __wake_up+0x3f/0x60 [ 173.033585][ T9505] netlink_create+0x29b/0x610 [ 173.033596][ T9505] ? __pfx_genl_bind+0x10/0x10 [ 173.033608][ T9505] ? __pfx_genl_unbind+0x10/0x10 [ 173.033621][ T9505] ? __pfx_genl_release+0x10/0x10 [ 173.033638][ T9505] __sock_create+0x339/0x860 [ 173.033658][ T9505] __sys_socket+0x14d/0x260 [ 173.033669][ T9505] ? __pfx___sys_socket+0x10/0x10 [ 173.033684][ T9505] __x64_sys_socket+0x72/0xb0 [ 173.033694][ T9505] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.033711][ T9505] do_syscall_64+0x123/0x790 [ 173.033729][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.033741][ T9505] RIP: 0033:0x7f8a42d9f9c7 [ 173.033750][ T9505] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.033761][ T9505] RSP: 002b:00007f8a43b9cf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 173.033774][ T9505] RAX: ffffffffffffffda RBX: 00007f8a43025fa0 RCX: 00007f8a42d9f9c7 [ 173.033782][ T9505] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 173.033789][ T9505] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 173.033796][ T9505] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 173.033804][ T9505] R13: 00007f8a43026038 R14: 00007f8a43025fa0 R15: 00007ffc06fb60a8 [ 173.033818][ T9505] [ 173.099614][ T5760] usb 3-1: USB disconnect, device number 10 [ 173.099722][ C0] pcwd_usb: can't resubmit intr, usb_submit_urb failed with result -19 [ 173.591904][ T9510] kvm: kvm [9509]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40 [ 173.700427][ T9514] mtrr: base(0x1000) is not aligned on a size(0x0000) boundary [ 174.078433][ T9526] netlink: 'syz.1.1693': attribute type 1 has an invalid length. [ 174.237255][ T9532] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 174.330608][ T31] audit: type=1400 audit(1789860817.380:636): avc: denied { map } for pid=9535 comm="syz.2.1698" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 174.439472][ T5760] pcwd_usb: Card did not acknowledge disable attempt [ 174.443441][ T31] audit: type=1400 audit(1789860817.490:637): avc: denied { set_context_mgr } for pid=9539 comm="syz.4.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 174.497930][ T5760] pcwd_usb: USB PC Watchdog disconnected [ 174.708376][ T31] audit: type=1400 audit(1789860817.760:638): avc: denied { ioctl } for pid=9549 comm="syz.3.1705" path="socket:[26411]" dev="sockfs" ino=26411 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.752122][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'. [ 175.133235][ T5760] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 175.283890][ T5760] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 175.284739][ T5760] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.284755][ T5760] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.284768][ T5760] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.288612][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 175.288626][ T5760] usb 4-1: Product: syz [ 175.288635][ T5760] usb 4-1: Manufacturer: syz [ 175.288642][ T5760] usb 4-1: SerialNumber: syz [ 175.545893][ T5760] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 175.743508][ T31] audit: type=1400 audit(1789860818.800:639): avc: denied { read write } for pid=9555 comm="syz.3.1708" name="lp0" dev="devtmpfs" ino=3047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 175.743540][ T31] audit: type=1400 audit(1789860818.800:640): avc: denied { open } for pid=9555 comm="syz.3.1708" path="/dev/usb/lp0" dev="devtmpfs" ino=3047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 175.744311][ T5760] usb 4-1: USB disconnect, device number 13 [ 175.746020][ T5760] usblp0: removed [ 175.890597][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'. [ 176.222264][ T9592] FAULT_INJECTION: forcing a failure. [ 176.222264][ T9592] name failslab, interval 1, probability 0, space 0, times 0 [ 176.222289][ T9592] CPU: 0 UID: 0 PID: 9592 Comm: syz.1.1724 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.222305][ T9592] Tainted: [L]=SOFTLOCKUP [ 176.222309][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 176.222316][ T9592] Call Trace: [ 176.222320][ T9592] [ 176.222325][ T9592] dump_stack_lvl+0x100/0x190 [ 176.222345][ T9592] should_fail_ex.cold+0x5/0xa [ 176.222361][ T9592] should_failslab+0xc2/0x120 [ 176.222378][ T9592] __kmalloc_cache_noprof+0x91/0x6d0 [ 176.222396][ T9592] ? xfd_validate_state+0x129/0x190 [ 176.222408][ T9592] ? __do_sys_timerfd_create+0x1c9/0x3f0 [ 176.222425][ T9592] __do_sys_timerfd_create+0x1c9/0x3f0 [ 176.222437][ T9592] ? do_syscall_64+0xae/0x790 [ 176.222455][ T9592] do_syscall_64+0x123/0x790 [ 176.222472][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.222491][ T9592] RIP: 0033:0x7f0eedb9e159 [ 176.222502][ T9592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.222513][ T9592] RSP: 002b:00007f0eeea3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 176.222526][ T9592] RAX: ffffffffffffffda RBX: 00007f0eede25fa0 RCX: 00007f0eedb9e159 [ 176.222534][ T9592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.222541][ T9592] RBP: 00007f0eedc3506b R08: 0000000000000000 R09: 0000000000000000 [ 176.222548][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.222555][ T9592] R13: 00007f0eede26038 R14: 00007f0eede25fa0 R15: 00007ffd9f1e6fd8 [ 176.222571][ T9592] [ 176.488693][ T31] audit: type=1400 audit(1789860819.540:641): avc: denied { setopt } for pid=9595 comm="syz.2.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.649014][ T9602] jffs2: notice: (9602) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 176.693116][ T31] audit: type=1400 audit(1789860819.750:642): avc: denied { write } for pid=9601 comm="syz.2.1729" path="/343/file0/file2" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 176.785418][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 176.810192][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 176.848498][ T9] usb 1-1: USB disconnect, device number 10 [ 177.041515][ T9615] FAULT_INJECTION: forcing a failure. [ 177.041515][ T9615] name failslab, interval 1, probability 0, space 0, times 0 [ 177.041537][ T9615] CPU: 0 UID: 0 PID: 9615 Comm: syz.1.1734 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.041552][ T9615] Tainted: [L]=SOFTLOCKUP [ 177.041556][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 177.041563][ T9615] Call Trace: [ 177.041568][ T9615] [ 177.041572][ T9615] dump_stack_lvl+0x100/0x190 [ 177.041593][ T9615] should_fail_ex.cold+0x5/0xa [ 177.041609][ T9615] should_failslab+0xc2/0x120 [ 177.041626][ T9615] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 177.041641][ T9615] ? rcu_is_watching+0x13/0xc0 [ 177.041656][ T9615] ? register_pidns_sysctls+0x48/0x1c0 [ 177.041676][ T9615] kmemdup_noprof+0x29/0x60 [ 177.041693][ T9615] register_pidns_sysctls+0x48/0x1c0 [ 177.041709][ T9615] ? __ns_common_init+0x299/0x4b0 [ 177.041725][ T9615] copy_pid_ns+0x680/0x10a0 [ 177.041739][ T9615] ? copy_utsname+0x388/0x690 [ 177.041751][ T9615] ? __pfx_copy_pid_ns+0x10/0x10 [ 177.041764][ T9615] ? find_held_lock+0x2b/0x80 [ 177.041780][ T9615] ? find_held_lock+0x2b/0x80 [ 177.041795][ T9615] ? copy_utsname+0x388/0x690 [ 177.041806][ T9615] ? copy_utsname+0x388/0x690 [ 177.041818][ T9615] ? put_uts_ns+0xc0/0x270 [ 177.041831][ T9615] create_new_namespaces+0x2aa/0xac0 [ 177.041847][ T9615] unshare_nsproxy_namespaces+0xf2/0x220 [ 177.041862][ T9615] ksys_unshare+0x4a2/0xa70 [ 177.041876][ T9615] ? __pfx_ksys_unshare+0x10/0x10 [ 177.041894][ T9615] __x64_sys_unshare+0x31/0x40 [ 177.041907][ T9615] do_syscall_64+0x123/0x790 [ 177.041925][ T9615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.041937][ T9615] RIP: 0033:0x7f0eedb9e159 [ 177.041947][ T9615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.041958][ T9615] RSP: 002b:00007f0eeea3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 177.041970][ T9615] RAX: ffffffffffffffda RBX: 00007f0eede25fa0 RCX: 00007f0eedb9e159 [ 177.041978][ T9615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000066000200 [ 177.041984][ T9615] RBP: 00007f0eedc3506b R08: 0000000000000000 R09: 0000000000000000 [ 177.041991][ T9615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.041998][ T9615] R13: 00007f0eede26038 R14: 00007f0eede25fa0 R15: 00007ffd9f1e6fd8 [ 177.042012][ T9615] [ 177.362357][ T31] audit: type=1400 audit(1789860820.410:643): avc: denied { view } for pid=9616 comm="syz.0.1735" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 177.400418][ T9621] TCP: TCP_TX_DELAY enabled [ 177.447405][ T9623] ip_tables: iptables: counters copy to user failed while replacing table [ 177.630011][ T9630] ecryptfs_get_tree: kern_path() failed [ 177.632134][ T9630] Reading sb failed; rc = [-2] [ 177.723047][ T9638] loop5: detected capacity change from 0 to 7 [ 177.737688][ T9638] Dev loop5: unable to read RDB block 7 [ 177.737703][ T9638] loop5: AHDI p1 [ 177.737712][ T9638] loop5: partition table partially beyond EOD, truncated [ 177.812688][ T5765] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 177.904006][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 177.904041][ T5599] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.904056][ T5599] Bluetooth: hci3: command 0x0406 tx timeout [ 177.962822][ T5765] usb 1-1: Using ep0 maxpacket: 32 [ 177.967825][ T5765] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 177.968611][ T5765] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.968636][ T5765] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.968651][ T5765] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.968664][ T5765] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 177.968679][ T5765] usb 1-1: config 0 interface 0 has no altsetting 0 [ 177.968705][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.971999][ T5765] usb 1-1: config 0 descriptor?? [ 178.379613][ T9662] jffs2: notice: (9662) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 178.381813][ T9660] lo speed is unknown, defaulting to 1000 [ 178.417924][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 178.484956][ T5765] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 178.484976][ T5765] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 178.484989][ T5765] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 178.485002][ T5765] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 178.485015][ T5765] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 178.548229][ T5765] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 178.548330][ T5765] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 178.575043][ T9] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 178.578954][ T9] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 178.578968][ T9] usb 5-1: config 0 has no interface number 0 [ 178.578986][ T9] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 178.579001][ T9] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.580977][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.580990][ T9] usb 5-1: Product: syz [ 178.580998][ T9] usb 5-1: Manufacturer: syz [ 178.581006][ T9] usb 5-1: SerialNumber: syz [ 178.607656][ T9] usb 5-1: Device is not authorized for usage [ 178.733875][ C0] hid-thrustmaster 0003:044F:B65D.000A: URB to get model id failed with error -71 [ 178.734817][ T9] usb 1-1: USB disconnect, device number 11 [ 178.810236][ T9667] fido_id[9667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 178.862037][ T9669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.302250][ T9664] netlink: 'syz.3.1753': attribute type 4 has an invalid length. [ 179.352212][ T5765] lo speed is unknown, defaulting to 1000 [ 179.367776][ T31] audit: type=1400 audit(1789860822.420:644): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 179.370801][ T5765] syz1: Port: 1 Link ACTIVE [ 179.409320][ T9684] xt_hashlimit: size too large, truncated to 1048576 [ 179.427237][ T5765] lo speed is unknown, defaulting to 1000 [ 179.621430][ T31] audit: type=1400 audit(1789860822.670:645): avc: denied { shutdown } for pid=9690 comm="syz.1.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.047919][ T9699] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.294591][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 180.462823][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 180.821773][ T31] audit: type=1400 audit(1789860823.870:646): avc: denied { remount } for pid=9731 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 180.900595][ T9736] random: crng reseeded on system resumption [ 181.231822][ T5760] usb 5-1: USB disconnect, device number 10 [ 181.602305][ T31] audit: type=1400 audit(1789860824.650:647): avc: denied { getopt } for pid=9754 comm="syz.2.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 181.783996][ T31] audit: type=1400 audit(1789860824.830:648): avc: denied { read } for pid=5262 comm="dhcpcd" name="n31" dev="tmpfs" ino=8561 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.784278][ T31] audit: type=1400 audit(1789860824.830:649): avc: denied { open } for pid=5262 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=8561 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.784304][ T31] audit: type=1400 audit(1789860824.840:650): avc: denied { getattr } for pid=5262 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=8561 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.308808][ T9785] input: syz0 as /devices/virtual/input/input21 [ 182.410260][ T4917] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 182.565801][ T31] audit: type=1400 audit(1789860825.620:651): avc: denied { setopt } for pid=9796 comm="syz.1.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.815198][ T31] audit: type=1400 audit(1789860825.870:652): avc: denied { write } for pid=9773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.815327][ T31] audit: type=1400 audit(1789860825.870:653): avc: denied { create } for pid=9773 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.013169][ T5760] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 183.164992][ T5760] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.165018][ T5760] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 183.165770][ T5760] usb 3-1: config 8 has an invalid interface number: 109 but max is 0 [ 183.165784][ T5760] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 183.165795][ T5760] usb 3-1: config 8 has no interface number 0 [ 183.165813][ T5760] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 183.165827][ T5760] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 183.165841][ T5760] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 183.167917][ T5760] usb 3-1: string descriptor 0 read error: -22 [ 183.167974][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.169586][ T9807] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.170570][ T5760] metro_usb 3-1:8.109: Metrologic USB to Serial converter detected [ 183.316138][ T5760] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 183.443553][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 183.479440][ T5760] usb 3-1: USB disconnect, device number 11 [ 183.495835][ T5760] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 183.496085][ T5760] metro_usb 3-1:8.109: device disconnected [ 183.602730][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 183.609119][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.609842][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 183.609876][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.609888][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.609901][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.609913][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.609950][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.873297][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 183.873321][ T10] usbtmc 2-1:16.0: can't read capabilities [ 184.142293][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.161048][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.161076][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.161097][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.161116][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.161135][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.161154][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.161173][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.161195][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.161215][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.260212][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.260242][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.260264][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.260285][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.260459][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.260480][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 184.343900][ T5765] usb 2-1: USB disconnect, device number 13 [ 184.773188][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 184.922717][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 184.923512][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 184.924277][ T10] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 184.924292][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.924302][ T10] usb 3-1: config 0 has no interfaces? [ 184.966611][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.966625][ T10] usb 3-1: Product: syz [ 184.966633][ T10] usb 3-1: Manufacturer: syz [ 184.966641][ T10] usb 3-1: SerialNumber: syz [ 185.011913][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 185.011927][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 185.085600][ T9862] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1826'. [ 185.252337][ T10] r8152-cfgselector 3-1: USB disconnect, device number 12 [ 185.739341][ T9881] tipc: Resetting bearer [ 186.417096][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 186.417110][ T31] audit: type=1400 audit(1789860829.470:660): avc: denied { write } for pid=9906 comm="syz.1.1845" name="nullb" dev="configfs" ino=3427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.878165][ T9922] FAULT_INJECTION: forcing a failure. [ 186.878165][ T9922] name failslab, interval 1, probability 0, space 0, times 0 [ 186.878187][ T9922] CPU: 0 UID: 0 PID: 9922 Comm: syz.2.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.878203][ T9922] Tainted: [L]=SOFTLOCKUP [ 186.878208][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 186.878215][ T9922] Call Trace: [ 186.878219][ T9922] [ 186.878224][ T9922] dump_stack_lvl+0x100/0x190 [ 186.878245][ T9922] should_fail_ex.cold+0x5/0xa [ 186.878262][ T9922] should_failslab+0xc2/0x120 [ 186.878279][ T9922] kmem_cache_alloc_noprof+0x92/0x6a0 [ 186.878292][ T9922] ? __fget_files+0x215/0x3d0 [ 186.878308][ T9922] ? create_new_namespaces+0x30/0xac0 [ 186.878325][ T9922] create_new_namespaces+0x30/0xac0 [ 186.878341][ T9922] __do_sys_setns+0x213/0x1f30 [ 186.878356][ T9922] ? __pfx___do_sys_setns+0x10/0x10 [ 186.878374][ T9922] do_syscall_64+0x123/0x790 [ 186.878392][ T9922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.878404][ T9922] RIP: 0033:0x7f799399e159 [ 186.878414][ T9922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.878426][ T9922] RSP: 002b:00007f799494c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 186.878438][ T9922] RAX: ffffffffffffffda RBX: 00007f7993c25fa0 RCX: 00007f799399e159 [ 186.878445][ T9922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 186.878452][ T9922] RBP: 00007f7993a3506b R08: 0000000000000000 R09: 0000000000000000 [ 186.878458][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.878465][ T9922] R13: 00007f7993c26038 R14: 00007f7993c25fa0 R15: 00007ffe000d80b8 [ 186.878482][ T9922] [ 187.811738][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1861'. [ 188.382654][ T5765] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 188.532603][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 188.533069][ T5765] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 188.533879][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.533895][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.533907][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.533926][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.535136][ T5765] usb 3-1: config 0 descriptor?? [ 188.633209][ T50] rpcbind: server 127.0.0.1 not responding, timed out [ 188.640330][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.640830][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.999416][ T5765] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0 [ 188.999435][ T5765] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0 [ 188.999447][ T5765] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0 [ 188.999459][ T5765] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0 [ 188.999471][ T5765] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0 [ 188.999483][ T5765] waterforce 0003:1044:7A4D.000B: unknown main item tag 0x0 [ 188.999495][ T5765] waterforce 0003:1044:7A4D.000B: unexpected long global item [ 188.999742][ T5765] waterforce 0003:1044:7A4D.000B: hid parse failed with -22 [ 188.999793][ T5765] waterforce 0003:1044:7A4D.000B: probe with driver waterforce failed with error -22 [ 189.240344][ T10] usb 3-1: USB disconnect, device number 13 [ 189.382161][ T31] audit: type=1400 audit(1789860832.430:661): avc: denied { map } for pid=9981 comm="syz.4.1876" path="socket:[28534]" dev="sockfs" ino=28534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.382191][ T31] audit: type=1400 audit(1789860832.430:662): avc: denied { read } for pid=9981 comm="syz.4.1876" path="socket:[28534]" dev="sockfs" ino=28534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.688996][ T9988] FAULT_INJECTION: forcing a failure. [ 189.688996][ T9988] name failslab, interval 1, probability 0, space 0, times 0 [ 189.689018][ T9988] CPU: 0 UID: 0 PID: 9988 Comm: syz.1.1879 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.689033][ T9988] Tainted: [L]=SOFTLOCKUP [ 189.689038][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 189.689044][ T9988] Call Trace: [ 189.689048][ T9988] [ 189.689053][ T9988] dump_stack_lvl+0x100/0x190 [ 189.689074][ T9988] should_fail_ex.cold+0x5/0xa [ 189.689091][ T9988] should_failslab+0xc2/0x120 [ 189.689108][ T9988] kmem_cache_alloc_noprof+0x92/0x6a0 [ 189.689123][ T9988] ? prepare_creds+0x2c/0x950 [ 189.689137][ T9988] prepare_creds+0x2c/0x950 [ 189.689149][ T9988] __sys_setuid+0x9c/0x440 [ 189.689163][ T9988] do_syscall_64+0x123/0x790 [ 189.689180][ T9988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.689192][ T9988] RIP: 0033:0x7f0eedb9e159 [ 189.689202][ T9988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.689213][ T9988] RSP: 002b:00007f0eeea3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 189.689225][ T9988] RAX: ffffffffffffffda RBX: 00007f0eede25fa0 RCX: 00007f0eedb9e159 [ 189.689232][ T9988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 189.689238][ T9988] RBP: 00007f0eedc3506b R08: 0000000000000000 R09: 0000000000000000 [ 189.689245][ T9988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.689252][ T9988] R13: 00007f0eede26038 R14: 00007f0eede25fa0 R15: 00007ffd9f1e6fd8 [ 189.689266][ T9988] [ 189.691193][ T9989] FAULT_INJECTION: forcing a failure. [ 189.691193][ T9989] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 189.691212][ T9989] CPU: 0 UID: 0 PID: 9989 Comm: syz.0.1888 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.691227][ T9989] Tainted: [L]=SOFTLOCKUP [ 189.691231][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 189.691238][ T9989] Call Trace: [ 189.691241][ T9989] [ 189.691246][ T9989] dump_stack_lvl+0x100/0x190 [ 189.691266][ T9989] should_fail_ex.cold+0x5/0xa [ 189.691281][ T9989] ? prepare_alloc_pages+0x16d/0x5b0 [ 189.691301][ T9989] should_fail_alloc_page+0xeb/0x140 [ 189.691317][ T9989] prepare_alloc_pages+0x1f0/0x5b0 [ 189.691334][ T9989] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 189.691346][ T9989] ? is_bpf_text_address+0x8a/0x1a0 [ 189.691361][ T9989] ? lock_release+0x24d/0x310 [ 189.691373][ T9989] ? bpf_ksym_find+0x128/0x1c0 [ 189.691390][ T9989] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 189.691403][ T9989] ? is_bpf_text_address+0x94/0x1a0 [ 189.691418][ T9989] ? kernel_text_address+0x8d/0x100 [ 189.691435][ T9989] ? __kernel_text_address+0xd/0x30 [ 189.691452][ T9989] ? unwind_get_return_address+0x59/0xa0 [ 189.691469][ T9989] ? arch_stack_walk+0xa6/0xf0 [ 189.691484][ T9989] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 189.691500][ T9989] ? stack_trace_save+0x8e/0xc0 [ 189.691510][ T9989] ? __pfx_stack_trace_save+0x10/0x10 [ 189.691526][ T9989] ? add_lock_to_list+0x9d/0x1d0 [ 189.691538][ T9989] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 189.691553][ T9989] ? policy_nodemask+0xed/0x4f0 [ 189.691569][ T9989] alloc_pages_mpol+0x201/0x550 [ 189.691584][ T9989] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 189.691603][ T9989] alloc_pages_noprof+0x1a/0x160 [ 189.691620][ T9989] get_free_pages_noprof+0x10/0xb0 [ 189.691633][ T9989] __kasan_populate_vmalloc+0xa0/0x210 [ 189.691649][ T9989] alloc_vmap_area+0x95d/0x2bb0 [ 189.691666][ T9989] ? kasan_save_track+0x14/0x30 [ 189.691679][ T9989] ? __kasan_kmalloc+0xaa/0xb0 [ 189.691691][ T9989] ? __pfx_alloc_vmap_area+0x10/0x10 [ 189.691705][ T9989] ? __get_vm_area_node+0x124/0x350 [ 189.691721][ T9989] __get_vm_area_node+0x1ed/0x350 [ 189.691737][ T9989] __vmalloc_node_range_noprof+0x268/0x1420 [ 189.691753][ T9989] ? alloc_ldt_struct+0x14f/0x1b0 [ 189.691767][ T9989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.691790][ T9989] ? alloc_ldt_struct+0x14f/0x1b0 [ 189.691809][ T9989] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 189.691830][ T9989] ? alloc_ldt_struct+0x14f/0x1b0 [ 189.691845][ T9989] __vmalloc_node_noprof+0xad/0xf0 [ 189.691861][ T9989] ? alloc_ldt_struct+0x14f/0x1b0 [ 189.691877][ T9989] __vmalloc_noprof+0xa3/0x120 [ 189.691892][ T9989] ? __pfx___vmalloc_noprof+0x10/0x10 [ 189.691909][ T9989] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 189.691926][ T9989] ? down_write_killable+0x152/0x240 [ 189.691938][ T9989] ? alloc_ldt_struct+0x5d/0x1b0 [ 189.691953][ T9989] alloc_ldt_struct+0x14f/0x1b0 [ 189.691968][ T9989] write_ldt+0x62b/0xd40 [ 189.691985][ T9989] ? __pfx_write_ldt+0x10/0x10 [ 189.692000][ T9989] ? xfd_validate_state+0x129/0x190 [ 189.692016][ T9989] __x64_sys_modify_ldt+0xb1/0x170 [ 189.692031][ T9989] do_syscall_64+0x123/0x790 [ 189.692048][ T9989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.692060][ T9989] RIP: 0033:0x7f08ecf9e159 [ 189.692070][ T9989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.692081][ T9989] RSP: 002b:00007f08ede1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 189.692093][ T9989] RAX: ffffffffffffffda RBX: 00007f08ed225fa0 RCX: 00007f08ecf9e159 [ 189.692100][ T9989] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 189.692107][ T9989] RBP: 00007f08ed03506b R08: 0000000000000000 R09: 0000000000000000 [ 189.692113][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.692120][ T9989] R13: 00007f08ed226038 R14: 00007f08ed225fa0 R15: 00007ffe69e387b8 [ 189.692134][ T9989] [ 190.358557][ T9989] syz.0.1888: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 190.359204][ T9989] CPU: 0 UID: 0 PID: 9989 Comm: syz.0.1888 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.359222][ T9989] Tainted: [L]=SOFTLOCKUP [ 190.359226][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 190.359234][ T9989] Call Trace: [ 190.359239][ T9989] [ 190.359244][ T9989] dump_stack_lvl+0x100/0x190 [ 190.359265][ T9989] warn_alloc.cold+0x9e/0xb2 [ 190.359280][ T9989] ? __pfx_warn_alloc+0x10/0x10 [ 190.359291][ T9989] ? lockdep_hardirqs_on+0x7d/0x110 [ 190.359309][ T9989] ? __get_vm_area_node+0x2f0/0x350 [ 190.359327][ T9989] ? __get_vm_area_node+0x22b/0x350 [ 190.359345][ T9989] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 190.359361][ T9989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.359377][ T9989] ? alloc_ldt_struct+0x14f/0x1b0 [ 190.359394][ T9989] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.359415][ T9989] ? alloc_ldt_struct+0x14f/0x1b0 [ 190.359428][ T9989] __vmalloc_node_noprof+0xad/0xf0 [ 190.359443][ T9989] ? alloc_ldt_struct+0x14f/0x1b0 [ 190.359462][ T9989] __vmalloc_noprof+0xa3/0x120 [ 190.359477][ T9989] ? __pfx___vmalloc_noprof+0x10/0x10 [ 190.359492][ T9989] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 190.359509][ T9989] ? down_write_killable+0x152/0x240 [ 190.359520][ T9989] ? alloc_ldt_struct+0x5d/0x1b0 [ 190.359536][ T9989] alloc_ldt_struct+0x14f/0x1b0 [ 190.359550][ T9989] write_ldt+0x62b/0xd40 [ 190.359567][ T9989] ? __pfx_write_ldt+0x10/0x10 [ 190.359582][ T9989] ? xfd_validate_state+0x129/0x190 [ 190.359599][ T9989] __x64_sys_modify_ldt+0xb1/0x170 [ 190.359614][ T9989] do_syscall_64+0x123/0x790 [ 190.359631][ T9989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.359643][ T9989] RIP: 0033:0x7f08ecf9e159 [ 190.359653][ T9989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.359664][ T9989] RSP: 002b:00007f08ede1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 190.359676][ T9989] RAX: ffffffffffffffda RBX: 00007f08ed225fa0 RCX: 00007f08ecf9e159 [ 190.359683][ T9989] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 190.359690][ T9989] RBP: 00007f08ed03506b R08: 0000000000000000 R09: 0000000000000000 [ 190.359696][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.359703][ T9989] R13: 00007f08ed226038 R14: 00007f08ed225fa0 R15: 00007ffe69e387b8 [ 190.359717][ T9989] [ 190.491799][ T9989] Mem-Info: [ 190.491808][ T9989] active_anon:10919 inactive_anon:40 isolated_anon:0 [ 190.491808][ T9989] active_file:56 inactive_file:55415 isolated_file:0 [ 190.491808][ T9989] unevictable:0 dirty:329 writeback:0 [ 190.491808][ T9989] slab_reclaimable:8269 slab_unreclaimable:99001 [ 190.491808][ T9989] mapped:30479 shmem:519 pagetables:1435 [ 190.491808][ T9989] sec_pagetables:0 bounce:0 [ 190.491808][ T9989] kernel_misc_reclaimable:0 [ 190.491808][ T9989] free:1301753 free_pcp:11131 free_cma:0 [ 190.491838][ T9989] Node 0 active_anon:43676kB inactive_anon:160kB active_file:224kB inactive_file:221460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121916kB dirty:1312kB writeback:0kB shmem:2076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12224kB pagetables:5612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 190.491869][ T9989] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 190.491898][ T9989] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.491931][ T9989] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 190.491952][ T9989] Node 0 DMA32 free:1245488kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:43676kB inactive_anon:160kB active_file:224kB inactive_file:221460kB unevictable:0kB writepending:1312kB zspages:376kB present:3129332kB managed:2530484kB mlocked:0kB bounce:0kB free_pcp:44524kB local_pcp:44524kB free_cma:0kB [ 190.491985][ T9989] lowmem_reserve[]: 0 0 0 0 0 [ 190.492003][ T9989] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:68kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.492032][ T9989] lowmem_reserve[]: 0 0 0 0 0 [ 190.492049][ T9989] Node 1 Normal free:3946164kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.492079][ T9989] lowmem_reserve[]: 0 0 0 0 0 [ 190.492097][ T9989] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 190.492175][ T9989] Node 0 DMA32: 604*4kB (UME) 1128*8kB (UME) 1626*16kB (UME) 1061*32kB (UME) 467*64kB (UME) 169*128kB (UME) 61*256kB (UME) 20*512kB (UM) 5*1024kB (M) 3*2048kB (ME) 265*4096kB (UM) = 1245488kB [ 190.492268][ T9989] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 190.492324][ T9989] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 8*16kB (UM) 7*32kB (UM) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 4*2048kB (UM) 960*4096kB (M) = 3946164kB [ 190.492411][ T9989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.492419][ T9989] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 190.492428][ T9989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.492436][ T9989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 190.492444][ T9989] 55986 total pagecache pages [ 190.492448][ T9989] 0 pages in swap cache [ 190.492452][ T9989] Free swap = 124880kB [ 190.492456][ T9989] Total swap = 124996kB [ 190.492460][ T9989] 2097051 pages RAM [ 190.492464][ T9989] 0 pages HighMem/MovableOnly [ 190.492467][ T9989] 432797 pages reserved [ 190.492471][ T9989] 0 pages cma reserved [ 191.114014][ T9997] input: syz0 as /devices/virtual/input/input22 [ 191.434663][T10010] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 191.453777][T10010] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 191.727950][ T31] audit: type=1400 audit(1789860834.780:663): avc: denied { setcurrent } for pid=10023 comm="syz.0.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 191.755374][ T31] audit: type=1401 audit(1789860834.810:664): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 191.791124][T10020] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.905332][ T31] audit: type=1400 audit(1789860834.960:665): avc: denied { setattr } for pid=10029 comm="syz.1.1896" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 191.961179][T10032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.354337][ T31] audit: type=1400 audit(1789860835.410:666): avc: denied { mount } for pid=10046 comm="syz.2.1904" name="/" dev="autofs" ino=28806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 192.392113][ T31] audit: type=1400 audit(1789860835.440:667): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 192.468153][T10043] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.516487][T10050] tap0: tun_chr_ioctl cmd 1074025675 [ 192.516500][T10050] tap0: persist enabled [ 192.516730][T10050] tap0: tun_chr_ioctl cmd 1074025675 [ 192.516739][T10050] tap0: persist disabled [ 192.616247][T10043] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.802255][T10043] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.938252][T10043] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.066828][T10070] program syz.0.1913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.129643][T10072] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 193.320772][T10079] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.364184][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 193.382616][ T3833] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.383729][ T3833] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.433025][ T3833] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.514249][ T4209] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.533391][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 193.536050][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.540797][ T9] usb 2-1: config 0 descriptor?? [ 193.635619][ T31] audit: type=1400 audit(1789860836.690:668): avc: denied { setopt } for pid=10084 comm="syz.2.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 193.794915][ T9] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 193.904364][ T31] audit: type=1400 audit(1789860836.960:669): avc: denied { execmod } for pid=10092 comm="syz.0.1923" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 194.035647][ T31] audit: type=1400 audit(1789860837.090:670): avc: denied { create } for pid=10099 comm="syz.0.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.040672][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 194.062248][ T9] [drm] Initialized udl on minor 1 [ 194.107123][ T31] audit: type=1400 audit(1789860837.160:671): avc: denied { setopt } for pid=10099 comm="syz.0.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.109482][ T31] audit: type=1400 audit(1789860837.160:672): avc: denied { bind } for pid=10099 comm="syz.0.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.416227][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 194.416398][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 194.419120][ T9] usb 2-1: USB disconnect, device number 14 [ 194.422002][ T5760] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 194.485104][ T5760] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 195.002758][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 195.154575][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 195.156739][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 195.184398][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.184412][ T9] usb 4-1: Product: syz [ 195.184421][ T9] usb 4-1: Manufacturer: syz [ 195.184429][ T9] usb 4-1: SerialNumber: syz [ 195.186838][ T9] usb 4-1: config 0 descriptor?? [ 195.191563][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 195.413602][T10139] capability: warning: `syz.2.1943' uses 32-bit capabilities (legacy support in use) [ 195.635825][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 195.782775][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 195.788711][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 195.805765][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.805814][ T10] usb 2-1: Product: syz [ 195.805824][ T10] usb 2-1: Manufacturer: syz [ 195.805832][ T10] usb 2-1: SerialNumber: syz [ 195.807732][ T10] usb 2-1: config 0 descriptor?? [ 195.809671][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 196.140728][T10164] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 196.210088][ T50] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 196.232063][ T10] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 196.232105][ T10] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 196.252651][ T10] usb 2-1: USB disconnect, device number 15 [ 196.309962][ T9] usb 4-1: USB disconnect, device number 14 [ 196.417316][T10164] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 197.212103][T10199] tun0: tun_chr_ioctl cmd 1074025675 [ 197.212119][T10199] tun0: persist enabled [ 197.230563][T10199] tun0: tun_chr_ioctl cmd 1074025675 [ 197.230575][T10199] tun0: persist enabled [ 197.246302][T10190] Dynamic Preempt: lazy [ 197.448709][T10204] ptp ptp0: only physical clock in use now [ 197.519873][T10206] SELinux: invalid class [ 197.519910][T10206] SELinux: failed to load policy [ 197.563045][T10204] ptp ptp0: new virtual clock ptp1 [ 197.564806][T10204] ptp ptp0: new virtual clock ptp2 [ 197.570889][T10204] ptp ptp0: new virtual clock ptp3 [ 197.596820][T10204] ptp ptp0: new virtual clock ptp4 [ 197.678961][T10204] ptp ptp0: new virtual clock ptp5 [ 197.678975][T10204] ptp ptp0: guarantee physical clock free running [ 197.729926][T10216] netlink: 'syz.1.1976': attribute type 32 has an invalid length. [ 197.939328][T10224] trusted_key: syz.3.1980 sent an empty control message without MSG_MORE. [ 198.417731][T10247] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 198.584332][ T5765] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 198.605237][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 198.605247][ T31] audit: type=1400 audit(1789860841.660:676): avc: denied { read } for pid=10250 comm="syz.4.1992" name="zoned" dev="configfs" ino=29910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 198.688297][ T31] audit: type=1400 audit(1789860841.740:677): avc: denied { read } for pid=10252 comm="syz.4.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.734769][ T5765] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 198.768665][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.768683][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.770279][ T5765] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 198.770293][ T5765] usb 2-1: Manufacturer: syz [ 198.809325][ T5765] usb 2-1: config 0 descriptor?? [ 199.056244][ T31] audit: type=1326 audit(1789860842.110:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.3.1997" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42d9e159 code=0x7ffc0000 [ 199.060902][ T31] audit: type=1326 audit(1789860842.110:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.3.1997" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42d9e159 code=0x7ffc0000 [ 199.119304][ T31] audit: type=1326 audit(1789860842.170:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.3.1997" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42d9e159 code=0x7ffc0000 [ 199.119703][ T31] audit: type=1326 audit(1789860842.110:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.3.1997" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42d9e159 code=0x7ffc0000 [ 199.119930][ T31] audit: type=1326 audit(1789860842.170:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.3.1997" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f8a42d9e159 code=0x7ffc0000 [ 199.120051][ T31] audit: type=1326 audit(1789860842.170:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.3.1997" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42d9e159 code=0x7ffc0000 [ 199.120160][ T31] audit: type=1326 audit(1789860842.170:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.3.1997" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42d9e159 code=0x7ffc0000 [ 199.120425][ T31] audit: type=1326 audit(1789860842.170:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.3.1997" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a42d9e159 code=0x7ffc0000 [ 199.330505][T10259] SELinux: ebitmap start bit (603980608) is beyond the end of the bitmap (1472) [ 199.330681][T10259] SELinux: invalid class [ 199.353357][T10259] SELinux: failed to load policy [ 199.610664][T10263] SELinux: invalid class [ 199.672564][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 199.709003][ T5765] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000C/input/input23 [ 199.787360][ T5765] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000C/input/input24 [ 199.790350][ T5765] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000C/input/input25 [ 199.821705][ T5765] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000C/input/input26 [ 199.833968][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 199.845012][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.846199][ T9] usb 4-1: config 0 descriptor?? [ 199.904528][ T4917] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 199.925136][ T5765] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 199.958528][ T5765] usb 2-1: USB disconnect, device number 16 [ 199.971216][T10263] SELinux: failed to load policy [ 200.079284][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 200.295240][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 200.295257][ T9] [drm] Initialized udl on minor 1 [ 200.406266][T10287] fido_id[10287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 200.850145][T10305] FAULT_INJECTION: forcing a failure. [ 200.850145][T10305] name failslab, interval 1, probability 0, space 0, times 0 [ 200.850167][T10305] CPU: 0 UID: 0 PID: 10305 Comm: syz.0.2016 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 200.850185][T10305] Tainted: [L]=SOFTLOCKUP [ 200.850189][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 200.850196][T10305] Call Trace: [ 200.850200][T10305] [ 200.850205][T10305] dump_stack_lvl+0x100/0x190 [ 200.850227][T10305] should_fail_ex.cold+0x5/0xa [ 200.850245][T10305] should_failslab+0xc2/0x120 [ 200.850261][T10305] __kmalloc_cache_noprof+0x91/0x6d0 [ 200.850278][T10305] ? kasan_save_track+0x14/0x30 [ 200.850291][T10305] ? ovl_init_fs_context+0x96/0x630 [ 200.850307][T10305] ovl_init_fs_context+0x96/0x630 [ 200.850320][T10305] alloc_fs_context+0x60c/0xf40 [ 200.850341][T10305] __x64_sys_fsopen+0xed/0x220 [ 200.850353][T10305] do_syscall_64+0x123/0x790 [ 200.850372][T10305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.850383][T10305] RIP: 0033:0x7f08ecf9e159 [ 200.850393][T10305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.850405][T10305] RSP: 002b:00007f08ede1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 200.850418][T10305] RAX: ffffffffffffffda RBX: 00007f08ed225fa0 RCX: 00007f08ecf9e159 [ 200.850426][T10305] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 200.850433][T10305] RBP: 00007f08ed03506b R08: 0000000000000000 R09: 0000000000000000 [ 200.850439][T10305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.850446][T10305] R13: 00007f08ed226038 R14: 00007f08ed225fa0 R15: 00007ffe69e387b8 [ 200.850460][T10305] [ 201.068658][T10306] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.068707][T10306] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.094083][T10306] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.094132][T10306] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.150466][T10306] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.150499][T10306] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.175824][T10306] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.176362][T10306] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.208910][T10306] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.208943][T10306] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.226221][T10306] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.226774][T10306] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.358832][T10313] SELinux: invalid class [ 201.382813][T10313] SELinux: failed to load policy [ 201.933284][ T5733] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 202.082458][T10342] SELinux: invalid class [ 202.088864][ T5733] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 202.102151][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.161742][T10342] SELinux: failed to load policy [ 202.511865][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 202.511886][T10354] netlink: 'syz.0.2035': attribute type 10 has an invalid length. [ 202.511895][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2035'. [ 202.515952][T10354] geneve2: entered promiscuous mode [ 202.515965][T10354] geneve2: entered allmulticast mode [ 202.763872][ T5733] usb 3-1: NFC: NXP PN500 firmware ver 0.0 now attached [ 202.962069][ C0] usb 3-1: NFC: Urb failure (status -71) [ 202.973977][ T5733] usb 3-1: NFC: Error on setting MAX_RETRIES config [ 202.975195][ T5733] pn533_usb 3-1:1.0: probe with driver pn533_usb failed with error -71 [ 203.002338][ T5733] usb 3-1: USB disconnect, device number 14 [ 203.103445][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 203.103468][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.183848][ T4917] Bluetooth: hci3: command 0x0406 tx timeout [ 203.188832][ T4917] Bluetooth: hci2: command 0x0406 tx timeout [ 203.264090][ T4917] Bluetooth: hci4: command 0x0405 tx timeout [ 203.630459][T10375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.183108][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.183133][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 205.262690][ T4917] Bluetooth: hci2: command 0x0406 tx timeout [ 205.262713][ T4917] Bluetooth: hci3: command 0x0406 tx timeout [ 205.342654][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 205.343389][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 205.343563][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 205.349126][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 205.383885][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 205.383982][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 205.403995][ T9] usb 4-1: USB disconnect, device number 15 [ 205.531605][ T5765] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 205.558945][ T5765] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 205.733165][ T5733] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 205.751302][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 205.886791][ T5733] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.892257][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.892278][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.892290][ T5733] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.892312][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.894288][ T5733] usb 1-1: config 0 descriptor?? [ 205.922741][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.961029][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.961047][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.961061][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.961072][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.961107][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.985713][ T10] usb 3-1: config 0 descriptor?? [ 206.324192][ T5733] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 206.402807][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 206.402825][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 206.402837][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 206.402850][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 206.402862][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 206.402874][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 206.402886][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 206.402897][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 206.402909][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 206.520571][ T10] plantronics 0003:047F:FFFF.000F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 206.649374][ T10] usb 3-1: USB disconnect, device number 15 [ 206.983748][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 206.983761][ T31] audit: type=1400 audit(1789860850.040:710): avc: denied { watch } for pid=10412 comm="syz.4.2060" path="/413/file0" dev="tmpfs" ino=2169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.061441][T10415] FAULT_INJECTION: forcing a failure. [ 207.061441][T10415] name failslab, interval 1, probability 0, space 0, times 0 [ 207.061464][T10415] CPU: 0 UID: 0 PID: 10415 Comm: syz.4.2061 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 207.061481][T10415] Tainted: [L]=SOFTLOCKUP [ 207.061487][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 207.061495][T10415] Call Trace: [ 207.061500][T10415] [ 207.061504][T10415] dump_stack_lvl+0x100/0x190 [ 207.061531][T10415] should_fail_ex.cold+0x5/0xa [ 207.061549][T10415] should_failslab+0xc2/0x120 [ 207.061565][T10415] kmem_cache_alloc_noprof+0x92/0x6a0 [ 207.061579][T10415] ? __mpol_dup+0x74/0x390 [ 207.061600][T10415] __mpol_dup+0x74/0x390 [ 207.061616][T10415] ? __pfx___mpol_dup+0x10/0x10 [ 207.061636][T10415] mbind_range+0x2ad/0x550 [ 207.061654][T10415] do_mbind+0x7dc/0xfd0 [ 207.061675][T10415] ? __pfx_do_mbind+0x10/0x10 [ 207.061692][T10415] ? find_held_lock+0x2b/0x80 [ 207.061709][T10415] ? ksys_write+0x190/0x250 [ 207.061726][T10415] ? __pfx_get_nodes+0x10/0x10 [ 207.061744][T10415] kernel_mbind+0x1b7/0x200 [ 207.061762][T10415] ? __pfx_kernel_mbind+0x10/0x10 [ 207.061784][T10415] do_syscall_64+0x123/0x790 [ 207.061802][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.061814][T10415] RIP: 0033:0x7fa16e79e159 [ 207.061824][T10415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.061835][T10415] RSP: 002b:00007fa16c9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 207.061846][T10415] RAX: ffffffffffffffda RBX: 00007fa16ea25fa0 RCX: 00007fa16e79e159 [ 207.061854][T10415] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000 [ 207.061860][T10415] RBP: 00007fa16e83506b R08: 0000000000000000 R09: 0000000000000002 [ 207.061867][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.061874][T10415] R13: 00007fa16ea26038 R14: 00007fa16ea25fa0 R15: 00007ffde9d68fa8 [ 207.061890][T10415] [ 207.105388][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 207.257676][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 207.269698][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 207.283369][ T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 207.283386][ T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 207.283411][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 207.283423][ T10] usb 4-1: config 1 has no interface number 0 [ 207.283442][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.283457][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 207.283477][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.291106][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 207.423602][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 207.501192][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 207.516675][T10418] input: syz1 as /devices/virtual/input/input28 [ 207.691187][ T31] audit: type=1400 audit(1789860850.740:711): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 207.821848][ T31] audit: type=1400 audit(1789860850.870:712): avc: denied { read } for pid=10429 comm="syz.4.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.077347][ T9] usb 4-1: USB disconnect, device number 16 [ 208.078148][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 208.458624][T10459] netlink: Failed to add batadv0 helper -22 [ 208.458650][T10459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.467358][ T5733] usb 1-1: USB disconnect, device number 12 [ 208.488373][ T5765] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 208.642985][ T5765] usb 5-1: Using ep0 maxpacket: 32 [ 208.643397][ T5765] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 208.644342][ T5765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.644359][ T5765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.644378][ T5765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.645627][ T5765] usb 5-1: Device is not authorized for usage [ 208.858891][T10471] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 208.860564][T10471] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 209.017796][T10469] SELinux: invalid class [ 209.196398][T10469] SELinux: failed to load policy [ 209.342239][T10491] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2089'. [ 209.439882][T10496] macsec1: entered allmulticast mode [ 209.439897][T10496] veth1_macvtap: entered allmulticast mode [ 209.506111][ T4917] Bluetooth: hci1: command 0x0406 tx timeout [ 209.506134][ T4917] Bluetooth: hci4: command 0x0405 tx timeout [ 209.589466][T10499] veth1_macvtap (unregistering): left allmulticast mode [ 209.655662][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 209.687471][T10499] batman_adv: batadv0: Removing interface: vlan2 [ 209.827349][ T31] audit: type=1400 audit(1789860852.880:713): avc: denied { ioctl } for pid=10507 comm="syz.3.2096" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 209.887707][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 210.090970][T10515] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 210.103669][T10515] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 210.104845][T10515] block nbd0: shutting down sockets [ 210.714133][T10538] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2110'. [ 210.714149][T10538] nbd: illegal input index -28 [ 211.062566][ T5733] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 211.224237][ T5733] usb 4-1: Using ep0 maxpacket: 16 [ 211.311524][ T5733] usb 4-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 211.343765][ T5733] usb 4-1: config 4 has an invalid interface number: 251 but max is 0 [ 211.343787][ T5733] usb 4-1: config 4 has no interface number 0 [ 211.344005][ T5733] usb 4-1: config 4 interface 251 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 211.344020][ T5733] usb 4-1: config 4 interface 251 has no altsetting 0 [ 211.550373][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.550399][ T5733] usb 4-1: Product: syz [ 211.550416][ T5733] usb 4-1: Manufacturer: syz [ 211.550435][ T5733] usb 4-1: SerialNumber: syz [ 213.238271][ T9] usb 5-1: USB disconnect, device number 11 [ 213.489724][ T5733] usb-storage 4-1:4.251: USB Mass Storage device detected [ 215.163852][ T5733] usb 4-1: USB disconnect, device number 17 [ 217.336335][ T31] audit: type=1400 audit(1789860860.370:714): avc: denied { ioctl } for pid=10564 comm="syz.2.2122" path="socket:[31257]" dev="sockfs" ino=31257 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.829697][ T31] audit: type=1400 audit(1789860866.870:715): avc: denied { create } for pid=10581 comm="syz.2.2126" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 229.286061][T10600] FAULT_INJECTION: forcing a failure. [ 229.286061][T10600] name fail_futex, interval 1, probability 0, space 0, times 1 [ 229.286097][T10600] CPU: 0 UID: 0 PID: 10600 Comm: syz.1.2130 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 229.286120][T10600] Tainted: [L]=SOFTLOCKUP [ 229.286130][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 229.286142][T10600] Call Trace: [ 229.286168][T10600] [ 229.286190][T10600] dump_stack_lvl+0x100/0x190 [ 229.286307][T10600] should_fail_ex.cold+0x5/0xa [ 229.286403][T10600] should_fail_futex+0x4c/0x60 [ 229.286461][T10600] futex_lock_pi_atomic+0xea/0xb80 [ 229.286648][T10600] futex_lock_pi+0x278/0x7e0 [ 229.286795][T10600] ? __pfx_futex_lock_pi+0x10/0x10 [ 229.286919][T10600] ? __pfx___futex_wait+0x10/0x10 [ 229.286937][T10600] ? __pfx_try_to_wake_up+0x10/0x10 [ 229.287435][T10600] ? __pfx_futex_wake_mark+0x10/0x10 [ 229.287593][T10600] ? rcu_read_lock_any_held+0x6a/0x90 [ 229.287645][T10600] ? find_held_lock+0x2b/0x80 [ 229.287699][T10600] ? ksys_write+0x190/0x250 [ 229.287792][T10600] do_futex+0x31d/0x440 [ 229.287884][T10600] ? __pfx_do_futex+0x10/0x10 [ 229.288003][T10600] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 229.288095][T10600] __x64_sys_futex+0x34f/0x4d0 [ 229.288243][T10600] ? __pfx___x64_sys_futex+0x10/0x10 [ 229.288473][T10600] do_syscall_64+0x123/0x790 [ 229.288586][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.288613][T10600] RIP: 0033:0x7f0eedb9e159 [ 229.288649][T10600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.288665][T10600] RSP: 002b:00007f0eeea3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 229.288687][T10600] RAX: ffffffffffffffda RBX: 00007f0eede25fa0 RCX: 00007f0eedb9e159 [ 229.288700][T10600] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000200 [ 229.288711][T10600] RBP: 00007f0eedc3506b R08: 0000000000000000 R09: 0000000034fffffd [ 229.288723][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.288735][T10600] R13: 00007f0eede26038 R14: 00007f0eede25fa0 R15: 00007ffd9f1e6fd8 [ 229.288986][T10600] [ 229.640017][ T5733] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 229.899499][ T5733] usb 5-1: Using ep0 maxpacket: 8 [ 229.945298][ T5733] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.031834][ T5733] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 230.032065][ T5733] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 230.032088][ T5733] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 230.032107][ T5733] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 230.032122][ T5733] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 230.032137][ T5733] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.032223][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.586572][ T5733] usb 5-1: Device is not authorized for usage [ 233.595933][ T5733] usb 5-1: USB disconnect, device number 12 [ 246.420600][T10640] FAULT_INJECTION: forcing a failure. [ 246.420600][T10640] name failslab, interval 1, probability 0, space 0, times 0 [ 246.420634][T10640] CPU: 0 UID: 0 PID: 10640 Comm: syz.2.2144 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 246.420655][T10640] Tainted: [L]=SOFTLOCKUP [ 246.420665][T10640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 246.420677][T10640] Call Trace: [ 246.420696][T10640] [ 246.420718][T10640] dump_stack_lvl+0x100/0x190 [ 246.420827][T10640] should_fail_ex.cold+0x5/0xa [ 246.420930][T10640] should_failslab+0xc2/0x120 [ 246.420980][T10640] __kmalloc_cache_noprof+0x91/0x6d0 [ 246.421034][T10640] ? xfd_validate_state+0x129/0x190 [ 246.421077][T10640] ? __do_sys_memfd_create+0x170/0x3d0 [ 246.421223][T10640] __do_sys_memfd_create+0x170/0x3d0 [ 246.421304][T10640] do_syscall_64+0x123/0x790 [ 246.421425][T10640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.421471][T10640] RIP: 0033:0x7f799399e159 [ 246.421509][T10640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.421523][T10640] RSP: 002b:00007f799494c028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 246.421541][T10640] RAX: ffffffffffffffda RBX: 00007f7993c25fa0 RCX: 00007f799399e159 [ 246.421551][T10640] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 246.421561][T10640] RBP: 00007f7993a3506b R08: 0000000000000000 R09: 0000000000000000 [ 246.421572][T10640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.421582][T10640] R13: 00007f7993c26038 R14: 00007f7993c25fa0 R15: 00007ffe000d80b8 [ 246.421834][T10640] [ 250.097407][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.097667][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.225238][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 258.531288][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2154'. [ 263.720841][ T5733] page_pool_release_retry() stalled pool shutdown: id 48, 1 inflight 60 sec [ 274.006069][T10740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2182'. [ 274.050925][T10746] FAULT_INJECTION: forcing a failure. [ 274.050925][T10746] name failslab, interval 1, probability 0, space 0, times 0 [ 274.050945][T10746] CPU: 0 UID: 0 PID: 10746 Comm: syz.3.2183 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 274.050961][T10746] Tainted: [L]=SOFTLOCKUP [ 274.050965][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 274.050972][T10746] Call Trace: [ 274.050976][T10746] [ 274.050981][T10746] dump_stack_lvl+0x100/0x190 [ 274.051002][T10746] should_fail_ex.cold+0x5/0xa [ 274.051019][T10746] should_failslab+0xc2/0x120 [ 274.051036][T10746] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 274.051051][T10746] ? copy_process+0x6a2/0x8370 [ 274.051067][T10746] copy_process+0x6a2/0x8370 [ 274.051081][T10746] ? __pfx___futex_wait+0x10/0x10 [ 274.051091][T10746] ? __pfx_try_to_wake_up+0x10/0x10 [ 274.051104][T10746] ? futex_hash+0x311/0x400 [ 274.051122][T10746] ? __pfx_copy_process+0x10/0x10 [ 274.051134][T10746] ? futex_wake+0x4ea/0x5e0 [ 274.051156][T10746] kernel_clone+0x176/0x9d0 [ 274.051169][T10746] ? __pfx_kernel_clone+0x10/0x10 [ 274.051185][T10746] ? ksys_write+0x190/0x250 [ 274.051200][T10746] __do_sys_clone+0xd9/0x120 [ 274.051213][T10746] ? __pfx___do_sys_clone+0x10/0x10 [ 274.051225][T10746] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 274.051255][T10746] do_syscall_64+0x123/0x790 [ 274.051272][T10746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.051284][T10746] RIP: 0033:0x7f8a42d9e159 [ 274.051294][T10746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.051305][T10746] RSP: 002b:00007f8a43b9dfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 274.051317][T10746] RAX: ffffffffffffffda RBX: 00007f8a43025fa0 RCX: 00007f8a42d9e159 [ 274.051325][T10746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.051332][T10746] RBP: 00007f8a42e3506b R08: 0000000000000000 R09: 0000000000000000 [ 274.051339][T10746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.051346][T10746] R13: 00007f8a43026038 R14: 00007f8a43025fa0 R15: 00007ffc06fb60a8 [ 274.051362][T10746] [ 274.713729][ T5589] block nbd64: NBD_DISCONNECT [ 274.753452][T10764] sock: sock_set_timeout: `syz.2.2190' (pid 10764) tries to set negative timeout [ 275.094572][ T5589] udevd[5589]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 275.180962][T10779] rnbd_client L213: map_device: Parameters missing [ 275.489073][T10787] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2199'. [ 275.927953][T10800] netlink: 'syz.0.2203': attribute type 4 has an invalid length. [ 276.184317][T10798] lo speed is unknown, defaulting to 1000 [ 276.559468][T10824] serio: Serial port ptm0 [ 276.577443][T10827] loop5: detected capacity change from 0 to 7 [ 276.578168][T10827] Dev loop5: unable to read RDB block 7 [ 276.578187][T10827] loop5: unable to read partition table [ 276.578268][T10827] loop5: partition table beyond EOD, truncated [ 276.578277][T10827] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 276.631631][T10825] 9pnet: p9_errstr2errno: server reported unknown error [ 276.657350][T10827] Dev loop5: unable to read RDB block 7 [ 276.657370][T10827] loop5: unable to read partition table [ 276.657461][T10827] loop5: partition table beyond EOD, truncated [ 276.657470][T10827] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 277.159221][T10835] lo speed is unknown, defaulting to 1000 [ 277.692062][ T31] audit: type=1400 audit(1789860920.740:716): avc: denied { listen } for pid=10851 comm="syz.1.2224" lport=41975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 277.721470][ T31] audit: type=1400 audit(1789860920.770:717): avc: denied { accept } for pid=10851 comm="syz.1.2224" lport=41975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 277.762026][ T31] audit: type=1400 audit(1789860920.810:718): avc: denied { setopt } for pid=10851 comm="syz.1.2224" lport=41975 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 278.082623][ T3833] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 278.433524][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 278.583950][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 278.588190][ T10] usb 3-1: config 0 has no interfaces? [ 278.588210][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.589595][ T10] usb 3-1: config 0 descriptor?? [ 278.843228][T10864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.843438][T10864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.848294][ T10] usb 3-1: USB disconnect, device number 16 [ 278.898977][T10873] serio: Serial port ptm0 [ 279.205037][T10882] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.2238'. [ 279.512447][T10894] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 279.512471][T10894] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 279.544346][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 279.544732][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 279.560120][T10894] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 279.600442][T10894] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 279.673907][ T10] usb 3-1: device descriptor read/64, error -32 [ 279.764768][T10894] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 279.913725][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 280.062737][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 280.063122][ T10] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=92.d4 [ 280.067383][ T10] usb 3-1: config index 0 descriptor too short (expected 6427, got 36) [ 280.067397][ T10] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 280.067408][ T10] usb 3-1: config 0 has no interface number 0 [ 280.067427][ T10] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.067442][ T10] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59219, setting to 1024 [ 280.067457][ T10] usb 3-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 280.067468][ T10] usb 3-1: config 0 interface 21 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.069498][ T10] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 280.069510][ T10] usb 3-1: Product: syz [ 280.070777][ T10] usb 3-1: config 0 descriptor?? [ 280.392105][ T10] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 280.410031][ T10] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input30 [ 280.412042][ C0] powermate: config urb returned -71 [ 280.412204][ C0] powermate: config urb returned -71 [ 280.412363][ C0] powermate: config urb returned -71 [ 280.412539][ C0] powermate: config urb returned -71 [ 280.464513][ T10] usb 3-1: USB disconnect, device number 18 [ 280.464568][ C0] powermate 3-1:0.21: powermate_irq - usb_submit_urb failed with result: -19 [ 280.492800][ T31] audit: type=1400 audit(1789860923.550:719): avc: denied { write } for pid=10908 comm="syz.4.2251" lport=44002 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 280.952437][ T13] smbdirect: ib_dev[syz2] removed [ 281.119851][T10894] siw: device registration error -19 [ 281.855109][ T31] audit: type=1400 audit(1789860924.910:720): avc: denied { listen } for pid=10949 comm="syz.4.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 281.883577][ T31] audit: type=1400 audit(1789860924.940:721): avc: denied { accept } for pid=10949 comm="syz.4.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 282.515912][T10973] jffs2: notice: (10973) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 282.736815][ T31] audit: type=1400 audit(1789860925.790:722): avc: denied { ioctl } for pid=10975 comm="syz.2.2277" path="socket:[33621]" dev="sockfs" ino=33621 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 282.937687][ T31] audit: type=1400 audit(1789860925.990:723): avc: denied { mount } for pid=10977 comm="syz.4.2278" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 283.024805][T10990] syzkaller1: entered promiscuous mode [ 283.024818][T10990] syzkaller1: entered allmulticast mode [ 283.117896][T10992] FAULT_INJECTION: forcing a failure. [ 283.117896][T10992] name failslab, interval 1, probability 0, space 0, times 0 [ 283.117918][T10992] CPU: 0 UID: 0 PID: 10992 Comm: syz.4.2283 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 283.117934][T10992] Tainted: [L]=SOFTLOCKUP [ 283.117938][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 283.117945][T10992] Call Trace: [ 283.117949][T10992] [ 283.117954][T10992] dump_stack_lvl+0x100/0x190 [ 283.117976][T10992] should_fail_ex.cold+0x5/0xa [ 283.117993][T10992] should_failslab+0xc2/0x120 [ 283.118009][T10992] __kmalloc_cache_noprof+0x91/0x6d0 [ 283.118028][T10992] ? proc_self_get_link+0x189/0x1f0 [ 283.118046][T10992] proc_self_get_link+0x189/0x1f0 [ 283.118062][T10992] pick_link+0xac2/0x13c0 [ 283.118073][T10992] ? selinux_inode_permission+0x14a/0x1130 [ 283.118090][T10992] ? __pfx_proc_self_get_link+0x10/0x10 [ 283.118107][T10992] step_into_slowpath+0x9ba/0xf90 [ 283.118122][T10992] ? __pfx_step_into_slowpath+0x10/0x10 [ 283.118137][T10992] ? lookup_fast+0x2da/0x600 [ 283.118147][T10992] ? inode_permission+0x374/0x620 [ 283.118166][T10992] link_path_walk+0xf28/0x1cc0 [ 283.118183][T10992] path_openat+0x1ac/0x2440 [ 283.118199][T10992] ? __pfx_path_openat+0x10/0x10 [ 283.118217][T10992] do_file_open+0x20e/0x430 [ 283.118232][T10992] ? __pfx_do_file_open+0x10/0x10 [ 283.118256][T10992] ? _raw_spin_unlock+0x28/0x50 [ 283.118271][T10992] ? alloc_fd+0x471/0x7a0 [ 283.118289][T10992] do_sys_openat2+0x10f/0x1e0 [ 283.118305][T10992] ? __pfx_do_sys_openat2+0x10/0x10 [ 283.118321][T10992] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 283.118351][T10992] __x64_sys_openat+0x12d/0x210 [ 283.118368][T10992] ? __pfx___x64_sys_openat+0x10/0x10 [ 283.118390][T10992] do_syscall_64+0x123/0x790 [ 283.118409][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.118421][T10992] RIP: 0033:0x7fa16e75e98e [ 283.118431][T10992] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 283.118443][T10992] RSP: 002b:00007fa16c9f5f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 283.118456][T10992] RAX: ffffffffffffffda RBX: 00007fa16c9f66c0 RCX: 00007fa16e75e98e [ 283.118464][T10992] RDX: 0000000000000000 RSI: 00007fa16e8347a6 RDI: ffffffffffffff9c [ 283.118471][T10992] RBP: 00007fa16e83506b R08: 0000000000000000 R09: 0000000000000000 [ 283.118478][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.118485][T10992] R13: 00007fa16ea26038 R14: 00007fa16ea25fa0 R15: 00007ffde9d68fa8 [ 283.118499][T10992] [ 283.530883][T10998] netlink: 'syz.4.2286': attribute type 10 has an invalid length. [ 283.532447][T10998] syz_tun: entered promiscuous mode [ 283.573917][T10998] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 283.633902][T10998] rdma_rxe: rxe_newlink: failed to add syz_tun [ 283.786944][T11005] binder: 11004:11005 ioctl c0306201 200000000080 returned -14 [ 283.803933][T11005] binder: 11004:11005 ioctl c0306201 2000000003c0 returned -14 [ 284.507860][ T31] audit: type=1400 audit(1789860927.560:724): avc: denied { relabelfrom } for pid=11034 comm="syz.0.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 284.507889][ T31] audit: type=1400 audit(1789860927.560:725): avc: denied { relabelto } for pid=11034 comm="syz.0.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 285.425532][ T31] audit: type=1400 audit(1789860928.480:726): avc: denied { map } for pid=11075 comm="syz.3.2324" path="socket:[34063]" dev="sockfs" ino=34063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.848894][T11090] FAULT_INJECTION: forcing a failure. [ 285.848894][T11090] name failslab, interval 1, probability 0, space 0, times 0 [ 285.848917][T11090] CPU: 0 UID: 0 PID: 11090 Comm: syz.0.2330 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 285.848933][T11090] Tainted: [L]=SOFTLOCKUP [ 285.848937][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 285.848944][T11090] Call Trace: [ 285.848949][T11090] [ 285.848954][T11090] dump_stack_lvl+0x100/0x190 [ 285.848975][T11090] should_fail_ex.cold+0x5/0xa [ 285.848989][T11090] ? lock_acquire+0x1d1/0x380 [ 285.849004][T11090] should_failslab+0xc2/0x120 [ 285.849020][T11090] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 285.849034][T11090] ? zswap_store+0xc6d/0x2e70 [ 285.849054][T11090] zswap_store+0xc6d/0x2e70 [ 285.849076][T11090] ? __pfx_zswap_store+0x10/0x10 [ 285.849094][T11090] ? lock_acquire+0x1d1/0x380 [ 285.849106][T11090] ? do_raw_spin_lock+0x128/0x260 [ 285.849125][T11090] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 285.849139][T11090] ? find_held_lock+0x2b/0x80 [ 285.849155][T11090] ? swap_writeout+0xdd8/0x1b20 [ 285.849171][T11090] ? swap_writeout+0xdd8/0x1b20 [ 285.849191][T11090] swap_writeout+0xde0/0x1b20 [ 285.849213][T11090] shrink_folio_list+0x4ffb/0x5e40 [ 285.849234][T11090] ? __pfx_shrink_folio_list+0x10/0x10 [ 285.849270][T11090] ? __lock_acquire+0x5c0/0x1f40 [ 285.849282][T11090] ? __css_rstat_updated+0x1ce/0x590 [ 285.849303][T11090] ? __pfx___css_rstat_updated+0x10/0x10 [ 285.849320][T11090] reclaim_folio_list+0xe9/0x5e0 [ 285.849338][T11090] ? __pfx_reclaim_folio_list+0x10/0x10 [ 285.849353][T11090] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 285.849374][T11090] ? lru_gen_update_size+0x431/0xe20 [ 285.849391][T11090] ? lru_gen_del_folio+0x382/0x5f0 [ 285.849407][T11090] reclaim_pages+0x428/0x5e0 [ 285.849424][T11090] ? __pfx_reclaim_pages+0x10/0x10 [ 285.849439][T11090] ? find_held_lock+0x2b/0x80 [ 285.849456][T11090] ? madvise_cold_or_pageout_pte_range+0xb8e/0x27b0 [ 285.849475][T11090] madvise_cold_or_pageout_pte_range+0x15b5/0x27b0 [ 285.849497][T11090] ? rcu_read_unlock+0x17/0x60 [ 285.849514][T11090] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 285.849531][T11090] ? __mod_zone_page_state+0xdb/0x190 [ 285.849550][T11090] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 285.849567][T11090] walk_pgd_range+0xbef/0x1e00 [ 285.849583][T11090] ? find_held_lock+0x2b/0x80 [ 285.849604][T11090] ? __pfx_walk_pgd_range+0x10/0x10 [ 285.849616][T11090] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 285.849634][T11090] __walk_page_range+0x171/0x850 [ 285.849652][T11090] walk_page_range_vma_unsafe+0x209/0x8f0 [ 285.849667][T11090] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 285.849682][T11090] ? find_held_lock+0x2b/0x80 [ 285.849697][T11090] ? mlock_drain_local+0x254/0x4e0 [ 285.849714][T11090] ? mlock_drain_local+0x254/0x4e0 [ 285.849734][T11090] walk_page_range_vma+0x63/0x90 [ 285.849747][T11090] madvise_pageout+0x29e/0x5b0 [ 285.849763][T11090] ? __pfx_madvise_pageout+0x10/0x10 [ 285.849788][T11090] madvise_vma_behavior+0x48b/0x2350 [ 285.849805][T11090] ? mas_prev+0xa4/0x100 [ 285.849817][T11090] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 285.849834][T11090] ? mas_walk+0x260/0x310 [ 285.849851][T11090] ? find_vma_prev+0xd8/0x150 [ 285.849864][T11090] ? __pfx_find_vma_prev+0x10/0x10 [ 285.849877][T11090] ? lock_acquire+0x1d1/0x380 [ 285.849897][T11090] madvise_walk_vmas+0x30e/0xc50 [ 285.849915][T11090] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 285.849932][T11090] ? __pfx_futex_wake_mark+0x10/0x10 [ 285.849953][T11090] ? lock_acquire+0x1d1/0x380 [ 285.849968][T11090] madvise_do_behavior+0x1ea/0x510 [ 285.849985][T11090] ? __pfx_madvise_do_behavior+0x10/0x10 [ 285.850002][T11090] ? down_read+0x13b/0x4c0 [ 285.850020][T11090] do_madvise+0x238/0x290 [ 285.850035][T11090] ? __pfx_do_madvise+0x10/0x10 [ 285.850050][T11090] ? do_futex+0x190/0x440 [ 285.850068][T11090] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 285.850095][T11090] __x64_sys_madvise+0xa9/0x110 [ 285.850111][T11090] ? lockdep_hardirqs_on+0x7d/0x110 [ 285.850128][T11090] do_syscall_64+0x123/0x790 [ 285.850145][T11090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.850157][T11090] RIP: 0033:0x7f08ecf9e159 [ 285.850168][T11090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.850179][T11090] RSP: 002b:00007f08ede1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 285.850191][T11090] RAX: ffffffffffffffda RBX: 00007f08ed225fa0 RCX: 00007f08ecf9e159 [ 285.850199][T11090] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 285.850206][T11090] RBP: 00007f08ed03506b R08: 0000000000000000 R09: 0000000000000000 [ 285.850213][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.850219][T11090] R13: 00007f08ed226038 R14: 00007f08ed225fa0 R15: 00007ffe69e387b8 [ 285.850234][T11090] [ 286.424855][T11094] input: syz0 as /devices/virtual/input/input31 [ 286.727119][ T31] audit: type=1400 audit(1789860929.780:727): avc: denied { name_bind } for pid=11106 comm="syz.0.2337" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 287.087426][T11116] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2341'. [ 287.506568][T11131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2348'. [ 287.831660][T11144] FAULT_INJECTION: forcing a failure. [ 287.831660][T11144] name failslab, interval 1, probability 0, space 0, times 0 [ 287.831683][T11144] CPU: 0 UID: 0 PID: 11144 Comm: syz.0.2353 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 287.831698][T11144] Tainted: [L]=SOFTLOCKUP [ 287.831702][T11144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 287.831709][T11144] Call Trace: [ 287.831714][T11144] [ 287.831718][T11144] dump_stack_lvl+0x100/0x190 [ 287.831740][T11144] should_fail_ex.cold+0x5/0xa [ 287.831757][T11144] should_failslab+0xc2/0x120 [ 287.831774][T11144] __kmalloc_noprof+0xfc/0x840 [ 287.831788][T11144] ? udp_init_sock+0x24e/0x450 [ 287.831803][T11144] udp_init_sock+0x24e/0x450 [ 287.831814][T11144] ? __pfx_udp_init_sock+0x10/0x10 [ 287.831827][T11144] inet_create+0x94c/0x1060 [ 287.831844][T11144] ? inet_create+0x94/0x1060 [ 287.831863][T11144] __sock_create+0x339/0x860 [ 287.831884][T11144] __sys_socket+0x14d/0x260 [ 287.831895][T11144] ? __pfx___sys_socket+0x10/0x10 [ 287.831910][T11144] __x64_sys_socket+0x72/0xb0 [ 287.831920][T11144] ? lockdep_hardirqs_on+0x7d/0x110 [ 287.831936][T11144] do_syscall_64+0x123/0x790 [ 287.831954][T11144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.831966][T11144] RIP: 0033:0x7f08ecf9e159 [ 287.831976][T11144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.831988][T11144] RSP: 002b:00007f08ede1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 287.832001][T11144] RAX: ffffffffffffffda RBX: 00007f08ed225fa0 RCX: 00007f08ecf9e159 [ 287.832008][T11144] RDX: 0000000000000011 RSI: 0000000000000002 RDI: 0000000000000002 [ 287.832015][T11144] RBP: 00007f08ed03506b R08: 0000000000000000 R09: 0000000000000000 [ 287.832022][T11144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.832029][T11144] R13: 00007f08ed226038 R14: 00007f08ed225fa0 R15: 00007ffe69e387b8 [ 287.832043][T11144] [ 325.352720][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.365115][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.904246][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.912679][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.042445][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 414.049389][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5589/1:b..l [ 414.057272][ C0] rcu: (detected by 0, t=10502 jiffies, g=56737, q=696 ncpus=1) [ 414.064958][ C0] task:udevd state:R running task stack:24904 pid:5589 tgid:5589 ppid:4967 task_flags:0x400140 flags:0x00080000 [ 414.078406][ C0] Call Trace: [ 414.081662][ C0] [ 414.084577][ C0] __schedule+0x1259/0x6920 [ 414.089064][ C0] ? __pfx___schedule+0x10/0x10 [ 414.093901][ C0] ? mark_held_locks+0x40/0x70 [ 414.098640][ C0] preempt_schedule_irq+0x4e/0x90 [ 414.103643][ C0] irqentry_exit+0x205/0xa10 [ 414.108213][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.114167][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 414.119339][ C0] Code: 05 4f 50 a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e f2 5d 0f 0f 82 c9 02 00 00 8b 35 fe 23 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed 4f a5 12 0f 85 09 03 00 00 48 83 c4 [ 414.138926][ C0] RSP: 0018:ffffc90003d1f580 EFLAGS: 00000206 [ 414.144963][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 414.152904][ C0] RDX: 0000000000000000 RSI: ffffffff8e36652c RDI: ffffffff8c623580 [ 414.160847][ C0] RBP: ffffffff8edec4a0 R08: 000000000cb9ba10 R09: 0000000000000007 [ 414.168797][ C0] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 414.176748][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.184695][ C0] ? is_module_text_address+0x148/0x220 [ 414.190216][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 414.196350][ C0] is_bpf_text_address+0x36/0x1a0 [ 414.201346][ C0] ? is_bpf_text_address+0x25/0x1a0 [ 414.206516][ C0] kernel_text_address+0x8d/0x100 [ 414.211525][ C0] __kernel_text_address+0xd/0x30 [ 414.216523][ C0] unwind_get_return_address+0x59/0xa0 [ 414.221957][ C0] arch_stack_walk+0xa6/0xf0 [ 414.226525][ C0] stack_trace_save+0x8e/0xc0 [ 414.231172][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 414.236521][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 414.241429][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 414.246350][ C0] save_stack+0x162/0x1e0 [ 414.250665][ C0] ? __pfx_save_stack+0x10/0x10 [ 414.255487][ C0] ? __free_frozen_pages+0x79f/0x10f0 [ 414.260833][ C0] ? qlist_free_all+0x47/0xf0 [ 414.265483][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 414.271088][ C0] ? __kasan_kmalloc+0x8a/0xb0 [ 414.275826][ C0] ? __kmalloc_noprof+0x32f/0x840 [ 414.280824][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 414.285563][ C0] ? tomoyo_encode+0x29/0x50 [ 414.290127][ C0] ? tomoyo_realpath_from_path+0x18c/0x690 [ 414.295910][ C0] ? tomoyo_path_perm+0x276/0x460 [ 414.300908][ C0] ? tomoyo_path_symlink+0x97/0xe0 [ 414.305994][ C0] ? security_path_symlink+0x152/0x2d0 [ 414.311432][ C0] ? filename_symlinkat+0x122/0x560 [ 414.316604][ C0] ? __x64_sys_symlink+0x79/0xb0 [ 414.321514][ C0] ? do_syscall_64+0x123/0x790 [ 414.326252][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.332293][ C0] ? page_ext_put+0x3e/0xd0 [ 414.336770][ C0] __reset_page_owner+0x84/0x190 [ 414.341682][ C0] __free_frozen_pages+0x79f/0x10f0 [ 414.346854][ C0] ? __free_slab+0xd0/0x220 [ 414.351332][ C0] qlist_free_all+0x47/0xf0 [ 414.355805][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 414.361233][ C0] __kasan_kmalloc+0x8a/0xb0 [ 414.365793][ C0] __kmalloc_noprof+0x32f/0x840 [ 414.370612][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 414.375349][ C0] tomoyo_encode2+0xfb/0x3c0 [ 414.379911][ C0] tomoyo_encode+0x29/0x50 [ 414.384297][ C0] tomoyo_realpath_from_path+0x18c/0x690 [ 414.389905][ C0] tomoyo_path_perm+0x276/0x460 [ 414.394724][ C0] ? tomoyo_path_perm+0x262/0x460 [ 414.399718][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 414.405060][ C0] ? find_held_lock+0x2b/0x80 [ 414.409712][ C0] ? _raw_spin_unlock+0x28/0x50 [ 414.414540][ C0] ? simple_lookup+0xfc/0x1d0 [ 414.419188][ C0] ? lookup_one_qstr_excl+0xaf/0x250 [ 414.424446][ C0] tomoyo_path_symlink+0x97/0xe0 [ 414.429355][ C0] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 414.434959][ C0] ? lock_acquire+0x1d1/0x380 [ 414.439606][ C0] security_path_symlink+0x152/0x2d0 [ 414.444860][ C0] filename_symlinkat+0x122/0x560 [ 414.449859][ C0] ? __pfx_filename_symlinkat+0x10/0x10 [ 414.455376][ C0] ? strncpy_from_user+0x19d/0x2d0 [ 414.460464][ C0] ? do_getname+0x191/0x390 [ 414.464940][ C0] __x64_sys_symlink+0x79/0xb0 [ 414.469676][ C0] do_syscall_64+0x123/0x790 [ 414.474241][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.480102][ C0] RIP: 0033:0x7f2be0d15527 [ 414.484487][ C0] RSP: 002b:00007ffee505c9a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 414.492867][ C0] RAX: ffffffffffffffda RBX: 000055b5cc337d50 RCX: 00007f2be0d15527 [ 414.500807][ C0] RDX: fffffffffffffe68 RSI: 00007ffee505c9b0 RDI: 000055b5cc3376d0 [ 414.508746][ C0] RBP: 0000000000000967 R08: 0000000000000064 R09: 0000000000000000 [ 414.516686][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffee505c9b0 [ 414.524634][ C0] R13: 000055b5cc3308d0 R14: 0000000000000008 R15: 000055b5cc337d50 [ 414.532580][ C0] [ 414.535572][ C0] rcu: rcu_preempt kthread starved for 487 jiffies! g56737 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 414.546380][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 414.556327][ C0] rcu: RCU grace-period kthread stack dump: [ 414.562186][ C0] task:rcu_preempt state:R running task stack:28312 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 414.575639][ C0] Call Trace: [ 414.578899][ C0] [ 414.581806][ C0] __schedule+0x1259/0x6920 [ 414.586285][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 414.591198][ C0] ? lock_acquire+0x1d1/0x380 [ 414.595857][ C0] ? __pfx___schedule+0x10/0x10 [ 414.600679][ C0] ? find_held_lock+0x2b/0x80 [ 414.605332][ C0] ? schedule+0x225/0x2c0 [ 414.609636][ C0] schedule+0xdd/0x2c0 [ 414.613690][ C0] schedule_timeout+0x127/0x280 [ 414.618523][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 414.623868][ C0] ? __pfx_process_timeout+0x10/0x10 [ 414.629128][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 414.634909][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 414.640343][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 414.645090][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 414.650349][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 414.655258][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 414.660425][ C0] ? rcu_is_watching+0x13/0xc0 [ 414.665162][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 414.670941][ C0] rcu_gp_kthread+0x17a/0x220 [ 414.675588][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 414.680756][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 414.686534][ C0] ? __kthread_parkme+0x18f/0x230 [ 414.691531][ C0] ? kthread+0x13a/0x450 [ 414.695745][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 414.700911][ C0] kthread+0x373/0x450 [ 414.704954][ C0] ? __pfx_kthread+0x10/0x10 [ 414.709518][ C0] ret_from_fork+0x730/0xd60 [ 414.714082][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 414.719174][ C0] ? __switch_to+0x800/0x10f0 [ 414.723824][ C0] ? __pfx_kthread+0x10/0x10 [ 414.728389][ C0] ret_from_fork_asm+0x1a/0x30 [ 414.733135][ C0] [ 414.736127][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 414.742430][ C0] CPU: 0 UID: 0 PID: 3220 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(lazy) [ 414.753687][ C0] Tainted: [L]=SOFTLOCKUP [ 414.757980][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 414.768006][ C0] Workqueue: bat_events batadv_tt_purge [ 414.773528][ C0] RIP: 0010:__local_bh_disable_ip+0x17/0xd0 [ 414.779395][ C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 89 f3 65 f6 05 0b 88 c2 12 0f 0f 85 9c 00 00 00 9c <5d> fa 48 63 c3 65 48 01 05 f4 87 c2 12 65 48 63 05 ec 87 c2 12 48 [ 414.798970][ C0] RSP: 0018:ffffc90000007088 EFLAGS: 00000246 [ 414.805005][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000101 [ 414.812953][ C0] RDX: ffff888034202580 RSI: 0000000000000200 RDI: ffffffff8a957170 [ 414.820893][ C0] RBP: ffff8880345a0000 R08: 0000000000000005 R09: 0000000000000000 [ 414.828841][ C0] R10: 0000000000000008 R11: 0000000000000001 R12: 1ffff92000000e36 [ 414.836781][ C0] R13: ffff8881b50beb40 R14: ffff88807d956018 R15: 0000000000000003 [ 414.844721][ C0] FS: 0000000000000000(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 [ 414.853621][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.860174][ C0] CR2: 00007f53a8c2be23 CR3: 000000005d1b2000 CR4: 00000000003526f0 [ 414.868119][ C0] Call Trace: [ 414.871370][ C0] [ 414.874190][ C0] ip6t_do_table+0x235/0x1c90 [ 414.878838][ C0] ? find_held_lock+0x2b/0x80 [ 414.883490][ C0] ? ip6_pol_route+0x2f3/0x1310 [ 414.888312][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 414.893567][ C0] ? ip6_pol_route+0x307/0x1310 [ 414.898397][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 414.903320][ C0] ? kasan_save_stack+0x30/0x50 [ 414.908140][ C0] ? kasan_save_track+0x14/0x30 [ 414.912961][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 414.917955][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 414.923037][ C0] ? nft_synproxy_do_eval+0x911/0xce0 [ 414.928381][ C0] ? nft_do_chain+0x2e5/0x19d0 [ 414.933122][ C0] ? nft_do_chain_inet+0xf3/0x400 [ 414.938120][ C0] ? lock_acquire+0x1d1/0x380 [ 414.942767][ C0] ? ipv6_defrag+0x2a8/0x480 [ 414.947331][ C0] nf_hook_slow+0xbf/0x220 [ 414.951718][ C0] __ip6_local_out+0x4c0/0xaf0 [ 414.956453][ C0] ? __pfx___ip6_local_out+0x10/0x10 [ 414.961710][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 414.967490][ C0] ? __pfx_dst_output+0x10/0x10 [ 414.972315][ C0] ip6_local_out+0x2a/0x1f0 [ 414.976792][ C0] synproxy_send_tcp_ipv6+0x68d/0x7c0 [ 414.982135][ C0] ? __pfx_cookie_hash.isra.0+0x10/0x10 [ 414.987650][ C0] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 414.993519][ C0] ? __cookie_v6_init_sequence+0x2d7/0x3c0 [ 414.999298][ C0] synproxy_send_client_synack_ipv6+0x601/0x7a0 [ 415.005512][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 415.012243][ C0] ? net_generic+0xea/0x2a0 [ 415.016720][ C0] nft_synproxy_do_eval+0x911/0xce0 [ 415.021890][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 415.027586][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 415.033017][ C0] nft_do_chain+0x2e5/0x19d0 [ 415.037579][ C0] ? ip6t_do_table+0xbed/0x1c90 [ 415.042402][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 415.047658][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 415.052665][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 415.058531][ C0] ? nf_nat_inet_fn+0x530/0xb50 [ 415.063360][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 415.068538][ C0] nft_do_chain_inet+0xf3/0x400 [ 415.073360][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 415.078793][ C0] ? nf_nat_ipv6_local_in+0x4b5/0x6c0 [ 415.084140][ C0] ? lock_acquire+0x1d1/0x380 [ 415.088785][ C0] ? nf_hook.constprop.0+0x98/0x750 [ 415.093958][ C0] nf_hook_slow+0xbf/0x220 [ 415.098345][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 415.103436][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 415.108778][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 415.114383][ C0] ? lock_acquire+0x1d1/0x380 [ 415.119033][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 415.124380][ C0] ip6_input+0xe0/0x2f0 [ 415.128511][ C0] ? __pfx_ip6_input+0x10/0x10 [ 415.133246][ C0] ipv6_rcv+0x263/0x3d0 [ 415.137374][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 415.142026][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 415.147888][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 415.154272][ C0] ? lock_acquire+0x1d1/0x380 [ 415.158918][ C0] ? process_backlog+0x437/0x1600 [ 415.163925][ C0] ? process_backlog+0x437/0x1600 [ 415.168917][ C0] __netif_receive_skb+0x1f/0x120 [ 415.173909][ C0] process_backlog+0x487/0x1600 [ 415.178733][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 415.184074][ C0] net_rx_action+0xa40/0xf20 [ 415.188636][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 415.193717][ C0] ? mark_held_locks+0x40/0x70 [ 415.198449][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 415.203621][ C0] ? tmigr_handle_remote+0x132/0x380 [ 415.208880][ C0] ? mark_held_locks+0x40/0x70 [ 415.213613][ C0] handle_softirqs+0x1e6/0x9d0 [ 415.218346][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 415.223599][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 415.228852][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 415.234281][ C0] do_softirq+0xaf/0xf0 [ 415.238407][ C0] [ 415.241310][ C0] [ 415.244212][ C0] __local_bh_enable_ip+0xff/0x120 [ 415.249293][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 415.254547][ C0] ? look_up_lock_class+0x64/0x120 [ 415.259634][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 415.265412][ C0] batadv_tt_purge+0x8b/0xbd0 [ 415.270062][ C0] ? reacquire_held_locks+0xdd/0x1f0 [ 415.275316][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 415.280571][ C0] ? lock_acquire+0x1d1/0x380 [ 415.285217][ C0] ? process_one_work+0xa2c/0x1b10 [ 415.290302][ C0] ? process_one_work+0x906/0x1b10 [ 415.295388][ C0] ? process_one_work+0x906/0x1b10 [ 415.300474][ C0] process_one_work+0xac7/0x1b10 [ 415.305394][ C0] ? __pfx_process_one_work+0x10/0x10 [ 415.310741][ C0] ? lock_acquire+0x1d1/0x380 [ 415.315393][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 415.320656][ C0] rescuer_thread+0x918/0x14e0 [ 415.325400][ C0] ? rescuer_thread+0x256/0x14e0 [ 415.330311][ C0] ? rescuer_thread+0x118/0x14e0 [ 415.335222][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 415.340397][ C0] ? __kthread_parkme+0x18f/0x230 [ 415.345401][ C0] ? kthread+0x13a/0x450 [ 415.349614][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 415.354791][ C0] kthread+0x373/0x450 [ 415.358831][ C0] ? __pfx_kthread+0x10/0x10 [ 415.363396][ C0] ret_from_fork+0x730/0xd60 [ 415.367966][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 415.373048][ C0] ? __switch_to+0x800/0x10f0 [ 415.377698][ C0] ? __pfx_kthread+0x10/0x10 [ 415.382261][ C0] ret_from_fork_asm+0x1a/0x30 [ 415.387001][ C0]