last executing test programs: 10.876224795s ago: executing program 0 (id=1014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x7, &(0x7f0000000080)=0x202) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x130c17, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="7a00000000000000100000000000931a5525f3aaf116aeeecfdae823afb124e07dd2152cb32cac9e7412e849d22581f29bececc67ae672d6cd57bd3f6bed7792d37617fc8338"], 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x40d0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='\xa6\xf5\x88\xa9[\x9a\x04\x9f\xb2\xdf\xcbk\xf0\x13-\xe3\xc4c\xf0\xd1$\xc79>\x04)\xb4V\xda]\x12\x80\xa6\xfa\xd0\x1aD\x04\xaa\xbd=\x05g\x9d\xa0\xcdlm\xa5\x9d\xe5\r4\xaaq\xb2!WP\xfb\x91_\x8b\xf2np\x05\x9c\x8f\xf4S0A\x90\xad,\xa7\x01\fo\xa3tf\xca\xa9\xbbxe\x1fV\\\xe5\t\x81\x9b\x7fz`\xcd\n#x\xd4\xb0\x80\xc0v\a\x86\x95p$^7\x9e3K\xcc\f\xe7J|4Xw\x1bI3* \x87Z9\xb1o\b\xaa\x83*X\x00\xca\x17\\\xec,\x1a\xb9\xcd\xed\xbc?G\xf1\xa6=+\x88cm|', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) 8.927298285s ago: executing program 0 (id=1025): openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x5380, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000019140)=ANY=[@ANYBLOB="180000411685e8e61ffd74000000000000000000090000729c120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000200), 0x84000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x32, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000019100)={'bridge0\x00', @random}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0xd) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000880)={0x2020}, 0x2020) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close_range(r4, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000190c0), 0x181000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000850017bcc0e3f820003f000000000000000000b028fec719000000000084180000000040c9cc67"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0xfffffffffffffd33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 8.523237492s ago: executing program 4 (id=1029): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000440)="9f870afe3c1c6c10e8151d5199ab11e66b4e0de2f79ac8c65d6356e0a3c9b44227eeccf8cb8f41714283537855459f278b4c40ffbbb0276601e31659ed38b92295a32b9176cdd102befb3f850a53dff73233018be37d1b733f846dfb90a13e6d996c5e5c5daff386dab026dde5d4a1dd8cce432f6d176ce09c154074b59b4d4ca3d8d9a1e17163e674bf94a39f7cabcc32c7d51acf426a0d88b42ebee7ad532c08b274e5424e09d9", 0x0, &(0x7f0000000500)="5765525c5b192f2cd7170943adc7ff1ccd9237881a0aef4fb8cae2a2e948635893ec14ba14fc20c3f06ab2c209aad8ff0b3e1d575480cb8157d8742521a64f8d9bf38db5f70d6b0d1a1ed9fb556a6a612e248e79d6cfcf5651e44fa58e04f9a4a9491766b76275ebb1558aa495e421360b7458c438ecb7ae1a3f39791441eb1c24c913262bdffc37ab822d957e35b4a1be54a88aa9aa7b5d5d74f1c687ea0223ecda2aabb9122d0c1529933e987e7d7d07d411c8aa43f2", &(0x7f0000000680)="972bd846362b299efc0d8bf9e57d27320000fedfd727f3d9dd64f7b91eee4a42b28ef7e8e6cf076bbb0c4169ebc6e94684b4f09e9acb08b34fd0e0f975f2c66965ed95dc5654ce53386ba23912f846ae18ba5f22ccec65edd84e9d", 0x9f46}, 0x38) unshare(0x400) io_uring_enter(r1, 0x351e, 0x483, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) msgsnd(0x0, &(0x7f00000017c0)={0x3, "ccc038e6c1811bb93fb0fff199a17ff1d35bea8fa76c6fb3427a59f08c72c3d8cca2e18a4322791fd8b85da1b744a3b55718a0995c42fd13e67a6bf56d90dd0b93965cfd2bf2a9f519a4976f97bffd5620c77df50c8e16f43c130be1d141e8669e0c5fec20b09de2820969f0c1c8fd56a287183a431cbe0f236e2ab0b31298f44fe6a4f3b00a423134db5401084cf825e1712beb998c2766ff4e94f62daea89091093343b684154185d8751a8b0408b7b3b67a7ca64f0b17f0d11d60c8d6160948f09a7c39ae17e580edbe71ac500bf1585ae80eecd86c334e551756ad8a1a6588e9ed315a3cd88380effc5751ed448dda7ffd426a7fcbe488f57fc900e5c50cbaf36df64e943a9b2d17643b8bce34f730d06bc3c6603ccf13d4053a9127058433514b081f6d7e7b2dd20d653f3ac64f8da442b0f8e3e69791400ab667153ac6279663070aad353e5fb0b1d5006f41d78dc2d9646420cef9e55080112538004eb10975677cab1d56bfaeed2ee9680cd8edc9be87b14cf5014c46ec33b6e279e7d16132d396648f2fce87e42b072bab826351605885e05542c787d65c9e1bf66a31e3c796fdf4f48a7b05b5f66be510f7cdd8a35ee84219f3c9f338205c2588ac6e91df1a38896a8dddb2a4f9f665e94c94f7b01dbe1ed7063dd2b565c0f63e6029faa1b5074b49f26b68685a4a6268292a01c7989f9b790a538f18fd1f14d30554161f540aeebb1767e3cc68de35d3e024b4d07a382a42bd81d5d3278947fe13244fcd087f6ebab0f9ae22cf090480279b8bc5b112994a54625add85b947e96dfe42e4ea3834350efa5e3548c9b5240a11484cf84ce175483c8bd78fb47c050e97c6a89ae67fda0da9e54219b3a52ad4a99b991cd4eb5e5fd0199f79a1ac40d97bce5402a92a6bcdb9a9e7a3775a97d1ff71fb8f15937775a9397d51bbe5363f18c04f8c4a2ed56fe75ef76d1b9c721631aed9d42513e9319e87e78738544bae042cc4c40e86249cfc32e4fae85a7b2b3486cc2337f6998efc0762570c8e59383339eb6127014f0ce192d4beb2b81b20d155e53b412fb24941005e9609f2f2fa335e45"}, 0x30b, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x280000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) 7.583193426s ago: executing program 1 (id=1033): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000040)) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$isdn(0x22, 0x3, 0x3) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x66a0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1c) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0x0, 0x0}, 0x10) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) unshare(0x72040e80) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x181000) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) 7.359403347s ago: executing program 1 (id=1036): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) pipe2(&(0x7f0000000240), 0x84000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x3, 0x3a) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x4e22, 0x3ff, @mcast1, 0x40}, 0xffffffffffffffff, {[0x1, 0x10001, 0x23f, 0x7fff8000, 0x4, 0x8e, 0x4, 0x1]}}, 0x5c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) landlock_restrict_self(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) 7.150226282s ago: executing program 4 (id=1037): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r4, 0x0, &(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f0000000180)={0x0, 0x0, 0x100fe}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) 6.526511565s ago: executing program 0 (id=1038): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 6.387286478s ago: executing program 1 (id=1040): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="16b68c7428fc6fd223bc9274bce025247ef75d4fbd11472066a27257bec38f0125f833925281325dc7cc820255ec2e5e6922c3e78b65b5dbe617b8b1a9a804c38cc81944615a3d91b3b10409663aba9d6ec9975085e622f1fc171e5b0dd4a0780fe3555a74226d2959bada3fc82d7eff8feee5dc9922a340aac0c3e0bd5be5ef0b356ef5475aa2c9099514bc9a37522095ab134099866632ed80ab35b335c13074872b53d5416d4744888511365e7610325ffc614817a69b04ae67e8e0f25811", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0xa54a9d76e5e2e84, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xff73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000180)="86"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c0002800800014000000004"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="14", 0x1}], 0x1}, 0x0) 6.084811525s ago: executing program 1 (id=1041): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000000)=""/44, &(0x7f0000000180)=0x2c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000065a000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000339000/0x3000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x328, 0x1, 0x32314247, 0x7, 0x7, [{0xd, 0x4}, {0xfffffffe, 0x7}, {0x0, 0x6}, {0x8, 0x844}, {0x1, 0x4}, {0x6, 0x5}, {0xfffffff9, 0x40}, {0x3, 0x2ba}], 0x9, 0x7, 0x1, 0x0, 0x1}}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@hyper, 0x1}, @hyper, 0x0, 0x7, 0x7, 0x8, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7a5, &(0x7f0000000140)={{@host, 0x25}, 0x1}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000028c0)=""/4097, 0x1001) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 5.897942428s ago: executing program 3 (id=1042): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000240)}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x855e1aa1410e3744, 0x97052, r1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@setneightbl={0x0, 0x43, 0x400, 0x70bd2b, 0x25dfdbfb, {0xd}, [@NDTA_PARMS={0x0, 0x6, 0x0, 0x1, [@NDTPA_GC_STALETIME={0x0, 0x6, 0x3}, @NDTPA_BASE_REACHABLE_TIME={0x0, 0x4, 0x4}]}, @NDTA_NAME={0x0, 0x1, '-(\x00'}, @NDTA_THRESH2={0x0, 0x3, 0x72d6}, @NDTA_PARMS, @NDTA_THRESH3={0x0, 0x4, 0x2}, @NDTA_NAME={0x0, 0x1, '\x00'}, @NDTA_GC_INTERVAL={0x0, 0x8, 0x1}, @NDTA_PARMS={0x0, 0x6, 0x0, 0x1, [@NDTPA_PROXY_DELAY, @NDTPA_PROXY_QLEN={0x0, 0xe, 0x1}, @NDTPA_APP_PROBES={0x0, 0x9, 0x3}, @NDTPA_LOCKTIME={0x0, 0xf, 0x1c7c}]}, @NDTA_THRESH2={0x0, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24018800}, 0x4048040) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xaa, "2874d3a7fe5386eae6b356b80db06c210a62a8a497a0caf19fb7ac2e50c0f9434629a6fff4b67f92176f374c1d1e7bc1c5698cb8cdff62c477f56a3be0df9aa958fc8d94d61ee502953945ae9c9bcd92b3a15a9a3ea07c2b7146f59b229abb0e84f6a3a1f7d2cb0e78fd8ef1434b78a69567e257df1f19ac922b623b731f321167adb8ca01eef212c924b1679990a0a0ef3b4ddbf23a5830889c94960c4612ec3a6e32c873b7152be841"}, &(0x7f0000000040)=0xb2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={r3, @in6={{0xa, 0x4e24, 0x3, @loopback, 0xb3}}, 0xff, 0xf8c}, 0x90) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0, 0x43}], 0x1, 0x74, 0x0, 0xfffffcda) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000008c04"]) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x6, 0xa9, "31f68feed4b9c7e96df7aa2a1408053091b7b58d79f2d8730136dc4b29edf2b0c256e1d350e13d81aea334b3f89d640e5232e453a069409faf7b8c8d84729c54c48e39e5d040ee326e5b51322ad6bd5f7bbe2b6f5e05041c40292701bdc2bb016cbc11ea4ac6b47abfda3bf39db29648c9ceeae72a14e453802d9283c13e46176c96dd31b819860f12cef894799991b4f0e5c2e33259a17299a8029203dfc80737af30677fcdf8c5a4"}, 0xb1) 5.851546525s ago: executing program 0 (id=1043): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0xf, 0x28, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x40, 0x8, 0x2, "2bec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x0, 0x29, 0x30, {0x30, 0x21, "bb88c3c3b2c9e54f8249abc8af8c7602e3d4268e6c67213803ef1e3fdc87273ec73de00069becb7cce6f235dd355"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="4975215ff198fdf82fe496c798"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0xbdb}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x20, 0x0, 0x5d, "64381e78fd99c5fc2ebde4befd1f7103e120fecf2f7db74d942e717dc9b25776d052d617e79536fff6b68ae0c5c3218cd82ad4d68c4d773bd168ec454c5c39732ce6af45f778aece47b2551e2b57f45fa5d0c204a23a3dfb7d67711bf4"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x1, 0x40, "f3d07826a430fa95e58e58049092a091e7d0e4fffa74c432f03b18bfc753b4b6e8fc0d8456846d73f9e986d45465dce5969104c3e07a42488c288a9c28d5bd07"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x8}}) 5.595635341s ago: executing program 4 (id=1044): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) unshare(0x400) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) fallocate(r2, 0x10, 0xfffffffffffff351, 0x20000000000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) msgsnd(0x0, &(0x7f00000017c0)={0x3, "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"}, 0x30b, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x280000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) 5.534087409s ago: executing program 2 (id=1045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x9, &(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) pipe2(0x0, 0x4000) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) bind$ax25(r0, &(0x7f0000000480)={{0x3, @default, 0x21}, [@null, @default, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000001040), 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x2001, &(0x7f0000000180)={0x0, 0x3938700}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) futex_waitv(&(0x7f0000000b00)=[{0x5, &(0x7f0000000040)=0x6, 0x82}, {0x3ff, &(0x7f0000000200)=0x2, 0x82}, {0x81, &(0x7f0000000240)=0x9, 0x2}, {0x10000, &(0x7f0000000280)=0x19, 0x2}, {0x9, &(0x7f0000000340)=0x8000, 0x82}, {0xe2, &(0x7f0000000400)=0xfffffffffffff045, 0x82}, {0xffffffffffffffc0, &(0x7f0000000440)=0x3, 0x82}, {0x5c09, &(0x7f0000000480)=0x793}, {0xe, &(0x7f00000004c0)=0x9, 0x82}, {0x5, &(0x7f0000000500)=0x86, 0x2}, {0x4, &(0x7f0000000540)=0x7, 0x82}, {0x9, &(0x7f0000000580)=0xfff, 0x2}, {0x3, &(0x7f00000005c0)=0x9a, 0x80}, {0x6, &(0x7f0000000600)=0xffffffff}, {0x6, &(0x7f0000000640)=0x6, 0x2}, {0x7ff, &(0x7f0000000680)=0xfffffffffffffffb, 0x2}, {0x8, &(0x7f00000006c0)=0xd, 0x2}, {0x3, &(0x7f0000000700)=0x5}, {0x6, &(0x7f0000000740)=0x3, 0x82}, {0x4, &(0x7f0000000780)=0x6, 0x106}, {0x8000, &(0x7f00000007c0)=0x800, 0x82}, {0x0, &(0x7f0000000840)=0x7, 0x82}, {0x4, &(0x7f0000000880)=0x2, 0x2}, {0x4, &(0x7f00000008c0)=0x5, 0x82}, {0x1, &(0x7f0000000900)=0x1, 0x82}, {0xffffffffffffffff, &(0x7f0000000940)=0x7fffffffffffffff, 0x2}, {0x4, &(0x7f0000000980), 0x2}, {0x9, &(0x7f00000009c0)=0x3, 0x82}, {0x100, &(0x7f0000000a00)=0xd1b, 0x2}, {0x2, &(0x7f0000000a40)=0xb899, 0x82}, {0x0, &(0x7f0000000a80)=0x3, 0x2}, {0x1, &(0x7f0000000ac0)=0x4, 0x2}], 0x20, 0x0, &(0x7f0000000e40)={0x77359400}, 0x1) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe2(&(0x7f00000000c0), 0x800) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$netrom(0xffffffffffffffff, &(0x7f0000000e80)="a96e95c992fd11924157f6f166b64dbac60c225672e3acc07e2fb63c54a0dea94a60f8c9815aa5a9f2bb1602be8ce460c9c562dd06630e697ee652d6ee6c416d0eae01c5bc33b61cd6fe4babf45911ec4d861cabbb2d70b47d68496ebd1ae5b428f750159fa48dc06b0755", 0x6b, 0xc800, &(0x7f0000000f00)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 5.503641447s ago: executing program 3 (id=1046): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000440)="9f870afe3c1c6c10e8151d5199ab11e66b4e0de2f79ac8c65d6356e0a3c9b44227eeccf8cb8f41714283537855459f278b4c40ffbbb0276601e31659ed38b92295a32b9176cdd102befb3f850a53dff73233018be37d1b733f846dfb90a13e6d996c5e5c5daff386dab026dde5d4a1dd8cce432f6d176ce09c154074b59b4d4ca3d8d9a1e17163e674bf94a39f7cabcc32c7d51acf426a0d88b42ebee7ad532c08b274e5424e09d9", 0x0, &(0x7f0000000500)="5765525c5b192f2cd7170943adc7ff1ccd9237881a0aef4fb8cae2a2e948635893ec14ba14fc20c3f06ab2c209aad8ff0b3e1d575480cb8157d8742521a64f8d9bf38db5f70d6b0d1a1ed9fb556a6a612e248e79d6cfcf5651e44fa58e04f9a4a9491766b76275ebb1558aa495e421360b7458c438ecb7ae1a3f39791441eb1c24c913262bdffc37ab822d957e35b4a1be54a88aa9aa7b5d5d74f1c687ea0223ecda2aabb9122d0c1529933e987e7d7d07d411c8aa43f2", &(0x7f0000000680)="972bd846362b299efc0d8bf9e57d27320000fedfd727f3d9dd64f7b91eee4a42b28ef7e8e6cf076bbb0c4169ebc6e94684b4f09e9acb08b34fd0e0f975f2c66965ed95dc5654ce53386ba23912f846ae18ba5f22ccec65edd84e9d", 0x9f46, r1}, 0x38) unshare(0x400) io_uring_enter(r2, 0x351e, 0x483, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) msgsnd(0x0, &(0x7f00000017c0)={0x3, "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"}, 0x30b, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x280000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) 5.136962707s ago: executing program 2 (id=1047): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000300)) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x8000000, 0x900900, 0x3}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 4.511411008s ago: executing program 2 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000003c0)) 4.036484325s ago: executing program 4 (id=1049): openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x5380, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000019140)=ANY=[@ANYBLOB="180000411685e8e61ffd74000000000000000000090000729c120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000200), 0x84000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x32, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000019100)={'bridge0\x00', @random}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0xd) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000880)={0x2020}, 0x2020) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close_range(r4, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000190c0), 0x181000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000850017bcc0e3f820003f000000000000000000b028fec719000000000084180000000040c9cc67"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0xfffffffffffffd33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 4.008127725s ago: executing program 1 (id=1050): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000000)=""/44, &(0x7f0000000180)=0x2c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000065a000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000339000/0x3000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x328, 0x1, 0x32314247, 0x7, 0x7, [{0xd, 0x4}, {0xfffffffe, 0x7}, {0x0, 0x6}, {0x8, 0x844}, {0x1, 0x4}, {0x6, 0x5}, {0xfffffff9, 0x40}, {0x3, 0x2ba}], 0x9, 0x7, 0x1, 0x0, 0x1}}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@hyper, 0x1}, @hyper, 0x0, 0x7, 0x7, 0x8, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7a5, &(0x7f0000000140)={{@host, 0x25}, 0x1}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 3.572133021s ago: executing program 3 (id=1051): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r9, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000040)={0x48, 0x1, r11}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000300)={0x10, 0x1, r11}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = open(0x0, 0x400, 0x43) mknodat$loop(r12, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) 3.419551643s ago: executing program 2 (id=1052): pipe2$9p(0x0, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) bind$ax25(r0, 0x0, 0x0) pipe2(&(0x7f0000001040), 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) futex_waitv(&(0x7f0000000b00)=[{0x5, &(0x7f0000000040)=0x6, 0x82}, {0x3ff, &(0x7f0000000200)=0x2, 0x82}, {0x81, &(0x7f0000000240)=0x9, 0x2}, {0xe2, 0x0, 0x82}, {0xffffffffffffffc0, &(0x7f0000000440)=0x3, 0x82}, {0x5c09, 0x0}, {0xe, &(0x7f00000004c0)=0x9, 0x82}, {0x5, &(0x7f0000000500)=0x86, 0x2}, {0x4, &(0x7f0000000540)=0x7, 0x82}, {0x9, &(0x7f0000000580)=0xfff, 0x2}, {0x3, &(0x7f00000005c0)=0x9a, 0x80}, {0x6, &(0x7f0000000600)=0xffffffff}, {0x6, &(0x7f0000000640)=0x6, 0x2}, {0x7ff, &(0x7f0000000680)=0xfffffffffffffffb, 0x2}, {0x8, &(0x7f00000006c0)=0xd, 0x2}, {0x3, &(0x7f0000000700)=0x5}, {0x4, &(0x7f0000000780)=0x6, 0x106}, {0x8000, &(0x7f00000007c0)=0x800, 0x82}, {0x3, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x1, &(0x7f0000000900)=0x1, 0x82}, {0xffffffffffffffff, &(0x7f0000000940)=0x7fffffffffffffff, 0x2}, {0x4, &(0x7f0000000980), 0x2}, {0x9, &(0x7f00000009c0)=0x3, 0x82}, {0x100, &(0x7f0000000a00)=0xd1b, 0x2}, {0x2, &(0x7f0000000a40)=0xb899, 0x82}, {0x0, &(0x7f0000000a80)=0x3, 0x2}, {0x1, &(0x7f0000000ac0)=0x4, 0x2}], 0x1c, 0x0, &(0x7f0000000e40)={0x77359400}, 0x1) 2.495681029s ago: executing program 3 (id=1053): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 2.487984104s ago: executing program 0 (id=1054): syz_open_dev$dri(0x0, 0x2, 0x600000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0xa) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x101100, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8341, 0x0) memfd_secret(0x0) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) 1.985836704s ago: executing program 2 (id=1055): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x14000004) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00W\x00\x00\x00\b'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000100)=0xd2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a80)={r6, r5, 0x5, 0x0, @void}, 0x10) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.83303467s ago: executing program 3 (id=1056): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@FILEID_INO32_GEN={0x8, 0x1, {0x0, 0x5}}, &(0x7f0000000280), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x20001}, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x6}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r9}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r9, r8}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) 1.302234516s ago: executing program 4 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x11, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x40, 0x700, 0x3, 0x10, {{0xa, 0x4, 0x1, 0x2, 0x28, 0x66, 0x3ff, 0x3, 0x0, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0x14, 0x1d, 0x0, 0x0, [0xf8d, 0x4, 0x5, 0x6]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=@setlink={0x54, 0x13, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x0, 0x18030}, [@IFLA_PORT_SELF={0x34, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'devlink\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "da0793dd59d17d30480b7a19bca9422e"}, @IFLA_PORT_VF={0x8, 0x1, 0x7fffffff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x80c0) 632.048939ms ago: executing program 1 (id=1058): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') pread64(r0, &(0x7f0000000180)=""/121, 0xfdcd, 0x101) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5, 0x2, 0x2}}}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x26, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f26000320"], 0x5, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x6568f4b843a19d03}}, {0x23, &(0x7f0000000200)=@string={0x23, 0x3, "27b9176f46b86268832907bb534a61c15b4c265087b633e1972450d66dad302199"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x401}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "7509cf0085ee9a2881d7db80706724951e2f801af49ed5b8455da4333034a117b8fe98dd053ae6ed737574b33608afffb540f55164e42c1ccd4277c7d096badb10141aa39540b0f87050a5587a15e427e3e18ebbf4f813d84b6617f8d24697d5a8556aca1d35f0380bfb19c02fe1ba4d905d3c1badcef5134c8d4474b49cf3a423b792626b29910842c3d2f5a28408213a853af6211ad7605ff44a5274a50f8274794cf6"}}]}) (async) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5, 0x2, 0x2}}}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x26, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f26000320"], 0x5, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x6568f4b843a19d03}}, {0x23, &(0x7f0000000200)=@string={0x23, 0x3, "27b9176f46b86268832907bb534a61c15b4c265087b633e1972450d66dad302199"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x401}}, {0xa6, &(0x7f0000000300)=@string={0xa6, 0x3, "7509cf0085ee9a2881d7db80706724951e2f801af49ed5b8455da4333034a117b8fe98dd053ae6ed737574b33608afffb540f55164e42c1ccd4277c7d096badb10141aa39540b0f87050a5587a15e427e3e18ebbf4f813d84b6617f8d24697d5a8556aca1d35f0380bfb19c02fe1ba4d905d3c1badcef5134c8d4474b49cf3a423b792626b29910842c3d2f5a28408213a853af6211ad7605ff44a5274a50f8274794cf6"}}]}) 389.288167ms ago: executing program 3 (id=1059): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x2471, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) 357.324441ms ago: executing program 4 (id=1060): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) unshare(0x400) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) fallocate(r2, 0x10, 0xfffffffffffff351, 0x20000000000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) msgsnd(0x0, &(0x7f00000017c0)={0x3, "ccc038e6c1811bb93fb0fff199a17ff1d35bea8fa76c6fb3427a59f08c72c3d8cca2e18a4322791fd8b85da1b744a3b55718a0995c42fd13e67a6bf56d90dd0b93965cfd2bf2a9f519a4976f97bffd5620c77df50c8e16f43c130be1d141e8669e0c5fec20b09de2820969f0c1c8fd56a287183a431cbe0f236e2ab0b31298f44fe6a4f3b00a423134db5401084cf825e1712beb998c2766ff4e94f62daea89091093343b684154185d8751a8b0408b7b3b67a7ca64f0b17f0d11d60c8d6160948f09a7c39ae17e580edbe71ac500bf1585ae80eecd86c334e551756ad8a1a6588e9ed315a3cd88380effc5751ed448dda7ffd426a7fcbe488f57fc900e5c50cbaf36df64e943a9b2d17643b8bce34f730d06bc3c6603ccf13d4053a9127058433514b081f6d7e7b2dd20d653f3ac64f8da442b0f8e3e69791400ab667153ac6279663070aad353e5fb0b1d5006f41d78dc2d9646420cef9e55080112538004eb10975677cab1d56bfaeed2ee9680cd8edc9be87b14cf5014c46ec33b6e279e7d16132d396648f2fce87e42b072bab826351605885e05542c787d65c9e1bf66a31e3c796fdf4f48a7b05b5f66be510f7cdd8a35ee84219f3c9f338205c2588ac6e91df1a38896a8dddb2a4f9f665e94c94f7b01dbe1ed7063dd2b565c0f63e6029faa1b5074b49f26b68685a4a6268292a01c7989f9b790a538f18fd1f14d30554161f540aeebb1767e3cc68de35d3e024b4d07a382a42bd81d5d3278947fe13244fcd087f6ebab0f9ae22cf090480279b8bc5b112994a54625add85b947e96dfe42e4ea3834350efa5e3548c9b5240a11484cf84ce175483c8bd78fb47c050e97c6a89ae67fda0da9e54219b3a52ad4a99b991cd4eb5e5fd0199f79a1ac40d97bce5402a92a6bcdb9a9e7a3775a97d1ff71fb8f15937775a9397d51bbe5363f18c04f8c4a2ed56fe75ef76d1b9c721631aed9d42513e9319e87e78738544bae042cc4c40e86249cfc32e4fae85a7b2b3486cc2337f6998efc0762570c8e59383339eb6127014f0ce192d4beb2b81b20d155e53b412fb24941005e9609f2f2fa335e45"}, 0x30b, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x280000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) 266.860762ms ago: executing program 0 (id=1061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000000)=""/44, &(0x7f0000000180)=0x2c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000065a000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000339000/0x3000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x328, 0x1, 0x32314247, 0x7, 0x7, [{0xd, 0x4}, {0xfffffffe, 0x7}, {0x0, 0x6}, {0x8, 0x844}, {0x1, 0x4}, {0x6, 0x5}, {0xfffffff9, 0x40}, {0x3, 0x2ba}], 0x9, 0x7, 0x1, 0x0, 0x1}}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@hyper, 0x1}, @hyper, 0x0, 0x7, 0x7, 0x8, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7a5, &(0x7f0000000140)={{@host, 0x25}, 0x1}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) getdents64(r5, &(0x7f00000028c0)=""/4097, 0x1001) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 0s ago: executing program 2 (id=1062): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000080)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) kernel console output (not intermixed with test programs): TM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.633926][ T7156] IPv6: NLM_F_CREATE should be set when creating new route [ 171.641268][ T7156] IPv6: NLM_F_CREATE should be set when creating new route [ 171.648470][ T7156] IPv6: NLM_F_CREATE should be set when creating new route [ 171.859161][ T30] audit: type=1400 audit(1760395390.275:450): avc: denied { open } for pid=7151 comm="syz.4.282" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 171.882575][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.890320][ T5884] usb 1-1: config 0 descriptor?? [ 171.971034][ T30] audit: type=1400 audit(1760395390.285:451): avc: denied { ioctl } for pid=7151 comm="syz.4.282" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 171.971109][ T30] audit: type=1400 audit(1760395390.675:452): avc: denied { shutdown } for pid=7134 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 172.109053][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.220461][ T7135] capability: warning: `syz.0.277' uses 32-bit capabilities (legacy support in use) [ 172.265963][ T30] audit: type=1400 audit(1760395390.935:453): avc: denied { mount } for pid=7133 comm="syz.0.277" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.388975][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 172.446351][ T9] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 172.477312][ T9] usb 5-1: config 0 has no interface number 0 [ 172.639281][ T5884] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 172.664470][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 172.718667][ T30] audit: type=1400 audit(1760395391.435:454): avc: denied { read write } for pid=7133 comm="syz.0.277" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 172.720496][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.786618][ T5884] usb 1-1: USB disconnect, device number 14 [ 172.878372][ T30] audit: type=1400 audit(1760395391.435:455): avc: denied { open } for pid=7133 comm="syz.0.277" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 172.921701][ T7165] fido_id[7165]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 173.048223][ T9] usb 5-1: Product: syz [ 173.057223][ T9] usb 5-1: Manufacturer: syz [ 173.066733][ T9] usb 5-1: SerialNumber: syz [ 173.078507][ T9] usb 5-1: config 0 descriptor?? [ 173.359258][ T9] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 173.366575][ T9] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 173.399876][ T9] uvcvideo 5-1:0.31: Failed to create links for entity 5 [ 173.408134][ T9] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 173.422004][ T30] audit: type=1400 audit(1760395392.145:456): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 173.509146][ T9] usb 5-1: USB disconnect, device number 7 [ 174.491983][ T7176] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 174.612069][ T7176] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 174.707484][ T5811] Bluetooth: hci2: ACL packet for unknown connection handle 1247 [ 177.013824][ T30] audit: type=1400 audit(1760395395.725:457): avc: denied { setopt } for pid=7200 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 177.128187][ T7201] binder: 7200:7201 ioctl c0306201 200000000280 returned -14 [ 177.135797][ T30] audit: type=1400 audit(1760395395.795:458): avc: denied { write } for pid=7200 comm="syz.4.293" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.429135][ T30] audit: type=1400 audit(1760395396.145:459): avc: denied { read } for pid=7209 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 177.804258][ T30] audit: type=1400 audit(1760395396.525:460): avc: denied { create } for pid=7216 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.912947][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 177.932161][ T30] audit: type=1400 audit(1760395396.655:461): avc: denied { connect } for pid=7216 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 178.156687][ T7221] FAULT_INJECTION: forcing a failure. [ 178.156687][ T7221] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 178.172171][ T7221] CPU: 0 UID: 0 PID: 7221 Comm: syz.4.298 Not tainted syzkaller #0 PREEMPT(full) [ 178.172202][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.172213][ T7221] Call Trace: [ 178.172219][ T7221] [ 178.172226][ T7221] dump_stack_lvl+0x16c/0x1f0 [ 178.172254][ T7221] should_fail_ex+0x512/0x640 [ 178.172279][ T7221] should_fail_alloc_page+0xe7/0x130 [ 178.172307][ T7221] prepare_alloc_pages+0x3c2/0x610 [ 178.172337][ T7221] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 178.172361][ T7221] ? __lock_acquire+0xb8a/0x1c90 [ 178.172393][ T7221] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 178.172418][ T7221] ? __pfx___might_resched+0x10/0x10 [ 178.172439][ T7221] ? process_measurement+0x4a6/0x23e0 [ 178.172463][ T7221] ? down_write+0x14d/0x200 [ 178.172492][ T7221] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.172524][ T7221] ? policy_nodemask+0xea/0x4e0 [ 178.172552][ T7221] alloc_pages_mpol+0x1fb/0x550 [ 178.172577][ T7221] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 178.172610][ T7221] folio_alloc_mpol_noprof+0x36/0x2f0 [ 178.172629][ T7221] vma_alloc_folio_noprof+0xed/0x1e0 [ 178.172646][ T7221] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 178.172671][ T7221] do_pte_missing+0x2202/0x3ba0 [ 178.172690][ T7221] ? find_held_lock+0x2b/0x80 [ 178.172713][ T7221] __handle_mm_fault+0x1556/0x2aa0 [ 178.172734][ T7221] ? mt_find+0x3e2/0xa20 [ 178.172757][ T7221] ? __pfx___handle_mm_fault+0x10/0x10 [ 178.172773][ T7221] ? __pfx_mt_find+0x10/0x10 [ 178.172807][ T7221] ? find_vma+0xbf/0x140 [ 178.172829][ T7221] ? __pfx_find_vma+0x10/0x10 [ 178.172854][ T7221] handle_mm_fault+0x589/0xd10 [ 178.172872][ T7221] ? __pkru_allows_pkey+0x11/0xb0 [ 178.172897][ T7221] do_user_addr_fault+0x7a6/0x1370 [ 178.172922][ T7221] ? rcu_is_watching+0x12/0xc0 [ 178.172943][ T7221] exc_page_fault+0x64/0xc0 [ 178.172964][ T7221] asm_exc_page_fault+0x26/0x30 [ 178.172981][ T7221] RIP: 0010:__put_user_1+0xd/0x20 [ 178.173000][ T7221] Code: 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <88> 01 31 c9 0f 01 ca e9 97 83 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 178.173018][ T7221] RSP: 0018:ffffc9001a287ce0 EFLAGS: 00050202 [ 178.173033][ T7221] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000001140 [ 178.173049][ T7221] RDX: ffff88802a232480 RSI: ffffffff8a665c99 RDI: ffffffff8bf1e2c0 [ 178.173060][ T7221] RBP: 0000000000000000 R08: ea980ee87879ddea R09: ffffffff968fc9f8 [ 178.173071][ T7221] R10: 0000000000000008 R11: 0000000000000001 R12: ffff888056a76000 [ 178.173081][ T7221] R13: 1ffff92003450f9f R14: ffffc9001a287d18 R15: 0000000000000000 [ 178.173101][ T7221] ? hci_sock_getsockopt+0x3f9/0x5d0 [ 178.173124][ T7221] hci_sock_getsockopt+0x388/0x5d0 [ 178.173144][ T7221] ? __pfx_hci_sock_getsockopt+0x10/0x10 [ 178.173170][ T7221] ? __pfx_hci_sock_getsockopt+0x10/0x10 [ 178.173188][ T7221] do_sock_getsockopt+0x34d/0x440 [ 178.173214][ T7221] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 178.173236][ T7221] ? __fget_files+0x204/0x3c0 [ 178.173272][ T7221] __sys_getsockopt+0x12f/0x260 [ 178.173297][ T7221] __x64_sys_getsockopt+0xbd/0x160 [ 178.173315][ T7221] ? do_syscall_64+0x91/0xfa0 [ 178.173334][ T7221] ? lockdep_hardirqs_on+0x7c/0x110 [ 178.173353][ T7221] do_syscall_64+0xcd/0xfa0 [ 178.173374][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.173391][ T7221] RIP: 0033:0x7f4a1258eec9 [ 178.173405][ T7221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.173421][ T7221] RSP: 002b:00007f4a13427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 178.173436][ T7221] RAX: ffffffffffffffda RBX: 00007f4a127e5fa0 RCX: 00007f4a1258eec9 [ 178.173447][ T7221] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 178.173456][ T7221] RBP: 00007f4a13427090 R08: 0000200000000180 R09: 0000000000000000 [ 178.173467][ T7221] R10: 0000200000001140 R11: 0000000000000246 R12: 0000000000000001 [ 178.173477][ T7221] R13: 00007f4a127e6038 R14: 00007f4a127e5fa0 R15: 00007ffe19a3b838 [ 178.173502][ T7221] [ 178.955145][ T30] audit: type=1400 audit(1760395397.675:462): avc: denied { ioctl } for pid=7223 comm="syz.4.299" path="socket:[14493]" dev="sockfs" ino=14493 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.117447][ T30] audit: type=1400 audit(1760395397.835:463): avc: denied { load_policy } for pid=7230 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 179.147463][ T7235] SELinux: failed to load policy [ 179.624726][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'. [ 179.720287][ T30] audit: type=1400 audit(1760395398.445:464): avc: denied { read write } for pid=7224 comm="syz.0.300" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 179.802281][ T30] audit: type=1400 audit(1760395398.445:465): avc: denied { open } for pid=7224 comm="syz.0.300" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 179.960551][ T30] audit: type=1326 audit(1760395398.505:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0bd8eec9 code=0x7fc00000 [ 179.985880][ T5811] Bluetooth: hci3: command tx timeout [ 180.437519][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.307'. [ 180.446565][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.307'. [ 182.277649][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 182.490759][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.556659][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.614664][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 182.631167][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.631195][ T9] usb 3-1: Product: syz [ 182.631210][ T9] usb 3-1: Manufacturer: syz [ 182.631225][ T9] usb 3-1: SerialNumber: syz [ 182.640957][ T9] usb 3-1: config 0 descriptor?? [ 183.362865][ T7296] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.319'. [ 184.892998][ T30] audit: type=1400 audit(1760395403.615:467): avc: denied { getopt } for pid=7318 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 184.932929][ T7319] hpfs: Bad magic ... probably not HPFS [ 184.967147][ T9] usb 3-1: USB disconnect, device number 6 [ 185.018959][ T5862] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 185.094097][ T7321] hpfs: Bad magic ... probably not HPFS [ 185.189460][ T7323] SELinux: failed to load policy [ 185.190814][ T5862] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.190852][ T5862] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.190887][ T5862] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.190909][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.206437][ T7313] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 185.231239][ T5862] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.263749][ T7323] loop9: detected capacity change from 0 to 7 [ 185.264940][ T7323] Dev loop9: unable to read RDB block 7 [ 185.264981][ T7323] loop9: unable to read partition table [ 185.265137][ T7323] loop9: partition table beyond EOD, truncated [ 185.265155][ T7323] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 185.268658][ T30] audit: type=1400 audit(1760395403.985:468): avc: denied { create } for pid=7325 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 185.288486][ T30] audit: type=1400 audit(1760395404.005:469): avc: denied { checkpoint_restore } for pid=7325 comm="syz.2.329" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.360796][ T30] audit: type=1400 audit(1760395404.085:470): avc: denied { create } for pid=7322 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 185.361487][ T30] audit: type=1400 audit(1760395404.085:471): avc: denied { getopt } for pid=7322 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 185.421721][ T30] audit: type=1400 audit(1760395404.145:472): avc: denied { write } for pid=7325 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.422857][ T30] audit: type=1400 audit(1760395404.145:473): avc: denied { name_connect } for pid=7325 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 185.811977][ T7337] random: crng reseeded on system resumption [ 185.816515][ T30] audit: type=1400 audit(1760395404.535:474): avc: denied { write } for pid=7325 comm="syz.2.329" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 185.816581][ T30] audit: type=1400 audit(1760395404.535:475): avc: denied { open } for pid=7325 comm="syz.2.329" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 185.838239][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.873703][ T7333] Restarting kernel threads ... [ 185.879499][ T7333] Done restarting kernel threads. [ 185.886180][ T30] audit: type=1400 audit(1760395404.595:476): avc: denied { ioctl } for pid=7325 comm="syz.2.329" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 185.887489][ T10] usb 4-1: USB disconnect, device number 6 [ 186.472444][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.605682][ T7344] lo speed is unknown, defaulting to 1000 [ 186.870801][ T7344] lo speed is unknown, defaulting to 1000 [ 186.916504][ T7349] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.333'. [ 187.069236][ T7344] lo speed is unknown, defaulting to 1000 [ 187.115644][ T7344] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 187.137230][ T7344] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 187.177984][ T7344] lo speed is unknown, defaulting to 1000 [ 187.195566][ T7344] lo speed is unknown, defaulting to 1000 [ 187.204865][ T7344] lo speed is unknown, defaulting to 1000 [ 187.211814][ T7344] lo speed is unknown, defaulting to 1000 [ 187.219718][ T7344] lo speed is unknown, defaulting to 1000 [ 188.405579][ T7366] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 188.542673][ T7366] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 188.634339][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 188.901595][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 188.913160][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.925961][ T9] usb 4-1: config 0 has no interface number 0 [ 188.932594][ T9] usb 4-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 188.944726][ T9] usb 4-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.959176][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 188.968227][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 188.996903][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.028312][ T9] usb 4-1: Product: syz [ 189.045510][ T9] usb 4-1: Manufacturer: syz [ 189.064031][ T9] usb 4-1: SerialNumber: syz [ 189.090667][ T9] usb 4-1: config 0 descriptor?? [ 189.133658][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 190.629663][ T7401] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.349'. [ 191.061032][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 191.061092][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 191.073256][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 191.073305][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 191.519082][ T55] usb 4-1: USB disconnect, device number 7 [ 191.707813][ T7407] hpfs: Bad magic ... probably not HPFS [ 191.712304][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 191.712320][ T30] audit: type=1400 audit(1760395410.425:479): avc: denied { read } for pid=7410 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.996664][ T7420] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.354'. [ 192.304150][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 193.156906][ T7435] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.168491][ T7435] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 194.108452][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.132725][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.604962][ T7459] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.364'. [ 195.513200][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 195.820901][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.366'. [ 195.869805][ T30] audit: type=1326 audit(1760395414.595:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.2.370" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f962a98eec9 code=0x0 [ 196.142692][ T7479] netlink: 'syz.0.368': attribute type 4 has an invalid length. [ 196.301825][ T7483] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.372'. [ 196.528994][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 196.829748][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 196.848995][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.879742][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.951721][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.974207][ T30] audit: type=1400 audit(1760395415.695:481): avc: denied { mount } for pid=7485 comm="syz.3.373" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 197.017234][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 197.027041][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 197.048677][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.086082][ T30] audit: type=1400 audit(1760395415.805:482): avc: denied { ioctl } for pid=7485 comm="syz.3.373" path="socket:[14928]" dev="sockfs" ino=14928 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.220678][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 197.238920][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 197.438948][ T9] usb 3-1: Manufacturer: syz [ 197.457545][ T9] usb 3-1: config 0 descriptor?? [ 197.730877][ T30] audit: type=1400 audit(1760395416.455:483): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 197.776954][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 198.138927][ T9] rc_core: IR keymap rc-hauppauge not found [ 198.149820][ T9] Registered IR keymap rc-empty [ 198.166632][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.198978][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.230376][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 198.268337][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 198.272120][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 198.500658][ T7524] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.381'. [ 198.531810][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.585745][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.660994][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.037061][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.089715][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.142351][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.168941][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.208990][ T910] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 199.281375][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.309451][ T7520] comedi comedi0: reset error (fatal) [ 199.359062][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.425476][ T910] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 199.459004][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.460645][ T910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.490561][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 199.510168][ T910] usb 1-1: config 0 has no interface number 0 [ 199.516722][ T910] usb 1-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 199.528881][ T910] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.542379][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 199.542759][ T910] usb 1-1: config 0 interface 41 has no altsetting 0 [ 199.675030][ T910] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 199.713004][ T910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.740579][ T910] usb 1-1: Product: syz [ 199.749273][ T910] usb 1-1: Manufacturer: syz [ 199.761904][ T910] usb 1-1: SerialNumber: syz [ 199.793175][ T910] usb 1-1: config 0 descriptor?? [ 199.856542][ T910] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 199.902230][ T7538] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 199.933568][ T7538] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 200.441614][ T910] usb 3-1: USB disconnect, device number 7 [ 201.198459][ T7553] nvme_fabrics: missing parameter 'transport=%s' [ 201.223060][ T7553] nvme_fabrics: missing parameter 'nqn=%s' [ 201.783189][ T7560] __vm_enough_memory: pid: 7560, comm: syz.2.391, bytes: 4503599627366400 not enough memory for the allocation [ 201.804389][ T5877] usb 1-1: USB disconnect, device number 15 [ 201.951680][ T7560] netem: incorrect ge model size [ 201.968149][ T7560] netem: change failed [ 202.171325][ T7570] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.395'. [ 202.408992][ T5877] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 203.435336][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 203.575230][ T5877] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 203.592311][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.614751][ T5877] usb 1-1: config 0 descriptor?? [ 204.455834][ T7596] netlink: 'syz.1.401': attribute type 4 has an invalid length. [ 206.589089][ T7615] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 206.596004][ T7615] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 206.607214][ T7615] vhci_hcd vhci_hcd.0: Device attached [ 206.662759][ T5877] usb 1-1: Cannot set autoneg [ 206.667667][ T5877] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 206.707937][ T30] audit: type=1800 audit(1760395425.425:484): pid=7615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.403" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 206.749223][ T5877] usb 1-1: USB disconnect, device number 16 [ 206.924483][ T5884] usb 40-1: SetAddress Request (2) to port 0 [ 206.996634][ T5884] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 207.700050][ T7628] bpf: Bad value for 'mode' [ 208.361668][ T7623] vhci_hcd: connection reset by peer [ 208.401732][ T7047] vhci_hcd: stop threads [ 208.407077][ T7047] vhci_hcd: release socket [ 208.458270][ T7047] vhci_hcd: disconnect device [ 209.158982][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 209.333310][ T7659] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.418'. [ 209.558903][ T5877] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 209.570092][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.581445][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 209.611590][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.658198][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.705523][ T7653] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 209.724065][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.736462][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.782064][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.806482][ T7661] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.419'. [ 209.836780][ T5877] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 209.914207][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.957649][ T5877] usb 2-1: config 0 descriptor?? [ 210.981555][ T5870] usb 1-1: USB disconnect, device number 17 [ 211.426200][ T7667] netlink: 'syz.4.421': attribute type 4 has an invalid length. [ 212.267647][ T5884] usb 40-1: device descriptor read/8, error -110 [ 212.345572][ T5877] usbhid 2-1:0.0: can't add hid device: -71 [ 212.431709][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 212.499366][ T5877] usb 2-1: USB disconnect, device number 6 [ 212.525042][ T30] audit: type=1400 audit(1760395431.245:485): avc: denied { read } for pid=7679 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.660634][ T5884] usb usb40-port1: attempt power cycle [ 213.729952][ T7695] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.428'. [ 213.916415][ T5884] usb usb40-port1: unable to enumerate USB device [ 214.277256][ T30] audit: type=1400 audit(1760395432.935:486): avc: denied { connect } for pid=7699 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 214.491807][ T5862] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 214.580746][ T7711] netlink: 'syz.0.432': attribute type 4 has an invalid length. [ 214.622577][ T55] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 214.670623][ T5862] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.812632][ T5862] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.831089][ T5862] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.858328][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.880466][ T55] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.896529][ T55] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.910993][ T55] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.922271][ T7702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.934419][ T5862] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.943530][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.980789][ T7710] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 215.030047][ T30] audit: type=1400 audit(1760395433.735:487): avc: denied { mount } for pid=7714 comm="syz.2.436" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 215.051831][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.055679][ T55] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.294058][ T30] audit: type=1400 audit(1760395434.885:488): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 216.552271][ T5877] usb 2-1: USB disconnect, device number 7 [ 216.831340][ T910] usb 4-1: USB disconnect, device number 8 [ 217.196218][ T7731] netlink: 'syz.0.439': attribute type 49 has an invalid length. [ 217.329201][ T30] audit: type=1400 audit(1760395436.045:489): avc: denied { read write } for pid=7730 comm="syz.0.439" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 217.505016][ T7743] netlink: 'syz.1.441': attribute type 4 has an invalid length. [ 217.633277][ T5877] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 217.668488][ T30] audit: type=1400 audit(1760395436.045:490): avc: denied { open } for pid=7730 comm="syz.0.439" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 217.830347][ T5877] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.861722][ T5877] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 217.991405][ T5877] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.061205][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.180543][ T7733] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 218.273979][ T5877] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.791146][ T7758] siw: device registration error -23 [ 218.909031][ T5862] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 218.943404][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 219.575822][ T5877] usb 5-1: USB disconnect, device number 8 [ 219.614952][ T6527] udevd[6527]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.740439][ T5862] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 219.750152][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.829408][ T7772] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 219.840545][ T7772] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 220.363618][ T5862] usb 1-1: config 0 descriptor?? [ 220.603630][ T7776] netlink: 'syz.3.449': attribute type 4 has an invalid length. [ 220.865747][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 221.208928][ T5877] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 221.411473][ T5877] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 221.463304][ T5877] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 221.568062][ T5877] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.585909][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 221.649094][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.741014][ T7782] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.773365][ T5877] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.293834][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 222.333729][ T5877] usb 4-1: USB disconnect, device number 9 [ 222.444236][ T6527] udevd[6527]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.032315][ T5862] usb 1-1: Cannot set autoneg [ 223.426404][ T5862] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 223.503640][ T5862] usb 1-1: USB disconnect, device number 18 [ 224.046893][ T7813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.461'. [ 224.047470][ T7813] syz_tun: entered allmulticast mode [ 224.048324][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.461'. [ 224.113848][ T30] audit: type=1400 audit(1760395442.825:491): avc: denied { getopt } for pid=7812 comm="syz.1.461" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.303632][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 227.309177][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 227.630356][ T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 227.673001][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.689426][ T30] audit: type=1400 audit(1760395446.415:492): avc: denied { create } for pid=7869 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.771713][ T10] usb 1-1: config 0 descriptor?? [ 227.783713][ T30] audit: type=1400 audit(1760395446.435:493): avc: denied { listen } for pid=7869 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.911602][ T30] audit: type=1400 audit(1760395446.445:494): avc: denied { ioctl } for pid=7869 comm="syz.2.475" path="socket:[16473]" dev="sockfs" ino=16473 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.936031][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.084395][ T30] audit: type=1400 audit(1760395446.805:495): avc: denied { read append } for pid=7878 comm="syz.4.478" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 228.148190][ T30] audit: type=1400 audit(1760395446.805:496): avc: denied { open } for pid=7878 comm="syz.4.478" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 229.467052][ T30] audit: type=1400 audit(1760395448.185:497): avc: denied { create } for pid=7897 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 229.499400][ T10] usb 1-1: Cannot set autoneg [ 229.511743][ T10] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 229.718910][ T10] usb 1-1: USB disconnect, device number 19 [ 230.131736][ T7912] __vm_enough_memory: pid: 7912, comm: syz.2.485, bytes: 4503599627366400 not enough memory for the allocation [ 230.345065][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 230.484787][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.508764][ T7917] netem: incorrect ge model size [ 230.993182][ T7917] netem: change failed [ 232.059198][ T910] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 232.210352][ T910] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.326049][ T910] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.422096][ T910] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.645434][ T7945] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.492'. [ 232.776594][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.788176][ T7933] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 232.790059][ T910] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.604699][ T5884] usb 1-1: USB disconnect, device number 20 [ 233.679555][ T30] audit: type=1400 audit(1760395452.405:498): avc: denied { setopt } for pid=7947 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.712897][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.493'. [ 233.721879][ T7948] netlink: 196 bytes leftover after parsing attributes in process `syz.1.493'. [ 233.731380][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.493'. [ 233.740881][ T7948] netlink: 196 bytes leftover after parsing attributes in process `syz.1.493'. [ 233.821404][ T30] audit: type=1400 audit(1760395452.435:499): avc: denied { lock } for pid=7947 comm="syz.1.493" path="socket:[16589]" dev="sockfs" ino=16589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.023274][ T55] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 234.350208][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.360315][ T55] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 234.369491][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.486007][ T7965] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 234.497184][ T7965] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 234.983509][ T55] usb 2-1: config 0 descriptor?? [ 234.998990][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 235.260826][ T24] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 235.306461][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.311392][ T24] usb 3-1: config 0 descriptor?? [ 236.368658][ T55] usbhid 2-1:0.0: can't add hid device: -71 [ 236.382419][ T55] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 236.443211][ T55] usb 2-1: USB disconnect, device number 8 [ 236.494696][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 236.597573][ T7989] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 237.267848][ T8000] netlink: 'syz.3.505': attribute type 4 has an invalid length. [ 238.069876][ T24] usb 3-1: Cannot set autoneg [ 238.076994][ T24] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 238.193546][ T24] usb 3-1: USB disconnect, device number 8 [ 238.521014][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'. [ 238.736771][ T8017] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[8017] [ 239.163030][ T8017] loop6: detected capacity change from 0 to 2560 [ 239.189931][ T8024] Failed to get privilege flags for destination (handle=0x2:0x25) [ 239.198957][ T30] audit: type=1400 audit(1760395457.875:500): avc: denied { block_suspend } for pid=8014 comm="syz.4.509" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.231592][ T8017] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.283644][ T8017] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.321768][ T8017] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.351637][ T8017] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.374371][ T8017] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.384772][ T8017] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.393009][ T8017] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.407134][ T8017] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.429084][ T30] audit: type=1400 audit(1760395458.145:501): avc: denied { append } for pid=8025 comm="syz.1.512" name="video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 239.471436][ T30] audit: type=1400 audit(1760395458.145:502): avc: denied { execute } for pid=8025 comm="syz.1.512" path="/105/cpu.stat" dev="tmpfs" ino=585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 239.498377][ T8017] ldm_validate_partition_table(): Disk read failed. [ 239.515336][ T8017] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.532335][ T8017] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.549332][ T8017] Dev loop6: unable to read RDB block 0 [ 239.569051][ T8017] loop6: unable to read partition table [ 239.580117][ T8017] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 239.826605][ T1098] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.883684][ T1098] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.907262][ T1098] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.007569][ T1098] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.768114][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 241.428922][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 241.610312][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.328932][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.339684][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.352795][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.362174][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.374506][ T10] usb 2-1: config 0 descriptor?? [ 242.635854][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 242.656320][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 242.696495][ T10] usb 2-1: USB disconnect, device number 9 [ 242.753468][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 242.786589][ T8064] netlink: 56 bytes leftover after parsing attributes in process `syz.2.522'. [ 242.808161][ T30] audit: type=1400 audit(1760395461.505:503): avc: denied { write } for pid=8061 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.888975][ T5870] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 242.933582][ T30] audit: type=1400 audit(1760395461.505:504): avc: denied { write } for pid=8061 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 242.995293][ T30] audit: type=1400 audit(1760395461.605:505): avc: denied { ioctl } for pid=8061 comm="syz.2.522" path="socket:[16753]" dev="sockfs" ino=16753 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 243.310542][ T5870] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 243.339010][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.351335][ T5870] usb 4-1: config 0 descriptor?? [ 245.293785][ T5870] usb 4-1: Cannot set autoneg [ 245.298695][ T5870] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 245.333681][ T5870] usb 4-1: USB disconnect, device number 10 [ 246.313259][ T8100] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.532'. [ 246.344342][ T8104] nvme_fabrics: unknown parameter or missing value 'i%' in ctrl creation request [ 246.767297][ T8111] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.534'. [ 247.057302][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 247.468994][ T5870] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 247.631100][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.688881][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.698669][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.735736][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 247.758887][ T5870] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.801262][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.833687][ T5870] usb 2-1: config 0 descriptor?? [ 248.316061][ T5870] usbhid 2-1:0.0: can't add hid device: -71 [ 248.408709][ T5870] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 248.640960][ T5870] usb 2-1: USB disconnect, device number 10 [ 248.967330][ T8152] siw: device registration error -23 [ 249.696258][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 249.767211][ T8162] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.548'. [ 250.712055][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'. [ 253.168353][ T5134] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 253.185868][ T8193] siw: device registration error -23 [ 253.493563][ T55] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 253.705513][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 253.751529][ T55] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.792907][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 253.848579][ T55] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 253.966785][ T55] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 254.032304][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.142739][ T8196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.166354][ T55] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 254.773668][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 254.852634][ T55] usb 5-1: USB disconnect, device number 9 [ 255.198765][ T8233] netlink: 'syz.3.567': attribute type 5 has an invalid length. [ 255.239249][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 255.585063][ T8239] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.569'. [ 255.624790][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.640786][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.811347][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 257.033939][ T8265] FAULT_INJECTION: forcing a failure. [ 257.033939][ T8265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.055474][ T8265] CPU: 1 UID: 0 PID: 8265 Comm: syz.0.575 Not tainted syzkaller #0 PREEMPT(full) [ 257.055499][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.055509][ T8265] Call Trace: [ 257.055515][ T8265] [ 257.055522][ T8265] dump_stack_lvl+0x16c/0x1f0 [ 257.055548][ T8265] should_fail_ex+0x512/0x640 [ 257.055572][ T8265] _copy_to_user+0x32/0xd0 [ 257.055595][ T8265] video_usercopy+0xf43/0x1720 [ 257.055622][ T8265] ? __pfx___video_do_ioctl+0x10/0x10 [ 257.055644][ T8265] ? selinux_kernel_read_file+0x50/0x130 [ 257.055667][ T8265] ? __pfx_video_usercopy+0x10/0x10 [ 257.055707][ T8265] v4l2_ioctl+0x1bd/0x250 [ 257.055728][ T8265] ? __pfx_v4l2_ioctl+0x10/0x10 [ 257.055757][ T8265] __x64_sys_ioctl+0x18e/0x210 [ 257.055781][ T8265] do_syscall_64+0xcd/0xfa0 [ 257.055802][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.055819][ T8265] RIP: 0033:0x7f5c2038eec9 [ 257.055832][ T8265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.055857][ T8265] RSP: 002b:00007f5c21193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.055875][ T8265] RAX: ffffffffffffffda RBX: 00007f5c205e5fa0 RCX: 00007f5c2038eec9 [ 257.055885][ T8265] RDX: 0000200000000140 RSI: 00000000c0405602 RDI: 0000000000000003 [ 257.055896][ T8265] RBP: 00007f5c21193090 R08: 0000000000000000 R09: 0000000000000000 [ 257.055906][ T8265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.055916][ T8265] R13: 00007f5c205e6038 R14: 00007f5c205e5fa0 R15: 00007ffd6e434788 [ 257.055939][ T8265] [ 257.366382][ T5134] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 257.375509][ T5134] Bluetooth: hci1: Injecting HCI hardware error event [ 257.384193][ T5134] Bluetooth: hci1: hardware error 0x00 [ 257.769308][ T5870] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 257.919709][ T5870] usb 1-1: device descriptor read/64, error -71 [ 257.974435][ T8280] ptrace attach of "./syz-executor exec"[5807] was attempted by "./syz-executor exec"[8280] [ 257.984826][ T5877] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 257.999410][ T8280] loop6: detected capacity change from 0 to 2560 [ 258.008667][ T8280] buffer_io_error: 11 callbacks suppressed [ 258.008692][ T8280] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.023069][ T8280] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.032922][ T8280] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.041226][ T8280] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.049902][ T8280] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.060385][ T8280] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.068486][ T8280] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.093062][ T8280] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.102561][ T8280] ldm_validate_partition_table(): Disk read failed. [ 258.109883][ T8280] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.118429][ T8280] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.128454][ T8280] Dev loop6: unable to read RDB block 0 [ 258.136958][ T8280] loop6: unable to read partition table [ 258.143227][ T8280] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 258.152321][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 258.159025][ T5870] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 258.168699][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.189046][ T5884] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 258.203895][ T5877] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 258.212273][ T5877] usb 3-1: can't read configurations, error -61 [ 258.289352][ T5870] usb 1-1: device descriptor read/64, error -71 [ 258.348915][ T5877] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 258.361820][ T5884] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.373560][ T5884] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 258.383904][ T5884] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.393212][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.401695][ T5870] usb usb1-port1: attempt power cycle [ 258.412376][ T8279] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 258.428143][ T5884] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.499129][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 258.508260][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.522468][ T5877] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 258.537653][ T5877] usb 3-1: can't read configurations, error -61 [ 258.544999][ T5877] usb usb3-port1: attempt power cycle [ 258.798957][ T5870] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 258.989358][ T5870] usb 1-1: device descriptor read/8, error -71 [ 259.019066][ T5877] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 259.042639][ T5183] ldm_validate_partition_table(): Disk read failed. [ 259.119304][ T5183] Dev loop6: unable to read RDB block 0 [ 259.141422][ T5183] loop6: unable to read partition table [ 259.189181][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 259.260176][ T8287] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 259.271333][ T8287] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 259.364440][ T5870] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 259.373783][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 259.386333][ T5877] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 259.394722][ T5870] usb 1-1: device descriptor read/8, error -71 [ 259.400950][ T5877] usb 3-1: can't read configurations, error -61 [ 259.422929][ T910] usb 5-1: USB disconnect, device number 10 [ 259.459185][ T5134] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 259.509228][ T5870] usb usb1-port1: unable to enumerate USB device [ 259.539203][ T5877] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 259.561360][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 259.570547][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 259.590170][ T5877] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 259.597889][ T5877] usb 3-1: can't read configurations, error -61 [ 259.605113][ T5877] usb usb3-port1: unable to enumerate USB device [ 261.115677][ T8313] siw: device registration error -23 [ 262.262695][ T8314] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.590'. [ 262.310086][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 262.619953][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 262.658899][ T5870] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 262.880405][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.415089][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.439440][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.473980][ T5870] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.486141][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.497564][ T5870] usb 4-1: config 0 descriptor?? [ 263.754216][ T8339] __vm_enough_memory: pid: 8339, comm: syz.1.596, bytes: 4503599627366400 not enough memory for the allocation [ 263.796731][ T5870] usbhid 4-1:0.0: can't add hid device: -71 [ 263.811659][ T8343] netem: incorrect ge model size [ 263.822380][ T5870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 263.826209][ T8343] netem: change failed [ 263.989416][ T5870] usb 4-1: USB disconnect, device number 11 [ 265.447876][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 265.632761][ T8365] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.602'. [ 266.055983][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 266.098938][ T910] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 266.199196][ T5877] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 266.239593][ T30] audit: type=1326 audit(1760395484.965:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0bd8eec9 code=0x7fc00000 [ 266.289049][ T910] usb 5-1: Using ep0 maxpacket: 8 [ 266.295714][ T910] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 266.304404][ T910] usb 5-1: config 0 has no interface number 0 [ 266.311267][ T910] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.322549][ T910] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 266.334499][ T910] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.345881][ T910] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 266.360594][ T910] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 266.373979][ T5877] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 266.374272][ T910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.393436][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.394139][ T910] usb 5-1: config 0 descriptor?? [ 266.417661][ T910] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 266.419223][ T5877] usb 2-1: config 0 descriptor?? [ 267.137030][ T30] audit: type=1326 audit(1760395485.855:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc0bd8eec9 code=0x7fc00000 [ 267.208446][ T30] audit: type=1326 audit(1760395485.855:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0bd8eec9 code=0x7fc00000 [ 267.283707][ T30] audit: type=1326 audit(1760395485.855:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0bd8eec9 code=0x7fc00000 [ 267.424013][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 267.492239][ T30] audit: type=1326 audit(1760395485.855:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0bd8eec9 code=0x7fc00000 [ 267.519944][ T30] audit: type=1326 audit(1760395485.855:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0bd8eec9 code=0x7fc00000 [ 267.548326][ T30] audit: type=1326 audit(1760395485.855:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0bd8eec9 code=0x7fc00000 [ 267.580464][ T30] audit: type=1326 audit(1760395485.855:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0bd8eec9 code=0x7fc00000 [ 267.634756][ T910] usb 5-1: USB disconnect, device number 11 [ 267.634906][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 267.665112][ T30] audit: type=1326 audit(1760395485.855:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0bd8eec9 code=0x7fc00000 [ 267.704773][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.610'. [ 267.774010][ T30] audit: type=1326 audit(1760395485.855:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8374 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0bd8eec9 code=0x7fc00000 [ 267.789269][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.955674][ T5877] usb 2-1: Cannot set autoneg [ 268.004350][ T8390] netlink: 40 bytes leftover after parsing attributes in process `syz.4.603'. [ 268.016625][ T5877] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 269.052944][ T910] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 269.083199][ T5862] usb 2-1: USB disconnect, device number 11 [ 271.043142][ T8442] siw: device registration error -23 [ 271.914680][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 271.914696][ T30] audit: type=1400 audit(1760395490.635:613): avc: denied { mounton } for pid=8415 comm="syz.0.615" path="/115/file0" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 271.919704][ T8439] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 271.921165][ T30] audit: type=1400 audit(1760395490.635:614): avc: denied { mount } for pid=8415 comm="syz.0.615" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 272.259750][ T8453] siw: device registration error -23 [ 272.464004][ T8439] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 272.776666][ T30] audit: type=1400 audit(1760395490.635:615): avc: denied { mounton } for pid=8415 comm="syz.0.615" path="/115/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 272.799485][ T30] audit: type=1400 audit(1760395490.635:616): avc: denied { mount } for pid=8415 comm="syz.0.615" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 272.822182][ T30] audit: type=1400 audit(1760395490.645:617): avc: denied { unlink } for pid=8415 comm="syz.0.615" name="#1d" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 272.844488][ T30] audit: type=1400 audit(1760395490.825:618): avc: denied { setopt } for pid=8444 comm="syz.2.624" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.884815][ T30] audit: type=1400 audit(1760395490.825:619): avc: denied { create } for pid=8444 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 273.050517][ T8461] __vm_enough_memory: pid: 8461, comm: syz.3.625, bytes: 4503599627366400 not enough memory for the allocation [ 273.069649][ T30] audit: type=1400 audit(1760395491.225:620): avc: denied { read } for pid=8447 comm="syz.4.622" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 273.160797][ T8460] netem: incorrect ge model size [ 273.205242][ T8460] netem: change failed [ 273.468874][ T30] audit: type=1400 audit(1760395491.225:621): avc: denied { open } for pid=8447 comm="syz.4.622" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 273.492360][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.791631][ T8469] siw: device registration error -23 [ 274.092380][ T30] audit: type=1400 audit(1760395491.315:622): avc: denied { ioctl } for pid=8447 comm="syz.4.622" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 274.202000][ T8476] netlink: 88 bytes leftover after parsing attributes in process `syz.1.628'. [ 275.889050][ T8486] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.633'. [ 276.933595][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 276.933605][ T30] audit: type=1400 audit(1760395495.655:636): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 277.029592][ T30] audit: type=1400 audit(1760395495.745:637): avc: denied { read } for pid=8493 comm="syz.3.635" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 277.062084][ T30] audit: type=1400 audit(1760395495.745:638): avc: denied { open } for pid=8493 comm="syz.3.635" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 277.102238][ T8498] __vm_enough_memory: pid: 8498, comm: syz.0.636, bytes: 4503599627366400 not enough memory for the allocation [ 277.159978][ T8498] netem: incorrect ge model size [ 277.173336][ T8498] netem: change failed [ 277.193451][ T30] audit: type=1400 audit(1760395495.815:639): avc: denied { write } for pid=8495 comm="syz.4.637" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 277.547718][ T30] audit: type=1400 audit(1760395496.265:640): avc: denied { read write } for pid=8508 comm="syz.1.638" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 277.593940][ T30] audit: type=1400 audit(1760395496.265:641): avc: denied { open } for pid=8508 comm="syz.1.638" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 277.640229][ T30] audit: type=1400 audit(1760395496.265:642): avc: denied { ioctl } for pid=8508 comm="syz.1.638" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x5380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 277.692282][ T30] audit: type=1400 audit(1760395496.405:643): avc: denied { read write } for pid=8508 comm="syz.1.638" name="video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 277.716574][ T30] audit: type=1400 audit(1760395496.405:644): avc: denied { open } for pid=8508 comm="syz.1.638" path="/dev/video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 277.786360][ T30] audit: type=1400 audit(1760395496.415:645): avc: denied { read } for pid=8508 comm="syz.1.638" name="vsock" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.969928][ T8519] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.640'. [ 278.219262][ T55] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 278.393807][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.415000][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.480127][ T55] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.536799][ T55] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.583019][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.661687][ T55] usb 3-1: config 0 descriptor?? [ 278.920677][ T55] usbhid 3-1:0.0: can't add hid device: -71 [ 278.979859][ T55] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 279.058502][ T55] usb 3-1: USB disconnect, device number 13 [ 279.601068][ T8539] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.645'. [ 279.886764][ T8542] hpfs: Bad magic ... probably not HPFS [ 280.397763][ T5134] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 280.630048][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 281.239618][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 281.534671][ T8578] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.655'. [ 282.133674][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 282.133691][ T30] audit: type=1400 audit(1760395500.855:726): avc: denied { read write } for pid=8586 comm="syz.2.658" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 282.162747][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.852311][ T30] audit: type=1400 audit(1760395500.855:727): avc: denied { open } for pid=8586 comm="syz.2.658" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 282.978354][ T30] audit: type=1400 audit(1760395500.935:728): avc: denied { create } for pid=8586 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 283.339209][ T30] audit: type=1400 audit(1760395501.185:729): avc: denied { ioctl } for pid=8579 comm="syz.0.656" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 283.364166][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.520346][ T8598] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.661'. [ 283.747322][ T30] audit: type=1400 audit(1760395501.745:730): avc: denied { create } for pid=8593 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 283.855334][ T30] audit: type=1400 audit(1760395501.745:731): avc: denied { bind } for pid=8593 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 283.896346][ T30] audit: type=1400 audit(1760395501.835:732): avc: denied { ioctl } for pid=8593 comm="syz.1.660" path="socket:[18113]" dev="sockfs" ino=18113 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.933211][ T30] audit: type=1400 audit(1760395501.855:733): avc: denied { create } for pid=8593 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 284.038454][ T30] audit: type=1400 audit(1760395501.865:734): avc: denied { ioctl } for pid=8593 comm="syz.1.660" path="socket:[18114]" dev="sockfs" ino=18114 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 284.063022][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.146795][ T30] audit: type=1400 audit(1760395502.575:735): avc: denied { read } for pid=8599 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 284.501680][ T5884] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 284.670517][ T5884] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 284.688790][ T5884] usb 1-1: config 0 has no interface number 0 [ 284.746334][ T5884] usb 1-1: config 0 interface 41 has no altsetting 0 [ 284.838308][ T5884] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 284.949542][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.044169][ T5884] usb 1-1: Product: syz [ 285.068566][ T5884] usb 1-1: Manufacturer: syz [ 285.070814][ T8622] hpfs: Bad magic ... probably not HPFS [ 285.096720][ T5884] usb 1-1: SerialNumber: syz [ 285.148997][ T5884] usb 1-1: config 0 descriptor?? [ 285.391641][ T8628] hpfs: Bad magic ... probably not HPFS [ 285.842333][ T5884] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 286.562453][ T5134] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 286.940211][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 287.206288][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 287.206305][ T30] audit: type=1400 audit(1760395505.925:753): avc: denied { read write } for pid=8647 comm="syz.3.678" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 287.328847][ T8652] netlink: 'syz.4.679': attribute type 4 has an invalid length. [ 287.431338][ T5884] usb 1-1: USB disconnect, device number 25 [ 287.433333][ T30] audit: type=1400 audit(1760395505.925:754): avc: denied { open } for pid=8647 comm="syz.3.678" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 287.592309][ T30] audit: type=1400 audit(1760395505.985:755): avc: denied { connect } for pid=8649 comm="syz.4.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 287.623805][ T30] audit: type=1326 audit(1760395506.005:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 288.175372][ T8666] /dev/nullb0: Can't open blockdev [ 289.328429][ T8684] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.688'. [ 289.568400][ T30] audit: type=1400 audit(1760395508.255:757): avc: denied { read } for pid=8686 comm="syz.2.690" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 289.714599][ T30] audit: type=1400 audit(1760395508.255:758): avc: denied { open } for pid=8686 comm="syz.2.690" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 289.977833][ T8692] netlink: 'syz.1.692': attribute type 4 has an invalid length. [ 290.217432][ T8698] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 290.687213][ T30] audit: type=1400 audit(1760395509.405:759): avc: denied { bind } for pid=8699 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.091064][ T30] audit: type=1326 audit(1760395509.475:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 291.158511][ T8706] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.696'. [ 291.270392][ T8711] hpfs: Bad magic ... probably not HPFS [ 291.290961][ T30] audit: type=1326 audit(1760395509.705:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8696 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 292.230663][ T30] audit: type=1400 audit(1760395509.865:762): avc: denied { write } for pid=8699 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.414760][ T30] audit: type=1400 audit(1760395509.865:763): avc: denied { nlmsg_write } for pid=8699 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.603738][ T30] audit: type=1400 audit(1760395510.475:764): avc: denied { write } for pid=8699 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 293.010268][ T910] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 293.233407][ T910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.340555][ T30] audit: type=1400 audit(1760395512.045:765): avc: denied { mounton } for pid=8721 comm="syz.4.701" path="/145/file0" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 293.406485][ T910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.509199][ T910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.564743][ T910] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.568878][ T30] audit: type=1400 audit(1760395512.045:766): avc: denied { mount } for pid=8721 comm="syz.4.701" name="/" dev="ramfs" ino=18988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 293.584091][ T910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.597926][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 293.627962][ T8739] netlink: 'syz.1.705': attribute type 4 has an invalid length. [ 293.834399][ T910] usb 4-1: config 0 descriptor?? [ 294.081534][ T910] usbhid 4-1:0.0: can't add hid device: -71 [ 294.102058][ T910] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 294.432356][ T8751] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.708'. [ 294.451983][ T910] usb 4-1: USB disconnect, device number 12 [ 295.388952][ T910] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 295.788025][ T910] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 295.835863][ T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.876138][ T910] usb 4-1: Product: syz [ 295.895199][ T910] usb 4-1: Manufacturer: syz [ 295.915656][ T910] usb 4-1: SerialNumber: syz [ 295.937265][ T910] usb 4-1: config 0 descriptor?? [ 296.036926][ T8774] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 296.043484][ T8774] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 296.068844][ T8774] vhci_hcd vhci_hcd.0: Device attached [ 296.220094][ T30] audit: type=1800 audit(1760395514.935:767): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.709" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 296.488931][ T5870] usb 36-1: SetAddress Request (2) to port 0 [ 296.728394][ T5870] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 296.857758][ T8775] vhci_hcd: connection closed [ 296.863985][ T3532] vhci_hcd: stop threads [ 296.922101][ T3532] vhci_hcd: release socket [ 296.982050][ T3532] vhci_hcd: disconnect device [ 297.013272][ T30] audit: type=1400 audit(1760395515.735:768): avc: denied { name_bind } for pid=8786 comm="syz.0.715" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 297.073357][ T30] audit: type=1400 audit(1760395515.735:769): avc: denied { node_bind } for pid=8786 comm="syz.0.715" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 297.327873][ T8789] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 297.334423][ T8789] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 297.361439][ T8789] vhci_hcd vhci_hcd.0: Device attached [ 297.413060][ T30] audit: type=1800 audit(1760395516.135:770): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.713" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 297.434498][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.515771][ T8789] bpf: Bad value for 'mode' [ 297.630032][ T5884] usb 38-1: SetAddress Request (2) to port 0 [ 297.636290][ T5884] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 297.667650][ T8790] vhci_hcd: connection closed [ 297.689134][ T3532] vhci_hcd: stop threads [ 297.706537][ T3532] vhci_hcd: release socket [ 297.727919][ T3532] vhci_hcd: disconnect device [ 298.144291][ T910] usb_8dev 4-1:0.0 can0: sending command message failed [ 298.183580][ T910] usb_8dev 4-1:0.0 can0: can't get firmware version [ 298.300057][ T910] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22 [ 298.311966][ T910] usb 4-1: USB disconnect, device number 13 [ 298.401765][ T30] audit: type=1400 audit(1760395517.125:771): avc: denied { read } for pid=5478 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 298.559783][ T8804] netlink: 'syz.0.718': attribute type 4 has an invalid length. [ 299.918020][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 300.112557][ T8823] netlink: 60 bytes leftover after parsing attributes in process `syz.0.723'. [ 300.622487][ T8830] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.726'. [ 301.085072][ T8841] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 301.971656][ T5870] usb 36-1: device descriptor read/8, error -110 [ 302.098965][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 302.170627][ T8854] overlayfs: failed to resolve './file0': -2 [ 302.268968][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 302.285534][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.401951][ T5870] usb usb36-port1: attempt power cycle [ 302.589525][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.624261][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 302.646532][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 302.668945][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.741343][ T10] usb 5-1: config 0 descriptor?? [ 302.757716][ T5884] usb 38-1: device descriptor read/8, error -110 [ 302.983848][ T5870] usb usb36-port1: unable to enumerate USB device [ 303.199937][ T5884] usb usb38-port1: attempt power cycle [ 304.339864][ T8870] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 304.816723][ T5884] usb usb38-port1: unable to enumerate USB device [ 305.104242][ T8873] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.737'. [ 305.300765][ T8875] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.738'. [ 306.099497][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 306.110692][ T5134] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 306.189004][ T5862] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 306.431273][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 306.607382][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 306.807815][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 306.860448][ T10] usb 5-1: USB disconnect, device number 12 [ 306.940617][ T5862] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 307.003090][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.112567][ T5862] usb 1-1: config 0 descriptor?? [ 307.282738][ T30] audit: type=1400 audit(1760395525.995:772): avc: denied { kexec_image_load } for pid=8900 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 307.543876][ T8908] ======================================================= [ 307.543876][ T8908] WARNING: The mand mount option has been deprecated and [ 307.543876][ T8908] and is ignored by this kernel. Remove the mand [ 307.543876][ T8908] option from the mount to silence this warning. [ 307.543876][ T8908] ======================================================= [ 307.593022][ T8908] tmpfs: Unknown parameter 's' [ 307.606762][ T30] audit: type=1400 audit(1760395526.325:773): avc: denied { ioctl } for pid=8900 comm="syz.3.749" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 307.741532][ T30] audit: type=1400 audit(1760395526.465:774): avc: denied { create } for pid=8900 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 307.745638][ T8904] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 307.775883][ T30] audit: type=1400 audit(1760395526.465:775): avc: denied { setopt } for pid=8900 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 307.849152][ T30] audit: type=1400 audit(1760395526.575:776): avc: denied { ioctl } for pid=8900 comm="syz.3.749" path="socket:[19828]" dev="sockfs" ino=19828 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 307.873678][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.257557][ T8924] netlink: 'syz.2.754': attribute type 4 has an invalid length. [ 308.451745][ T30] audit: type=1400 audit(1760395527.175:777): avc: denied { ioctl } for pid=8921 comm="syz.4.753" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19252 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 308.477643][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.512507][ T5862] usb 1-1: Cannot set autoneg [ 308.524208][ T5862] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 308.989992][ T30] audit: type=1400 audit(1760395527.715:778): avc: denied { ioctl } for pid=8930 comm="syz.4.756" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 309.204798][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.755'. [ 309.330690][ T8932] input: syz1 as /devices/virtual/input/input10 [ 309.345901][ T30] audit: type=1400 audit(1760395528.065:779): avc: denied { read } for pid=5168 comm="acpid" name="event4" dev="devtmpfs" ino=3095 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.377891][ T30] audit: type=1400 audit(1760395528.065:780): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3095 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.448596][ T30] audit: type=1400 audit(1760395528.065:781): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3095 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.473605][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.589808][ T5884] usb 1-1: USB disconnect, device number 26 [ 309.873104][ T8952] overlayfs: failed to resolve './file0': -2 [ 311.846139][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 312.247896][ T8980] netlink: 'syz.4.767': attribute type 4 has an invalid length. [ 312.439448][ T8978] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.766'. [ 312.889099][ T55] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 313.028691][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 313.050504][ T55] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 313.197390][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.671032][ T55] usb 5-1: config 0 descriptor?? [ 313.893496][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 314.188468][ T30] audit: type=1800 audit(1760395532.895:782): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.763" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 314.192495][ T8996] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 314.216396][ T8996] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 314.502126][ T8996] vhci_hcd vhci_hcd.0: Device attached [ 314.622454][ T9012] bpf: Bad value for 'mode' [ 314.691512][ T5884] usb 34-1: SetAddress Request (2) to port 0 [ 314.737123][ T5884] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 314.768256][ T9004] vhci_hcd: connection closed [ 314.769693][ T7042] vhci_hcd: stop threads [ 314.779534][ T7042] vhci_hcd: release socket [ 314.789366][ T7042] vhci_hcd: disconnect device [ 315.071910][ T55] usb 5-1: Cannot set autoneg [ 315.078662][ T55] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 315.417646][ T30] audit: type=1400 audit(1760395534.125:783): avc: denied { append } for pid=9013 comm="syz.1.774" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 316.212477][ T5870] usb 5-1: USB disconnect, device number 13 [ 316.985805][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.992419][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.762854][ T9051] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.784'. [ 317.855153][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 317.902905][ T9059] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 317.924050][ T9059] audit: out of memory in audit_log_start [ 317.956503][ T9059] Dead loop on virtual device ip6_vti0, fix it urgently! [ 318.291770][ T9072] __vm_enough_memory: pid: 9072, comm: syz.2.789, bytes: 4503599627366400 not enough memory for the allocation [ 318.327773][ T9072] netem: incorrect ge model size [ 318.335038][ T9072] netem: change failed [ 318.370485][ T9071] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.790'. [ 318.912164][ T9070] netlink: 60 bytes leftover after parsing attributes in process `syz.1.788'. [ 319.108933][ T5862] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 319.409242][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.794'. [ 319.539441][ T5862] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.582108][ T9088] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.631161][ T5862] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.709336][ T5862] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.728909][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.772781][ T9078] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.779084][ T5884] usb 34-1: device descriptor read/8, error -110 [ 319.791211][ T5862] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.443727][ T5884] usb usb34-port1: attempt power cycle [ 320.449573][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 320.542185][ T9097] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 320.548748][ T9097] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 320.566472][ T9097] vhci_hcd vhci_hcd.0: Device attached [ 320.601532][ T10] usb 5-1: USB disconnect, device number 14 [ 320.810974][ T30] audit: type=1800 audit(1760395539.535:784): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.793" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 320.828935][ T5870] usb 38-1: SetAddress Request (6) to port 0 [ 320.854988][ T5870] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 320.945308][ T9097] bpf: Bad value for 'mode' [ 321.054493][ T5884] usb usb34-port1: unable to enumerate USB device [ 322.113048][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 322.550330][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 322.666391][ T9106] vhci_hcd: connection reset by peer [ 322.672686][ T3532] vhci_hcd: stop threads [ 322.677314][ T3532] vhci_hcd: release socket [ 322.683241][ T3532] vhci_hcd: disconnect device [ 322.691697][ T9128] __vm_enough_memory: pid: 9128, comm: syz.3.800, bytes: 4503599627366400 not enough memory for the allocation [ 322.806924][ T9116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.821592][ T9124] netem: incorrect ge model size [ 322.829146][ T9124] netem: change failed [ 323.742257][ T9143] __vm_enough_memory: pid: 9143, comm: syz.0.804, bytes: 4503599627366400 not enough memory for the allocation [ 323.793499][ T9141] netem: incorrect ge model size [ 323.839133][ T9141] netem: change failed [ 324.900487][ T9163] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 326.187298][ T5870] usb 38-1: device descriptor read/8, error -110 [ 326.606179][ T9176] hpfs: Bad magic ... probably not HPFS [ 327.110279][ T5870] usb usb38-port1: attempt power cycle [ 327.785111][ T30] audit: type=1400 audit(1760395546.505:785): avc: denied { write } for pid=9201 comm="syz.3.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.824231][ T30] audit: type=1400 audit(1760395546.545:786): avc: denied { setopt } for pid=9201 comm="syz.3.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.861535][ T5870] usb usb38-port1: unable to enumerate USB device [ 328.751439][ T9208] __vm_enough_memory: pid: 9208, comm: syz.4.821, bytes: 4503599627366400 not enough memory for the allocation [ 328.947105][ T9208] netem: incorrect ge model size [ 328.966699][ T9208] netem: change failed [ 329.254476][ T9219] Failed to get privilege flags for destination (handle=0x2:0x25) [ 329.548358][ T9222] __vm_enough_memory: pid: 9222, comm: syz.0.824, bytes: 4503599627366400 not enough memory for the allocation [ 329.717702][ T30] audit: type=1800 audit(1760395548.435:787): pid=9225 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.816" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 329.826433][ T9229] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 329.838280][ T9229] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 330.046270][ T9230] bpf: Bad value for 'mode' [ 330.112155][ T9216] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 330.118697][ T9216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 330.130957][ T9216] vhci_hcd vhci_hcd.0: Device attached [ 330.151580][ T9222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.824'. [ 330.167917][ T9222] netem: incorrect ge model size [ 330.200336][ T9222] netem: change failed [ 330.589330][ T5870] usb 36-1: SetAddress Request (6) to port 0 [ 330.623725][ T5870] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 330.677266][ T9224] vhci_hcd: connection reset by peer [ 330.686285][ T7042] vhci_hcd: stop threads [ 330.691694][ T7042] vhci_hcd: release socket [ 330.700415][ T7042] vhci_hcd: disconnect device [ 331.218395][ T9244] netlink: 'syz.2.828': attribute type 4 has an invalid length. [ 332.151781][ T9261] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 332.949576][ T9267] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.835'. [ 333.282625][ T9272] netlink: 'syz.3.836': attribute type 4 has an invalid length. [ 333.866862][ T9281] netlink: 'syz.4.838': attribute type 4 has an invalid length. [ 333.980947][ T9280] __vm_enough_memory: pid: 9280, comm: syz.0.837, bytes: 4503599627366400 not enough memory for the allocation [ 334.030102][ T9285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.837'. [ 334.053564][ T9285] netem: incorrect ge model size [ 334.058517][ T9285] netem: change failed [ 334.275783][ T9288] hpfs: Bad magic ... probably not HPFS [ 335.573442][ T9309] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 335.943389][ T5870] usb 36-1: device descriptor read/8, error -110 [ 336.352566][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.849'. [ 336.608846][ T5870] usb usb36-port1: attempt power cycle [ 336.641934][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 337.001114][ T9320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.261170][ T9332] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 337.272581][ T9332] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 337.354788][ T5870] usb usb36-port1: unable to enumerate USB device [ 337.546916][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 337.695057][ T9336] __vm_enough_memory: pid: 9336, comm: syz.4.852, bytes: 4503599627366400 not enough memory for the allocation [ 337.782422][ T9338] netlink: 44 bytes leftover after parsing attributes in process `syz.4.852'. [ 337.817584][ T9336] netem: incorrect ge model size [ 337.858165][ T9336] netem: change failed [ 338.797021][ T30] audit: type=1400 audit(1760395557.515:788): avc: denied { write } for pid=9346 comm="syz.1.855" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 339.187174][ T9359] siw: device registration error -23 [ 343.806721][ T9404] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.868'. [ 345.813913][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.874'. [ 345.894525][ T9424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 349.342456][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 349.451777][ T9460] siw: device registration error -23 [ 351.015821][ T9472] netlink: 'syz.4.885': attribute type 4 has an invalid length. [ 351.258969][ T910] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 352.215529][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 352.336586][ T910] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 352.388888][ T910] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 352.692480][ T9502] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 353.033783][ T9503] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.893'. [ 353.234561][ T910] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 353.325900][ T910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.367875][ T9481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 353.507188][ T910] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 353.664192][ T9516] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 353.675971][ T9516] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 354.116837][ T9514] Failed to get privilege flags for destination (handle=0x2:0x25) [ 354.127668][ T5870] usb 3-1: USB disconnect, device number 14 [ 354.802767][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 354.889198][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 354.895217][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 355.072566][ T9530] ceph: No mds server is up or the cluster is laggy [ 355.166692][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 355.179502][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 355.274800][ T9546] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.906'. [ 355.568208][ T9539] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.905'. [ 355.805140][ T9549] netlink: 76 bytes leftover after parsing attributes in process `syz.3.908'. [ 356.176639][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 356.465973][ T9547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.548166][ T9583] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 359.065823][ T9582] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 359.080629][ T9582] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 359.403507][ T9579] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.915'. [ 359.524445][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 360.539286][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 360.639616][ T55] libceph: connect (1)[c::]:6789 error -101 [ 360.645737][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 360.655315][ T9607] ceph: No mds server is up or the cluster is laggy [ 361.267919][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 363.117087][ T9639] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.927'. [ 363.715206][ T9646] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 363.893981][ T9644] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 363.905085][ T9644] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 364.230039][ T9651] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.930'. [ 364.517945][ T30] audit: type=1400 audit(1760395583.215:789): avc: denied { append } for pid=9649 comm="syz.3.931" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.135450][ T30] audit: type=1400 audit(1760395583.625:790): avc: denied { create } for pid=9649 comm="syz.3.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 365.172810][ T30] audit: type=1400 audit(1760395583.625:791): avc: denied { write } for pid=9649 comm="syz.3.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 365.199824][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 365.606499][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 365.624118][ T9662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.754367][ T9670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.113430][ T9670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.076138][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'. [ 369.252607][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 369.295267][ T9708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 369.619691][ T55] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 369.938936][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 370.767146][ T55] usb 4-1: unable to get BOS descriptor or descriptor too short [ 370.796418][ T55] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 370.871884][ T55] usb 4-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.009575][ T55] usb 4-1: config 1 interface 0 has no altsetting 0 [ 371.040626][ T55] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 371.059973][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.068061][ T55] usb 4-1: Product: ㌒꡽豑ᤧ洙간舿蠿を鿞ꠏ䇯﯉沩㱋ᦟ덈胮绉蕴╴⳵瓑혗 [ 371.079009][ T55] usb 4-1: SerialNumber: syz [ 371.260623][ T9714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.724385][ T9744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.735407][ T9744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.035813][ T30] audit: type=1400 audit(1760395590.435:792): avc: denied { create } for pid=9713 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.115889][ T30] audit: type=1400 audit(1760395590.435:793): avc: denied { connect } for pid=9713 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.136247][ T30] audit: type=1400 audit(1760395590.435:794): avc: denied { write } for pid=9713 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.259388][ T9750] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.956'. [ 372.594148][ T9751] netlink: 60 bytes leftover after parsing attributes in process `syz.0.957'. [ 372.840681][ T9754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'. [ 373.042122][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'. [ 373.173326][ T55] usb 4-1: USB disconnect, device number 14 [ 373.484881][ T9766] lo speed is unknown, defaulting to 1000 [ 373.613071][ T9773] FAULT_INJECTION: forcing a failure. [ 373.613071][ T9773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.626354][ T30] audit: type=1400 audit(1760395592.335:795): avc: denied { ioctl } for pid=9771 comm="syz.3.962" path="socket:[22447]" dev="sockfs" ino=22447 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 373.682567][ T9773] CPU: 0 UID: 0 PID: 9773 Comm: syz.3.962 Not tainted syzkaller #0 PREEMPT(full) [ 373.682593][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.682604][ T9773] Call Trace: [ 373.682610][ T9773] [ 373.682617][ T9773] dump_stack_lvl+0x16c/0x1f0 [ 373.682645][ T9773] should_fail_ex+0x512/0x640 [ 373.682670][ T9773] _copy_from_iter+0x29f/0x1720 [ 373.682695][ T9773] ? __alloc_skb+0x200/0x380 [ 373.682715][ T9773] ? __pfx__copy_from_iter+0x10/0x10 [ 373.682736][ T9773] ? netlink_autobind.isra.0+0x158/0x370 [ 373.682769][ T9773] netlink_sendmsg+0x820/0xdd0 [ 373.682795][ T9773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.682826][ T9773] ____sys_sendmsg+0xa98/0xc70 [ 373.682852][ T9773] ? copy_msghdr_from_user+0x10a/0x160 [ 373.682873][ T9773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.682910][ T9773] ___sys_sendmsg+0x134/0x1d0 [ 373.682931][ T9773] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.682949][ T9773] ? __lock_acquire+0x622/0x1c90 [ 373.682996][ T9773] __sys_sendmsg+0x16d/0x220 [ 373.683016][ T9773] ? __pfx___sys_sendmsg+0x10/0x10 [ 373.683053][ T9773] do_syscall_64+0xcd/0xfa0 [ 373.683075][ T9773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.683093][ T9773] RIP: 0033:0x7fcc0bd8eec9 [ 373.683107][ T9773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.683124][ T9773] RSP: 002b:00007fcc0ccbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.683142][ T9773] RAX: ffffffffffffffda RBX: 00007fcc0bfe6090 RCX: 00007fcc0bd8eec9 [ 373.683154][ T9773] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 373.683164][ T9773] RBP: 00007fcc0ccbe090 R08: 0000000000000000 R09: 0000000000000000 [ 373.683175][ T9773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.683185][ T9773] R13: 00007fcc0bfe6128 R14: 00007fcc0bfe6090 R15: 00007fffa03150a8 [ 373.683218][ T9773] [ 374.778865][ T5884] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 374.830743][ T9777] netlink: 'syz.3.964': attribute type 4 has an invalid length. [ 374.940595][ T5884] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.952040][ T5884] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 375.020231][ T5884] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 375.038075][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.052393][ T9778] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 375.062021][ T5884] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.677499][ T9797] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.970'. [ 375.827651][ T30] audit: type=1400 audit(1760395594.545:796): avc: denied { name_bind } for pid=9792 comm="syz.2.969" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 375.859048][ T30] audit: type=1400 audit(1760395594.575:797): avc: denied { create } for pid=9792 comm="syz.2.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 375.923731][ T30] audit: type=1400 audit(1760395594.585:798): avc: denied { getopt } for pid=9792 comm="syz.2.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 376.288147][ T9805] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.971'. [ 376.804468][ T9812] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.974'. [ 377.597110][ T5862] usb 1-1: USB disconnect, device number 27 [ 378.255391][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 378.452827][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.461443][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.651031][ T9841] __vm_enough_memory: pid: 9841, comm: syz.0.981, bytes: 4503599627366400 not enough memory for the allocation [ 378.691538][ T9843] syzkaller1: entered promiscuous mode [ 378.729805][ T9843] syzkaller1: entered allmulticast mode [ 378.729864][ T30] audit: type=1400 audit(1760395597.415:799): avc: denied { ioctl } for pid=9819 comm="syz.1.977" path="socket:[22661]" dev="sockfs" ino=22661 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 378.760025][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.829383][ T9846] netem: incorrect ge model size [ 378.834389][ T9846] netem: change failed [ 378.919664][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'. [ 379.803040][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 380.529353][ T9871] siw: device registration error -23 [ 380.870187][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 381.707345][ T30] audit: type=1400 audit(1760395600.405:800): avc: denied { create } for pid=9879 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 382.000735][ T5862] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 382.047755][ T30] audit: type=1400 audit(1760395600.415:801): avc: denied { write } for pid=9879 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 382.158842][ T5862] usb 1-1: device descriptor read/64, error -71 [ 382.469012][ T5862] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 382.667745][ T5862] usb 1-1: device descriptor read/64, error -71 [ 382.821911][ T9898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 383.019938][ T5862] usb usb1-port1: attempt power cycle [ 383.048675][ T9898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.358884][ T5862] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 383.486038][ T9902] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 383.509009][ T9911] __vm_enough_memory: pid: 9911, comm: syz.1.995, bytes: 4503599627366400 not enough memory for the allocation [ 383.557473][ T30] audit: type=1400 audit(1760395602.275:802): avc: denied { read } for pid=9909 comm="syz.4.996" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 383.586273][ T5862] usb 1-1: device descriptor read/8, error -71 [ 383.614784][ T9910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.635355][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 383.650804][ T9918] netem: incorrect ge model size [ 383.656022][ T9918] netem: change failed [ 383.702848][ T30] audit: type=1400 audit(1760395602.275:803): avc: denied { open } for pid=9909 comm="syz.4.996" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 383.726626][ T30] audit: type=1400 audit(1760395602.335:804): avc: denied { ioctl } for pid=9909 comm="syz.4.996" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 383.820536][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 383.915781][ T5862] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 383.952300][ T5862] usb 1-1: device descriptor read/8, error -71 [ 384.071412][ T5862] usb usb1-port1: unable to enumerate USB device [ 384.107162][ T9914] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.970638][ T9938] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.999'. [ 385.096255][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 386.526476][ T9956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1006'. [ 387.281803][ T9956] smc: adding net device bond0 with user defined pnetid SYZ2 [ 387.344431][ T9956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.359714][ T9] libceph: connect (1)[c::]:6789 error -101 [ 387.384174][ T9965] ceph: No mds server is up or the cluster is laggy [ 387.497513][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 387.779811][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 387.807098][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1010'. [ 387.819025][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 388.220947][ T30] audit: type=1400 audit(1760395606.945:805): avc: denied { ioctl } for pid=9984 comm="syz.2.1016" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 388.247959][ T30] audit: type=1400 audit(1760395606.945:806): avc: denied { set_context_mgr } for pid=9984 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 388.298441][ T9985] binder: 9984:9985 ioctl c0306201 200000000280 returned -14 [ 388.390047][ T30] audit: type=1400 audit(1760395607.095:807): avc: denied { bind } for pid=9989 comm="syz.1.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 388.409569][ T30] audit: type=1400 audit(1760395607.095:808): avc: denied { name_bind } for pid=9989 comm="syz.1.1015" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 388.430161][ T30] audit: type=1400 audit(1760395607.095:809): avc: denied { node_bind } for pid=9989 comm="syz.1.1015" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 388.577469][ T9] libceph: connect (1)[c::]:6789 error -101 [ 388.605425][ T5134] Bluetooth: hci2: connection err: -111 [ 388.614799][ T30] audit: type=1400 audit(1760395607.335:810): avc: denied { getopt } for pid=9989 comm="syz.1.1015" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 388.648703][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 388.999037][ T9] libceph: connect (1)[c::]:6789 error -101 [ 389.028292][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 389.183453][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 389.589235][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 389.655986][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 389.746825][ T9992] ceph: No mds server is up or the cluster is laggy [ 389.893384][T10019] hpfs: Bad magic ... probably not HPFS [ 390.178878][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 390.191491][T10030] binder: 10029:10030 ioctl c0306201 200000000280 returned -14 [ 390.283127][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'. [ 390.328456][ T30] audit: type=1400 audit(1760395609.045:811): avc: denied { setopt } for pid=10036 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 390.380516][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 390.418928][ T30] audit: type=1400 audit(1760395609.075:812): avc: denied { ioctl } for pid=10036 comm="syz.2.1030" path="socket:[23926]" dev="sockfs" ino=23926 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 390.460006][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 390.497085][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 390.531730][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.539752][ T30] audit: type=1400 audit(1760395609.205:813): avc: denied { create } for pid=10040 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 390.539794][ T30] audit: type=1400 audit(1760395609.215:814): avc: denied { mount } for pid=10040 comm="syz.2.1031" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 391.048343][T10023] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 391.334073][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.359460][ T9] usb 4-1: USB disconnect, device number 15 [ 392.457499][T10067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.562776][T10073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1040'. [ 392.572031][T10069] binder: 10068:10069 ioctl c0306201 200000000280 returned -14 [ 392.621357][T10071] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.1038'. [ 392.656984][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'. [ 393.066782][T10080] Failed to get privilege flags for destination (handle=0x2:0x25) [ 393.221149][ T1098] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.231887][ T1098] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.254165][ T1098] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.283425][ T1098] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.419023][ T5862] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 393.740862][ T5862] usb 1-1: device descriptor read/64, error -71 [ 393.854982][T10106] siw: device registration error -23 [ 394.148867][ T5862] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 394.328275][ T5862] usb 1-1: device descriptor read/64, error -71 [ 394.459086][ T5862] usb usb1-port1: attempt power cycle [ 394.810617][ T5862] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 394.859428][ T5862] usb 1-1: device descriptor read/8, error -71 [ 395.119435][ T5862] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 395.131502][T10122] Failed to get privilege flags for destination (handle=0x2:0x25) [ 395.250614][ T5862] usb 1-1: device descriptor read/8, error -71 [ 395.290707][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 395.290728][ T30] audit: type=1326 audit(1760395613.995:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.2.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 395.320161][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.551490][T10130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.888194][ T5862] usb usb1-port1: unable to enumerate USB device [ 396.517366][T10139] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.1053'. [ 396.915176][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 397.451305][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 397.852493][ T30] audit: type=1326 audit(1760395616.475:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 398.112879][ T30] audit: type=1326 audit(1760395616.475:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 398.353404][ T30] audit: type=1326 audit(1760395616.475:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 398.407400][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.418269][ T30] audit: type=1326 audit(1760395616.475:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 398.479296][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.506631][ T30] audit: type=1326 audit(1760395616.475:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 398.530579][ T30] audit: type=1326 audit(1760395616.475:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 398.554664][ T30] audit: type=1326 audit(1760395616.475:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 398.588505][ T30] audit: type=1326 audit(1760395616.475:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 398.612336][ T30] audit: type=1326 audit(1760395616.475:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962a98eec9 code=0x7fc00000 [ 398.612407][ T55] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 398.702271][T10173] Failed to get privilege flags for destination (handle=0x2:0x25) [ 398.728237][ T1098] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.738062][ T1098] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.768897][ T5862] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 398.778599][ T1098] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.787557][ T1098] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.797590][ T55] usb 2-1: descriptor type invalid, skip [ 398.812984][ T55] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1023 [ 398.829031][ T55] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.842546][ T55] usb 2-1: config 1 interface 0 has no altsetting 0 [ 398.861074][ T55] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 398.878914][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.899095][ C0] ------------[ cut here ]------------ [ 398.904892][ C0] ODEBUG: free active (active state 0) object: ffff88805604fc90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 398.917990][ C0] WARNING: CPU: 0 PID: 10172 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 398.927548][ C0] Modules linked in: [ 398.931613][ C0] CPU: 0 UID: 0 PID: 10172 Comm: syz.4.1060 Not tainted syzkaller #0 PREEMPT(full) [ 398.941023][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.951114][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 398.956923][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 f3 f1 8b 4c 89 e6 48 c7 c7 20 e8 f1 8b e8 8f e1 c7 fc 90 <0f> 0b 90 90 58 83 05 96 d2 cf 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 398.976559][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010282 [ 398.982632][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b6ee8 [ 398.990610][ C0] RDX: ffff888052230000 RSI: ffffffff817b6ef5 RDI: 0000000000000001 [ 398.998572][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 399.006558][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf1eec0 [ 399.014555][ C0] R13: ffffffff8b901fe0 R14: ffffffff8a533b90 R15: ffffc90000007b18 [ 399.022524][ C0] FS: 00007f4a133e56c0(0000) GS:ffff8881249d9000(0000) knlGS:0000000000000000 [ 399.031445][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.038018][ C0] CR2: 0000200000094030 CR3: 0000000055da8000 CR4: 00000000003526f0 [ 399.046077][ C0] Call Trace: [ 399.049359][ C0] [ 399.052179][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 399.057791][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 399.063596][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 399.069135][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 399.075185][ C0] kfree+0x291/0x6d0 [ 399.079070][ C0] ? rose_timer_expiry+0x53f/0x630 [ 399.084193][ C0] ? rose_timer_expiry+0x53f/0x630 [ 399.089290][ C0] rose_timer_expiry+0x53f/0x630 [ 399.094201][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 399.099644][ C0] call_timer_fn+0x19a/0x620 [ 399.104213][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 399.109316][ C0] ? mark_held_locks+0x49/0x80 [ 399.114055][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 399.119522][ C0] __run_timers+0x6ef/0x960 [ 399.124025][ C0] ? __pfx___run_timers+0x10/0x10 [ 399.129058][ C0] run_timer_base+0x114/0x190 [ 399.133717][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 399.138929][ C0] run_timer_softirq+0x1a/0x40 [ 399.143677][ C0] handle_softirqs+0x219/0x8e0 [ 399.148422][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 399.153698][ C0] __irq_exit_rcu+0x109/0x170 [ 399.158362][ C0] irq_exit_rcu+0x9/0x30 [ 399.162592][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 399.168212][ C0] [ 399.171145][ C0] [ 399.174057][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.180029][ C0] RIP: 0010:__scm_recv_common.constprop.0+0x3f8/0x520 [ 399.186767][ C0] Code: df 48 c1 ea 03 80 3c 02 00 0f 85 f9 00 00 00 48 83 7b 08 00 74 0d e8 47 98 87 f8 48 89 df e8 8f e8 ff ff 31 db e9 31 fd ff ff 33 98 87 f8 4c 8d 63 08 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 [ 399.206372][ C0] RSP: 0018:ffffc90003ccf6f0 EFLAGS: 00000246 [ 399.212432][ C0] RAX: 0000000000000002 RBX: ffffc90003ccf928 RCX: ffffffff89359fb3 [ 399.220391][ C0] RDX: ffff888052230000 RSI: 0000000000000000 RDI: 0000000000000001 [ 399.228336][ C0] RBP: 1ffff92000799ede R08: 0000000000000001 R09: 0000000000000000 [ 399.236296][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 399.244257][ C0] R13: ffffc90003ccfd88 R14: ffff888034183300 R15: ffff888055418b98 [ 399.252223][ C0] ? __scm_recv_common.constprop.0+0x333/0x520 [ 399.258363][ C0] ? __pfx___scm_recv_common.constprop.0+0x10/0x10 [ 399.264869][ C0] ? mark_held_locks+0x49/0x80 [ 399.269637][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 399.275435][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 399.280628][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 399.286412][ C0] scm_recv_unix+0x99/0x400 [ 399.290919][ C0] ? __pfx_scm_recv_unix+0x10/0x10 [ 399.296025][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 399.301993][ C0] __unix_dgram_recvmsg+0x769/0xc30 [ 399.307251][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 399.313033][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 399.317978][ C0] ? iovec_from_user+0xbb/0x140 [ 399.322846][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 399.327783][ C0] ____sys_recvmsg+0x5f9/0x6b0 [ 399.332664][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 399.337956][ C0] ? kfree+0x252/0x6d0 [ 399.342031][ C0] ? __pfx___schedule+0x10/0x10 [ 399.346900][ C0] ___sys_recvmsg+0x114/0x1a0 [ 399.351586][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 399.356774][ C0] ? __pfx___might_resched+0x10/0x10 [ 399.362068][ C0] do_recvmmsg+0x2fe/0x750 [ 399.366554][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 399.371504][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 399.376953][ C0] ? find_held_lock+0x2b/0x80 [ 399.381622][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 399.386627][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 399.392175][ C0] do_syscall_64+0xcd/0xfa0 [ 399.396665][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.402560][ C0] RIP: 0033:0x7f4a1258eec9 [ 399.406951][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.426550][ C0] RSP: 002b:00007f4a133e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 399.434955][ C0] RAX: ffffffffffffffda RBX: 00007f4a127e6180 RCX: 00007f4a1258eec9 [ 399.442916][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 399.450898][ C0] RBP: 00007f4a12611f91 R08: 0000000000000000 R09: 0000000000000000 [ 399.458884][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 399.466846][ C0] R13: 00007f4a127e6218 R14: 00007f4a127e6180 R15: 00007ffe19a3b838 [ 399.474827][ C0] [ 399.477918][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 399.485179][ C0] CPU: 0 UID: 0 PID: 10172 Comm: syz.4.1060 Not tainted syzkaller #0 PREEMPT(full) [ 399.494517][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 399.504553][ C0] Call Trace: [ 399.507809][ C0] [ 399.510629][ C0] dump_stack_lvl+0x3d/0x1f0 [ 399.515198][ C0] vpanic+0x640/0x6f0 [ 399.519156][ C0] ? debug_print_object+0x1a2/0x2b0 [ 399.524331][ C0] panic+0xca/0xd0 [ 399.528025][ C0] ? __pfx_panic+0x10/0x10 [ 399.532417][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 399.537516][ C0] check_panic_on_warn+0xab/0xb0 [ 399.542430][ C0] __warn+0xf6/0x3c0 [ 399.546298][ C0] ? debug_print_object+0x1a2/0x2b0 [ 399.551476][ C0] report_bug+0x3c3/0x580 [ 399.555787][ C0] ? debug_print_object+0x1a2/0x2b0 [ 399.560971][ C0] handle_bug+0x184/0x210 [ 399.565276][ C0] exc_invalid_op+0x17/0x50 [ 399.569753][ C0] asm_exc_invalid_op+0x1a/0x20 [ 399.574573][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 399.580363][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 f3 f1 8b 4c 89 e6 48 c7 c7 20 e8 f1 8b e8 8f e1 c7 fc 90 <0f> 0b 90 90 58 83 05 96 d2 cf 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 399.599975][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010282 [ 399.606031][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b6ee8 [ 399.613979][ C0] RDX: ffff888052230000 RSI: ffffffff817b6ef5 RDI: 0000000000000001 [ 399.621934][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 399.629882][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf1eec0 [ 399.637838][ C0] R13: ffffffff8b901fe0 R14: ffffffff8a533b90 R15: ffffc90000007b18 [ 399.645795][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 399.651440][ C0] ? __warn_printk+0x198/0x350 [ 399.656195][ C0] ? __warn_printk+0x1a5/0x350 [ 399.660951][ C0] ? debug_print_object+0x1a1/0x2b0 [ 399.666128][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 399.671736][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 399.677519][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 399.683056][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 399.689120][ C0] kfree+0x291/0x6d0 [ 399.693000][ C0] ? rose_timer_expiry+0x53f/0x630 [ 399.698119][ C0] ? rose_timer_expiry+0x53f/0x630 [ 399.703229][ C0] rose_timer_expiry+0x53f/0x630 [ 399.708164][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 399.713593][ C0] call_timer_fn+0x19a/0x620 [ 399.718172][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 399.723267][ C0] ? mark_held_locks+0x49/0x80 [ 399.728007][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 399.733447][ C0] __run_timers+0x6ef/0x960 [ 399.737937][ C0] ? __pfx___run_timers+0x10/0x10 [ 399.742945][ C0] run_timer_base+0x114/0x190 [ 399.747610][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 399.752783][ C0] run_timer_softirq+0x1a/0x40 [ 399.757527][ C0] handle_softirqs+0x219/0x8e0 [ 399.762270][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 399.767537][ C0] __irq_exit_rcu+0x109/0x170 [ 399.772193][ C0] irq_exit_rcu+0x9/0x30 [ 399.776413][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 399.782037][ C0] [ 399.784944][ C0] [ 399.787848][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.793803][ C0] RIP: 0010:__scm_recv_common.constprop.0+0x3f8/0x520 [ 399.800641][ C0] Code: df 48 c1 ea 03 80 3c 02 00 0f 85 f9 00 00 00 48 83 7b 08 00 74 0d e8 47 98 87 f8 48 89 df e8 8f e8 ff ff 31 db e9 31 fd ff ff 33 98 87 f8 4c 8d 63 08 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 [ 399.820225][ C0] RSP: 0018:ffffc90003ccf6f0 EFLAGS: 00000246 [ 399.826349][ C0] RAX: 0000000000000002 RBX: ffffc90003ccf928 RCX: ffffffff89359fb3 [ 399.834302][ C0] RDX: ffff888052230000 RSI: 0000000000000000 RDI: 0000000000000001 [ 399.842246][ C0] RBP: 1ffff92000799ede R08: 0000000000000001 R09: 0000000000000000 [ 399.850189][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 399.858162][ C0] R13: ffffc90003ccfd88 R14: ffff888034183300 R15: ffff888055418b98 [ 399.866145][ C0] ? __scm_recv_common.constprop.0+0x333/0x520 [ 399.872290][ C0] ? __pfx___scm_recv_common.constprop.0+0x10/0x10 [ 399.878775][ C0] ? mark_held_locks+0x49/0x80 [ 399.883558][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 399.889338][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 399.894511][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 399.900299][ C0] scm_recv_unix+0x99/0x400 [ 399.904790][ C0] ? __pfx_scm_recv_unix+0x10/0x10 [ 399.909874][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 399.915833][ C0] __unix_dgram_recvmsg+0x769/0xc30 [ 399.921007][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 399.926726][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 399.931642][ C0] ? iovec_from_user+0xbb/0x140 [ 399.936470][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 399.941380][ C0] ____sys_recvmsg+0x5f9/0x6b0 [ 399.946131][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 399.951394][ C0] ? kfree+0x252/0x6d0 [ 399.955438][ C0] ? __pfx___schedule+0x10/0x10 [ 399.960273][ C0] ___sys_recvmsg+0x114/0x1a0 [ 399.964924][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 399.970101][ C0] ? __pfx___might_resched+0x10/0x10 [ 399.975359][ C0] do_recvmmsg+0x2fe/0x750 [ 399.979766][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 399.984724][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 399.990167][ C0] ? find_held_lock+0x2b/0x80 [ 399.994820][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 399.999824][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 400.005352][ C0] do_syscall_64+0xcd/0xfa0 [ 400.009848][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.015717][ C0] RIP: 0033:0x7f4a1258eec9 [ 400.020107][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.039702][ C0] RSP: 002b:00007f4a133e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 400.048088][ C0] RAX: ffffffffffffffda RBX: 00007f4a127e6180 RCX: 00007f4a1258eec9 [ 400.056047][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 400.064005][ C0] RBP: 00007f4a12611f91 R08: 0000000000000000 R09: 0000000000000000 [ 400.071951][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 400.079906][ C0] R13: 00007f4a127e6218 R14: 00007f4a127e6180 R15: 00007ffe19a3b838 [ 400.087876][ C0] [ 400.091108][ C0] Kernel Offset: disabled [ 400.095407][ C0] Rebooting in 86400 seconds..