last executing test programs: 12.677785641s ago: executing program 2 (id=1743): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) socket$isdn(0x22, 0x3, 0x3) ioctl$I2C_TIMEOUT(r0, 0x702, 0x66a0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) inotify_init() r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) unshare(0x72040e80) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x5cac3000) listen(0xffffffffffffffff, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000580)) close(r5) 11.975857313s ago: executing program 4 (id=1745): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r1, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x600}, 0x90) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x201, 0x0, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000500)={0x1, {&(0x7f00000000c0)=""/17, 0x11, &(0x7f0000000480)=""/77, 0x2, 0x2}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000840)=ANY=[@ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x6) close(r7) socket$inet6_sctp(0xa, 0x1, 0x84) 10.767752755s ago: executing program 0 (id=1749): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000980)={0x2, 0x0, {0x0, 0xfffffffffffffef1, 0x0, 0x1, 0x2}}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) r4 = socket$isdn(0x22, 0x2, 0x10) r5 = socket$isdn(0x22, 0x2, 0x2) r6 = dup3(r5, r4, 0x0) write$P9_RGETLOCK(r6, 0x0, 0x0) 10.69213341s ago: executing program 4 (id=1750): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="4801000010000100"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) 10.018798561s ago: executing program 4 (id=1752): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x4f}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000080)=0x7, 0x4) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) write$dsp(r3, &(0x7f00000001c0)="5cba91", 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}]}]}, 0x78}}, 0x0) socket$packet(0x11, 0x3, 0x300) 9.51388351s ago: executing program 0 (id=1753): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x23, 0x8, 0x7ffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x0, 0x400000000000000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000001c0)={0x1000000}) prctl$PR_GET_IO_FLUSHER(0x3a) syz_clone(0x1021000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) 9.50581899s ago: executing program 3 (id=1754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000004c0)="00a1", 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r6}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xe) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000280), &(0x7f0000000300)=[r7], &(0x7f0000000340)}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8.741237729s ago: executing program 2 (id=1755): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000240)=""/190, &(0x7f0000000bc0)=""/4096, &(0x7f0000000040)=""/128, 0xeeef0000}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x2, 0x93, &(0x7f0000000600)=""/163}, {0x5000, 0x24, &(0x7f0000000300)=""/6}]}) r5 = dup(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x4) setresuid(0xee01, 0x0, 0x0) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r5}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r6, @ANYBLOB="2a052abd7000fddbdf2512000000040009805c0002800400040008000103000000000000000008000100086b0000a149504753040004003c0003800800010007000000080001000800000008000100050000000800010081000000080002006c00000008000200d500000008000100fbffffff1800028004000400080002000100000008000100080000004800058007000100696200003c000280080004000500000008000400000001000800030006000000080003000c0000000800010004000000080003000700000008000200080000002000078008000200080000000c00040006000000000000000800020007000000780004800900010073797a31000000001300010062726f6164636173742d6c696e6b00002400078008000300"], 0x1b8}, 0x1, 0x0, 0x0, 0x40080d1}, 0x800) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x14000}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) 8.399630202s ago: executing program 0 (id=1756): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0x8, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x7fffffff, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0x1c000000, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x104, 0x0, 0x5, 0x803c, 0x4, 0x2, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x5, 0x5, 0x2f, 0xd, 0xfff, 0x78, 0x10000ea3, 0x8, 0xa, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x7f, 0xb, 0xfff, 0x1010, 0x4, 0x143, 0x7, 0xb, 0xf, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x87, 0x0, 0x5, 0x5, 0x3b, 0xda6, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x3, 0x1, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x9, 0x3, 0x6, 0xd, 0x4, 0x3], [0x9, 0x7e06, 0x4000003, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0xf2c, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x10006, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffff9f, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xd9, 0x8, 0x2b94, 0xa23, 0x8, 0x9, 0x7, 0x6c1b, 0x2d513b50, 0x4, 0x7, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) r6 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x3, 0x0, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') 8.375373502s ago: executing program 3 (id=1757): socket$inet(0x2, 0x2, 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x109141, 0xdf) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x7}, &(0x7f00000001c0)=0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) readlink(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) fchown(0xffffffffffffffff, 0x0, 0xee01) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) socket(0x2, 0x80805, 0x0) r4 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x11, r7, 0x615c4000) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x434882, 0x0) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 8.040801912s ago: executing program 3 (id=1759): fsopen(&(0x7f0000000000)='smb3\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa8840, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000740), 0x0, 0x2004c0d0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)={r6, 0x1, 0x0, 0x4000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a09"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_enter(r1, 0x47ba, 0x3e80, 0xa, 0x0, 0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) fstat(r8, &(0x7f0000002300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r9) 6.94167951s ago: executing program 4 (id=1760): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f00000000c0)={r1}, 0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x5cbe}, &(0x7f0000000280)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x4, 0x5cd102) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x4, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$kcm(r2, 0x0, 0x200008c1) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x8) r7 = dup(r0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x2b, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb, 0x12, r7, 0x2000) 6.917773113s ago: executing program 3 (id=1761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffd) accept(r3, 0x0, 0x0) 6.763440413s ago: executing program 4 (id=1762): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_clone3(0x0, 0xffffffffffffff0b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(r2, 0x3, &(0x7f0000000300)=0x2000004) getrlimit(0x6, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x1d, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r5 = accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@default, @bcast, @null, @null, @remote, @rose, @rose, @null]}, &(0x7f00000001c0)=0x48) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000200)=0x17a, 0x4) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 4.860160634s ago: executing program 0 (id=1763): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) kexec_load(0x7, 0x3, &(0x7f0000000280)=[{&(0x7f00000001c0)="aca0cd89c6d86a1b721aac8bf24a78c03cb393fbd5d0536a59beaa2ba3938fa60d3c0f70a9dbd67a53e8022e67e50b01f6b505accf887fa40c90cefef626f4d6b896ead74562a90f0e686bc5bb360d670ff7134e2ef177e39b7e01776a57e8e8873198599a4cd5b94bceccfcc1f0370d7471fb", 0x73, 0xb5, 0xc}, {&(0x7f0000000080)="00ee817132552b25dcb923c8fde2faca42546ba23d41", 0x16, 0x9, 0x4}, {&(0x7f0000000240)="1b2f852def564606d51618", 0xb, 0xb77, 0x7}], 0x320000) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x3c, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x53) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500003bb500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000180)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000100)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000016d79120001"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000002c0)="abc6", 0x2}], 0x1) 4.809895068s ago: executing program 1 (id=1764): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000980)={0x2, 0x0, {0x0, 0xfffffffffffffef1, 0x0, 0x1, 0x2}}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) r4 = socket$isdn(0x22, 0x2, 0x10) r5 = socket$isdn(0x22, 0x2, 0x2) r6 = dup3(r5, r4, 0x0) write$P9_RGETLOCK(r6, 0x0, 0x0) 4.777516297s ago: executing program 2 (id=1765): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e00892f", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.579974041s ago: executing program 2 (id=1766): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x23, 0x8, 0x7ffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x0, 0x400000000000000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000001c0)={0x1000000}) prctl$PR_GET_IO_FLUSHER(0x3a) syz_clone(0x1021000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) 3.624151276s ago: executing program 2 (id=1767): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8905, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setreuid(0xee01, 0xee01) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)={0x3ff, {{0xa, 0x4e20, 0x5, @local, 0x400}}}, 0x88) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004d80)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x6e) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa0500030002000000240001000000000000000000000000000000000041000000000000000000000000000000080005000100000014000200776731"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 3.559437848s ago: executing program 1 (id=1768): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e24, @remote}, {0x1, @link_local}, 0x20, {0x2, 0x4e23, @multicast1}, 'lo\x00'}) (fail_nth: 4) 3.251479716s ago: executing program 0 (id=1769): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket(0x11, 0x2, 0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x14, r6, 0x0, r5}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180000008b0000000000000000000000850000001300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000008ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff03076003008cb89e08f088a8", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0xe, 0x0, 0x1, 0x7fff0002}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = syz_io_uring_setup(0x49f, &(0x7f0000000600)={0x0, 0xe7a9, 0x100, 0xfffa, 0x40024e}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x58, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x30, 0x54540, 0x23456}) io_uring_enter(r10, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r8, 0x80000}) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) 3.163725324s ago: executing program 2 (id=1770): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x4f}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000080)=0x7, 0x4) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}]}]}, 0x78}}, 0x0) socket$packet(0x11, 0x3, 0x300) 2.896167832s ago: executing program 1 (id=1771): fsopen(&(0x7f0000000000)='smb3\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa8840, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000740), 0x0, 0x2004c0d0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)={r6, 0x1, 0x0, 0x4000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000000)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84312a09"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_enter(r1, 0x47ba, 0x3e80, 0xa, 0x0, 0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) fstat(r8, &(0x7f0000002300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r9) 2.030007213s ago: executing program 1 (id=1772): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x18}}], 0x1, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000064f1f440cf10658079910102030109022400010000000009"], 0x0) 1.995088647s ago: executing program 3 (id=1773): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x23, 0x8, 0x7ffd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x0, 0x400000000000000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) prctl$PR_GET_IO_FLUSHER(0x3a) syz_clone(0x1021000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 1.208444961s ago: executing program 4 (id=1774): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, 0x0, 0x8000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f000001bff4)={0x10000000}) signalfd4(r4, &(0x7f0000000180), 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x1000}) close(r6) r7 = mq_open(&(0x7f00000000c0)='batadv_slave_1\xbb', 0x40, 0x30, &(0x7f0000000080)={0x8, 0x1, 0x6, 0xc08}) mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r7, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) r8 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r8, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) linkat(r8, &(0x7f0000000040)='./file1\x00', r8, &(0x7f0000000180)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mq_timedsend(r7, 0x0, 0x0, 0x5, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r9, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) ioctl$SNDCTL_DSP_SPEED(r12, 0xc0045009, &(0x7f0000000040)) 963.711223ms ago: executing program 3 (id=1775): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000240)=""/190, &(0x7f0000000bc0)=""/4096, &(0x7f0000000040)=""/128, 0xeeef0000}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x2, 0x93, &(0x7f0000000600)=""/163}, {0x5000, 0x24, &(0x7f0000000300)=""/6}]}) r5 = dup(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x4) setresuid(0xee01, 0x0, 0x0) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r5}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x40080d1}, 0x800) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x14000}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) 793.498757ms ago: executing program 0 (id=1776): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='siox_set_data\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000300)=[{0x29, 0x700000, 0x18}, {0x80, 0x6, 0x4}, {0xfffffffffffffffb, 0xb096, 0x2}, {0x4aea, 0x4, 0x2}, {0x7, 0x8, 0x1}], 0x5, 0xbff, 0x1e, 0x0, 0x29, 0x6e}) 101.047178ms ago: executing program 1 (id=1777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000500020000840900020073797a3100000000050001"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 0s ago: executing program 1 (id=1778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002"], 0xdc}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) read$msr(r4, &(0x7f0000000bc0)=""/4096, 0x1000) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0xfffffffb}}, 0x30) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/264], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000040)=""/57, 0x39, 0x7, 0x1c000}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) kernel console output (not intermixed with test programs): oot:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 443.675926][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 443.684807][T10215] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1149'. [ 443.693885][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 444.569637][T10229] fuse: Bad value for 'fd' [ 444.637002][T10230] netlink: 'syz.2.1154': attribute type 4 has an invalid length. [ 444.645452][T10230] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1154'. [ 446.909843][ T5892] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 447.042681][T10251] vxcan1 speed is unknown, defaulting to 1000 [ 447.090491][ T5925] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 447.269786][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 447.289597][ T5925] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 447.299074][ T5925] usb 2-1: config 0 has no interface number 0 [ 447.309817][ T5925] usb 2-1: config 0 interface 89 has no altsetting 0 [ 447.349991][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 447.358789][ T5892] usb 4-1: can't read configurations, error -61 [ 447.368784][ T5925] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 447.378150][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.386296][ T5925] usb 2-1: Product: syz [ 447.390728][ T5925] usb 2-1: Manufacturer: syz [ 447.398652][ T5925] usb 2-1: SerialNumber: syz [ 447.412372][ T5925] usb 2-1: config 0 descriptor?? [ 447.419381][ T5925] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 447.430380][ T5925] em28xx 2-1:0.89: Video interface 89 found: bulk [ 447.499899][ T5892] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 447.620881][T10260] input: syz1 as /devices/virtual/input/input21 [ 447.757292][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 447.765041][ T5892] usb 4-1: can't read configurations, error -61 [ 447.884053][ T5892] usb usb4-port1: attempt power cycle [ 448.058015][ T5925] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 448.109301][T10254] lo speed is unknown, defaulting to 1000 [ 448.123511][T10254] lo speed is unknown, defaulting to 1000 [ 448.150143][T10254] lo speed is unknown, defaulting to 1000 [ 448.171254][T10254] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 448.199385][T10254] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 448.239818][ T5892] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 448.288010][T10254] lo speed is unknown, defaulting to 1000 [ 448.311553][T10254] lo speed is unknown, defaulting to 1000 [ 448.321807][T10254] lo speed is unknown, defaulting to 1000 [ 448.328381][T10266] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1164'. [ 448.330835][T10254] lo speed is unknown, defaulting to 1000 [ 448.376726][T10254] lo speed is unknown, defaulting to 1000 [ 448.386012][T10254] lo speed is unknown, defaulting to 1000 [ 448.461086][ T5892] usb 4-1: device not accepting address 47, error -71 [ 448.600646][T10271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1166'. [ 448.720373][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 448.784314][ T5925] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 448.805279][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 448.818894][T10282] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1169'. [ 448.828326][ T5925] em28xx 2-1:0.89: board has no eeprom [ 448.834031][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 448.899992][ T5925] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 448.914079][ T5925] em28xx 2-1:0.89: analog set to bulk mode. [ 448.972700][ T42] em28xx 2-1:0.89: Registering V4L2 extension [ 449.131613][ T5925] usb 2-1: USB disconnect, device number 44 [ 449.285231][ T5925] em28xx 2-1:0.89: Disconnecting em28xx [ 449.426318][ T42] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 449.451845][ T42] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 449.478898][ T42] em28xx 2-1:0.89: No AC97 audio processor [ 449.510292][ T42] usb 2-1: Decoder not found [ 449.519851][ T42] em28xx 2-1:0.89: failed to create media graph [ 449.535242][ T42] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 449.563590][ T42] em28xx 2-1:0.89: Registering snapshot button... [ 449.591881][ T42] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input22 [ 449.625926][ T42] em28xx 2-1:0.89: Remote control support is not available for this card. [ 449.650086][ T5925] em28xx 2-1:0.89: Closing input extension [ 449.671762][ T5925] em28xx 2-1:0.89: Deregistering snapshot button [ 449.706314][ T5925] em28xx 2-1:0.89: Freeing device [ 450.720315][T10312] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 453.099864][T10354] random: crng reseeded on system resumption [ 453.949669][ T30] audit: type=1400 audit(1759685665.565:3369): avc: denied { bind } for pid=10359 comm="syz.4.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 454.026417][ T30] audit: type=1400 audit(1759685665.595:3370): avc: denied { connect } for pid=10359 comm="syz.4.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 454.056796][ T30] audit: type=1400 audit(1759685665.605:3371): avc: denied { accept } for pid=10359 comm="syz.4.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 454.079133][T10369] overlayfs: missing 'lowerdir' [ 454.219081][ T30] audit: type=1400 audit(1759685665.605:3372): avc: denied { ioctl } for pid=10359 comm="syz.4.1189" path="socket:[32750]" dev="sockfs" ino=32750 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 454.403164][ T30] audit: type=1400 audit(1759685665.605:3373): avc: denied { read } for pid=10359 comm="syz.4.1189" path="socket:[32750]" dev="sockfs" ino=32750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 454.889902][ T30] audit: type=1400 audit(1759685665.615:3374): avc: denied { listen } for pid=10359 comm="syz.4.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 454.909942][ T30] audit: type=1400 audit(1759685665.615:3375): avc: denied { accept } for pid=10359 comm="syz.4.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 454.929684][ T5925] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 454.941890][ T30] audit: type=1400 audit(1759685665.675:3376): avc: denied { shutdown } for pid=10359 comm="syz.4.1189" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 455.201313][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.212937][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.243393][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 455.534007][T10393] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1198'. [ 455.589978][ T5925] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 455.602304][T10392] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 455.642424][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.660057][ T5925] usb 2-1: config 0 descriptor?? [ 456.078800][ T5925] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 456.148049][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'. [ 456.193722][T10409] random: crng reseeded on system resumption [ 456.227190][T10410] syzkaller1: entered promiscuous mode [ 456.232780][T10410] syzkaller1: entered allmulticast mode [ 456.361579][ T30] audit: type=1400 audit(1759685667.985:3377): avc: denied { ioctl } for pid=10407 comm="syz.4.1202" path="/dev/nullb0" dev="devtmpfs" ino=695 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 456.501860][ T30] audit: type=1400 audit(1759685668.085:3378): avc: denied { write } for pid=10372 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 457.333014][T10373] usb 2-1: string descriptor 0 read error: -2 [ 457.479815][ T5871] usb 2-1: reset high-speed USB device number 45 using dummy_hcd [ 457.695832][T10443] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1211'. [ 458.265106][T10456] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1215'. [ 458.310872][ T5925] usb 2-1: USB disconnect, device number 45 [ 458.416097][T10460] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1214'. [ 458.458614][T10460] delete_channel: no stack [ 458.610086][ T5871] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 458.852644][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.863782][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.875373][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.888483][ T5871] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.898980][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.909341][ T5871] usb 4-1: config 0 descriptor?? [ 458.911790][T10464] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1868967524 (29903480384 ns) > initial count (26681489232 ns). Using initial count to start timer. [ 459.080631][T10467] FAULT_INJECTION: forcing a failure. [ 459.080631][T10467] name failslab, interval 1, probability 0, space 0, times 0 [ 459.093690][T10467] CPU: 0 UID: 0 PID: 10467 Comm: syz.1.1220 Not tainted syzkaller #0 PREEMPT(full) [ 459.093715][T10467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 459.093726][T10467] Call Trace: [ 459.093732][T10467] [ 459.093738][T10467] dump_stack_lvl+0x16c/0x1f0 [ 459.093760][T10467] should_fail_ex+0x512/0x640 [ 459.093779][T10467] ? __kmalloc_cache_noprof+0x5f/0x780 [ 459.093807][T10467] should_failslab+0xc2/0x120 [ 459.093829][T10467] __kmalloc_cache_noprof+0x72/0x780 [ 459.093855][T10467] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 459.093887][T10467] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 459.093913][T10467] tcp_sendmsg_fastopen+0x24d/0x750 [ 459.093944][T10467] tcp_sendmsg_locked+0x2438/0x42e0 [ 459.093972][T10467] ? avc_has_perm+0x144/0x1f0 [ 459.093997][T10467] ? __lock_acquire+0xb97/0x1ce0 [ 459.094024][T10467] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 459.094053][T10467] ? do_raw_spin_lock+0x12c/0x2b0 [ 459.094075][T10467] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 459.094102][T10467] ? __local_bh_enable_ip+0xa4/0x120 [ 459.094139][T10467] tcp_sendmsg+0x2e/0x50 [ 459.094162][T10467] ? __pfx_tcp_sendmsg+0x10/0x10 [ 459.094188][T10467] inet6_sendmsg+0xb9/0x140 [ 459.094213][T10467] __sys_sendto+0x376/0x520 [ 459.094233][T10467] ? __pfx___sys_sendto+0x10/0x10 [ 459.094274][T10467] ? ksys_write+0x1ac/0x250 [ 459.094292][T10467] ? __pfx_ksys_write+0x10/0x10 [ 459.094313][T10467] __x64_sys_sendto+0xe0/0x1c0 [ 459.094330][T10467] ? do_syscall_64+0x91/0x4e0 [ 459.094346][T10467] ? lockdep_hardirqs_on+0x7c/0x110 [ 459.094372][T10467] do_syscall_64+0xcd/0x4e0 [ 459.094396][T10467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.094414][T10467] RIP: 0033:0x7f21a258eec9 [ 459.094429][T10467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.094447][T10467] RSP: 002b:00007f21a33e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 459.094465][T10467] RAX: ffffffffffffffda RBX: 00007f21a27e5fa0 RCX: 00007f21a258eec9 [ 459.094475][T10467] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 459.094486][T10467] RBP: 00007f21a33e2090 R08: 0000200000000140 R09: 000000000000001c [ 459.094497][T10467] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 459.094507][T10467] R13: 00007f21a27e6038 R14: 00007f21a27e5fa0 R15: 00007ffea872e478 [ 459.094531][T10467] [ 459.359466][ T5871] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 459.372017][ T5871] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 459.416387][T10472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1223'. [ 459.491201][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 459.491216][ T30] audit: type=1400 audit(1759685671.115:3397): avc: denied { bind } for pid=10469 comm="syz.2.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 459.631636][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 459.714307][T10459] team0 (unregistering): Port device team_slave_0 removed [ 459.729599][T10459] team0 (unregistering): Port device team_slave_1 removed [ 459.729794][ T5892] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 459.808087][ T5871] usb 4-1: USB disconnect, device number 49 [ 459.889992][ T5954] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 459.912489][ T5892] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 459.920848][ T5892] usb 2-1: config 0 has no interface number 0 [ 459.928966][ T5892] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 459.938118][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.946351][ T5892] usb 2-1: Product: syz [ 459.950597][ T5892] usb 2-1: Manufacturer: syz [ 459.955180][ T5892] usb 2-1: SerialNumber: syz [ 459.964183][ T5892] usb 2-1: config 0 descriptor?? [ 460.042039][T10480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1226'. [ 460.060197][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 460.070190][ T5954] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 460.087695][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.101134][ T5954] usb 3-1: config 0 descriptor?? [ 460.108551][ T5954] gspca_main: sunplus-2.14.0 probing 041e:400b [ 460.172648][ T5892] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 460.181014][ T5892] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 460.188868][ T5892] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 460.196683][ T5892] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 460.206621][ T5892] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 460.236676][T10486] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1228'. [ 460.406303][ T5871] usb 2-1: USB disconnect, device number 46 [ 460.428647][ T5871] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 460.966876][T10492] binder: 10489:10492 ioctl c018620c 2000000001c0 returned -1 [ 461.054464][ T30] audit: type=1400 audit(1759685672.585:3398): avc: denied { map } for pid=10489 comm="syz.3.1230" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 461.082248][ T5871] keyspan 2-1:0.133: device disconnected [ 461.368004][T10504] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1868967524 (29903480384 ns) > initial count (26681489232 ns). Using initial count to start timer. [ 461.765216][ T5954] gspca_sunplus: reg_w_riv err -110 [ 461.772726][ T5954] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 461.950510][T10514] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 463.021630][ T934] usb 3-1: USB disconnect, device number 49 [ 463.406449][T10540] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1242'. [ 463.684394][T10552] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 463.719796][T10552] audit: out of memory in audit_log_start [ 463.767026][T10554] batman_adv: batadv0: Adding interface: dummy0 [ 463.800564][T10554] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.920264][T10554] batman_adv: batadv0: Interface activated: dummy0 [ 464.494729][T10561] fuse: Bad value for 'rootmode' [ 464.508300][T10561] netlink: 'syz.0.1249': attribute type 4 has an invalid length. [ 464.516049][T10561] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1249'. [ 464.599305][T10544] comedi comedi0: reset error (fatal) [ 464.842267][ T5925] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 464.862458][T10575] overlayfs: missing 'lowerdir' [ 465.519537][ T5925] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 465.528658][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.539751][ T5925] usb 4-1: config 0 descriptor?? [ 465.591774][T10580] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1868967524 (29903480384 ns) > initial count (26681489232 ns). Using initial count to start timer. [ 466.570011][ T5925] hackrf 4-1:0.0: usb_control_msg() failed -110 request 0e [ 466.577312][ T5925] hackrf 4-1:0.0: Could not detect board [ 467.167818][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1260'. [ 467.522260][T10589] IPv6: NLM_F_CREATE should be specified when creating new route [ 467.582046][ T5925] hackrf 4-1:0.0: probe with driver hackrf failed with error -110 [ 467.724278][ T5892] usb 4-1: USB disconnect, device number 50 [ 467.903106][T10599] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1264'. [ 468.816597][T10593] comedi comedi0: reset error (fatal) [ 468.994701][T10611] FAULT_INJECTION: forcing a failure. [ 468.994701][T10611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.007896][T10611] CPU: 0 UID: 0 PID: 10611 Comm: syz.4.1265 Not tainted syzkaller #0 PREEMPT(full) [ 469.007921][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 469.007931][T10611] Call Trace: [ 469.007936][T10611] [ 469.007942][T10611] dump_stack_lvl+0x16c/0x1f0 [ 469.007962][T10611] should_fail_ex+0x512/0x640 [ 469.007984][T10611] _copy_from_user+0x2e/0xd0 [ 469.008004][T10611] snd_seq_ioctl+0x1bf/0x430 [ 469.008026][T10611] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 469.008043][T10611] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 469.008080][T10611] ? selinux_file_ioctl+0x180/0x270 [ 469.008097][T10611] ? selinux_file_ioctl+0xb4/0x270 [ 469.008116][T10611] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 469.008137][T10611] __x64_sys_ioctl+0x18e/0x210 [ 469.008165][T10611] do_syscall_64+0xcd/0x4e0 [ 469.008183][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.008201][T10611] RIP: 0033:0x7f2fe9b8eec9 [ 469.008215][T10611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.008233][T10611] RSP: 002b:00007f2feaa37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.008250][T10611] RAX: ffffffffffffffda RBX: 00007f2fe9de6090 RCX: 00007f2fe9b8eec9 [ 469.008261][T10611] RDX: 0000200000000280 RSI: 0000000040605346 RDI: 0000000000000005 [ 469.008272][T10611] RBP: 00007f2feaa37090 R08: 0000000000000000 R09: 0000000000000000 [ 469.008282][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.008292][T10611] R13: 00007f2fe9de6128 R14: 00007f2fe9de6090 R15: 00007fff8b37d908 [ 469.008315][T10611] [ 469.814776][T10618] binder: 10612:10618 ioctl c018620c 2000000001c0 returned -1 [ 470.466162][ T30] audit: type=1400 audit(1759685682.085:3399): avc: denied { read write } for pid=10623 comm="syz.1.1269" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 470.514282][ T30] audit: type=1400 audit(1759685682.085:3400): avc: denied { open } for pid=10623 comm="syz.1.1269" path="/226/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 470.536542][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.630760][T10633] FAULT_INJECTION: forcing a failure. [ 470.630760][T10633] name failslab, interval 1, probability 0, space 0, times 0 [ 470.643743][T10633] CPU: 0 UID: 0 PID: 10633 Comm: syz.2.1272 Not tainted syzkaller #0 PREEMPT(full) [ 470.643768][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 470.643777][T10633] Call Trace: [ 470.643784][T10633] [ 470.643790][T10633] dump_stack_lvl+0x16c/0x1f0 [ 470.643811][T10633] should_fail_ex+0x512/0x640 [ 470.643833][T10633] should_failslab+0xc2/0x120 [ 470.643854][T10633] kmem_cache_alloc_noprof+0x75/0x6e0 [ 470.643880][T10633] ? skb_clone+0x190/0x3f0 [ 470.643904][T10633] ? skb_clone+0x190/0x3f0 [ 470.643921][T10633] skb_clone+0x190/0x3f0 [ 470.643940][T10633] netlink_deliver_tap+0xabd/0xd30 [ 470.643967][T10633] netlink_dump+0x881/0xd30 [ 470.643989][T10633] ? __pfx_netlink_dump+0x10/0x10 [ 470.644028][T10633] __netlink_dump_start+0x6d6/0x990 [ 470.644052][T10633] ? __pfx_inet_dump_ifmcaddr+0x10/0x10 [ 470.644073][T10633] rtnetlink_rcv_msg+0xb3e/0xe90 [ 470.644093][T10633] ? __pfx_inet_dump_ifmcaddr+0x10/0x10 [ 470.644116][T10633] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 470.644135][T10633] ? __pfx_inet_dump_ifmcaddr+0x10/0x10 [ 470.644163][T10633] ? ref_tracker_free+0x37c/0x830 [ 470.644185][T10633] netlink_rcv_skb+0x155/0x420 [ 470.644206][T10633] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 470.644228][T10633] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.644258][T10633] ? netlink_deliver_tap+0x1ae/0xd30 [ 470.644283][T10633] netlink_unicast+0x5aa/0x870 [ 470.644308][T10633] ? __pfx_netlink_unicast+0x10/0x10 [ 470.644338][T10633] netlink_sendmsg+0x8c8/0xdd0 [ 470.644363][T10633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.644394][T10633] ____sys_sendmsg+0xa95/0xc70 [ 470.644419][T10633] ? copy_msghdr_from_user+0x10a/0x160 [ 470.644438][T10633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.644475][T10633] ___sys_sendmsg+0x134/0x1d0 [ 470.644496][T10633] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.644548][T10633] __sys_sendmsg+0x16d/0x220 [ 470.644568][T10633] ? __pfx___sys_sendmsg+0x10/0x10 [ 470.644611][T10633] do_syscall_64+0xcd/0x4e0 [ 470.644629][T10633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.644646][T10633] RIP: 0033:0x7ffb14d8eec9 [ 470.644660][T10633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.644676][T10633] RSP: 002b:00007ffb15b7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.644692][T10633] RAX: ffffffffffffffda RBX: 00007ffb14fe5fa0 RCX: 00007ffb14d8eec9 [ 470.644703][T10633] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 470.644713][T10633] RBP: 00007ffb15b7b090 R08: 0000000000000000 R09: 0000000000000000 [ 470.644722][T10633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.644731][T10633] R13: 00007ffb14fe6038 R14: 00007ffb14fe5fa0 R15: 00007fff9b109b78 [ 470.644755][T10633] [ 470.753191][T10634] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 471.383384][T10631] netlink: 'syz.3.1273': attribute type 10 has an invalid length. [ 471.391988][ T30] audit: type=1400 audit(1759685683.005:3401): avc: denied { bind } for pid=10630 comm="syz.3.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 471.399846][T10631] batman_adv: batadv0: Interface deactivated: dummy0 [ 471.412979][ T30] audit: type=1400 audit(1759685683.005:3402): avc: denied { setopt } for pid=10630 comm="syz.3.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 471.446731][T10631] batman_adv: batadv0: Removing interface: dummy0 [ 471.462133][T10639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1276'. [ 471.464237][T10640] netlink: 'syz.3.1273': attribute type 10 has an invalid length. [ 471.508721][T10640] : (slave dummy0): Enslaving as an active interface with an up link [ 471.759786][ T934] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 472.194839][T10656] binder: 10652:10656 ioctl c018620c 2000000001c0 returned -1 [ 472.481853][ T934] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 472.491371][ T934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.503774][ T934] usb 2-1: config 0 descriptor?? [ 472.539250][T10660] FAULT_INJECTION: forcing a failure. [ 472.539250][T10660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.553501][T10660] CPU: 0 UID: 0 PID: 10660 Comm: syz.2.1281 Not tainted syzkaller #0 PREEMPT(full) [ 472.553529][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 472.553539][T10660] Call Trace: [ 472.553549][T10660] [ 472.553556][T10660] dump_stack_lvl+0x16c/0x1f0 [ 472.553584][T10660] should_fail_ex+0x512/0x640 [ 472.553609][T10660] _copy_to_user+0x32/0xd0 [ 472.553633][T10660] simple_read_from_buffer+0xcb/0x170 [ 472.553664][T10660] proc_fail_nth_read+0x197/0x240 [ 472.553686][T10660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.553709][T10660] ? rw_verify_area+0xcf/0x6c0 [ 472.553734][T10660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.553755][T10660] vfs_read+0x1e1/0xcf0 [ 472.553776][T10660] ? __pfx___mutex_lock+0x10/0x10 [ 472.553794][T10660] ? __pfx_vfs_read+0x10/0x10 [ 472.553817][T10660] ? __fget_files+0x20e/0x3c0 [ 472.553834][T10660] ? __print_lock_name+0x60/0xe0 [ 472.553867][T10660] ksys_read+0x12a/0x250 [ 472.553885][T10660] ? __pfx_ksys_read+0x10/0x10 [ 472.553903][T10660] ? anon_inode_getfd+0x81/0xb0 [ 472.553931][T10660] do_syscall_64+0xcd/0x4e0 [ 472.553950][T10660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.553968][T10660] RIP: 0033:0x7ffb14d8d8dc [ 472.553983][T10660] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 472.554001][T10660] RSP: 002b:00007ffb15b7b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.554019][T10660] RAX: ffffffffffffffda RBX: 00007ffb14fe5fa0 RCX: 00007ffb14d8d8dc [ 472.554030][T10660] RDX: 000000000000000f RSI: 00007ffb15b7b0a0 RDI: 0000000000000003 [ 472.554041][T10660] RBP: 00007ffb15b7b090 R08: 0000000000000000 R09: 0000000000000000 [ 472.554051][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.554062][T10660] R13: 00007ffb14fe6038 R14: 00007ffb14fe5fa0 R15: 00007fff9b109b78 [ 472.554086][T10660] [ 472.830884][T10662] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1282'. [ 473.532832][ T934] hackrf 2-1:0.0: usb_control_msg() failed -110 request 0e [ 473.597112][ T934] hackrf 2-1:0.0: Could not detect board [ 473.648848][ T934] hackrf 2-1:0.0: probe with driver hackrf failed with error -110 [ 474.233304][T10666] comedi comedi0: reset error (fatal) [ 474.636717][ T5892] usb 2-1: USB disconnect, device number 47 [ 474.658716][T10677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1287'. [ 474.749962][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 474.758851][T10679] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1288'. [ 474.767899][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 474.779799][ T934] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 475.033990][ T934] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 475.050104][ T934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.070025][ T934] usb 3-1: config 0 descriptor?? [ 476.048469][ T934] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 476.080264][ T934] hackrf 3-1:0.0: Could not detect board [ 476.092570][ T934] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 476.145822][ T934] usb 3-1: USB disconnect, device number 50 [ 476.320094][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 476.329166][T10717] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1295'. [ 476.338363][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 476.930609][T10727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1298'. [ 477.038556][T10729] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1868967524 (29903480384 ns) > initial count (26681489232 ns). Using initial count to start timer. [ 477.669967][ T934] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 478.860961][ T934] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 478.870817][ T934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.885129][ T934] usb 2-1: config 0 descriptor?? [ 479.400710][T10747] binder: 10741:10747 ioctl c018620c 2000000001c0 returned -1 [ 480.447405][ T934] hackrf 2-1:0.0: usb_control_msg() failed -110 request 0e [ 480.619771][ T934] hackrf 2-1:0.0: Could not detect board [ 480.625508][ T934] hackrf 2-1:0.0: probe with driver hackrf failed with error -110 [ 481.087719][ T5907] usb 2-1: USB disconnect, device number 48 [ 481.979810][ T934] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 482.044965][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1312'. [ 482.254802][ T934] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 482.264068][ T934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.416797][ T934] usb 3-1: config 0 descriptor?? [ 482.582777][T10785] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000' [ 482.708101][T10787] netlink: 'syz.4.1314': attribute type 4 has an invalid length. [ 482.716185][T10787] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1314'. [ 483.266385][ T934] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 483.273558][ T934] hackrf 3-1:0.0: Could not detect board [ 483.279244][ T934] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 483.330133][ T934] usb 3-1: USB disconnect, device number 51 [ 484.149907][ T5907] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 484.330214][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 484.450813][ T5907] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 484.462666][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.479883][ T5907] usb 3-1: Product: syz [ 484.486499][ T5907] usb 3-1: Manufacturer: syz [ 484.491386][ T5907] usb 3-1: SerialNumber: syz [ 484.509262][ T5907] r8152-cfgselector 3-1: Unknown version 0x0000 [ 484.515559][ T5907] r8152-cfgselector 3-1: config 0 descriptor?? [ 484.770286][ T5907] r8152-cfgselector 3-1: Needed 2 retries to read version [ 484.817565][T10844] netlink: 'syz.1.1322': attribute type 4 has an invalid length. [ 484.825343][T10844] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1322'. [ 484.974870][ T5944] r8152-cfgselector 3-1: USB disconnect, device number 52 [ 485.457849][T10853] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1324'. [ 485.654635][ T30] audit: type=1400 audit(1759685697.270:3403): avc: denied { bind } for pid=10854 comm="syz.0.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 485.677311][ T30] audit: type=1400 audit(1759685697.270:3404): avc: denied { name_bind } for pid=10854 comm="syz.0.1325" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 485.750797][ T30] audit: type=1400 audit(1759685697.270:3405): avc: denied { node_bind } for pid=10854 comm="syz.0.1325" saddr=fe80::3f src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 486.745991][T10871] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 488.530459][T10903] fuse: Bad value for 'fd' [ 488.582913][T10903] netlink: 'syz.4.1334': attribute type 4 has an invalid length. [ 488.590746][T10903] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1334'. [ 488.871506][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 488.880963][T10908] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1335'. [ 488.890459][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 489.155153][T10911] FAULT_INJECTION: forcing a failure. [ 489.155153][T10911] name failslab, interval 1, probability 0, space 0, times 0 [ 489.204821][T10911] CPU: 1 UID: 0 PID: 10911 Comm: syz.3.1336 Not tainted syzkaller #0 PREEMPT(full) [ 489.204848][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.204858][T10911] Call Trace: [ 489.204864][T10911] [ 489.204871][T10911] dump_stack_lvl+0x16c/0x1f0 [ 489.204893][T10911] should_fail_ex+0x512/0x640 [ 489.204912][T10911] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 489.204944][T10911] should_failslab+0xc2/0x120 [ 489.204966][T10911] kmem_cache_alloc_noprof+0x75/0x6e0 [ 489.204993][T10911] ? create_new_namespaces+0x30/0xa90 [ 489.205025][T10911] ? create_new_namespaces+0x30/0xa90 [ 489.205050][T10911] create_new_namespaces+0x30/0xa90 [ 489.205082][T10911] __do_sys_setns+0x210/0x1920 [ 489.205109][T10911] ? __x64_sys_openat+0x174/0x210 [ 489.205133][T10911] ? __pfx___do_sys_setns+0x10/0x10 [ 489.205157][T10911] ? ksys_write+0x1ac/0x250 [ 489.205184][T10911] do_syscall_64+0xcd/0x4e0 [ 489.205203][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.205221][T10911] RIP: 0033:0x7f46041906f7 [ 489.205235][T10911] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.205251][T10911] RSP: 002b:00007f4605003fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 489.205269][T10911] RAX: ffffffffffffffda RBX: 00007f46043e5fa0 RCX: 00007f46041906f7 [ 489.205280][T10911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 489.205291][T10911] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 489.205300][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.205310][T10911] R13: 00007f46043e6038 R14: 00007f46043e5fa0 R15: 00007ffd99ded648 [ 489.205334][T10911] [ 489.417797][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1339'. [ 489.869895][ T5954] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 489.938914][T10938] random: crng reseeded on system resumption [ 490.010271][ T30] audit: type=1326 audit(1759685701.610:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 490.081784][ T5954] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 490.102089][ T30] audit: type=1326 audit(1759685701.610:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83aa18d710 code=0x7ffc0000 [ 490.149809][ T5954] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 490.188996][ T5954] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 490.204797][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.211463][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1346'. [ 490.215047][ T30] audit: type=1326 audit(1759685701.610:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 490.528096][T10930] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 490.537483][ T5954] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.858408][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.006761][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.041250][ T30] audit: type=1326 audit(1759685701.610:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 491.077189][ T30] audit: type=1326 audit(1759685701.610:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 491.215838][ T30] audit: type=1326 audit(1759685701.610:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 491.277771][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.286554][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.314640][ T30] audit: type=1326 audit(1759685701.610:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 491.387176][ T30] audit: type=1326 audit(1759685701.610:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 491.442428][ T30] audit: type=1326 audit(1759685701.620:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 491.475381][ T30] audit: type=1326 audit(1759685701.620:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 491.500459][ T30] audit: type=1326 audit(1759685701.620:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 491.524215][ T30] audit: type=1326 audit(1759685701.620:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 491.550445][ T30] audit: type=1326 audit(1759685701.620:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.0.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 492.026772][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 492.032984][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 492.224756][T10944] ceph: No mds server is up or the cluster is laggy [ 492.232877][T10954] delete_channel: no stack [ 492.405363][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1351'. [ 492.529799][ T5954] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 492.577963][T10962] fuse: Bad value for 'fd' [ 492.661883][T10963] netlink: 'syz.2.1353': attribute type 4 has an invalid length. [ 492.670203][T10963] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1353'. [ 492.749914][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 492.875678][ T5954] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 492.994664][ T5954] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 493.003765][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.024855][ T5954] usb 4-1: Product: syz [ 493.046860][ T5954] usb 4-1: Manufacturer: syz [ 493.061958][ T5954] usb 4-1: SerialNumber: syz [ 493.084889][ T5954] usb 4-1: config 0 descriptor?? [ 493.109501][ T5954] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 493.142018][ T5954] usb 4-1: Detected FT232R [ 493.218176][ T5944] usb 2-1: USB disconnect, device number 49 [ 493.320080][ T5954] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 493.542348][ T5954] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 494.010064][ T934] usb 4-1: USB disconnect, device number 51 [ 494.019776][ T934] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 494.171425][ T934] ftdi_sio 4-1:0.0: device disconnected [ 494.640943][T10973] vxcan1 speed is unknown, defaulting to 1000 [ 494.989456][T10973] lo speed is unknown, defaulting to 1000 [ 495.842074][T10993] input: syz1 as /devices/virtual/input/input26 [ 495.900232][ T934] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 496.050313][ T934] usb 4-1: device descriptor read/64, error -71 [ 496.119132][T10997] vxcan1 speed is unknown, defaulting to 1000 [ 496.204778][T11000] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1363'. [ 496.247430][ T5907] lo speed is unknown, defaulting to 1000 [ 496.369841][ T934] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 496.420768][T11006] /dev/nullb0: Can't open blockdev [ 496.852573][ T934] usb 4-1: device descriptor read/64, error -71 [ 497.129004][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 497.129021][ T30] audit: type=1326 audit(1759685708.700:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.0.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 497.174415][ T30] audit: type=1326 audit(1759685708.700:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.0.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 497.198070][ T30] audit: type=1326 audit(1759685708.700:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.0.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83aa18d710 code=0x7ffc0000 [ 497.243148][ T934] usb usb4-port1: attempt power cycle [ 497.304424][ T30] audit: type=1326 audit(1759685708.700:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.0.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 497.331401][T11011] FAULT_INJECTION: forcing a failure. [ 497.331401][T11011] name failslab, interval 1, probability 0, space 0, times 0 [ 497.399612][T11011] CPU: 1 UID: 0 PID: 11011 Comm: syz.1.1366 Not tainted syzkaller #0 PREEMPT(full) [ 497.399631][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 497.399638][T11011] Call Trace: [ 497.399642][T11011] [ 497.399647][T11011] dump_stack_lvl+0x16c/0x1f0 [ 497.399664][T11011] should_fail_ex+0x512/0x640 [ 497.399683][T11011] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 497.399715][T11011] should_failslab+0xc2/0x120 [ 497.399735][T11011] kmem_cache_alloc_noprof+0x75/0x6e0 [ 497.399761][T11011] ? __kernfs_new_node+0xd2/0x8e0 [ 497.399789][T11011] ? __kernfs_new_node+0xd2/0x8e0 [ 497.399811][T11011] __kernfs_new_node+0xd2/0x8e0 [ 497.399835][T11011] ? kernfs_add_one+0x37d/0x840 [ 497.399850][T11011] ? __pfx___kernfs_new_node+0x10/0x10 [ 497.399871][T11011] ? find_held_lock+0x2b/0x80 [ 497.399887][T11011] ? kernfs_root+0xee/0x2a0 [ 497.399904][T11011] kernfs_new_node+0x13c/0x1e0 [ 497.399923][T11011] __kernfs_create_file+0x53/0x350 [ 497.399937][T11011] sysfs_add_file_mode_ns+0x207/0x3c0 [ 497.399955][T11011] sysfs_create_file_ns+0x13d/0x1d0 [ 497.399970][T11011] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 497.399983][T11011] ? down_read+0x13d/0x480 [ 497.399994][T11011] ? __pfx___up_read+0x10/0x10 [ 497.400007][T11011] ? acpi_device_notify+0x351/0x480 [ 497.400020][T11011] device_create_file+0xf2/0x1e0 [ 497.400033][T11011] device_add+0x2bf/0x1aa0 [ 497.400049][T11011] ? __pfx_dev_set_name+0x10/0x10 [ 497.400060][T11011] ? __pfx_device_add+0x10/0x10 [ 497.400076][T11011] ? lockdep_init_map_type+0x5c/0x280 [ 497.400088][T11011] ? __init_waitqueue_head+0xca/0x150 [ 497.400106][T11011] wakeup_source_device_create+0x243/0x2e0 [ 497.400124][T11011] wakeup_source_sysfs_add+0x1c/0x90 [ 497.400141][T11011] wakeup_source_register+0x154/0x3e0 [ 497.400156][T11011] ep_create_wakeup_source+0x1dd/0x2e0 [ 497.400169][T11011] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 497.400184][T11011] ? do_epoll_ctl+0x1565/0x3790 [ 497.400199][T11011] do_epoll_ctl+0x1f60/0x3790 [ 497.400222][T11011] ? __pfx_do_epoll_ctl+0x10/0x10 [ 497.400234][T11011] ? find_held_lock+0x2b/0x80 [ 497.400248][T11011] ? __might_fault+0xe3/0x190 [ 497.400257][T11011] ? __might_fault+0xe3/0x190 [ 497.400271][T11011] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 497.400283][T11011] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 497.400296][T11011] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 497.400314][T11011] do_syscall_64+0xcd/0x4e0 [ 497.400325][T11011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.400336][T11011] RIP: 0033:0x7f21a258eec9 [ 497.400345][T11011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.400356][T11011] RSP: 002b:00007f21a33e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 497.400367][T11011] RAX: ffffffffffffffda RBX: 00007f21a27e5fa0 RCX: 00007f21a258eec9 [ 497.400374][T11011] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 497.400380][T11011] RBP: 00007f21a33e2090 R08: 0000000000000000 R09: 0000000000000000 [ 497.400386][T11011] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000002 [ 497.400392][T11011] R13: 00007f21a27e6038 R14: 00007f21a27e5fa0 R15: 00007ffea872e478 [ 497.400406][T11011] [ 497.669816][ T934] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 497.720299][ T30] audit: type=1326 audit(1759685708.700:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.0.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 497.744375][ T30] audit: type=1326 audit(1759685708.700:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.0.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 497.768235][ T30] audit: type=1326 audit(1759685708.700:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.0.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 498.000767][ T30] audit: type=1326 audit(1759685708.700:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.0.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 498.057171][T10997] lo speed is unknown, defaulting to 1000 [ 498.063097][ T30] audit: type=1326 audit(1759685708.700:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.0.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 498.089996][ T30] audit: type=1326 audit(1759685708.700:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11001 comm="syz.0.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 498.115883][ T934] usb 4-1: device descriptor read/8, error -71 [ 498.769797][ T934] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 498.850214][ T934] usb 4-1: device descriptor read/8, error -71 [ 498.858655][ T5837] Bluetooth: hci3: unexpected event for opcode 0x080e [ 499.106658][ T934] usb usb4-port1: unable to enumerate USB device [ 500.450742][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'. [ 500.480370][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'. [ 500.973051][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.979359][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.050806][T11045] random: crng reseeded on system resumption [ 501.953348][T11034] comedi comedi0: reset error (fatal) [ 502.814335][T11068] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 503.632104][T11071] netlink: 'syz.1.1381': attribute type 4 has an invalid length. [ 503.660517][T11071] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1381'. [ 503.797443][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 503.797456][ T30] audit: type=1400 audit(1759685715.409:3459): avc: denied { append } for pid=11076 comm="syz.3.1385" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 503.825399][ T30] audit: type=1400 audit(1759685715.449:3460): avc: denied { open } for pid=11076 comm="syz.3.1385" path="/267/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 504.543541][T11083] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1386'. [ 506.387331][ T9078] Bluetooth: hci5: Frame reassembly failed (-84) [ 506.394011][ T9084] Bluetooth: hci5: Frame reassembly failed (-84) [ 506.780242][ T30] audit: type=1400 audit(1759685718.399:3461): avc: denied { setopt } for pid=11128 comm="syz.0.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 506.893823][ T30] audit: type=1400 audit(1759685718.439:3462): avc: denied { bind } for pid=11124 comm="syz.1.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 507.002457][ T934] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 507.059806][ T5954] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 507.161091][ T934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.173343][ T934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.192213][ T934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 507.205302][ T934] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.214834][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 507.220047][ T934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.230500][ T5954] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 507.242412][ T5954] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 507.256021][ T934] usb 3-1: config 0 descriptor?? [ 507.281526][ T5954] usb 4-1: config 0 interface 0 has no altsetting 0 [ 507.293612][ T5954] usb 4-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 507.309098][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.325864][ T5954] usb 4-1: config 0 descriptor?? [ 507.696041][ T934] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 507.842767][ T5954] usbhid 4-1:0.0: can't add hid device: -71 [ 507.848804][ T5954] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 507.858023][ T5954] usb 4-1: USB disconnect, device number 56 [ 508.409895][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 509.012484][T11123] usb 3-1: string descriptor 0 read error: -71 [ 509.091016][ T934] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 509.317806][T11167] vxcan1 speed is unknown, defaulting to 1000 [ 509.329932][ T934] usb 4-1: Using ep0 maxpacket: 32 [ 509.345973][ T934] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 509.354159][ T934] usb 4-1: config 0 has no interface number 0 [ 509.364446][ T934] usb 4-1: config 0 interface 89 has no altsetting 0 [ 509.382102][ T934] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 509.394712][ T934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.413805][ T934] usb 4-1: Product: syz [ 509.417978][ T934] usb 4-1: Manufacturer: syz [ 509.429749][ T934] usb 4-1: SerialNumber: syz [ 509.510870][ T934] usb 4-1: config 0 descriptor?? [ 509.518791][ T934] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 509.537968][ T934] em28xx 4-1:0.89: Video interface 89 found: bulk [ 509.845742][ T5892] usb 3-1: USB disconnect, device number 53 [ 509.975865][T11167] lo speed is unknown, defaulting to 1000 [ 510.453859][ T934] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 511.316552][ T934] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 511.334199][ T934] em28xx 4-1:0.89: board has no eeprom [ 511.399789][ T934] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 511.408293][ T934] em28xx 4-1:0.89: analog set to bulk mode. [ 511.414325][ T5892] em28xx 4-1:0.89: Registering V4L2 extension [ 511.429819][ T5925] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 511.451448][ T934] usb 4-1: USB disconnect, device number 57 [ 511.458356][ T934] em28xx 4-1:0.89: Disconnecting em28xx [ 511.487216][ T5892] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 511.497565][ T5892] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 511.504731][ T5892] em28xx 4-1:0.89: No AC97 audio processor [ 511.512933][ T5892] usb 4-1: Decoder not found [ 511.559780][ T5892] em28xx 4-1:0.89: failed to create media graph [ 511.566070][ T5892] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 511.596736][ T5892] em28xx 4-1:0.89: Registering snapshot button... [ 511.616896][ T5892] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input28 [ 511.642880][T11195] fuse: Bad value for 'fd' [ 511.647528][ T5892] em28xx 4-1:0.89: Remote control support is not available for this card. [ 511.657433][ T934] em28xx 4-1:0.89: Closing input extension [ 511.663330][ T934] em28xx 4-1:0.89: Deregistering snapshot button [ 511.676041][ T934] em28xx 4-1:0.89: Freeing device [ 512.293783][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 512.400241][T11196] netlink: 'syz.2.1416': attribute type 4 has an invalid length. [ 512.408356][T11196] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1416'. [ 512.486230][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 512.669356][ T5925] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 512.685677][ T5925] usb 2-1: config 0 has no interface number 0 [ 512.699423][ T5925] usb 2-1: config 0 interface 184 has no altsetting 0 [ 512.715415][ T5925] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 512.731070][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.731924][ T934] libceph: connect (1)[c::]:6789 error -101 [ 512.740310][ T5925] usb 2-1: Product: syz [ 512.749307][ T5925] usb 2-1: Manufacturer: syz [ 512.754142][ T5925] usb 2-1: SerialNumber: syz [ 512.757844][ T934] libceph: mon0 (1)[c::]:6789 connect error [ 512.765636][ T5925] usb 2-1: config 0 descriptor?? [ 512.815339][ T5925] smsc75xx v1.0.0 [ 512.819112][ T5925] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 512.854300][ T5925] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 513.846601][ T934] libceph: connect (1)[c::]:6789 error -101 [ 513.853434][ T934] libceph: mon0 (1)[c::]:6789 connect error [ 513.883355][T11205] ceph: No mds server is up or the cluster is laggy [ 513.921939][ T934] usb 2-1: USB disconnect, device number 50 [ 514.024116][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 514.033011][T11222] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1422'. [ 514.042033][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 514.281762][T11227] netlink: 'syz.1.1425': attribute type 4 has an invalid length. [ 514.289503][T11227] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1425'. [ 514.325786][T11234] random: crng reseeded on system resumption [ 514.876516][T11240] vxcan1 speed is unknown, defaulting to 1000 [ 515.149538][T11240] lo speed is unknown, defaulting to 1000 [ 515.246408][T11243] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1428'. [ 515.446918][T11251] fuse: Bad value for 'fd' [ 515.513656][T11252] netlink: 'syz.4.1430': attribute type 4 has an invalid length. [ 515.550523][T11252] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1430'. [ 516.325102][T11262] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1434'. [ 517.440131][ T5892] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 517.909001][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1439'. [ 518.060013][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 518.210105][ T5892] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 518.219927][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.244552][ T5892] usb 3-1: Product: syz [ 518.248727][ T5892] usb 3-1: Manufacturer: syz [ 518.286113][ T5892] usb 3-1: SerialNumber: syz [ 518.417223][ T5892] usb 3-1: config 0 descriptor?? [ 518.579095][ T5892] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 518.616984][ T30] audit: type=1326 audit(1759685730.059:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 518.840617][ T30] audit: type=1326 audit(1759685730.079:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 518.872302][T11280] vxcan1 speed is unknown, defaulting to 1000 [ 518.884728][ T30] audit: type=1326 audit(1759685730.099:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 518.925620][ T30] audit: type=1326 audit(1759685730.099:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 519.013345][ T934] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 519.036687][ T30] audit: type=1326 audit(1759685730.099:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 519.067795][ T30] audit: type=1326 audit(1759685730.099:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83aa18d710 code=0x7ffc0000 [ 519.118731][ T30] audit: type=1326 audit(1759685730.119:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 519.185791][ T934] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 519.194996][ T934] usb 4-1: config 1 has no interface number 0 [ 519.224866][ T934] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 519.340519][ T30] audit: type=1326 audit(1759685730.119:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 519.370067][ T30] audit: type=1326 audit(1759685730.139:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 519.404336][ T30] audit: type=1326 audit(1759685730.139:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa18eec9 code=0x7ffc0000 [ 519.579771][ T934] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 519.597131][ T934] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x7 has an invalid bInterval 52, changing to 9 [ 519.614895][T11280] lo speed is unknown, defaulting to 1000 [ 519.623419][ T934] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 519.633717][ T934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.646482][ T934] usb 4-1: Product: syz [ 519.653547][ T934] usb 4-1: Manufacturer: syz [ 519.663150][ T934] usb 4-1: SerialNumber: syz [ 519.675479][T11292] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 519.693020][T11292] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 519.713457][ T5892] usb 3-1: USB disconnect, device number 54 [ 519.926028][T11292] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 519.937582][T11292] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 520.000130][ T934] usb 4-1: No status endpoint found [ 520.009252][T11312] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1450'. [ 520.357328][ T42] usb 4-1: USB disconnect, device number 58 [ 520.530110][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1452'. [ 521.182844][T11324] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1453'. [ 521.344557][T11323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1453'. [ 521.523866][T11329] Invalid option length (1040122) for dns_resolver key [ 521.996414][T11309] syz.4.1447 (11309): drop_caches: 2 [ 522.003454][T11341] netlink: 'syz.0.1455': attribute type 4 has an invalid length. [ 522.023332][T11341] netlink: 'syz.0.1455': attribute type 4 has an invalid length. [ 522.095108][T11342] binder: 11331:11342 ioctl c018620c 2000000001c0 returned -1 [ 522.925739][T11327] comedi comedi0: reset error (fatal) [ 524.256157][T11361] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 524.278434][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 524.278467][ T30] audit: type=1326 audit(1759685735.889:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11355 comm="syz.2.1461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb14d8eec9 code=0x0 [ 526.503692][T11385] fuse: Unknown parameter '0xffffffffffffffff' [ 526.765590][T11385] netlink: 'syz.1.1467': attribute type 4 has an invalid length. [ 526.773539][T11385] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1467'. [ 527.174689][ T30] audit: type=1400 audit(1759685738.769:3481): avc: denied { ioctl } for pid=11394 comm="syz.2.1472" path="socket:[38354]" dev="sockfs" ino=38354 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 527.238011][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 527.305880][ T30] audit: type=1400 audit(1759685738.889:3482): avc: denied { setopt } for pid=11394 comm="syz.2.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 527.550072][ T5925] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 527.638431][T11395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.739959][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 527.747166][ T5925] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 527.755812][ T5925] usb 4-1: config 0 has no interface number 0 [ 527.762107][ T5925] usb 4-1: config 0 interface 89 has no altsetting 0 [ 527.772902][ T5925] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 527.789478][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.807931][ T5925] usb 4-1: Product: syz [ 527.812201][ T5925] usb 4-1: Manufacturer: syz [ 527.816789][ T5925] usb 4-1: SerialNumber: syz [ 527.842518][ T5925] usb 4-1: config 0 descriptor?? [ 527.876433][ T5925] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 527.898246][ T5925] em28xx 4-1:0.89: Video interface 89 found: bulk [ 528.482060][ T5925] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 528.762219][T11405] comedi comedi0: reset error (fatal) [ 528.842416][T11217] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 528.984398][T11217] usb 3-1: device descriptor read/64, error -71 [ 529.016362][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 529.026158][T11421] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1475'. [ 529.035537][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 529.103540][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 529.116108][ T5925] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 529.363017][ T5925] em28xx 4-1:0.89: board has no eeprom [ 529.439744][ T5925] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 529.451160][ T5925] em28xx 4-1:0.89: analog set to bulk mode. [ 529.466226][ T24] em28xx 4-1:0.89: Registering V4L2 extension [ 529.484141][ T5925] usb 4-1: USB disconnect, device number 59 [ 529.490234][T11217] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 529.510027][ T5925] em28xx 4-1:0.89: Disconnecting em28xx [ 530.301541][T11217] usb 3-1: device descriptor read/64, error -71 [ 530.308153][ T24] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 530.321456][ T24] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 530.333344][ T24] em28xx 4-1:0.89: No AC97 audio processor [ 530.349607][ T24] usb 4-1: Decoder not found [ 530.360435][ T24] em28xx 4-1:0.89: failed to create media graph [ 530.373241][ T24] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 530.432195][ T24] em28xx 4-1:0.89: Registering snapshot button... [ 530.440415][T11217] usb usb3-port1: attempt power cycle [ 530.447306][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input30 [ 530.551662][ T24] em28xx 4-1:0.89: Remote control support is not available for this card. [ 530.603577][T11435] virtio-fs: tag not found [ 530.619778][ T30] audit: type=1400 audit(1759685742.229:3483): avc: denied { getopt } for pid=11432 comm="syz.3.1479" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 530.660013][ T5925] em28xx 4-1:0.89: Closing input extension [ 530.679769][ T5925] em28xx 4-1:0.89: Deregistering snapshot button [ 530.774398][ T5925] em28xx 4-1:0.89: Freeing device [ 530.811156][T11217] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 530.850292][T11217] usb 3-1: device descriptor read/8, error -71 [ 530.975112][T11441] vxcan1 speed is unknown, defaulting to 1000 [ 531.323601][T11441] lo speed is unknown, defaulting to 1000 [ 531.501791][T11217] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 531.672360][T11217] usb 3-1: device descriptor read/8, error -71 [ 531.790873][T11217] usb usb3-port1: unable to enumerate USB device [ 532.685302][T11469] netlink: 'syz.0.1489': attribute type 4 has an invalid length. [ 532.693522][T11469] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1489'. [ 533.924529][T11479] delete_channel: no stack [ 534.260311][T11485] netlink: 'syz.2.1495': attribute type 4 has an invalid length. [ 534.268064][T11485] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1495'. [ 534.384884][T11489] vxcan1 speed is unknown, defaulting to 1000 [ 536.490139][T11489] lo speed is unknown, defaulting to 1000 [ 536.515793][T11509] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1501'. [ 536.537752][T11509] delete_channel: no stack [ 536.939764][ T5944] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 537.089951][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 537.114266][ T5944] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 537.144893][ T5944] usb 4-1: config 0 has no interface number 0 [ 537.169196][ T5944] usb 4-1: config 0 interface 184 has no altsetting 0 [ 537.429043][ T5944] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 537.518123][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.536167][ T5944] usb 4-1: Product: syz [ 537.541515][ T5944] usb 4-1: Manufacturer: syz [ 537.546111][ T5944] usb 4-1: SerialNumber: syz [ 537.552872][ T5944] usb 4-1: config 0 descriptor?? [ 537.780706][ T5944] smsc75xx v1.0.0 [ 537.784434][ T5944] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 537.853288][ T5944] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 538.195024][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1513'. [ 538.313911][T11549] vxcan1 speed is unknown, defaulting to 1000 [ 538.388799][T11549] lo speed is unknown, defaulting to 1000 [ 539.030950][ T30] audit: type=1400 audit(1759685750.639:3484): avc: denied { setattr } for pid=11557 comm="syz.2.1516" name="" dev="pipefs" ino=38760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 539.364888][T11566] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1518'. [ 539.416742][T11568] delete_channel: no stack [ 539.470251][T11561] vxcan1 speed is unknown, defaulting to 1000 [ 539.566223][T11518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 539.572666][T11518] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 539.672135][T11518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 539.678395][T11518] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 539.717052][T11518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 539.727234][T11518] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 539.764129][T11518] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 539.776509][T11518] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 539.787452][T11561] lo speed is unknown, defaulting to 1000 [ 540.441039][T11577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1521'. [ 540.745551][T11580] FAULT_INJECTION: forcing a failure. [ 540.745551][T11580] name failslab, interval 1, probability 0, space 0, times 0 [ 540.760307][T11580] CPU: 0 UID: 0 PID: 11580 Comm: syz.2.1522 Not tainted syzkaller #0 PREEMPT(full) [ 540.760331][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 540.760342][T11580] Call Trace: [ 540.760348][T11580] [ 540.760354][T11580] dump_stack_lvl+0x16c/0x1f0 [ 540.760376][T11580] should_fail_ex+0x512/0x640 [ 540.760395][T11580] ? fs_reclaim_acquire+0xae/0x150 [ 540.760419][T11580] should_failslab+0xc2/0x120 [ 540.760440][T11580] __kmalloc_noprof+0xdd/0x880 [ 540.760465][T11580] ? tomoyo_encode2+0x100/0x3e0 [ 540.760489][T11580] ? tomoyo_encode2+0x100/0x3e0 [ 540.760507][T11580] tomoyo_encode2+0x100/0x3e0 [ 540.760529][T11580] tomoyo_encode+0x29/0x50 [ 540.760546][T11580] tomoyo_realpath_from_path+0x18f/0x6e0 [ 540.760572][T11580] tomoyo_path_number_perm+0x245/0x580 [ 540.760597][T11580] ? tomoyo_path_number_perm+0x237/0x580 [ 540.760624][T11580] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 540.760652][T11580] ? find_held_lock+0x2b/0x80 [ 540.760700][T11580] ? find_held_lock+0x2b/0x80 [ 540.760724][T11580] ? hook_file_ioctl_common+0x145/0x410 [ 540.760753][T11580] ? __fget_files+0x20e/0x3c0 [ 540.760777][T11580] security_file_ioctl+0x9b/0x240 [ 540.760798][T11580] __x64_sys_ioctl+0xb7/0x210 [ 540.760826][T11580] do_syscall_64+0xcd/0x4e0 [ 540.760845][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.760863][T11580] RIP: 0033:0x7ffb14d8eec9 [ 540.760877][T11580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.760894][T11580] RSP: 002b:00007ffb15b7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.760912][T11580] RAX: ffffffffffffffda RBX: 00007ffb14fe5fa0 RCX: 00007ffb14d8eec9 [ 540.760924][T11580] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000003 [ 540.760935][T11580] RBP: 00007ffb15b7b090 R08: 0000000000000000 R09: 0000000000000000 [ 540.760945][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.760955][T11580] R13: 00007ffb14fe6038 R14: 00007ffb14fe5fa0 R15: 00007fff9b109b78 [ 540.760979][T11580] [ 540.761000][T11580] ERROR: Out of memory at tomoyo_realpath_from_path. [ 540.917517][ T5925] usb 4-1: USB disconnect, device number 60 [ 541.499282][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 541.646584][ T30] audit: type=1400 audit(1759685753.259:3485): avc: denied { open } for pid=11597 comm="syz.3.1529" path="/dev/ptyqa" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 542.096901][ T30] audit: type=1400 audit(1759685753.279:3486): avc: denied { ioctl } for pid=11597 comm="syz.3.1529" path="/dev/ptyqa" dev="devtmpfs" ino=128 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 542.130850][T11601] bridge0: entered promiscuous mode [ 542.144390][ T30] audit: type=1400 audit(1759685753.289:3487): avc: denied { getopt } for pid=11597 comm="syz.3.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 542.148558][T11601] macsec1: entered promiscuous mode [ 542.309866][ T30] audit: type=1400 audit(1759685753.739:3488): avc: denied { append } for pid=11597 comm="syz.3.1529" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 542.345535][ T30] audit: type=1400 audit(1759685753.959:3489): avc: denied { mount } for pid=11606 comm="syz.0.1530" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 542.376509][T11607] overlayfs: failed to clone upperpath [ 542.647771][T11613] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1532'. [ 542.659005][T11613] delete_channel: no stack [ 542.794649][T11618] tipc: Enabling of bearer rejected, failed to enable media [ 544.588740][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 545.292760][ T42] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 545.891678][T11630] vxcan1 speed is unknown, defaulting to 1000 [ 546.229830][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 546.333185][T11648] FAULT_INJECTION: forcing a failure. [ 546.333185][T11648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.346407][T11648] CPU: 0 UID: 0 PID: 11648 Comm: syz.4.1542 Not tainted syzkaller #0 PREEMPT(full) [ 546.346431][T11648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 546.346441][T11648] Call Trace: [ 546.346448][T11648] [ 546.346454][T11648] dump_stack_lvl+0x16c/0x1f0 [ 546.346474][T11648] should_fail_ex+0x512/0x640 [ 546.346490][T11648] _copy_to_user+0x32/0xd0 [ 546.346513][T11648] simple_read_from_buffer+0xcb/0x170 [ 546.346552][T11648] proc_fail_nth_read+0x197/0x240 [ 546.346572][T11648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.346588][T11648] ? rw_verify_area+0xcf/0x6c0 [ 546.346605][T11648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.346617][T11648] vfs_read+0x1e1/0xcf0 [ 546.346630][T11648] ? __pfx___mutex_lock+0x10/0x10 [ 546.346643][T11648] ? __pfx_vfs_read+0x10/0x10 [ 546.346666][T11648] ? __fget_files+0x20e/0x3c0 [ 546.346690][T11648] ksys_read+0x12a/0x250 [ 546.346706][T11648] ? __pfx_ksys_read+0x10/0x10 [ 546.346723][T11648] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 546.346743][T11648] do_syscall_64+0xcd/0x4e0 [ 546.346755][T11648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.346766][T11648] RIP: 0033:0x7f2fe9b8d8dc [ 546.346776][T11648] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 546.346788][T11648] RSP: 002b:00007f2feaa16030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 546.346804][T11648] RAX: ffffffffffffffda RBX: 00007f2fe9de6180 RCX: 00007f2fe9b8d8dc [ 546.346816][T11648] RDX: 000000000000000f RSI: 00007f2feaa160a0 RDI: 0000000000000005 [ 546.346826][T11648] RBP: 00007f2feaa16090 R08: 0000000000000000 R09: 0000000000000000 [ 546.346835][T11648] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 546.346843][T11648] R13: 00007f2fe9de6218 R14: 00007f2fe9de6180 R15: 00007fff8b37d908 [ 546.346866][T11648] [ 546.533819][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.840542][ T42] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 547.037938][ T42] usb 4-1: config 0 has no interface number 0 [ 547.069764][ T42] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 547.089710][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.109747][ T42] usb 4-1: Product: syz [ 547.118684][ T42] usb 4-1: Manufacturer: syz [ 547.134593][ T42] usb 4-1: SerialNumber: syz [ 547.168580][ T42] usb 4-1: config 0 descriptor?? [ 547.228328][T11630] lo speed is unknown, defaulting to 1000 [ 547.389845][ T5925] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 547.398360][T11663] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1546'. [ 547.409170][T11663] delete_channel: no stack [ 547.441249][ T30] audit: type=1400 audit(1759685759.059:3490): avc: denied { getopt } for pid=11625 comm="syz.3.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 547.470768][T11628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.483819][T11628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.549136][ T5944] usb 4-1: USB disconnect, device number 61 [ 547.584072][ T5925] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 547.594961][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.603067][ T5925] usb 3-1: Product: syz [ 547.607372][ T5925] usb 3-1: Manufacturer: syz [ 547.612035][ T5925] usb 3-1: SerialNumber: syz [ 547.626308][ T5925] usb 3-1: config 0 descriptor?? [ 547.635575][ T5925] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 548.144129][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1544'. [ 548.269221][ T5925] sonixb 3-1:0.0: Error writing register 01: -71 [ 548.282406][ T5925] sonixb 3-1:0.0: probe with driver sonixb failed with error -71 [ 548.290400][ T30] audit: type=1400 audit(1759685759.859:3491): avc: denied { create } for pid=11655 comm="syz.2.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 548.328159][T11678] vxcan1 speed is unknown, defaulting to 1000 [ 548.437861][T11678] lo speed is unknown, defaulting to 1000 [ 548.498074][ T5925] usb 3-1: USB disconnect, device number 59 [ 548.504658][ T30] audit: type=1400 audit(1759685759.859:3492): avc: denied { bind } for pid=11655 comm="syz.2.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 548.649939][ T30] audit: type=1400 audit(1759685759.869:3493): avc: denied { setopt } for pid=11655 comm="syz.2.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 548.720872][T11684] FAULT_INJECTION: forcing a failure. [ 548.720872][T11684] name failslab, interval 1, probability 0, space 0, times 0 [ 548.747306][T11684] CPU: 0 UID: 0 PID: 11684 Comm: syz.1.1550 Not tainted syzkaller #0 PREEMPT(full) [ 548.747331][T11684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 548.747342][T11684] Call Trace: [ 548.747348][T11684] [ 548.747355][T11684] dump_stack_lvl+0x16c/0x1f0 [ 548.747376][T11684] should_fail_ex+0x512/0x640 [ 548.747392][T11684] ? fs_reclaim_acquire+0xae/0x150 [ 548.747413][T11684] should_failslab+0xc2/0x120 [ 548.747435][T11684] __kmalloc_noprof+0xdd/0x880 [ 548.747458][T11684] ? tomoyo_encode2+0x100/0x3e0 [ 548.747478][T11684] ? tomoyo_encode2+0x100/0x3e0 [ 548.747495][T11684] tomoyo_encode2+0x100/0x3e0 [ 548.747515][T11684] tomoyo_encode+0x29/0x50 [ 548.747531][T11684] tomoyo_realpath_from_path+0x18f/0x6e0 [ 548.747551][T11684] ? tomoyo_profile+0x47/0x60 [ 548.747572][T11684] tomoyo_path_number_perm+0x245/0x580 [ 548.747595][T11684] ? tomoyo_path_number_perm+0x237/0x580 [ 548.747621][T11684] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 548.747648][T11684] ? find_held_lock+0x2b/0x80 [ 548.747686][T11684] ? find_held_lock+0x2b/0x80 [ 548.747707][T11684] ? hook_file_ioctl_common+0x145/0x410 [ 548.747731][T11684] ? __fget_files+0x20e/0x3c0 [ 548.747751][T11684] security_file_ioctl+0x9b/0x240 [ 548.747769][T11684] __x64_sys_ioctl+0xb7/0x210 [ 548.747796][T11684] do_syscall_64+0xcd/0x4e0 [ 548.747814][T11684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.747831][T11684] RIP: 0033:0x7f21a258eec9 [ 548.747845][T11684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.747862][T11684] RSP: 002b:00007f21a33e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.747878][T11684] RAX: ffffffffffffffda RBX: 00007f21a27e5fa0 RCX: 00007f21a258eec9 [ 548.747889][T11684] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 548.747899][T11684] RBP: 00007f21a33e2090 R08: 0000000000000000 R09: 0000000000000000 [ 548.747908][T11684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.747917][T11684] R13: 00007f21a27e6038 R14: 00007f21a27e5fa0 R15: 00007ffea872e478 [ 548.747937][T11684] [ 548.747952][T11684] ERROR: Out of memory at tomoyo_realpath_from_path. [ 548.969372][T11689] tty tty3: ldisc open failed (-12), clearing slot 2 [ 550.645894][T11719] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1558'. [ 550.670707][T11719] delete_channel: no stack [ 551.065615][T11726] fuse: Unknown parameter '0x0000000000000003' [ 551.168792][T11728] netlink: 'syz.2.1561': attribute type 4 has an invalid length. [ 551.176751][T11728] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1561'. [ 551.372380][T11715] comedi comedi0: reset error (fatal) [ 551.381681][T11724] vxcan1 speed is unknown, defaulting to 1000 [ 553.650446][T11724] lo speed is unknown, defaulting to 1000 [ 553.986493][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 554.045370][T11758] erspan0: entered allmulticast mode [ 554.109853][T11752] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1569'. [ 554.119031][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 554.399756][ T30] audit: type=1400 audit(1759685766.009:3494): avc: denied { execute_no_trans } for pid=11763 comm="syz.0.1571" path="/404/file0" dev="tmpfs" ino=2184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 555.142076][T11771] gretap0: entered allmulticast mode [ 555.220854][T11762] delete_channel: no stack [ 555.488431][T11776] vxcan1 speed is unknown, defaulting to 1000 [ 557.064575][T11788] vxcan1 speed is unknown, defaulting to 1000 [ 557.149409][T11788] lo speed is unknown, defaulting to 1000 [ 557.244894][T11776] lo speed is unknown, defaulting to 1000 [ 557.583602][ T5892] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 557.791728][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 557.838881][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.927369][ T5892] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.979958][ T5892] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.995201][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 558.139192][ T5892] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 558.170500][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.190598][ T5892] usb 4-1: config 0 descriptor?? [ 558.769798][ T5944] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 559.151411][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.218972][ T5944] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 559.247792][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.259060][ T5944] usb 2-1: config 0 descriptor?? [ 559.695006][ T5944] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 559.699945][T11822] hub 9-0:1.0: USB hub found [ 559.714368][T11822] hub 9-0:1.0: 1 port detected [ 560.083959][ T5944] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input31 [ 560.266554][ T5944] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 560.365488][ T5944] usb 2-1: USB disconnect, device number 51 [ 561.683517][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 562.387034][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 562.400190][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 562.412116][ T5892] usb 4-1: USB disconnect, device number 62 [ 562.413982][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.424564][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.561373][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.574048][T11852] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1592'. [ 562.586707][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 562.600700][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 562.618325][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.854124][ T10] usb 2-1: config 0 descriptor?? [ 563.020489][ T10] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 563.055915][ T10] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 563.319772][ T30] audit: type=1400 audit(1759685774.799:3495): avc: denied { watch } for pid=11858 comm="syz.4.1595" path="/298/bus/file1" dev="overlay" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 563.529733][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 563.702256][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 563.711961][ T10] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 563.729815][ T10] usb 3-1: config 0 has no interface number 0 [ 563.736692][ T10] usb 3-1: config 0 interface 89 has no altsetting 0 [ 563.978263][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 564.006542][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.021981][ T10] usb 3-1: Product: syz [ 564.069899][ T10] usb 3-1: Manufacturer: syz [ 564.075343][ T10] usb 3-1: SerialNumber: syz [ 564.082456][ T10] usb 3-1: config 0 descriptor?? [ 564.090457][ T10] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 564.100082][ T10] em28xx 3-1:0.89: Video interface 89 found: bulk [ 564.554867][ T30] audit: type=1400 audit(1759685776.169:3496): avc: denied { getopt } for pid=11886 comm="syz.4.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 564.750698][ T10] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 564.762609][T11894] binder: BINDER_SET_CONTEXT_MGR already set [ 564.768903][T11894] binder: 11893:11894 ioctl 4018620d 2000000002c0 returned -16 [ 564.808720][ T30] audit: type=1400 audit(1759685776.419:3497): avc: denied { mount } for pid=11890 comm="syz.4.1603" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 564.832118][T11892] FAULT_INJECTION: forcing a failure. [ 564.832118][T11892] name failslab, interval 1, probability 0, space 0, times 0 [ 564.844860][T11892] CPU: 0 UID: 0 PID: 11892 Comm: syz.4.1603 Not tainted syzkaller #0 PREEMPT(full) [ 564.844876][T11892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 564.844882][T11892] Call Trace: [ 564.844886][T11892] [ 564.844890][T11892] dump_stack_lvl+0x16c/0x1f0 [ 564.844904][T11892] should_fail_ex+0x512/0x640 [ 564.844916][T11892] ? fs_reclaim_acquire+0xae/0x150 [ 564.844931][T11892] should_failslab+0xc2/0x120 [ 564.844944][T11892] __kmalloc_noprof+0xdd/0x880 [ 564.844960][T11892] ? kfree+0x252/0x6d0 [ 564.844977][T11892] ? trace_kmalloc+0x2b/0xd0 [ 564.844989][T11892] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 564.845005][T11892] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 564.845016][T11892] tomoyo_realpath_from_path+0xc2/0x6e0 [ 564.845030][T11892] ? tomoyo_fill_path_info+0x233/0x420 [ 564.845047][T11892] tomoyo_mount_acl+0x1ae/0x850 [ 564.845057][T11892] ? bpf_ksym_find+0x127/0x1c0 [ 564.845078][T11892] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 564.845096][T11892] ? is_bpf_text_address+0x94/0x1a0 [ 564.845111][T11892] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 564.845121][T11892] ? unwind_get_return_address+0x59/0xa0 [ 564.845151][T11892] ? tomoyo_domain+0xbb/0x150 [ 564.845164][T11892] ? tomoyo_profile+0x47/0x60 [ 564.845179][T11892] tomoyo_mount_permission+0x16d/0x420 [ 564.845189][T11892] ? tomoyo_mount_permission+0x14f/0x420 [ 564.845201][T11892] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 564.845220][T11892] security_sb_mount+0x9b/0x260 [ 564.845239][T11892] path_mount+0x158/0x23a0 [ 564.845255][T11892] ? __pfx_path_mount+0x10/0x10 [ 564.845269][T11892] ? kmem_cache_free+0x2d4/0x6c0 [ 564.845279][T11892] ? putname+0x154/0x1a0 [ 564.845295][T11892] ? putname+0x154/0x1a0 [ 564.845307][T11892] ? putname+0x154/0x1a0 [ 564.845321][T11892] ? __x64_sys_mount+0x293/0x310 [ 564.845333][T11892] __x64_sys_mount+0x293/0x310 [ 564.845347][T11892] ? __pfx___x64_sys_mount+0x10/0x10 [ 564.845364][T11892] do_syscall_64+0xcd/0x4e0 [ 564.845376][T11892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.845387][T11892] RIP: 0033:0x7f2fe9b8eec9 [ 564.845396][T11892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.845406][T11892] RSP: 002b:00007f2feaa37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 564.845417][T11892] RAX: ffffffffffffffda RBX: 00007f2fe9de6090 RCX: 00007f2fe9b8eec9 [ 564.845424][T11892] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 564.845430][T11892] RBP: 00007f2feaa37090 R08: 0000200000000c40 R09: 0000000000000000 [ 564.845437][T11892] R10: 0000000001040020 R11: 0000000000000246 R12: 0000000000000001 [ 564.845443][T11892] R13: 00007f2fe9de6128 R14: 00007f2fe9de6090 R15: 00007fff8b37d908 [ 564.845456][T11892] [ 564.845796][T11892] ERROR: Out of memory at tomoyo_realpath_from_path. [ 565.174778][ T24] usb 2-1: USB disconnect, device number 52 [ 565.506811][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'. [ 565.528924][ T10] em28xx 3-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 565.541162][ T30] audit: type=1400 audit(1759685777.139:3498): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 566.164289][ T10] em28xx 3-1:0.89: board has no eeprom [ 566.229793][ T10] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 566.238444][ T10] em28xx 3-1:0.89: analog set to bulk mode. [ 566.337111][ T5892] em28xx 3-1:0.89: Registering V4L2 extension [ 566.381421][ T10] usb 3-1: USB disconnect, device number 60 [ 566.388343][ T10] em28xx 3-1:0.89: Disconnecting em28xx [ 566.410470][ T5892] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 566.539127][ T5892] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 566.555668][ T30] audit: type=1400 audit(1759685778.169:3499): avc: denied { getopt } for pid=11919 comm="syz.0.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 567.435388][ T5892] em28xx 3-1:0.89: No AC97 audio processor [ 567.459419][ T5892] usb 3-1: Decoder not found [ 567.484349][ T5892] em28xx 3-1:0.89: failed to create media graph [ 567.626643][ T5892] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 567.650942][ T5892] em28xx 3-1:0.89: Registering snapshot button... [ 567.667239][ T5892] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input32 [ 567.814876][ T5892] em28xx 3-1:0.89: Remote control support is not available for this card. [ 567.924282][ T10] em28xx 3-1:0.89: Closing input extension [ 567.957742][ T10] em28xx 3-1:0.89: Deregistering snapshot button [ 568.331665][ T10] em28xx 3-1:0.89: Freeing device [ 568.665914][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 569.179917][ T10] usb 3-1: device descriptor read/64, error -71 [ 569.347811][T11939] delete_channel: no stack [ 569.419761][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 569.789780][ T10] usb 3-1: device descriptor read/64, error -71 [ 569.900737][ T10] usb usb3-port1: attempt power cycle [ 569.989717][ T5954] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 570.149850][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 570.156728][ T5954] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 570.169259][ T5954] usb 2-1: config 0 has no interface number 0 [ 570.175586][ T5954] usb 2-1: config 0 interface 89 has no altsetting 0 [ 570.185660][ T5954] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 570.195038][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.204362][ T5954] usb 2-1: Product: syz [ 570.208723][ T5954] usb 2-1: Manufacturer: syz [ 570.213351][ T5954] usb 2-1: SerialNumber: syz [ 570.220824][ T5954] usb 2-1: config 0 descriptor?? [ 570.227795][ T5954] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 570.237434][ T5954] em28xx 2-1:0.89: Video interface 89 found: bulk [ 570.244212][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 570.270083][ T10] usb 3-1: device descriptor read/8, error -71 [ 570.520001][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 570.540102][ T10] usb 3-1: device descriptor read/8, error -71 [ 570.650212][ T10] usb usb3-port1: unable to enumerate USB device [ 570.833366][ T5954] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 571.050070][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 571.059946][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 571.060474][ T30] audit: type=1400 audit(1759685782.685:3500): avc: denied { map } for pid=11960 comm="syz.0.1623" path="socket:[41107]" dev="sockfs" ino=41107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 571.069880][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 571.106533][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 571.116221][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 571.125901][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 571.136011][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 571.146161][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 571.155667][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 571.165147][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 571.178031][T11965] 8021q: adding VLAN 0 to HW filter on device  [ 571.178360][T11968] netlink: 'syz.3.1625': attribute type 2 has an invalid length. [ 571.192425][T11965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.165045][ T5954] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 572.179781][ T5954] em28xx 2-1:0.89: board has no eeprom [ 572.249948][ T5954] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 572.257206][ T5954] em28xx 2-1:0.89: analog set to bulk mode. [ 572.291932][ T10] em28xx 2-1:0.89: Registering V4L2 extension [ 572.426645][ T5954] usb 2-1: USB disconnect, device number 53 [ 572.455595][T11980] fuse: Unknown parameter '0x0000000000000003' [ 572.458495][ T5954] em28xx 2-1:0.89: Disconnecting em28xx [ 572.905777][T11987] netlink: 'syz.3.1630': attribute type 4 has an invalid length. [ 573.240207][ T10] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 573.247139][ T10] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 573.285249][ T10] em28xx 2-1:0.89: No AC97 audio processor [ 573.367890][ T10] usb 2-1: Decoder not found [ 573.373102][ T10] em28xx 2-1:0.89: failed to create media graph [ 573.379353][ T10] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 573.407901][ T10] em28xx 2-1:0.89: Registering snapshot button... [ 573.417979][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input33 [ 573.517287][ T10] em28xx 2-1:0.89: Remote control support is not available for this card. [ 574.061455][T11996] syzkaller0: entered allmulticast mode [ 574.084053][ T5954] em28xx 2-1:0.89: Closing input extension [ 574.094166][ T5954] em28xx 2-1:0.89: Deregistering snapshot button [ 574.107087][T12003] team0: Device macvtap1 is already an upper device of the team interface [ 574.231645][ T5954] em28xx 2-1:0.89: Freeing device [ 574.580054][ T934] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 574.598894][T12009] vxcan1 speed is unknown, defaulting to 1000 [ 574.841301][ T934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.869454][ T934] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 574.976499][ T934] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 574.999180][ T934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.047321][ T934] usb 4-1: Product: syz [ 575.068682][ T934] usb 4-1: Manufacturer: syz [ 575.094274][ T934] usb 4-1: SerialNumber: syz [ 575.130564][ T934] usb 4-1: config 0 descriptor?? [ 575.485094][T12009] lo speed is unknown, defaulting to 1000 [ 575.572940][ T934] usb 4-1: USB disconnect, device number 63 [ 576.102405][T12025] fuse: Unknown parameter '0x0000000000000003' [ 576.247912][T12027] netlink: 'syz.1.1642': attribute type 4 has an invalid length. [ 576.256308][T12027] __nla_validate_parse: 10 callbacks suppressed [ 576.256336][T12027] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1642'. [ 577.078775][T12038] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1645'. [ 577.669771][ T30] audit: type=1326 audit(1759685789.175:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.2.1650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb14d8eec9 code=0x0 [ 577.692742][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.782719][T12061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1650'. [ 577.805091][T12061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1650'. [ 577.825388][T12061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1650'. [ 577.834726][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 578.364605][T12061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1650'. [ 578.376730][T12061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1650'. [ 578.385774][T12061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1650'. [ 578.394848][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 579.538834][T12082] delete_channel: no stack [ 580.592914][T12093] vxcan1 speed is unknown, defaulting to 1000 [ 580.694940][T12093] lo speed is unknown, defaulting to 1000 [ 580.893865][ T30] audit: type=1400 audit(1759685792.515:3502): avc: denied { bind } for pid=12096 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 580.915993][T12100] netlink: 'syz.2.1659': attribute type 4 has an invalid length. [ 580.937571][T12100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=12100 comm=syz.2.1659 [ 580.967641][ T30] audit: type=1400 audit(1759685792.555:3503): avc: denied { setopt } for pid=12096 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 581.229782][ T5925] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 581.379726][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 581.393906][ T5925] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 581.414359][ T5925] usb 2-1: config 179 has no interface number 0 [ 581.434782][ T5925] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 581.436155][T12112] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 581.459542][ T5925] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 581.471342][ T5925] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 581.499537][ T5925] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 581.511356][ T5925] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 581.526777][ T5925] usb 2-1: config 179 interface 65 has no altsetting 0 [ 581.564209][ T5925] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 581.576490][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.614721][ T5925] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input34 [ 581.699794][ T5180] input input34: unable to receive magic message: -110 [ 581.717395][ T5180] input input34: unable to receive magic message: -32 [ 581.738035][ T5180] input input34: unable to receive magic message: -32 [ 581.751805][ T5180] input input34: unable to receive magic message: -32 [ 582.013133][ T30] audit: type=1400 audit(1759685793.635:3504): avc: denied { ioctl } for pid=12102 comm="syz.1.1662" path="socket:[41622]" dev="sockfs" ino=41622 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 582.668932][ T10] usb 2-1: USB disconnect, device number 54 [ 582.669082][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 583.050444][T12149] fuse: Bad value for 'fd' [ 583.559726][ T5954] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 583.785051][ T5954] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 583.795918][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.807679][ T5954] usb 4-1: config 0 descriptor?? [ 583.841191][T12156] delete_channel: no stack [ 583.914103][T12161] __nla_validate_parse: 5 callbacks suppressed [ 583.914119][T12161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1677'. [ 583.929528][T12161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1677'. [ 584.142294][ T5954] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0e [ 584.149712][ T5954] hackrf 4-1:0.0: Could not detect board [ 584.155417][ T5954] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 584.169107][ T5954] usb 4-1: USB disconnect, device number 64 [ 584.175395][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 584.641809][ T10] usb 3-1: config 0 has no interfaces? [ 584.647598][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 584.656839][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.684708][ T10] usb 3-1: config 0 descriptor?? [ 585.011829][ T5925] usb 3-1: USB disconnect, device number 65 [ 586.576933][T12199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.586369][T12199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.642312][T12202] delete_channel: no stack [ 586.699145][T12205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1689'. [ 586.723054][T12205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1689'. [ 586.819809][ T934] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 586.969880][ T934] usb 3-1: device descriptor read/64, error -71 [ 586.973824][ T30] audit: type=1400 audit(1759685798.595:3505): avc: denied { shutdown } for pid=12211 comm="syz.4.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.052308][T12219] overlay: Unknown parameter 'euid' [ 587.189102][T12219] fuse: Bad value for 'fd' [ 587.229879][ T934] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 587.289755][ T5954] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 587.892463][ T934] usb 3-1: device descriptor read/64, error -71 [ 588.011159][ T934] usb usb3-port1: attempt power cycle [ 588.023676][ T5954] usb 2-1: device descriptor read/64, error -71 [ 588.274139][ T5954] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 588.331683][T12233] netlink: 'syz.4.1698': attribute type 1 has an invalid length. [ 588.341717][T12233] netlink: 'syz.4.1698': attribute type 1 has an invalid length. [ 588.379730][ T934] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 588.400451][ T934] usb 3-1: device descriptor read/8, error -71 [ 588.419758][ T5954] usb 2-1: device descriptor read/64, error -71 [ 588.529915][ T5954] usb usb2-port1: attempt power cycle [ 588.640212][ T934] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 588.672682][ T934] usb 3-1: device descriptor read/8, error -71 [ 588.997045][ T934] usb usb3-port1: unable to enumerate USB device [ 589.050286][ T5954] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 589.082459][ T5954] usb 2-1: device descriptor read/8, error -71 [ 589.629699][ T5954] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 589.667672][ T5954] usb 2-1: device descriptor read/8, error -71 [ 589.780792][ T5954] usb usb2-port1: unable to enumerate USB device [ 590.011091][ T5925] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 590.112738][T12261] hub 9-0:1.0: USB hub found [ 590.118601][T12261] hub 9-0:1.0: 1 port detected [ 590.206578][ T30] audit: type=1400 audit(1759685801.825:3506): avc: denied { ioctl } for pid=12266 comm="syz.1.1707" path="socket:[42194]" dev="sockfs" ino=42194 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 590.219055][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 590.238316][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.251007][ T5925] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 590.260679][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.268753][ T5925] usb 3-1: Product: syz [ 590.273018][ T5925] usb 3-1: Manufacturer: syz [ 590.277636][ T5925] usb 3-1: SerialNumber: syz [ 590.293346][ T5925] usb 3-1: config 0 descriptor?? [ 590.318965][ T5925] usb 3-1: no audio or video endpoints found [ 590.609038][ T5925] usb 3-1: USB disconnect, device number 70 [ 591.014609][ T30] audit: type=1400 audit(1759685802.625:3507): avc: denied { read } for pid=12276 comm="syz.3.1709" path="socket:[43011]" dev="sockfs" ino=43011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 591.399864][ T5907] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 591.616281][ T5907] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 591.629786][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.639075][ T5907] usb 2-1: config 0 descriptor?? [ 591.853288][ T30] audit: type=1400 audit(1759685803.475:3508): avc: denied { ioctl } for pid=12289 comm="syz.0.1714" path="socket:[43043]" dev="sockfs" ino=43043 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 591.907319][ T30] audit: type=1400 audit(1759685803.475:3509): avc: denied { map } for pid=12289 comm="syz.0.1714" path="socket:[43042]" dev="sockfs" ino=43042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 592.029713][ T5954] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 592.070712][ T30] audit: type=1400 audit(1759685803.475:3510): avc: denied { accept } for pid=12289 comm="syz.0.1714" path="socket:[43042]" dev="sockfs" ino=43042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 592.851630][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 592.950487][ T5907] hackrf 2-1:0.0: usb_control_msg() failed -110 request 0e [ 593.300798][ T5907] hackrf 2-1:0.0: Could not detect board [ 593.349383][ T5954] usb 3-1: no configurations [ 593.358832][ T5954] usb 3-1: can't read configurations, error -22 [ 593.377308][ T5907] hackrf 2-1:0.0: probe with driver hackrf failed with error -110 [ 593.424335][ T5944] usb 2-1: USB disconnect, device number 59 [ 593.490134][ T5954] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 593.780581][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 593.809710][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 593.815315][ T5954] usb 3-1: no configurations [ 593.820123][ T5954] usb 3-1: can't read configurations, error -22 [ 593.827193][ T5954] usb usb3-port1: attempt power cycle [ 593.845463][T12302] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1717'. [ 593.942218][ T24] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 593.954868][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.965920][ T24] usb 4-1: config 0 descriptor?? [ 594.197687][ T5954] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 594.728741][T12315] vxcan1 speed is unknown, defaulting to 1000 [ 594.739758][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 594.958474][ T5954] usb 3-1: device descriptor read/all, error -71 [ 594.993445][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 595.002372][T12318] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1723'. [ 595.011469][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 595.824795][T12315] lo speed is unknown, defaulting to 1000 [ 596.060604][ T24] pegasus 4-1:0.0: probe with driver pegasus failed with error -121 [ 596.813776][ T24] usb 4-1: USB disconnect, device number 65 [ 596.984773][ T30] audit: type=1400 audit(1759685808.605:3511): avc: denied { setopt } for pid=12343 comm="syz.3.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 597.015549][T12347] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1731'. [ 597.025539][T12347] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1731'. [ 597.138081][T12349] vxcan1 speed is unknown, defaulting to 1000 [ 597.286648][T12349] lo speed is unknown, defaulting to 1000 [ 599.647994][T12392] vxcan1 speed is unknown, defaulting to 1000 [ 600.033879][ T30] audit: type=1400 audit(1759685811.625:3512): avc: denied { execute } for pid=12396 comm="syz.1.1744" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 600.057930][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.123184][T12392] lo speed is unknown, defaulting to 1000 [ 601.317620][ T30] audit: type=1400 audit(1759685812.935:3513): avc: denied { create } for pid=12411 comm="syz.0.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 601.338056][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.652080][T12418] delete_channel: no stack [ 602.112731][T12420] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1750'. [ 603.869747][ T30] audit: type=1326 audit(1759685815.475:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 603.900771][ T30] audit: type=1326 audit(1759685815.475:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 603.925750][ T30] audit: type=1326 audit(1759685815.475:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 603.950975][ T30] audit: type=1326 audit(1759685815.475:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 604.059502][ T30] audit: type=1326 audit(1759685815.475:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 604.084574][ T30] audit: type=1326 audit(1759685815.475:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 604.107940][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.114468][ T30] audit: type=1326 audit(1759685815.475:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 604.119697][ T934] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 604.137909][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.138625][ T30] audit: type=1326 audit(1759685815.475:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 604.175011][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.189915][ T5907] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 604.470947][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.046642][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.056481][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 605.069475][ T5907] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 605.079734][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.089949][ T5907] usb 2-1: config 0 descriptor?? [ 605.099498][ T30] audit: type=1326 audit(1759685815.475:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 605.122983][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.142349][ T30] audit: type=1326 audit(1759685815.475:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f460418ef03 code=0x7ffc0000 [ 605.174874][ T30] audit: type=1326 audit(1759685815.475:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f460418ef03 code=0x7ffc0000 [ 605.251353][ T934] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 605.260708][ T934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.276876][ T30] audit: type=1326 audit(1759685815.475:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 605.330135][ T30] audit: type=1326 audit(1759685815.475:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 605.353593][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.363766][ T30] audit: type=1326 audit(1759685815.475:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 605.387204][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.405424][ T934] usb 3-1: config 0 descriptor?? [ 605.549243][ T5907] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 605.564089][ T30] audit: type=1326 audit(1759685815.475:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 605.587440][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.722290][ T30] audit: type=1326 audit(1759685815.475:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 605.940744][ T30] audit: type=1326 audit(1759685815.475:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 606.758517][ T934] hackrf 3-1:0.0: usb_control_msg() failed -110 request 0e [ 607.127681][ T934] hackrf 3-1:0.0: Could not detect board [ 607.127722][ T42] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 607.133580][ T934] hackrf 3-1:0.0: probe with driver hackrf failed with error -110 [ 607.160745][ T30] audit: type=1326 audit(1759685815.475:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f460418eec9 code=0x7ffc0000 [ 607.199905][T12446] usb 2-1: string descriptor 0 read error: -32 [ 607.416248][ T934] usb 3-1: USB disconnect, device number 75 [ 607.669019][T12475] delete_channel: no stack [ 608.504600][ T5907] usb 2-1: USB disconnect, device number 60 [ 609.002607][T12487] FAULT_INJECTION: forcing a failure. [ 609.002607][T12487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.040981][T12487] CPU: 0 UID: 0 PID: 12487 Comm: syz.1.1768 Not tainted syzkaller #0 PREEMPT(full) [ 609.041008][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.041019][T12487] Call Trace: [ 609.041025][T12487] [ 609.041032][T12487] dump_stack_lvl+0x16c/0x1f0 [ 609.041053][T12487] should_fail_ex+0x512/0x640 [ 609.041077][T12487] _copy_to_user+0x32/0xd0 [ 609.041099][T12487] simple_read_from_buffer+0xcb/0x170 [ 609.041131][T12487] proc_fail_nth_read+0x197/0x240 [ 609.041154][T12487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.041178][T12487] ? rw_verify_area+0xcf/0x6c0 [ 609.041204][T12487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.041225][T12487] vfs_read+0x1e1/0xcf0 [ 609.041247][T12487] ? __pfx___mutex_lock+0x10/0x10 [ 609.041264][T12487] ? __pfx_vfs_read+0x10/0x10 [ 609.041288][T12487] ? __fget_files+0x20e/0x3c0 [ 609.041305][T12487] ? lockdep_hardirqs_on+0x30/0x110 [ 609.041339][T12487] ksys_read+0x12a/0x250 [ 609.041357][T12487] ? __pfx_ksys_read+0x10/0x10 [ 609.041382][T12487] do_syscall_64+0xcd/0x4e0 [ 609.041401][T12487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.041419][T12487] RIP: 0033:0x7f21a258d8dc [ 609.041433][T12487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 609.041449][T12487] RSP: 002b:00007f21a33e2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 609.041466][T12487] RAX: ffffffffffffffda RBX: 00007f21a27e5fa0 RCX: 00007f21a258d8dc [ 609.041477][T12487] RDX: 000000000000000f RSI: 00007f21a33e20a0 RDI: 0000000000000004 [ 609.041488][T12487] RBP: 00007f21a33e2090 R08: 0000000000000000 R09: 0000000000000000 [ 609.041497][T12487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.041507][T12487] R13: 00007f21a27e6038 R14: 00007f21a27e5fa0 R15: 00007ffea872e478 [ 609.041532][T12487] [ 610.445037][ T5925] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 610.949716][ T42] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 611.071121][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.082892][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.094294][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 611.107406][ T5925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 611.235922][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.261323][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.273162][ T5925] usb 3-1: config 0 descriptor?? [ 611.278926][ T42] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 611.294596][ T42] usb 2-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 611.303877][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.317452][ T42] usb 2-1: Product: syz [ 611.321756][ T42] usb 2-1: Manufacturer: syz [ 611.326433][ T42] usb 2-1: SerialNumber: syz [ 611.333084][ T42] usb 2-1: config 0 descriptor?? [ 611.546504][ T42] usb 2-1: USB disconnect, device number 61 [ 611.707373][ T5925] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 611.970480][ T5954] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 612.100574][T12519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1777'. [ 612.198278][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1778'. [ 612.221758][ T5954] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 612.244061][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.267202][T12523] ------------[ cut here ]------------ [ 612.268457][ T5954] usb 4-1: config 0 descriptor?? [ 612.273443][T12523] WARNING: CPU: 1 PID: 12523 at mm/page_alloc.c:5159 __alloc_frozen_pages_noprof+0x309/0x2470 [ 612.288596][T12523] Modules linked in: [ 612.292851][T12523] CPU: 1 UID: 0 PID: 12523 Comm: syz.1.1778 Not tainted syzkaller #0 PREEMPT(full) [ 612.302302][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 612.312400][T12523] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2470 [ 612.319112][T12523] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 51 29 3e 09 83 fe 0a 0f 86 0c fe ff ff 80 3d 07 23 32 0e 00 75 0b c6 05 fe 22 32 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 612.338937][T12523] RSP: 0018:ffffc9001dd977d8 EFLAGS: 00010246 [ 612.345059][T12523] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 612.353216][T12523] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000000000040d40 [ 612.361302][T12523] RBP: 000000000000001c R08: 0000000000000005 R09: 0000000000000009 [ 612.369291][T12523] R10: 000000000000001c R11: ffffffff8b50cfed R12: 0000000000040d40 [ 612.377846][T12523] R13: 1ffff92003bb2f11 R14: ffffffff9a8ccde4 R15: 000000000000001c [ 612.386037][T12523] FS: 00007f21a33c16c0(0000) GS:ffff888124f67000(0000) knlGS:0000000000000000 [ 612.395001][T12523] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.401615][T12523] CR2: 0000200000001000 CR3: 000000005abbf000 CR4: 00000000003526f0 [ 612.409686][T12523] Call Trace: [ 612.412962][T12523] [ 612.415876][T12523] ? path_mount+0x7b9/0x23a0 [ 612.420513][T12523] ? __x64_sys_mount+0x293/0x310 [ 612.425440][T12523] ? do_syscall_64+0xcd/0x4e0 [ 612.430141][T12523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.436212][T12523] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 612.442626][T12523] ? kasan_quarantine_put+0x10a/0x240 [ 612.448004][T12523] ? lockdep_hardirqs_on+0x7c/0x110 [ 612.453272][T12523] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 612.459194][T12523] ? policy_nodemask+0xea/0x4e0 [ 612.464207][T12523] alloc_pages_mpol+0x1fb/0x550 [ 612.469071][T12523] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 612.475049][T12523] ___kmalloc_large_node+0xed/0x160 [ 612.480452][T12523] __kmalloc_large_node_noprof+0x1c/0x70 [ 612.486102][T12523] __kmalloc_noprof.cold+0xc/0x62 [ 612.491227][T12523] ? v9fs_fid_get_acl+0x7a/0x120 [ 612.496185][T12523] ? v9fs_fid_get_acl+0x7a/0x120 [ 612.501172][T12523] v9fs_fid_get_acl+0x7a/0x120 [ 612.505932][T12523] v9fs_get_acl+0xee/0x530 [ 612.510379][T12523] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 612.515915][T12523] v9fs_mount+0x4fd/0xa90 [ 612.520288][T12523] ? __pfx_v9fs_mount+0x10/0x10 [ 612.525121][T12523] ? cap_capable+0xb3/0x250 [ 612.529689][T12523] ? __pfx_v9fs_mount+0x10/0x10 [ 612.534538][T12523] legacy_get_tree+0x10c/0x220 [ 612.539296][T12523] vfs_get_tree+0x8e/0x340 [ 612.543721][T12523] path_mount+0x7b9/0x23a0 [ 612.548123][T12523] ? __pfx_path_mount+0x10/0x10 [ 612.553006][T12523] ? kmem_cache_free+0x2d4/0x6c0 [ 612.557933][T12523] ? putname+0x154/0x1a0 [ 612.562221][T12523] ? putname+0x154/0x1a0 [ 612.566450][T12523] ? putname+0x154/0x1a0 [ 612.570816][T12523] ? __x64_sys_mount+0x293/0x310 [ 612.575751][T12523] __x64_sys_mount+0x293/0x310 [ 612.581209][T12523] ? __pfx___x64_sys_mount+0x10/0x10 [ 612.586504][T12523] do_syscall_64+0xcd/0x4e0 [ 612.591051][T12523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.596937][T12523] RIP: 0033:0x7f21a258eec9 [ 612.601413][T12523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.621072][T12523] RSP: 002b:00007f21a33c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 612.629480][T12523] RAX: ffffffffffffffda RBX: 00007f21a27e6090 RCX: 00007f21a258eec9 [ 612.637528][T12523] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 612.645533][T12523] RBP: 00007f21a2611f91 R08: 0000200000000580 R09: 0000000000000000 [ 612.653600][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.661623][T12523] R13: 00007f21a27e6128 R14: 00007f21a27e6090 R15: 00007ffea872e478 [ 612.669679][T12523] [ 612.672696][T12523] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 612.679959][T12523] CPU: 1 UID: 0 PID: 12523 Comm: syz.1.1778 Not tainted syzkaller #0 PREEMPT(full) [ 612.689311][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 612.699353][T12523] Call Trace: [ 612.702619][T12523] [ 612.705533][T12523] dump_stack_lvl+0x3d/0x1f0 [ 612.710124][T12523] vpanic+0x640/0x6f0 [ 612.714096][T12523] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 612.720159][T12523] panic+0xca/0xd0 [ 612.723880][T12523] ? __pfx_panic+0x10/0x10 [ 612.728296][T12523] check_panic_on_warn+0xab/0xb0 [ 612.733228][T12523] __warn+0xf6/0x3c0 [ 612.737128][T12523] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 612.743202][T12523] report_bug+0x3c3/0x580 [ 612.747530][T12523] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 612.753598][T12523] handle_bug+0x184/0x210 [ 612.757924][T12523] exc_invalid_op+0x17/0x50 [ 612.762426][T12523] asm_exc_invalid_op+0x1a/0x20 [ 612.767275][T12523] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2470 [ 612.773968][T12523] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 51 29 3e 09 83 fe 0a 0f 86 0c fe ff ff 80 3d 07 23 32 0e 00 75 0b c6 05 fe 22 32 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 612.793579][T12523] RSP: 0018:ffffc9001dd977d8 EFLAGS: 00010246 [ 612.799655][T12523] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 612.807633][T12523] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000000000040d40 [ 612.815692][T12523] RBP: 000000000000001c R08: 0000000000000005 R09: 0000000000000009 [ 612.823668][T12523] R10: 000000000000001c R11: ffffffff8b50cfed R12: 0000000000040d40 [ 612.831632][T12523] R13: 1ffff92003bb2f11 R14: ffffffff9a8ccde4 R15: 000000000000001c [ 612.839593][T12523] ? do_syscall_64+0xcd/0x4e0 [ 612.844265][T12523] ? vfs_get_tree+0x8e/0x340 [ 612.848844][T12523] ? path_mount+0x7b9/0x23a0 [ 612.853423][T12523] ? __x64_sys_mount+0x293/0x310 [ 612.858345][T12523] ? do_syscall_64+0xcd/0x4e0 [ 612.862998][T12523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.869056][T12523] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 612.875385][T12523] ? kasan_quarantine_put+0x10a/0x240 [ 612.880736][T12523] ? lockdep_hardirqs_on+0x7c/0x110 [ 612.885925][T12523] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 612.891811][T12523] ? policy_nodemask+0xea/0x4e0 [ 612.896652][T12523] alloc_pages_mpol+0x1fb/0x550 [ 612.901490][T12523] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 612.906854][T12523] ___kmalloc_large_node+0xed/0x160 [ 612.912040][T12523] __kmalloc_large_node_noprof+0x1c/0x70 [ 612.917664][T12523] __kmalloc_noprof.cold+0xc/0x62 [ 612.922677][T12523] ? v9fs_fid_get_acl+0x7a/0x120 [ 612.927607][T12523] ? v9fs_fid_get_acl+0x7a/0x120 [ 612.932528][T12523] v9fs_fid_get_acl+0x7a/0x120 [ 612.937276][T12523] v9fs_get_acl+0xee/0x530 [ 612.941678][T12523] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 612.947205][T12523] v9fs_mount+0x4fd/0xa90 [ 612.951525][T12523] ? __pfx_v9fs_mount+0x10/0x10 [ 612.956365][T12523] ? cap_capable+0xb3/0x250 [ 612.960857][T12523] ? __pfx_v9fs_mount+0x10/0x10 [ 612.965694][T12523] legacy_get_tree+0x10c/0x220 [ 612.970445][T12523] vfs_get_tree+0x8e/0x340 [ 612.974850][T12523] path_mount+0x7b9/0x23a0 [ 612.979252][T12523] ? __pfx_path_mount+0x10/0x10 [ 612.984087][T12523] ? kmem_cache_free+0x2d4/0x6c0 [ 612.989003][T12523] ? putname+0x154/0x1a0 [ 612.993232][T12523] ? putname+0x154/0x1a0 [ 612.997459][T12523] ? putname+0x154/0x1a0 [ 613.001689][T12523] ? __x64_sys_mount+0x293/0x310 [ 613.006609][T12523] __x64_sys_mount+0x293/0x310 [ 613.011359][T12523] ? __pfx___x64_sys_mount+0x10/0x10 [ 613.016639][T12523] do_syscall_64+0xcd/0x4e0 [ 613.021128][T12523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.027003][T12523] RIP: 0033:0x7f21a258eec9 [ 613.031400][T12523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.050987][T12523] RSP: 002b:00007f21a33c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 613.059378][T12523] RAX: ffffffffffffffda RBX: 00007f21a27e6090 RCX: 00007f21a258eec9 [ 613.067332][T12523] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 613.075282][T12523] RBP: 00007f21a2611f91 R08: 0000200000000580 R09: 0000000000000000 [ 613.083232][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.091179][T12523] R13: 00007f21a27e6128 R14: 00007f21a27e6090 R15: 00007ffea872e478 [ 613.099138][T12523] [ 613.102328][T12523] Kernel Offset: disabled [ 613.106631][T12523] Rebooting in 86400 seconds..