last executing test programs: 10.436402788s ago: executing program 2 (id=1100): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 10.146794954s ago: executing program 2 (id=1101): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18}) 10.06048192s ago: executing program 2 (id=1103): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x204203, 0x0) io_uring_setup(0x9, 0x0) close(0x3) mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000300)='./file0\x00', 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) lseek(r0, 0x50, 0x3) 10.060152404s ago: executing program 2 (id=1104): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) syz_emit_ethernet(0xd8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4087, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1'}, 0xb) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) 9.069068113s ago: executing program 2 (id=1107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) recvfrom(r0, &(0x7f0000000040)=""/156, 0x9c, 0x112, 0x0, 0x0) 6.977663045s ago: executing program 1 (id=1110): ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8940, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) msgctl$MSG_INFO(0x0, 0xc, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 5.196356564s ago: executing program 3 (id=1115): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="0000891424", @ANYRES64=r4], 0xb2) 4.9111719s ago: executing program 4 (id=1116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2}) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x24, 0x33, 0x40, @remote, @local, {[], "3b040000000012340000000100"/36}}}, 0x4c) 4.576963528s ago: executing program 1 (id=1118): syz_open_procfs(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 4.254275075s ago: executing program 3 (id=1121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x2, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x4, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x7}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x8, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x4200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0xa, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x200, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 4.251357827s ago: executing program 1 (id=1122): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000400)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.552678501s ago: executing program 4 (id=1123): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633", @ANYRES8=r1], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r6) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r7, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r9) sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r10, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.475782599s ago: executing program 2 (id=1124): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0585611, 0x0) syz_usb_disconnect(r0) pread64(r1, 0x0, 0x0, 0xfffffff7) 3.287895s ago: executing program 0 (id=1125): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000340), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="000089142460", @ANYRES64=r4], 0xb2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001002dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="18430100a1a20100050011008000000020001a8004000a8018004a22c62f0f00ff01000000000000000000000000000108001e0005000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) 3.286631747s ago: executing program 1 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x38, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 3.269984764s ago: executing program 3 (id=1127): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x11}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000102, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002dc0)={'gre0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x20002800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a80200004030007"], 0x1c}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 3.192822575s ago: executing program 4 (id=1128): migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 3.153037626s ago: executing program 4 (id=1129): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000400"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r2, r2, 0x34) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r4, r3, 0x0, 0x8) ptrace$pokeuser(0x6, r2, 0x388, 0x41d9fda7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x0, 0x303, 0x70bd28, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 2.999194743s ago: executing program 1 (id=1130): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x9, &(0x7f0000000200)=@framed={{}, [@generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x35}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) 1.580582847s ago: executing program 1 (id=1131): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) read(r1, &(0x7f0000000380)=""/66, 0x42) 1.579567304s ago: executing program 4 (id=1132): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 1.528734895s ago: executing program 0 (id=1133): socket$inet6_tcp(0xa, 0x1, 0x0) timerfd_create(0x8, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.436303051s ago: executing program 4 (id=1134): socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 1.428126793s ago: executing program 3 (id=1135): syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 1.2817232s ago: executing program 0 (id=1136): unshare(0x400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) 932.464542ms ago: executing program 0 (id=1137): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) ftruncate(r0, 0x0) 728.623154ms ago: executing program 0 (id=1138): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r1, &(0x7f0000004500)={0x2020}, 0xfffffe0c) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r0, 0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 560.593185ms ago: executing program 0 (id=1139): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) 420.48687ms ago: executing program 3 (id=1140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x38, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 0s ago: executing program 3 (id=1141): socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) socket$phonet(0x23, 0x2, 0x1) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffeb9, 0x2, {{0x20003, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x5a9e415825a98049}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x2) ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f0000000240)={0xe5, 0x7ff, 0x1, 0x1, 0x80, 0x0, 0x400000000000}) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffeb0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r3, 0x47171399955cbec7, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008080}, 0x20040001) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) kernel console output (not intermixed with test programs): inder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 420.833253][ T31] audit: type=1400 audit(1788764445.932:427): avc: denied { set_context_mgr } for pid=8423 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 421.328180][ T5780] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 421.506914][ T5780] usb 3-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 421.542835][ T5780] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 421.542866][ T5780] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 421.542888][ T5780] usb 3-1: config 0 interface 0 has no altsetting 0 [ 421.542907][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.585168][ T5780] usb 3-1: config 0 descriptor?? [ 422.261177][ T5780] input: HID 0518:0002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0518:0002.0008/input/input10 [ 422.706783][ T8444] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 422.706907][ T8444] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 422.708790][ T8444] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 423.603103][ T5780] ezkey 0003:0518:0002.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0518:0002] on usb-dummy_hcd.2-1/input0 [ 423.646643][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 423.659146][ T5780] usb 3-1: USB disconnect, device number 19 [ 423.888896][ T8459] fido_id[8459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 423.945341][ T31] audit: type=1400 audit(1788764449.062:428): avc: denied { read write } for pid=8464 comm="syz.1.643" name="sg0" dev="devtmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 423.945649][ T31] audit: type=1400 audit(1788764449.062:429): avc: denied { open } for pid=8464 comm="syz.1.643" path="/dev/sg0" dev="devtmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 424.066431][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 425.867725][ T5612] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 427.245242][ T8505] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 427.255007][ T8505] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 427.255065][ T8505] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 428.283104][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'. [ 428.392711][ T8514] FAULT_INJECTION: forcing a failure. [ 428.392711][ T8514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.392766][ T8514] CPU: 1 UID: 0 PID: 8514 Comm: syz.3.656 Not tainted syzkaller #0 PREEMPT(full) [ 428.392785][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 428.392795][ T8514] Call Trace: [ 428.392800][ T8514] [ 428.392806][ T8514] dump_stack_lvl+0x100/0x190 [ 428.392832][ T8514] should_fail_ex.cold+0x5/0xa [ 428.392856][ T8514] _copy_to_user+0x32/0xd0 [ 428.392882][ T8514] simple_read_from_buffer+0xcb/0x170 [ 428.392903][ T8514] proc_fail_nth_read+0x1af/0x230 [ 428.392924][ T8514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.392944][ T8514] ? rw_verify_area+0xce/0x6d0 [ 428.392967][ T8514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.392985][ T8514] vfs_read+0x1e4/0xb40 [ 428.393001][ T8514] ? lock_acquire+0x1d1/0x380 [ 428.393017][ T8514] ? __fget_files+0x34/0x3d0 [ 428.393035][ T8514] ? __pfx_vfs_read+0x10/0x10 [ 428.393048][ T8514] ? find_held_lock+0x2b/0x80 [ 428.393070][ T8514] ? __fget_files+0x215/0x3d0 [ 428.393092][ T8514] ? __fget_files+0x21f/0x3d0 [ 428.393116][ T8514] ksys_read+0x12a/0x250 [ 428.393131][ T8514] ? __pfx_ksys_read+0x10/0x10 [ 428.393152][ T8514] do_syscall_64+0x123/0x790 [ 428.393175][ T8514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.393191][ T8514] RIP: 0033:0x7f844f15e98e [ 428.393205][ T8514] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.393220][ T8514] RSP: 002b:00007f84500d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 428.393236][ T8514] RAX: ffffffffffffffda RBX: 00007f84500d46c0 RCX: 00007f844f15e98e [ 428.393245][ T8514] RDX: 000000000000000f RSI: 00007f84500d40a0 RDI: 0000000000000004 [ 428.393254][ T8514] RBP: 00007f84500d4090 R08: 0000000000000000 R09: 0000000000000000 [ 428.393262][ T8514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.393270][ T8514] R13: 00007f844f426038 R14: 00007f844f425fa0 R15: 00007ffe78f68aa8 [ 428.393289][ T8514] [ 431.022260][ T5612] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 431.507969][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'. [ 433.704957][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 434.109692][ T8554] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 434.363943][ T31] audit: type=1400 audit(1788764459.482:430): avc: denied { bind } for pid=8556 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 434.529171][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.529305][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.377473][ T4918] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 435.521064][ T31] audit: type=1400 audit(1788764460.642:431): avc: denied { setopt } for pid=8556 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 435.698172][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 435.734468][ T31] audit: type=1400 audit(1788764460.852:432): avc: denied { create } for pid=8556 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 435.762150][ T31] audit: type=1400 audit(1788764460.882:433): avc: denied { ioctl } for pid=8556 comm="syz.0.662" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18768 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 436.788314][ T5716] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 436.788450][ T5793] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 436.985254][ T8580] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 437.065115][ T31] audit: type=1400 audit(1788764462.162:434): avc: denied { mount } for pid=8578 comm="syz.1.672" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 437.402624][ T5716] usb 1-1: Using ep0 maxpacket: 8 [ 437.604948][ T5793] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 438.620109][ T5793] usb 4-1: config 1 has an invalid interface number: 82 but max is 0 [ 438.620145][ T5793] usb 4-1: config 1 has no interface number 0 [ 438.620178][ T5793] usb 4-1: config 1 interface 82 has no altsetting 0 [ 438.649550][ T5716] usb 1-1: device descriptor read/all, error -71 [ 439.055977][ T5793] usb 4-1: string descriptor 0 read error: -71 [ 439.056088][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.341514][ T5793] usb 4-1: can't set config #1, error -71 [ 439.346107][ T5793] usb 4-1: USB disconnect, device number 12 [ 439.354016][ T31] audit: type=1400 audit(1788764464.462:435): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 441.510387][ T8597] FAULT_INJECTION: forcing a failure. [ 441.510387][ T8597] name failslab, interval 1, probability 0, space 0, times 0 [ 441.536721][ T8597] CPU: 0 UID: 0 PID: 8597 Comm: syz.1.680 Not tainted syzkaller #0 PREEMPT(full) [ 441.536748][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 441.536757][ T8597] Call Trace: [ 441.536764][ T8597] [ 441.536773][ T8597] dump_stack_lvl+0x100/0x190 [ 441.536804][ T8597] should_fail_ex.cold+0x5/0xa [ 441.536830][ T8597] should_failslab+0xc2/0x120 [ 441.536853][ T8597] __kmalloc_noprof+0xfc/0x840 [ 441.536870][ T8597] ? trace_contention_end+0x126/0x160 [ 441.536890][ T8597] ? __alloc_workqueue+0x10f/0x1950 [ 441.536918][ T8597] __alloc_workqueue+0x10f/0x1950 [ 441.536942][ T8597] ? __pfx___mutex_lock+0x10/0x10 [ 441.536967][ T8597] alloc_workqueue_noprof+0xc7/0x130 [ 441.536990][ T8597] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 441.537020][ T8597] ? __asan_memcpy+0x3c/0x60 [ 441.537052][ T8597] loop_configure+0xddc/0x1590 [ 441.537085][ T8597] ? lock_acquire+0x1d1/0x380 [ 441.537104][ T8597] ? unwind_next_frame+0xbd/0x2090 [ 441.537136][ T8597] ? __lock_acquire+0x5c0/0x1f40 [ 441.537162][ T8597] ? is_bpf_text_address+0x8a/0x1a0 [ 441.537186][ T8597] ? __pfx_loop_configure+0x10/0x10 [ 441.537209][ T8597] ? bpf_ksym_find+0x128/0x1c0 [ 441.537258][ T8597] lo_ioctl+0xe45/0x1df0 [ 441.537284][ T8597] ? stack_depot_save_flags+0x27/0x9f0 [ 441.537306][ T8597] ? __lock_acquire+0x5c0/0x1f40 [ 441.537325][ T8597] ? __lock_acquire+0x5c0/0x1f40 [ 441.537342][ T8597] ? __kasan_slab_free+0x5f/0x80 [ 441.537358][ T8597] ? kfree+0x22b/0x6d0 [ 441.537379][ T8597] ? tomoyo_path_number_perm+0x46d/0x580 [ 441.537405][ T8597] ? security_file_ioctl+0xd3/0x230 [ 441.537432][ T8597] ? __x64_sys_ioctl+0xb7/0x210 [ 441.537449][ T8597] ? do_syscall_64+0x123/0x790 [ 441.537469][ T8597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.537495][ T8597] ? __pfx_lo_ioctl+0x10/0x10 [ 441.537520][ T8597] ? avc_has_extended_perms+0x201/0x1080 [ 441.537544][ T8597] ? find_held_lock+0x2b/0x80 [ 441.537567][ T8597] ? avc_has_extended_perms+0x33a/0x1080 [ 441.537589][ T8597] ? avc_has_extended_perms+0x33a/0x1080 [ 441.537617][ T8597] ? avc_has_extended_perms+0x484/0x1080 [ 441.537645][ T8597] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 441.537671][ T8597] ? kasan_quarantine_put+0x104/0x240 [ 441.537689][ T8597] ? blk_get_meta_cap+0xd4/0x6c0 [ 441.537709][ T8597] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 441.537726][ T8597] ? tomoyo_path_number_perm+0x28f/0x580 [ 441.537760][ T8597] ? blkdev_common_ioctl+0x515/0x2b80 [ 441.537805][ T8597] ? __fget_files+0x34/0x3d0 [ 441.537835][ T8597] ? __pfx_lo_ioctl+0x10/0x10 [ 441.537862][ T8597] blkdev_ioctl+0x5ad/0x6f0 [ 441.537879][ T8597] ? __pfx_blkdev_ioctl+0x10/0x10 [ 441.537897][ T8597] ? selinux_file_ioctl+0x13b/0x290 [ 441.537914][ T8597] ? selinux_file_ioctl+0xb6/0x290 [ 441.537933][ T8597] ? __pfx_blkdev_ioctl+0x10/0x10 [ 441.537952][ T8597] __x64_sys_ioctl+0x18e/0x210 [ 441.537972][ T8597] do_syscall_64+0x123/0x790 [ 441.537995][ T8597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.538013][ T8597] RIP: 0033:0x7fc3d4f9e159 [ 441.538030][ T8597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.538046][ T8597] RSP: 002b:00007fc3d31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.538065][ T8597] RAX: ffffffffffffffda RBX: 00007fc3d5225fa0 RCX: 00007fc3d4f9e159 [ 441.538077][ T8597] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 441.538087][ T8597] RBP: 00007fc3d31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 441.538098][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.538108][ T8597] R13: 00007fc3d5226038 R14: 00007fc3d5225fa0 R15: 00007fff463ec7a8 [ 441.538133][ T8597] [ 442.122499][ T8604] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 442.131632][ T8604] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 442.131695][ T8604] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 442.155720][ T8599] ceph: No mds server is up or the cluster is laggy [ 443.752049][ T8611] can0: slcan on ptm0. [ 444.148744][ T8609] can0 (unregistered): slcan off ptm0. [ 444.212088][ T8614] syzkaller0: entered promiscuous mode [ 444.212120][ T8614] syzkaller0: entered allmulticast mode [ 444.402814][ T31] audit: type=1400 audit(1788764469.522:436): avc: denied { create } for pid=8617 comm="syz.2.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 446.508533][ T8628] FAULT_INJECTION: forcing a failure. [ 446.508533][ T8628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 446.508637][ T8628] CPU: 1 UID: 0 PID: 8628 Comm: syz.3.687 Not tainted syzkaller #0 PREEMPT(full) [ 446.508660][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 446.508670][ T8628] Call Trace: [ 446.508677][ T8628] [ 446.508684][ T8628] dump_stack_lvl+0x100/0x190 [ 446.508716][ T8628] should_fail_ex.cold+0x5/0xa [ 446.508738][ T8628] ? prepare_alloc_pages+0x16d/0x5b0 [ 446.508763][ T8628] should_fail_alloc_page+0xeb/0x140 [ 446.508787][ T8628] prepare_alloc_pages+0x1f0/0x5b0 [ 446.508810][ T8628] ? __css_rstat_updated+0x1ce/0x590 [ 446.508835][ T8628] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 446.508873][ T8628] ? __cgroup_account_cputime+0xd8/0x130 [ 446.508902][ T8628] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 446.508937][ T8628] ? __lock_acquire+0x5c0/0x1f40 [ 446.508957][ T8628] ? pick_task_fair+0x136/0x1e10 [ 446.508990][ T8628] ? do_raw_spin_lock+0x128/0x260 [ 446.509018][ T8628] ? __lock_acquire+0x5c0/0x1f40 [ 446.509036][ T8628] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.509064][ T8628] ? policy_nodemask+0xed/0x4f0 [ 446.509091][ T8628] alloc_pages_mpol+0x201/0x550 [ 446.509116][ T8628] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 446.509140][ T8628] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 446.509173][ T8628] folio_alloc_mpol_noprof+0x36/0x260 [ 446.509204][ T8628] vma_alloc_folio_noprof+0xed/0x1d0 [ 446.509231][ T8628] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 446.509258][ T8628] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 446.509285][ T8628] do_anonymous_page+0xac9/0x2050 [ 446.509319][ T8628] ? __pfx_do_anonymous_page+0x10/0x10 [ 446.509338][ T8628] ? rcu_read_unlock+0x2d/0xb0 [ 446.509354][ T8628] ? rcu_read_unlock+0x2d/0xb0 [ 446.509369][ T8628] ? __pte_offset_map+0x179/0x310 [ 446.509384][ T8628] __handle_mm_fault+0x1ff3/0x2f60 [ 446.509402][ T8628] ? __pfx___handle_mm_fault+0x10/0x10 [ 446.509418][ T8628] ? irqentry_exit+0x24d/0xa10 [ 446.509432][ T8628] ? lockdep_hardirqs_on+0x7d/0x110 [ 446.509452][ T8628] ? handle_mm_fault+0x1fe/0xa20 [ 446.509469][ T8628] handle_mm_fault+0x363/0xa20 [ 446.509488][ T8628] do_user_addr_fault+0x745/0x12f0 [ 446.509507][ T8628] exc_page_fault+0x6f/0xd0 [ 446.509520][ T8628] asm_exc_page_fault+0x26/0x30 [ 446.509531][ T8628] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 446.509549][ T8628] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 446.509562][ T8628] RSP: 0018:ffffc900037379b8 EFLAGS: 00050216 [ 446.509572][ T8628] RAX: 2020202070756f72 RBX: 0000000000000035 RCX: 0000000000000035 [ 446.509579][ T8628] RDX: 0000000000000001 RSI: ffff8880353d8001 RDI: 0000200000000100 [ 446.509586][ T8628] RBP: ffffc90003737bc8 R08: 0000000000000000 R09: ffffed1006a7b006 [ 446.509592][ T8628] R10: ffff8880353d8035 R11: 0000000000000001 R12: ffff8880353d8001 [ 446.509599][ T8628] R13: 0000000000000000 R14: 0000200000000100 R15: 0000000000000035 [ 446.509613][ T8628] _copy_to_iter+0x4c5/0x1720 [ 446.509635][ T8628] ? __pfx__copy_to_iter+0x10/0x10 [ 446.509651][ T8628] ? mr_mfc_seq_next+0x10d/0x3a0 [ 446.509664][ T8628] ? mr_mfc_seq_stop+0xa1/0x1d0 [ 446.509675][ T8628] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 446.509692][ T8628] seq_read_iter+0x691/0x1270 [ 446.509711][ T8628] seq_read+0x344/0x4d0 [ 446.509723][ T8628] ? __pfx_seq_read+0x10/0x10 [ 446.509734][ T8628] ? lockdep_hardirqs_on+0x7d/0x110 [ 446.509747][ T8628] ? irqentry_exit+0x24d/0xa10 [ 446.509768][ T8628] ? __pfx_seq_read+0x10/0x10 [ 446.509780][ T8628] proc_reg_read+0x240/0x330 [ 446.509796][ T8628] ? __pfx_proc_reg_read+0x10/0x10 [ 446.509812][ T8628] vfs_read+0x1e4/0xb40 [ 446.509823][ T8628] ? lock_acquire+0x1d1/0x380 [ 446.509834][ T8628] ? __fget_files+0x34/0x3d0 [ 446.509847][ T8628] ? __pfx_vfs_read+0x10/0x10 [ 446.509856][ T8628] ? find_held_lock+0x2b/0x80 [ 446.509871][ T8628] ? __fget_files+0x215/0x3d0 [ 446.509883][ T8628] ? __fget_files+0x215/0x3d0 [ 446.509898][ T8628] ? __fget_files+0x21f/0x3d0 [ 446.509915][ T8628] __x64_sys_pread64+0x1eb/0x250 [ 446.509926][ T8628] ? __pfx___x64_sys_pread64+0x10/0x10 [ 446.509942][ T8628] do_syscall_64+0x123/0x790 [ 446.509957][ T8628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.509969][ T8628] RIP: 0033:0x7f844f19e159 [ 446.509978][ T8628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.509988][ T8628] RSP: 002b:00007f84500d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 446.509998][ T8628] RAX: ffffffffffffffda RBX: 00007f844f425fa0 RCX: 00007f844f19e159 [ 446.510005][ T8628] RDX: 00000000000000fd RSI: 0000200000000100 RDI: 0000000000000003 [ 446.510011][ T8628] RBP: 00007f84500d4090 R08: 0000000000000000 R09: 0000000000000000 [ 446.510018][ T8628] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 446.510024][ T8628] R13: 00007f844f426038 R14: 00007f844f425fa0 R15: 00007ffe78f68aa8 [ 446.510038][ T8628] [ 447.356769][ T8634] Cannot find add_set index 0 as target [ 449.073767][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 449.943804][ T31] audit: type=1400 audit(1788764475.062:437): avc: denied { mount } for pid=8645 comm="syz.4.691" name="/" dev="rpc_pipefs" ino=18363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 450.028734][ T31] audit: type=1400 audit(1788764475.152:438): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 450.055971][ T31] audit: type=1400 audit(1788764475.172:439): avc: denied { write } for pid=8647 comm="syz.1.685" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 450.112028][ T31] audit: type=1400 audit(1788764475.232:440): avc: denied { call } for pid=8647 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 450.225498][ T8650] ceph: No mds server is up or the cluster is laggy [ 450.330996][ T8660] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 450.409408][ T5695] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 450.744946][ T8648] FAULT_INJECTION: forcing a failure. [ 450.744946][ T8648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.760603][ T8648] CPU: 0 UID: 0 PID: 8648 Comm: syz.1.685 Not tainted syzkaller #0 PREEMPT(full) [ 450.760630][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 450.760641][ T8648] Call Trace: [ 450.760648][ T8648] [ 450.760657][ T8648] dump_stack_lvl+0x100/0x190 [ 450.760693][ T8648] should_fail_ex.cold+0x5/0xa [ 450.760725][ T8648] _copy_to_user+0x32/0xd0 [ 450.760756][ T8648] binder_ioctl+0x287f/0x74a0 [ 450.760795][ T8648] ? __pfx_binder_ioctl+0x10/0x10 [ 450.760818][ T8648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 450.760841][ T8648] ? do_vfs_ioctl+0x226/0x13e0 [ 450.760860][ T8648] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 450.760877][ T8648] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 450.760900][ T8648] ? __pfx_autoremove_wake_function+0x10/0x10 [ 450.760928][ T8648] ? __fget_files+0x34/0x3d0 [ 450.760961][ T8648] ? selinux_file_ioctl+0x13b/0x290 [ 450.760978][ T8648] ? selinux_file_ioctl+0xb6/0x290 [ 450.760997][ T8648] ? __pfx_binder_ioctl+0x10/0x10 [ 450.761017][ T8648] __x64_sys_ioctl+0x18e/0x210 [ 450.761038][ T8648] do_syscall_64+0x123/0x790 [ 450.761064][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.761084][ T8648] RIP: 0033:0x7fc3d4f9e159 [ 450.761101][ T8648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.761118][ T8648] RSP: 002b:00007fc3d31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.761137][ T8648] RAX: ffffffffffffffda RBX: 00007fc3d5225fa0 RCX: 00007fc3d4f9e159 [ 450.761149][ T8648] RDX: 0000200000000380 RSI: 00000000c0306201 RDI: 0000000000000003 [ 450.761161][ T8648] RBP: 00007fc3d31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.761172][ T8648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.761182][ T8648] R13: 00007fc3d5226038 R14: 00007fc3d5225fa0 R15: 00007fff463ec7a8 [ 450.761207][ T8648] [ 450.808171][ T5695] usb 5-1: Using ep0 maxpacket: 16 [ 450.830968][ T5695] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 450.839301][ T8648] binder: 8647:8648 ioctl c0306201 200000000380 returned -14 [ 451.146909][ T5695] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.146968][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.378024][ T5695] usb 5-1: config 0 descriptor?? [ 451.740626][ T5695] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 452.481573][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 454.010182][ T30] usb 5-1: USB disconnect, device number 11 [ 455.544961][ T8703] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 455.545092][ T8703] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 455.545227][ T8703] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 460.177841][ T8727] erspan1: entered allmulticast mode [ 460.195247][ T8732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8732 comm=syz.4.711 [ 464.027415][ T4918] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 467.492591][ T8796] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 467.492734][ T8796] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 467.492801][ T8796] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 468.553578][ T8803] netlink: 'syz.1.729': attribute type 11 has an invalid length. [ 468.553625][ T8803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.729'. [ 470.977529][ T4918] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 472.674535][ T8835] FAULT_INJECTION: forcing a failure. [ 472.674535][ T8835] name failslab, interval 1, probability 0, space 0, times 0 [ 472.690401][ T8835] CPU: 1 UID: 0 PID: 8835 Comm: syz.4.727 Not tainted syzkaller #0 PREEMPT(full) [ 472.690429][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 472.690439][ T8835] Call Trace: [ 472.690446][ T8835] [ 472.690453][ T8835] dump_stack_lvl+0x100/0x190 [ 472.690486][ T8835] should_fail_ex.cold+0x5/0xa [ 472.690511][ T8835] should_failslab+0xc2/0x120 [ 472.690549][ T8835] __kmalloc_noprof+0xfc/0x840 [ 472.690568][ T8835] ? fib6_info_alloc+0x40/0x160 [ 472.690599][ T8835] fib6_info_alloc+0x40/0x160 [ 472.690627][ T8835] ip6_route_info_create+0x14c/0xad0 [ 472.690657][ T8835] ip6_route_add+0x4b/0x1d0 [ 472.690680][ T8835] ipv6_route_ioctl+0x42d/0x5c0 [ 472.690702][ T8835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.690727][ T8835] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 472.690750][ T8835] ? find_held_lock+0x2b/0x80 [ 472.690796][ T8835] inet6_ioctl+0x26a/0x2b0 [ 472.690823][ T8835] ? __pfx_inet6_ioctl+0x10/0x10 [ 472.690864][ T8835] sock_do_ioctl+0x118/0x280 [ 472.690888][ T8835] ? __pfx_sock_do_ioctl+0x10/0x10 [ 472.690910][ T8835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 472.690934][ T8835] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 472.690950][ T8835] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 472.690969][ T8835] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 472.690987][ T8835] sock_ioctl+0x599/0x6b0 [ 472.691003][ T8835] ? __pfx_sock_ioctl+0x10/0x10 [ 472.691027][ T8835] ? selinux_file_ioctl+0x13b/0x290 [ 472.691037][ T8835] ? selinux_file_ioctl+0xb6/0x290 [ 472.691048][ T8835] ? __pfx_sock_ioctl+0x10/0x10 [ 472.691064][ T8835] __x64_sys_ioctl+0x18e/0x210 [ 472.691075][ T8835] do_syscall_64+0x123/0x790 [ 472.691091][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.691103][ T8835] RIP: 0033:0x7f27d1f9e159 [ 472.691113][ T8835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.691124][ T8835] RSP: 002b:00007f27d2e23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.691136][ T8835] RAX: ffffffffffffffda RBX: 00007f27d2225fa0 RCX: 00007f27d1f9e159 [ 472.691143][ T8835] RDX: 00002000000002c0 RSI: 000000000000890b RDI: 0000000000000004 [ 472.691150][ T8835] RBP: 00007f27d2e23090 R08: 0000000000000000 R09: 0000000000000000 [ 472.691156][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.691163][ T8835] R13: 00007f27d2226038 R14: 00007f27d2225fa0 R15: 00007ffd798d68d8 [ 472.691176][ T8835] [ 474.678681][ T31] audit: type=1400 audit(1788764499.802:441): avc: denied { create } for pid=8842 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 474.755689][ T8843] ieee802154 phy0 wpan0: encryption failed: -22 [ 474.756713][ T31] audit: type=1400 audit(1788764499.872:442): avc: denied { write } for pid=8842 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 475.180476][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 475.184638][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.742'. [ 475.437012][ T31] audit: type=1400 audit(1788764500.552:443): avc: denied { mounton } for pid=8842 comm="syz.4.741" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 476.072328][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 479.273292][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 479.767460][ T5695] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 479.775267][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 479.897526][ T5695] usb 5-1: device descriptor read/64, error -32 [ 480.151080][ T5695] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 480.158907][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 480.287472][ T5695] usb 5-1: device descriptor read/64, error -32 [ 480.398144][ T5695] usb usb5-port1: attempt power cycle [ 480.747706][ T5695] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 480.770706][ T5695] usb 5-1: Using ep0 maxpacket: 32 [ 480.789256][ T5695] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 480.834105][ T5695] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 480.834160][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 480.835581][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 480.836252][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 480.836339][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 480.934915][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.934965][ T5695] usb 5-1: Product: syz [ 480.952266][ T5695] usb 5-1: Manufacturer: syz [ 480.952320][ T5695] usb 5-1: SerialNumber: syz [ 481.024081][ T5695] usb 5-1: config 0 descriptor?? [ 481.577413][ T31] audit: type=1400 audit(1788764506.692:444): avc: denied { open } for pid=8875 comm="syz.4.747" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 481.613013][ T8876] 9p: Bad value for 'wfdno' [ 481.645206][ T31] audit: type=1400 audit(1788764506.762:445): avc: denied { read } for pid=8875 comm="syz.4.747" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 481.645273][ T31] audit: type=1400 audit(1788764506.762:446): avc: denied { open } for pid=8875 comm="syz.4.747" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 481.670955][ T31] audit: type=1400 audit(1788764506.792:447): avc: denied { ioctl } for pid=8875 comm="syz.4.747" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 481.699228][ T8876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.813535][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.820404][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.827939][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.834510][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.835101][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.841382][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.847689][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.853941][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.866361][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.872765][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.879394][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.886138][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.893992][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.900374][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.906729][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.913965][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.920219][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.926481][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.933096][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.939754][ T5695] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 481.939804][ T5695] input input11: Timeout waiting for response from device. [ 481.996374][ T5695] usb 5-1: USB disconnect, device number 14 [ 482.631953][ T31] audit: type=1400 audit(1788764507.722:448): avc: denied { read } for pid=8889 comm="syz.1.739" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 483.663329][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 486.530077][ T8915] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 486.921244][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 487.894998][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 489.492260][ T8958] FAULT_INJECTION: forcing a failure. [ 489.492260][ T8958] name failslab, interval 1, probability 0, space 0, times 0 [ 489.492307][ T8958] CPU: 1 UID: 0 PID: 8958 Comm: syz.2.767 Not tainted syzkaller #0 PREEMPT(full) [ 489.492327][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 489.492336][ T8958] Call Trace: [ 489.492341][ T8958] [ 489.492347][ T8958] dump_stack_lvl+0x100/0x190 [ 489.492373][ T8958] should_fail_ex.cold+0x5/0xa [ 489.492396][ T8958] should_failslab+0xc2/0x120 [ 489.492416][ T8958] __kmalloc_noprof+0xfc/0x840 [ 489.492432][ T8958] ? rcu_is_watching+0x13/0xc0 [ 489.492453][ T8958] ? tomoyo_realpath_from_path+0xb6/0x690 [ 489.492475][ T8958] tomoyo_realpath_from_path+0xb6/0x690 [ 489.492498][ T8958] tomoyo_path_number_perm+0x23c/0x580 [ 489.492520][ T8958] ? tomoyo_path_number_perm+0x22e/0x580 [ 489.492544][ T8958] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 489.492576][ T8958] ? __lock_acquire+0x5c0/0x1f40 [ 489.492603][ T8958] ? __fget_files+0x34/0x3d0 [ 489.492622][ T8958] ? find_held_lock+0x2b/0x80 [ 489.492642][ T8958] ? hook_file_ioctl_common+0x140/0x440 [ 489.492743][ T8958] ? __fget_files+0x21f/0x3d0 [ 489.492765][ T8958] security_file_ioctl+0xd3/0x230 [ 489.492791][ T8958] __x64_sys_ioctl+0xb7/0x210 [ 489.492809][ T8958] do_syscall_64+0x123/0x790 [ 489.492830][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.492847][ T8958] RIP: 0033:0x7f3d03f9e159 [ 489.492860][ T8958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.492876][ T8958] RSP: 002b:00007f3d04eaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.492892][ T8958] RAX: ffffffffffffffda RBX: 00007f3d04225fa0 RCX: 00007f3d03f9e159 [ 489.492903][ T8958] RDX: 00002000000001c0 RSI: 00000000c100565c RDI: 0000000000000003 [ 489.492912][ T8958] RBP: 00007f3d04eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 489.492922][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.492931][ T8958] R13: 00007f3d04226038 R14: 00007f3d04225fa0 R15: 00007ffdf9e64f28 [ 489.492953][ T8958] [ 489.492959][ T8958] ERROR: Out of memory at tomoyo_realpath_from_path. [ 489.569381][ T8955] FAULT_INJECTION: forcing a failure. [ 489.569381][ T8955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.569408][ T8955] CPU: 1 UID: 0 PID: 8955 Comm: syz.4.766 Not tainted syzkaller #0 PREEMPT(full) [ 489.569427][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 489.569436][ T8955] Call Trace: [ 489.569442][ T8955] [ 489.569448][ T8955] dump_stack_lvl+0x100/0x190 [ 489.569476][ T8955] should_fail_ex.cold+0x5/0xa [ 489.569498][ T8955] _copy_from_user+0x2e/0xd0 [ 489.569523][ T8955] snd_seq_write+0x413/0x6d0 [ 489.569547][ T8955] ? __pfx_snd_seq_write+0x10/0x10 [ 489.569567][ T8955] ? bpf_lsm_file_permission+0x9/0x10 [ 489.569586][ T8955] ? security_file_permission+0x76/0x210 [ 489.569605][ T8955] ? rw_verify_area+0xce/0x6d0 [ 489.569630][ T8955] vfs_write+0x2aa/0x1050 [ 489.569646][ T8955] ? __pfx_snd_seq_write+0x10/0x10 [ 489.569670][ T8955] ? lock_acquire+0x1d1/0x380 [ 489.569685][ T8955] ? __fget_files+0x34/0x3d0 [ 489.569703][ T8955] ? __pfx_vfs_write+0x10/0x10 [ 489.569717][ T8955] ? find_held_lock+0x2b/0x80 [ 489.569737][ T8955] ? __fget_files+0x215/0x3d0 [ 489.569754][ T8955] ? __fget_files+0x215/0x3d0 [ 489.569775][ T8955] ? __fget_files+0x21f/0x3d0 [ 489.569799][ T8955] ksys_write+0x1f8/0x250 [ 489.569814][ T8955] ? __pfx_ksys_write+0x10/0x10 [ 489.569836][ T8955] do_syscall_64+0x123/0x790 [ 489.569858][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.569874][ T8955] RIP: 0033:0x7f27d1f9e159 [ 489.569888][ T8955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.569902][ T8955] RSP: 002b:00007f27d2e23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 489.569918][ T8955] RAX: ffffffffffffffda RBX: 00007f27d2225fa0 RCX: 00007f27d1f9e159 [ 489.569929][ T8955] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 489.569938][ T8955] RBP: 00007f27d2e23090 R08: 0000000000000000 R09: 0000000000000000 [ 489.569948][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.569957][ T8955] R13: 00007f27d2226038 R14: 00007f27d2225fa0 R15: 00007ffd798d68d8 [ 489.569979][ T8955] [ 489.705870][ T8951] ceph: No mds server is up or the cluster is laggy [ 489.710471][ T5716] libceph: connect (1)[c::]:6789 error -101 [ 489.710641][ T5716] libceph: mon0 (1)[c::]:6789 connect error [ 489.741869][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 492.072180][ T4918] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 492.445970][ T8979] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 493.316546][ T31] audit: type=1400 audit(1788764518.432:449): avc: denied { setopt } for pid=8983 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 495.938491][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.938552][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.000137][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 497.000238][ T9007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'. [ 497.625566][ T9007] geneve2: entered promiscuous mode [ 497.631387][ T9007] geneve2: entered allmulticast mode [ 498.914396][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 500.874609][ T9041] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 502.251942][ T2281] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 502.340228][ T31] audit: type=1326 audit(1788764527.462:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9060 comm="syz.2.790" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d03f9e159 code=0x0 [ 502.409707][ T2281] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 502.410858][ T2281] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.410878][ T2281] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.414766][ T2281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 502.414787][ T2281] usb 2-1: SerialNumber: syz [ 502.432698][ T31] audit: type=1400 audit(1788764527.552:451): avc: denied { ioctl } for pid=9060 comm="syz.2.790" path="socket:[19456]" dev="sockfs" ino=19456 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 502.444872][ T2281] usb 2-1: 0:2 : does not exist [ 503.001526][ T9071] ceph: No mds server is up or the cluster is laggy [ 504.300152][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 504.532963][ T5713] usb 2-1: USB disconnect, device number 20 [ 504.983098][ T4918] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 505.987023][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 506.018715][ T9100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.793'. [ 506.342927][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 506.863778][ T9110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.097621][ T4918] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 508.747717][ T9133] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 508.747757][ T9133] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 508.747788][ T9133] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 509.911411][ T9145] /dev/nullb0: Can't open blockdev [ 510.008004][ T5716] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 510.187745][ T5716] usb 2-1: Using ep0 maxpacket: 16 [ 510.193790][ T5716] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 510.208577][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.208621][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.208650][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.337819][ T5716] usb 2-1: config 0 descriptor?? [ 511.601593][ T5716] hid_parser_main: 9 callbacks suppressed [ 511.601631][ T5716] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 511.601898][ T5716] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 511.601914][ T5716] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 511.601929][ T5716] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 511.603122][ T5716] konepure 0003:1E7D:2DB4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 512.575512][ T5713] usb 2-1: USB disconnect, device number 21 [ 513.178278][ T9160] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 513.777679][ T4918] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 513.894934][ T9162] FAULT_INJECTION: forcing a failure. [ 513.894934][ T9162] name failslab, interval 1, probability 0, space 0, times 0 [ 513.917252][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.1.811 Not tainted syzkaller #0 PREEMPT(full) [ 513.917280][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 513.917293][ T9162] Call Trace: [ 513.917299][ T9162] [ 513.917305][ T9162] dump_stack_lvl+0x100/0x190 [ 513.917336][ T9162] should_fail_ex.cold+0x5/0xa [ 513.917362][ T9162] should_failslab+0xc2/0x120 [ 513.917386][ T9162] __kmalloc_noprof+0xfc/0x840 [ 513.917405][ T9162] ? trace_contention_end+0x126/0x160 [ 513.917434][ T9162] ? __alloc_workqueue+0x10f/0x1950 [ 513.917462][ T9162] __alloc_workqueue+0x10f/0x1950 [ 513.917488][ T9162] ? __pfx___mutex_lock+0x10/0x10 [ 513.917517][ T9162] alloc_workqueue_noprof+0xc7/0x130 [ 513.917541][ T9162] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 513.917572][ T9162] ? __asan_memcpy+0x3c/0x60 [ 513.917603][ T9162] loop_configure+0xddc/0x1590 [ 513.917636][ T9162] ? lock_acquire+0x1d1/0x380 [ 513.917655][ T9162] ? unwind_next_frame+0xbd/0x2090 [ 513.917688][ T9162] ? __lock_acquire+0x5c0/0x1f40 [ 513.917708][ T9162] ? is_bpf_text_address+0x8a/0x1a0 [ 513.917733][ T9162] ? __pfx_loop_configure+0x10/0x10 [ 513.917758][ T9162] ? bpf_ksym_find+0x128/0x1c0 [ 513.917809][ T9162] lo_ioctl+0xe45/0x1df0 [ 513.917836][ T9162] ? stack_depot_save_flags+0x27/0x9f0 [ 513.917859][ T9162] ? __lock_acquire+0x5c0/0x1f40 [ 513.917881][ T9162] ? __lock_acquire+0x5c0/0x1f40 [ 513.917900][ T9162] ? __kasan_slab_free+0x5f/0x80 [ 513.917919][ T9162] ? kfree+0x22b/0x6d0 [ 513.917942][ T9162] ? tomoyo_path_number_perm+0x46d/0x580 [ 513.917967][ T9162] ? security_file_ioctl+0xd3/0x230 [ 513.917995][ T9162] ? __x64_sys_ioctl+0xb7/0x210 [ 513.918013][ T9162] ? do_syscall_64+0x123/0x790 [ 513.918035][ T9162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.918061][ T9162] ? __pfx_lo_ioctl+0x10/0x10 [ 513.918086][ T9162] ? avc_has_extended_perms+0x201/0x1080 [ 513.918111][ T9162] ? find_held_lock+0x2b/0x80 [ 513.918135][ T9162] ? avc_has_extended_perms+0x33a/0x1080 [ 513.918158][ T9162] ? avc_has_extended_perms+0x33a/0x1080 [ 513.918186][ T9162] ? avc_has_extended_perms+0x484/0x1080 [ 513.918217][ T9162] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 513.918244][ T9162] ? kasan_quarantine_put+0x104/0x240 [ 513.918262][ T9162] ? blk_get_meta_cap+0xd4/0x6c0 [ 513.918282][ T9162] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 513.918299][ T9162] ? tomoyo_path_number_perm+0x28f/0x580 [ 513.918334][ T9162] ? blkdev_common_ioctl+0x515/0x2b80 [ 513.918381][ T9162] ? __fget_files+0x34/0x3d0 [ 513.918407][ T9162] ? __pfx_lo_ioctl+0x10/0x10 [ 513.918439][ T9162] blkdev_ioctl+0x5ad/0x6f0 [ 513.918458][ T9162] ? __pfx_blkdev_ioctl+0x10/0x10 [ 513.918477][ T9162] ? selinux_file_ioctl+0x13b/0x290 [ 513.918495][ T9162] ? selinux_file_ioctl+0xb6/0x290 [ 513.918514][ T9162] ? __pfx_blkdev_ioctl+0x10/0x10 [ 513.918534][ T9162] __x64_sys_ioctl+0x18e/0x210 [ 513.918554][ T9162] do_syscall_64+0x123/0x790 [ 513.918579][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.918599][ T9162] RIP: 0033:0x7fc3d4f9e159 [ 513.918615][ T9162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.918633][ T9162] RSP: 002b:00007fc3d31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.918652][ T9162] RAX: ffffffffffffffda RBX: 00007fc3d5225fa0 RCX: 00007fc3d4f9e159 [ 513.918664][ T9162] RDX: 0000200000000400 RSI: 0000000000004c0a RDI: 0000000000000003 [ 513.918675][ T9162] RBP: 00007fc3d31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 513.918686][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.918697][ T9162] R13: 00007fc3d5226038 R14: 00007fc3d5225fa0 R15: 00007fff463ec7a8 [ 513.918722][ T9162] [ 514.981056][ T9171] FAULT_INJECTION: forcing a failure. [ 514.981056][ T9171] name failslab, interval 1, probability 0, space 0, times 0 [ 514.981101][ T9171] CPU: 1 UID: 0 PID: 9171 Comm: syz.3.813 Not tainted syzkaller #0 PREEMPT(full) [ 514.981121][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 514.981129][ T9171] Call Trace: [ 514.981134][ T9171] [ 514.981140][ T9171] dump_stack_lvl+0x100/0x190 [ 514.981167][ T9171] should_fail_ex.cold+0x5/0xa [ 514.981190][ T9171] should_failslab+0xc2/0x120 [ 514.981209][ T9171] __kmalloc_noprof+0xfc/0x840 [ 514.981224][ T9171] ? rcu_is_watching+0x13/0xc0 [ 514.981245][ T9171] ? tomoyo_realpath_from_path+0xb6/0x690 [ 514.981268][ T9171] tomoyo_realpath_from_path+0xb6/0x690 [ 514.981290][ T9171] tomoyo_path_number_perm+0x23c/0x580 [ 514.981312][ T9171] ? tomoyo_path_number_perm+0x22e/0x580 [ 514.981336][ T9171] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 514.981368][ T9171] ? __lock_acquire+0x5c0/0x1f40 [ 514.981395][ T9171] ? __fget_files+0x34/0x3d0 [ 514.981419][ T9171] ? find_held_lock+0x2b/0x80 [ 514.981439][ T9171] ? hook_file_ioctl_common+0x140/0x440 [ 514.981463][ T9171] ? __fget_files+0x21f/0x3d0 [ 514.981485][ T9171] security_file_ioctl+0xd3/0x230 [ 514.981511][ T9171] __x64_sys_ioctl+0xb7/0x210 [ 514.981529][ T9171] do_syscall_64+0x123/0x790 [ 514.981550][ T9171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.981567][ T9171] RIP: 0033:0x7f844f19e159 [ 514.981581][ T9171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.981596][ T9171] RSP: 002b:00007f84500d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.981612][ T9171] RAX: ffffffffffffffda RBX: 00007f844f425fa0 RCX: 00007f844f19e159 [ 514.981622][ T9171] RDX: 0000200000000200 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 514.981632][ T9171] RBP: 00007f84500d4090 R08: 0000000000000000 R09: 0000000000000000 [ 514.981645][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.981654][ T9171] R13: 00007f844f426038 R14: 00007f844f425fa0 R15: 00007ffe78f68aa8 [ 514.981676][ T9171] [ 514.981691][ T9171] ERROR: Out of memory at tomoyo_realpath_from_path. [ 515.886080][ T9179] can0: slcan on ptm1. [ 516.178302][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 516.220336][ T9175] can0 (unregistered): slcan off ptm1. [ 516.627624][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 517.217799][ T4918] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 520.692286][ T9209] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 520.692402][ T9209] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 520.692496][ T9209] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 521.489275][ T8585] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 521.617365][ T4918] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 521.662088][ T8585] usb 1-1: Using ep0 maxpacket: 16 [ 521.672465][ T8585] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 521.719666][ T8585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.731612][ T8585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.744499][ T8585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.832189][ T8585] usb 1-1: config 0 descriptor?? [ 522.118940][ T9218] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 523.591703][ T8585] konepure 0003:1E7D:2DB4.000A: unknown main item tag 0x0 [ 523.591755][ T8585] konepure 0003:1E7D:2DB4.000A: unknown main item tag 0x0 [ 523.591775][ T8585] konepure 0003:1E7D:2DB4.000A: unknown main item tag 0x0 [ 523.591790][ T8585] konepure 0003:1E7D:2DB4.000A: unknown main item tag 0x0 [ 523.639847][ T8585] konepure 0003:1E7D:2DB4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 523.850614][ T5713] usb 1-1: USB disconnect, device number 20 [ 524.043786][ T9225] fido_id[9225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 524.215692][ T9235] Invalid logical block size (18) [ 525.879150][ T5713] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 526.038284][ T5713] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 526.048492][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 526.048535][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.048578][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.092675][ T5713] usb 5-1: config 0 descriptor?? [ 526.982655][ T5713] aquacomputer_d5next 0003:0C70:F0B6.000B: item fetching failed at offset 5/7 [ 526.983211][ T5713] aquacomputer_d5next 0003:0C70:F0B6.000B: probe with driver aquacomputer_d5next failed with error -22 [ 527.020207][ T5713] usb 5-1: USB disconnect, device number 15 [ 527.787624][ T31] audit: type=1400 audit(1788764552.912:452): avc: denied { ioctl } for pid=9283 comm="syz.3.848" path="/dev/sg0" dev="devtmpfs" ino=1243 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 527.823710][ T9291] 0x000000000007-0x000000020000 : "" [ 527.920311][ T9290] netlink: 68 bytes leftover after parsing attributes in process `syz.1.834'. [ 527.938638][ T9291] ftl_cs: FTL header corrupt! [ 528.724095][ T9294] FAULT_INJECTION: forcing a failure. [ 528.724095][ T9294] name failslab, interval 1, probability 0, space 0, times 0 [ 528.724151][ T9294] CPU: 0 UID: 0 PID: 9294 Comm: syz.0.853 Not tainted syzkaller #0 PREEMPT(full) [ 528.724173][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 528.724184][ T9294] Call Trace: [ 528.724190][ T9294] [ 528.724195][ T9294] dump_stack_lvl+0x100/0x190 [ 528.724224][ T9294] should_fail_ex.cold+0x5/0xa [ 528.724249][ T9294] should_failslab+0xc2/0x120 [ 528.724269][ T9294] __kmalloc_noprof+0xfc/0x840 [ 528.724287][ T9294] ? x509_get_sig_params+0x409/0x6c0 [ 528.724376][ T9294] x509_get_sig_params+0x409/0x6c0 [ 528.724406][ T9294] x509_cert_parse+0x4e9/0x910 [ 528.724432][ T9294] x509_key_preparse+0x65/0x9c0 [ 528.724461][ T9294] asymmetric_key_preparse+0xce/0x1d0 [ 528.724485][ T9294] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 528.724507][ T9294] __key_create_or_update+0x463/0xe30 [ 528.724529][ T9294] ? __pfx___key_create_or_update+0x10/0x10 [ 528.724549][ T9294] ? lookup_user_key+0x3f3/0x1300 [ 528.724583][ T9294] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 528.724615][ T9294] key_create_or_update+0x42/0x60 [ 528.724637][ T9294] __do_sys_add_key+0x2e8/0x460 [ 528.724662][ T9294] ? __pfx___do_sys_add_key+0x10/0x10 [ 528.724691][ T9294] do_syscall_64+0x123/0x790 [ 528.724714][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.724731][ T9294] RIP: 0033:0x7fe2b539e159 [ 528.724746][ T9294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.724761][ T9294] RSP: 002b:00007fe2b618b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 528.724778][ T9294] RAX: ffffffffffffffda RBX: 00007fe2b5625fa0 RCX: 00007fe2b539e159 [ 528.724789][ T9294] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 528.724799][ T9294] RBP: 00007fe2b5435024 R08: ffffffffffffffff R09: 0000000000000000 [ 528.724808][ T9294] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 528.724817][ T9294] R13: 00007fe2b5626038 R14: 00007fe2b5625fa0 R15: 00007ffce1e8e1e8 [ 528.724840][ T9294] [ 528.955951][ T31] audit: type=1400 audit(1788764554.072:453): avc: denied { ioctl } for pid=9299 comm="syz.2.850" path="/153/trace/events/sched/sched_switch/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 529.029434][ T9298] jffs2: notice: (9298) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 529.124765][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 529.124807][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 529.124859][ T9309] FAULT_INJECTION: forcing a failure. [ 529.124859][ T9309] name failslab, interval 1, probability 0, space 0, times 0 [ 529.124885][ T9309] CPU: 1 UID: 0 PID: 9309 Comm: syz.2.857 Not tainted syzkaller #0 PREEMPT(full) [ 529.124908][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 529.124921][ T9309] Call Trace: [ 529.124928][ T9309] [ 529.124936][ T9309] dump_stack_lvl+0x100/0x190 [ 529.124969][ T9309] should_fail_ex.cold+0x5/0xa [ 529.124997][ T9309] should_failslab+0xc2/0x120 [ 529.125020][ T9309] __kmalloc_cache_noprof+0x91/0x6d0 [ 529.125048][ T9309] ? nft_add_set_elem+0x32a9/0x4280 [ 529.125071][ T9309] nft_add_set_elem+0x32a9/0x4280 [ 529.125096][ T9309] ? find_held_lock+0x2b/0x80 [ 529.125121][ T9309] ? console_srcu_read_unlock+0x41/0x60 [ 529.125143][ T9309] ? __pfx_nft_add_set_elem+0x10/0x10 [ 529.125162][ T9309] ? irq_work_queue+0xd1/0x100 [ 529.125185][ T9309] ? __wake_up_klogd+0xe5/0x140 [ 529.125205][ T9309] ? vprintk_emit+0x1c9/0x6b0 [ 529.125231][ T9309] ? __pfx_vprintk_emit+0x10/0x10 [ 529.125255][ T9309] ? ___ratelimit+0x642/0xae0 [ 529.125275][ T9309] ? find_held_lock+0x2b/0x80 [ 529.125305][ T9309] ? _printk+0xcf/0x110 [ 529.125321][ T9309] ? __pfx__printk+0x10/0x10 [ 529.125337][ T9309] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 529.125368][ T9309] ? __nla_validate_parse+0x1e7/0x28b0 [ 529.125410][ T9309] ? nla_strcmp+0xff/0x130 [ 529.125435][ T9309] ? nft_set_lookup_global+0x163/0x390 [ 529.125467][ T9309] nf_tables_newsetelem+0x721/0xa60 [ 529.125492][ T9309] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 529.125510][ T9309] ? net_generic+0x25/0x2a0 [ 529.125543][ T9309] ? __nla_parse+0x40/0x60 [ 529.125572][ T9309] nfnetlink_rcv_batch+0x1410/0x2880 [ 529.125610][ T9309] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 529.125629][ T9309] ? preempt_schedule_common+0x3c/0xb0 [ 529.125653][ T9309] ? lock_acquire+0x1d1/0x380 [ 529.125671][ T9309] ? avc_has_perm_noaudit+0x56/0x3b0 [ 529.125701][ T9309] ? avc_has_perm_noaudit+0x145/0x3b0 [ 529.125750][ T9309] ? __nla_parse+0x40/0x60 [ 529.125776][ T9309] nfnetlink_rcv+0x3bd/0x440 [ 529.125804][ T9309] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 529.125837][ T9309] netlink_unicast+0x585/0x850 [ 529.125871][ T9309] ? __pfx_netlink_unicast+0x10/0x10 [ 529.125907][ T9309] netlink_sendmsg+0x8b0/0xda0 [ 529.125935][ T9309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.125964][ T9309] ? selinux_socket_sendmsg+0x198/0x2f0 [ 529.125992][ T9309] ____sys_sendmsg+0xa4d/0xbe0 [ 529.126014][ T9309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.126039][ T9309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.126075][ T9309] ___sys_sendmsg+0x190/0x1e0 [ 529.126103][ T9309] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.126130][ T9309] ? futex_wait+0x11e/0x370 [ 529.126168][ T9309] ? find_held_lock+0x2b/0x80 [ 529.126208][ T9309] __sys_sendmsg+0x160/0x210 [ 529.126226][ T9309] ? __pfx___sys_sendmsg+0x10/0x10 [ 529.126261][ T9309] do_syscall_64+0x123/0x790 [ 529.126287][ T9309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.126307][ T9309] RIP: 0033:0x7f3d03f9e159 [ 529.126325][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.126342][ T9309] RSP: 002b:00007f3d04eaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.126359][ T9309] RAX: ffffffffffffffda RBX: 00007f3d04225fa0 RCX: 00007f3d03f9e159 [ 529.126371][ T9309] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 529.126381][ T9309] RBP: 00007f3d04035024 R08: 0000000000000000 R09: 0000000000000000 [ 529.126390][ T9309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.126400][ T9309] R13: 00007f3d04226038 R14: 00007f3d04225fa0 R15: 00007ffdf9e64f28 [ 529.126423][ T9309] [ 529.288559][ T30] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 529.454161][ T30] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.491950][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 529.491982][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.492001][ T30] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.492030][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.493324][ T30] usb 1-1: config 0 descriptor?? [ 529.594501][ T31] audit: type=1400 audit(1788764554.712:454): avc: denied { bind } for pid=9313 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 529.690088][ T9321] ALSA: mixer_oss: invalid OSS volume '' [ 530.178129][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 530.186678][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 530.196157][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 530.206046][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 530.218506][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 530.228926][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 530.237564][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 530.237596][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 530.237616][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 530.629568][ T30] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 530.644441][ T30] usb 1-1: USB disconnect, device number 21 [ 531.825530][ T9328] fido_id[9328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 531.940659][ T31] audit: type=1400 audit(1788764557.062:455): avc: denied { read } for pid=9333 comm="syz.0.866" name="zone_nr_conv" dev="configfs" ino=21884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 532.049716][ T30] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 532.056045][ T31] audit: type=1400 audit(1788764557.172:456): avc: denied { bind } for pid=9337 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 532.056270][ T31] audit: type=1400 audit(1788764557.172:457): avc: denied { node_bind } for pid=9337 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 532.083980][ T9340] jffs2: notice: (9340) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 532.114241][ T31] audit: type=1400 audit(1788764557.222:458): avc: denied { write } for pid=9339 comm="syz.1.869" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 532.114944][ T31] audit: type=1400 audit(1788764557.222:459): avc: denied { add_name } for pid=9339 comm="syz.1.869" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 532.115253][ T31] audit: type=1400 audit(1788764557.232:460): avc: denied { create } for pid=9339 comm="syz.1.869" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 532.125930][ T31] audit: type=1400 audit(1788764557.232:461): avc: denied { read append open } for pid=9339 comm="syz.1.869" path="/161/file0/blkio.bfq.io_merged_recursive" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 532.237405][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 532.237990][ T30] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 532.238811][ T30] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 532.238843][ T30] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 532.238864][ T30] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 532.238886][ T30] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 532.240516][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.240534][ T30] usb 3-1: Product: syz [ 532.240547][ T30] usb 3-1: Manufacturer: syz [ 532.240559][ T30] usb 3-1: SerialNumber: syz [ 532.257978][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 532.291490][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 532.296472][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input12 [ 532.405194][ T9345] team0: Port device vxlan1 added [ 532.419387][ T6067] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.419426][ T6067] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.419473][ T6067] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.419498][ T6067] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.458349][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 532.463903][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 532.474636][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.488741][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 532.496711][ T10] pvrusb2: ********** [ 532.496725][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 532.496737][ T10] pvrusb2: Important functionality might not be entirely working. [ 532.496746][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 532.496755][ T10] pvrusb2: ********** [ 532.521810][ T30] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 532.521829][ T30] (id 0x00) [ 532.901520][ T2342] pvrusb2: Invalid write control endpoint [ 532.903343][ T30] rc_core: IR keymap rc-imon-pad not found [ 532.903356][ T30] Registered IR keymap rc-empty [ 532.903473][ T30] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 532.903487][ T30] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 533.057574][ T30] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 533.287859][ T5695] usb 5-1: USB disconnect, device number 16 [ 533.492290][ T30] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input13 [ 534.142769][ T30] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:20> initialized [ 534.348844][ T2342] pvrusb2: Invalid write control endpoint [ 534.348879][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 534.348899][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 534.348908][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 534.348919][ T2342] pvrusb2: Device being rendered inoperable [ 534.348943][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 534.348978][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 534.349531][ T2342] pvrusb2: Attached sub-driver cx25840 [ 534.349539][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 534.349546][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 534.742629][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 534.742823][ T31] audit: type=1400 audit(1788764559.862:463): avc: denied { lock } for pid=9379 comm="syz.0.875" path="socket:[21918]" dev="sockfs" ino=21918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 534.748487][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.863'. [ 534.786543][ T31] audit: type=1400 audit(1788764559.902:464): avc: denied { read } for pid=9379 comm="syz.0.875" path="socket:[21918]" dev="sockfs" ino=21918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 534.882300][ T9386] FAULT_INJECTION: forcing a failure. [ 534.882300][ T9386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.882346][ T9386] CPU: 0 UID: 0 PID: 9386 Comm: syz.4.877 Not tainted syzkaller #0 PREEMPT(full) [ 534.882366][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 534.882375][ T9386] Call Trace: [ 534.882380][ T9386] [ 534.882385][ T9386] dump_stack_lvl+0x100/0x190 [ 534.882417][ T9386] should_fail_ex.cold+0x5/0xa [ 534.882440][ T9386] _copy_to_user+0x32/0xd0 [ 534.882469][ T9386] bpf_vlog_reverse_ubuf+0x315/0x470 [ 534.882500][ T9386] bpf_vlog_finalize+0x271/0x360 [ 534.882525][ T9386] bpf_log_attr_finalize+0x86/0x1a0 [ 534.882550][ T9386] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 534.882580][ T9386] btf_new_fd+0x9c7/0x5bc0 [ 534.882602][ T9386] ? avc_has_perm_noaudit+0x145/0x3b0 [ 534.882631][ T9386] ? __pfx_btf_new_fd+0x10/0x10 [ 534.882655][ T9386] ? rcu_is_watching+0x13/0xc0 [ 534.882676][ T9386] ? cap_capable+0x107/0x430 [ 534.882699][ T9386] ? bpf_lsm_capable+0x9/0x10 [ 534.882720][ T9386] ? security_capable+0x80/0x260 [ 534.882742][ T9386] ? ns_capable+0xd2/0xf0 [ 534.882760][ T9386] __sys_bpf+0x13ef/0x4a30 [ 534.882775][ T9386] ? plist_check_list+0x1b8/0x280 [ 534.882797][ T9386] ? __pfx___sys_bpf+0x10/0x10 [ 534.882810][ T9386] ? find_held_lock+0x2b/0x80 [ 534.882831][ T9386] ? futex_wake+0x4ea/0x5e0 [ 534.882857][ T9386] ? futex_private_hash_put.part.0+0xdc/0x180 [ 534.882877][ T9386] ? futex_private_hash_put+0x24/0x30 [ 534.882900][ T9386] ? __pfx_futex_wake+0x10/0x10 [ 534.882927][ T9386] ? find_held_lock+0x2b/0x80 [ 534.882947][ T9386] ? __fget_files+0x215/0x3d0 [ 534.882967][ T9386] ? __fget_files+0x215/0x3d0 [ 534.883001][ T9386] ? __x64_sys_futex+0x34f/0x4d0 [ 534.883021][ T9386] ? __x64_sys_futex+0x358/0x4d0 [ 534.883044][ T9386] ? xfd_validate_state+0x129/0x190 [ 534.883066][ T9386] ? __x64_sys_bpf+0xce/0x140 [ 534.883080][ T9386] __x64_sys_bpf+0xce/0x140 [ 534.883096][ T9386] ? do_syscall_64+0xae/0x790 [ 534.883116][ T9386] do_syscall_64+0x123/0x790 [ 534.883137][ T9386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.883154][ T9386] RIP: 0033:0x7f27d1f9e159 [ 534.883168][ T9386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.883182][ T9386] RSP: 002b:00007f27d2e23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 534.883199][ T9386] RAX: ffffffffffffffda RBX: 00007f27d2225fa0 RCX: 00007f27d1f9e159 [ 534.883210][ T9386] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 534.883219][ T9386] RBP: 00007f27d2035024 R08: 0000000000000000 R09: 0000000000000000 [ 534.883229][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.883238][ T9386] R13: 00007f27d2226038 R14: 00007f27d2225fa0 R15: 00007ffd798d68d8 [ 534.883266][ T9386] [ 535.088534][ T10] usb 3-1: USB disconnect, device number 20 [ 535.418086][ T9392] tc action pedit 'at' offset 5 out of bounds [ 535.418122][ T9392] tc action pedit 'at' offset 5 out of bounds [ 535.418148][ T9392] tc action pedit 'at' offset 5 out of bounds [ 535.418161][ T9392] tc action pedit 'at' offset 5 out of bounds [ 535.418173][ T9392] tc action pedit 'at' offset 5 out of bounds [ 535.418194][ T9392] tc action pedit 'at' offset 5 out of bounds [ 535.418206][ T9392] tc action pedit 'at' offset 5 out of bounds [ 535.418219][ T9392] tc action pedit 'at' offset 5 out of bounds [ 535.418231][ T9392] tc action pedit 'at' offset 5 out of bounds [ 535.418243][ T9392] tc action pedit 'at' offset 5 out of bounds [ 535.418264][ T9392] 0: reclassify loop, rule prio 0, protocol 800 [ 535.972273][ T9398] batadv_slave_1: entered promiscuous mode [ 535.978742][ T31] audit: type=1400 audit(1788764561.102:465): avc: denied { map } for pid=9395 comm="syz.4.881" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 536.020747][ T9395] batadv_slave_1: left promiscuous mode [ 536.298190][ T31] audit: type=1400 audit(1788764561.422:466): avc: denied { name_bind } for pid=9403 comm="syz.2.883" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 536.338467][ T31] audit: type=1400 audit(1788764561.462:467): avc: denied { write } for pid=9401 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 537.626513][ T9421] netlink: 'syz.4.891': attribute type 12 has an invalid length. [ 537.763509][ T31] audit: type=1400 audit(1788764562.852:468): avc: denied { bind } for pid=9419 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 539.861144][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 539.879126][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 539.896487][ T31] audit: type=1400 audit(1788764565.012:469): avc: denied { append } for pid=9419 comm="syz.4.891" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.923222][ T9437] FAULT_INJECTION: forcing a failure. [ 539.923222][ T9437] name failslab, interval 1, probability 0, space 0, times 0 [ 539.923250][ T9437] CPU: 0 UID: 0 PID: 9437 Comm: syz.2.897 Not tainted syzkaller #0 PREEMPT(full) [ 539.923266][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 539.923273][ T9437] Call Trace: [ 539.923278][ T9437] [ 539.923283][ T9437] dump_stack_lvl+0x100/0x190 [ 539.923302][ T9437] should_fail_ex.cold+0x5/0xa [ 539.923322][ T9437] should_failslab+0xc2/0x120 [ 539.923337][ T9437] __kmalloc_cache_noprof+0x91/0x6d0 [ 539.923354][ T9437] ? fuse_dev_alloc_no_pq+0x3c/0x180 [ 539.923371][ T9437] fuse_dev_alloc_no_pq+0x3c/0x180 [ 539.923385][ T9437] fuse_dev_alloc_install+0x15/0xb0 [ 539.923403][ T9437] cuse_channel_open+0x133/0x8f0 [ 539.923416][ T9437] ? __pfx_cuse_channel_open+0x10/0x10 [ 539.923431][ T9437] misc_open+0x26d/0x450 [ 539.923447][ T9437] ? __pfx_misc_open+0x10/0x10 [ 539.923462][ T9437] chrdev_open+0x234/0x6a0 [ 539.923476][ T9437] ? __pfx_chrdev_open+0x10/0x10 [ 539.923490][ T9437] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 539.923509][ T9437] do_dentry_open+0x6ab/0x14d0 [ 539.923521][ T9437] ? __pfx_chrdev_open+0x10/0x10 [ 539.923537][ T9437] vfs_open+0x82/0x3f0 [ 539.923553][ T9437] path_openat+0x19fa/0x2440 [ 539.923570][ T9437] ? __pfx_path_openat+0x10/0x10 [ 539.923587][ T9437] do_file_open+0x20e/0x430 [ 539.923601][ T9437] ? __pfx_do_file_open+0x10/0x10 [ 539.923624][ T9437] ? _raw_spin_unlock+0x28/0x50 [ 539.923635][ T9437] ? alloc_fd+0x471/0x7a0 [ 539.923652][ T9437] do_sys_openat2+0x10f/0x1e0 [ 539.923666][ T9437] ? __pfx_do_sys_openat2+0x10/0x10 [ 539.923686][ T9437] __x64_sys_openat+0x12d/0x210 [ 539.923701][ T9437] ? __pfx___x64_sys_openat+0x10/0x10 [ 539.923715][ T9437] ? ksys_write+0x1ac/0x250 [ 539.923730][ T9437] do_syscall_64+0x123/0x790 [ 539.923744][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.923755][ T9437] RIP: 0033:0x7f3d03f9e159 [ 539.923765][ T9437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.923775][ T9437] RSP: 002b:00007f3d04eaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 539.923786][ T9437] RAX: ffffffffffffffda RBX: 00007f3d04225fa0 RCX: 00007f3d03f9e159 [ 539.923793][ T9437] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 539.923799][ T9437] RBP: 00007f3d04035024 R08: 0000000000000000 R09: 0000000000000000 [ 539.923813][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.923820][ T9437] R13: 00007f3d04226038 R14: 00007f3d04225fa0 R15: 00007ffdf9e64f28 [ 539.923836][ T9437] [ 539.927083][ T9420] comedi comedi3: pcl818: I/O base address not correctly aligned [ 540.308648][ T31] audit: type=1400 audit(1788764565.432:470): avc: denied { read } for pid=9444 comm="syz.3.900" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 540.308687][ T31] audit: type=1400 audit(1788764565.432:471): avc: denied { open } for pid=9444 comm="syz.3.900" path="/195/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 540.721636][ T9456] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 542.092984][ T31] audit: type=1400 audit(1788764567.212:472): avc: denied { bind } for pid=9471 comm="syz.0.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 543.416176][ T9478] binder: 9475:9478 ioctl c0306201 200000000640 returned -22 [ 543.614018][ T9487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.652746][ T9492] No buffer was provided with the request [ 544.043739][ T9498] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 544.880582][ T9510] FAULT_INJECTION: forcing a failure. [ 544.880582][ T9510] name failslab, interval 1, probability 0, space 0, times 0 [ 544.880637][ T9510] CPU: 1 UID: 0 PID: 9510 Comm: syz.4.923 Not tainted syzkaller #0 PREEMPT(full) [ 544.880661][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 544.880670][ T9510] Call Trace: [ 544.880675][ T9510] [ 544.880681][ T9510] dump_stack_lvl+0x100/0x190 [ 544.880710][ T9510] should_fail_ex.cold+0x5/0xa [ 544.880733][ T9510] should_failslab+0xc2/0x120 [ 544.880755][ T9510] kmem_cache_alloc_noprof+0x92/0x6a0 [ 544.880773][ T9510] ? lock_acquire+0x1d1/0x380 [ 544.880789][ T9510] ? __mpol_dup+0x74/0x390 [ 544.880815][ T9510] __mpol_dup+0x74/0x390 [ 544.880836][ T9510] ? __pfx___mpol_dup+0x10/0x10 [ 544.880856][ T9510] ? copy_process+0x15bd/0x8370 [ 544.880874][ T9510] ? lockdep_init_map_type+0x5c/0x250 [ 544.880895][ T9510] copy_process+0x284e/0x8370 [ 544.880925][ T9510] ? __pfx_copy_process+0x10/0x10 [ 544.880943][ T9510] ? futex_wake+0x4ea/0x5e0 [ 544.880975][ T9510] kernel_clone+0x176/0x9d0 [ 544.880994][ T9510] ? __pfx_kernel_clone+0x10/0x10 [ 544.881016][ T9510] ? ksys_write+0x190/0x250 [ 544.881038][ T9510] __do_sys_clone+0xd9/0x120 [ 544.881056][ T9510] ? __pfx___do_sys_clone+0x10/0x10 [ 544.881073][ T9510] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 544.881120][ T9510] do_syscall_64+0x123/0x790 [ 544.881144][ T9510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.881164][ T9510] RIP: 0033:0x7f27d1f9e159 [ 544.881179][ T9510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.881195][ T9510] RSP: 002b:00007f27d2e22fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 544.881213][ T9510] RAX: ffffffffffffffda RBX: 00007f27d2225fa0 RCX: 00007f27d1f9e159 [ 544.881225][ T9510] RDX: 0000000000000000 RSI: ffffffffffffffc0 RDI: 0000000020100000 [ 544.881235][ T9510] RBP: 00007f27d2035024 R08: 0000000000000000 R09: 0000000000000000 [ 544.881246][ T9510] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 544.881256][ T9510] R13: 00007f27d2226038 R14: 00007f27d2225fa0 R15: 00007ffd798d68d8 [ 544.881279][ T9510] [ 545.041034][ T2281] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 545.132483][ T31] audit: type=1400 audit(1788764570.242:473): avc: denied { append } for pid=9511 comm="syz.2.925" name="sda" dev="devtmpfs" ino=1259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 545.678935][ T2281] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 545.678984][ T2281] usb 2-1: too many configurations: 87, using maximum allowed: 8 [ 545.741322][ T2281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.750224][ T2281] usb 2-1: Product: syz [ 545.754536][ T2281] usb 2-1: Manufacturer: syz [ 545.759794][ T2281] usb 2-1: SerialNumber: syz [ 546.047414][ T5695] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 546.135507][ T6149] Bluetooth: hci5: Frame reassembly failed (-84) [ 546.136226][ T9524] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 546.220262][ T30] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 546.220458][ T5695] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 546.222130][ T5695] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 546.222161][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 546.222181][ T5695] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 546.222209][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.248382][ T5695] usb 1-1: config 0 descriptor?? [ 546.248959][ T9516] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 546.367447][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 546.368123][ T30] usb 5-1: New USB device found, idVendor=238b, idProduct=383e, bcdDevice=e8.34 [ 546.370637][ T30] usb 5-1: config 170 has an invalid interface number: 215 but max is 0 [ 546.370657][ T30] usb 5-1: config 170 has no interface number 0 [ 546.370678][ T30] usb 5-1: config 170 interface 215 has no altsetting 0 [ 546.372373][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.372391][ T30] usb 5-1: Product: syz [ 546.372404][ T30] usb 5-1: Manufacturer: syz [ 546.372415][ T30] usb 5-1: SerialNumber: syz [ 546.452505][ T2281] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 546.452567][ T2281] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 546.486660][ T2281] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 546.513837][ T2281] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 546.532355][ T2281] usb 2-1: USB disconnect, device number 22 [ 546.605464][ T30] rndis_host 5-1:170.215: More than one union descriptor, skipping ... [ 546.605502][ T30] rndis_host 5-1:170.215: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 546.613029][ T30] usb 5-1: USB disconnect, device number 17 [ 546.852743][ T5695] usbhid 1-1:0.0: can't add hid device: -71 [ 546.852836][ T5695] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 546.878417][ T5695] usb 1-1: USB disconnect, device number 22 [ 547.040768][ T31] audit: type=1400 audit(1788764572.162:474): avc: denied { cmd } for pid=9537 comm="iou-wrk-9539" path="socket:[21328]" dev="sockfs" ino=21328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 548.101277][ T9542] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 548.132592][ T9551] IPv6: NLM_F_CREATE should be specified when creating new route [ 548.132870][ T9551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 548.132881][ T9551] IPv6: NLM_F_CREATE should be set when creating new route [ 548.132912][ T9551] IPv6: NLM_F_CREATE should be set when creating new route [ 548.132929][ T9551] IPv6: NLM_F_CREATE should be set when creating new route [ 548.139226][ T9551] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.933'. [ 548.162073][ T31] audit: type=1400 audit(1788764573.272:475): avc: denied { ioctl } for pid=9543 comm="syz.4.933" path="socket:[22156]" dev="sockfs" ino=22156 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 548.189925][ T4918] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 548.247912][ T9553] netlink: 'syz.1.937': attribute type 1 has an invalid length. [ 548.575851][ T5612] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 548.594482][ T31] audit: type=1400 audit(1788764573.712:476): avc: denied { create } for pid=9567 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 550.463715][ T9581] FAULT_INJECTION: forcing a failure. [ 550.463715][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 550.463753][ T9581] CPU: 1 UID: 60928 PID: 9581 Comm: syz.4.946 Not tainted syzkaller #0 PREEMPT(full) [ 550.463775][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 550.463785][ T9581] Call Trace: [ 550.463791][ T9581] [ 550.463799][ T9581] dump_stack_lvl+0x100/0x190 [ 550.463828][ T9581] should_fail_ex.cold+0x5/0xa [ 550.463850][ T9581] should_failslab+0xc2/0x120 [ 550.463869][ T9581] kmem_cache_alloc_noprof+0x92/0x6a0 [ 550.463885][ T9581] ? __pfx_idr_alloc_u32+0x10/0x10 [ 550.463906][ T9581] ? __kernfs_iattrs+0x126/0x450 [ 550.463931][ T9581] __kernfs_iattrs+0x126/0x450 [ 550.463951][ T9581] ? __pfx___kernfs_iattrs+0x10/0x10 [ 550.463968][ T9581] ? idr_alloc_cyclic+0x174/0x230 [ 550.463989][ T9581] ? find_held_lock+0x2b/0x80 [ 550.464011][ T9581] ? find_held_lock+0x2b/0x80 [ 550.464035][ T9581] __kernfs_setattr+0x4d/0x3c0 [ 550.464057][ T9581] __kernfs_new_node+0x537/0xa10 [ 550.464084][ T9581] ? __pfx___kernfs_new_node+0x10/0x10 [ 550.464114][ T9581] ? kernfs_root+0xee/0x2a0 [ 550.464141][ T9581] kernfs_new_node+0x117/0x150 [ 550.464168][ T9581] __kernfs_create_file+0x53/0x350 [ 550.464189][ T9581] cgroup_addrm_files+0x4ef/0xdb0 [ 550.464221][ T9581] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 550.464249][ T9581] ? css_next_child+0xcf/0x2e0 [ 550.464273][ T9581] ? css_next_descendant_pre+0x58/0x1a0 [ 550.464299][ T9581] css_populate_dir+0x343/0x590 [ 550.464323][ T9581] cgroup_mkdir+0x563/0x1330 [ 550.464344][ T9581] ? __pfx_cgroup_mkdir+0x10/0x10 [ 550.464362][ T9581] kernfs_iop_mkdir+0x111/0x190 [ 550.464384][ T9581] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 550.464403][ T9581] vfs_mkdir+0x364/0x850 [ 550.464431][ T9581] filename_mkdirat+0x48b/0x5e0 [ 550.464455][ T9581] ? __pfx_filename_mkdirat+0x10/0x10 [ 550.464475][ T9581] ? strncpy_from_user+0x19d/0x2d0 [ 550.464495][ T9581] ? do_getname+0x191/0x390 [ 550.464519][ T9581] __x64_sys_mkdirat+0x89/0xc0 [ 550.464657][ T9581] do_syscall_64+0x123/0x790 [ 550.464683][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.464706][ T9581] RIP: 0033:0x7f27d1f9e159 [ 550.464721][ T9581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.464737][ T9581] RSP: 002b:00007f27d2e23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 550.464754][ T9581] RAX: ffffffffffffffda RBX: 00007f27d2225fa0 RCX: 00007f27d1f9e159 [ 550.464766][ T9581] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 550.464778][ T9581] RBP: 00007f27d2035024 R08: 0000000000000000 R09: 0000000000000000 [ 550.464790][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.464801][ T9581] R13: 00007f27d2226038 R14: 00007f27d2225fa0 R15: 00007ffd798d68d8 [ 550.464826][ T9581] [ 550.470118][ T9581] cgroup: cgroup_addrm_files: failed to add cgroup.clone_children, err=-12 [ 551.653392][ T9605] netlink: 'syz.4.955': attribute type 1 has an invalid length. [ 551.744139][ T9608] sg_write: process 680 (syz.1.956) changed security contexts after opening file descriptor, this is not allowed. [ 551.794944][ T9609] bond1: (slave geneve3): making interface the new active one [ 551.868167][ T9609] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 551.878390][ T6149] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.879572][ T6149] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.879627][ T6149] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.879662][ T6149] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 552.891869][ T31] audit: type=1400 audit(1788764578.012:477): avc: denied { create } for pid=9635 comm="syz.0.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 552.923564][ T31] audit: type=1400 audit(1788764578.042:478): avc: denied { bind } for pid=9635 comm="syz.0.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 554.253143][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 554.388663][ T9649] netlink: 'syz.4.972': attribute type 1 has an invalid length. [ 554.468115][ T10] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 554.631843][ T10] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 554.677272][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 554.699555][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 554.713325][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 554.733923][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.965760][ T10] usb 2-1: config 0 descriptor?? [ 555.013682][ T9641] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 555.870486][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 555.870590][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 555.889546][ T5695] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 555.911319][ T10] usb 2-1: USB disconnect, device number 23 [ 555.954930][ T9681] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 555.986343][ T9681] bond1: (slave geneve3): making interface the new active one [ 555.994277][ T9681] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 556.000254][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.984'. [ 556.002086][ T9681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 556.023022][ T6149] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 556.039455][ T6149] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 556.061316][ T5695] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 556.062162][ T5695] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 556.062182][ T5695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.062198][ T5695] usb 4-1: config 0 has no interface number 0 [ 556.062228][ T5695] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 556.062248][ T5695] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 556.062266][ T5695] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.063965][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.063984][ T5695] usb 4-1: Product: syz [ 556.063996][ T5695] usb 4-1: Manufacturer: syz [ 556.064008][ T5695] usb 4-1: SerialNumber: syz [ 556.077404][ T270] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 556.077441][ T270] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 556.077523][ T5695] usb 4-1: config 0 descriptor?? [ 557.295089][ T31] audit: type=1400 audit(1788764581.802:479): avc: denied { audit_write } for pid=9685 comm="syz.4.985" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 557.379517][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.379592][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.619658][ T4918] Bluetooth: hci5: command 0x1003 tx timeout [ 557.626674][ T5612] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 557.782884][ T9701] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 557.796296][ T5716] usb 4-1: USB disconnect, device number 13 [ 557.946109][ T9705] tmpfs: Unknown parameter './tracing' [ 558.674106][ T9707] FAULT_INJECTION: forcing a failure. [ 558.674106][ T9707] name failslab, interval 1, probability 0, space 0, times 0 [ 558.674139][ T9707] CPU: 0 UID: 0 PID: 9707 Comm: syz.4.989 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.674157][ T9707] Tainted: [L]=SOFTLOCKUP [ 558.674163][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 558.674170][ T9707] Call Trace: [ 558.674174][ T9707] [ 558.674179][ T9707] dump_stack_lvl+0x100/0x190 [ 558.674199][ T9707] should_fail_ex.cold+0x5/0xa [ 558.674216][ T9707] should_failslab+0xc2/0x120 [ 558.674231][ T9707] __kmalloc_cache_noprof+0x91/0x6d0 [ 558.674247][ T9707] ? _raw_spin_unlock+0x28/0x50 [ 558.674261][ T9707] ? cuse_channel_open+0x23c/0x8f0 [ 558.674277][ T9707] cuse_channel_open+0x23c/0x8f0 [ 558.674291][ T9707] ? __pfx_cuse_channel_open+0x10/0x10 [ 558.674306][ T9707] misc_open+0x26d/0x450 [ 558.674324][ T9707] ? __pfx_misc_open+0x10/0x10 [ 558.674340][ T9707] chrdev_open+0x234/0x6a0 [ 558.674354][ T9707] ? __pfx_chrdev_open+0x10/0x10 [ 558.674367][ T9707] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 558.674386][ T9707] do_dentry_open+0x6ab/0x14d0 [ 558.674396][ T9707] ? __pfx_chrdev_open+0x10/0x10 [ 558.674413][ T9707] vfs_open+0x82/0x3f0 [ 558.674430][ T9707] path_openat+0x19fa/0x2440 [ 558.674446][ T9707] ? __pfx_path_openat+0x10/0x10 [ 558.674470][ T9707] do_file_open+0x20e/0x430 [ 558.674494][ T9707] ? __pfx_do_file_open+0x10/0x10 [ 558.674526][ T9707] ? _raw_spin_unlock+0x28/0x50 [ 558.674536][ T9707] ? alloc_fd+0x471/0x7a0 [ 558.674554][ T9707] do_sys_openat2+0x10f/0x1e0 [ 558.674576][ T9707] ? __pfx_do_sys_openat2+0x10/0x10 [ 558.674596][ T9707] __x64_sys_openat+0x12d/0x210 [ 558.674611][ T9707] ? __pfx___x64_sys_openat+0x10/0x10 [ 558.674631][ T9707] do_syscall_64+0x123/0x790 [ 558.674648][ T9707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.674661][ T9707] RIP: 0033:0x7f27d1f9e159 [ 558.674671][ T9707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.674681][ T9707] RSP: 002b:00007f27d2e23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 558.674692][ T9707] RAX: ffffffffffffffda RBX: 00007f27d2225fa0 RCX: 00007f27d1f9e159 [ 558.674699][ T9707] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 558.674706][ T9707] RBP: 00007f27d2035024 R08: 0000000000000000 R09: 0000000000000000 [ 558.674712][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.674719][ T9707] R13: 00007f27d2226038 R14: 00007f27d2225fa0 R15: 00007ffd798d68d8 [ 558.674733][ T9707] [ 559.720573][ T9713] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 560.221288][ T9719] jffs2: notice: (9719) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 560.248165][ T9718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.996'. [ 560.266948][ T9718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 560.439977][ T9729] jffs2: notice: (9729) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 560.474515][ T31] audit: type=1400 audit(1788764585.562:480): avc: denied { write } for pid=9728 comm="syz.1.1000" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 561.014129][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 561.168082][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 561.174156][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 561.188123][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 561.200862][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 561.256975][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.257012][ T10] usb 1-1: Product: syz [ 561.257035][ T10] usb 1-1: Manufacturer: syz [ 561.257051][ T10] usb 1-1: SerialNumber: syz [ 561.325137][ T10] usb 1-1: config 0 descriptor?? [ 561.342103][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 561.342149][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 561.398641][ T9750] jffs2: notice: (9750) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 561.619707][ T8585] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 562.285841][ T8585] usb 3-1: Using ep0 maxpacket: 16 [ 562.722574][ T8585] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 562.868275][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 562.927415][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 563.412577][ T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 563.420315][ T10] em28xx 1-1:0.0: No AC97 audio processor [ 563.459164][ T8585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.459198][ T8585] usb 3-1: Product: syz [ 563.459219][ T8585] usb 3-1: Manufacturer: syz [ 563.459235][ T8585] usb 3-1: SerialNumber: syz [ 563.469541][ T8585] usb 3-1: config 0 descriptor?? [ 563.490019][ T8585] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 563.515767][ T10] usb 1-1: USB disconnect, device number 23 [ 563.543661][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 563.579326][ T10] em28xx: Freeing device [ 563.619632][ T9764] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 563.796957][ T8585] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 563.808777][ T9762] FAULT_INJECTION: forcing a failure. [ 563.808777][ T9762] name failslab, interval 1, probability 0, space 0, times 0 [ 563.808824][ T9762] CPU: 1 UID: 0 PID: 9762 Comm: syz.3.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.808852][ T9762] Tainted: [L]=SOFTLOCKUP [ 563.808858][ T9762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 563.808867][ T9762] Call Trace: [ 563.808873][ T9762] [ 563.808879][ T9762] dump_stack_lvl+0x100/0x190 [ 563.808908][ T9762] should_fail_ex.cold+0x5/0xa [ 563.808934][ T9762] should_failslab+0xc2/0x120 [ 563.808954][ T9762] __kmalloc_cache_noprof+0x91/0x6d0 [ 563.808977][ T9762] ? _raw_spin_unlock+0x28/0x50 [ 563.808994][ T9762] ? cuse_channel_open+0x23c/0x8f0 [ 563.809019][ T9762] cuse_channel_open+0x23c/0x8f0 [ 563.809039][ T9762] ? __pfx_cuse_channel_open+0x10/0x10 [ 563.809060][ T9762] misc_open+0x26d/0x450 [ 563.809084][ T9762] ? __pfx_misc_open+0x10/0x10 [ 563.809107][ T9762] chrdev_open+0x234/0x6a0 [ 563.809126][ T9762] ? __pfx_chrdev_open+0x10/0x10 [ 563.809146][ T9762] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 563.809175][ T9762] do_dentry_open+0x6ab/0x14d0 [ 563.809191][ T9762] ? __pfx_chrdev_open+0x10/0x10 [ 563.809214][ T9762] vfs_open+0x82/0x3f0 [ 563.809240][ T9762] path_openat+0x19fa/0x2440 [ 563.809265][ T9762] ? __pfx_path_openat+0x10/0x10 [ 563.809292][ T9762] do_file_open+0x20e/0x430 [ 563.809313][ T9762] ? __pfx_do_file_open+0x10/0x10 [ 563.809348][ T9762] ? _raw_spin_unlock+0x28/0x50 [ 563.809364][ T9762] ? alloc_fd+0x471/0x7a0 [ 563.809390][ T9762] do_sys_openat2+0x10f/0x1e0 [ 563.809412][ T9762] ? __pfx_do_sys_openat2+0x10/0x10 [ 563.809441][ T9762] __x64_sys_openat+0x12d/0x210 [ 563.809463][ T9762] ? __pfx___x64_sys_openat+0x10/0x10 [ 563.809493][ T9762] do_syscall_64+0x123/0x790 [ 563.809515][ T9762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.809538][ T9762] RIP: 0033:0x7f844f19e159 [ 563.809552][ T9762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.809568][ T9762] RSP: 002b:00007f84500d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 563.809586][ T9762] RAX: ffffffffffffffda RBX: 00007f844f425fa0 RCX: 00007f844f19e159 [ 563.809600][ T9762] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 563.809611][ T9762] RBP: 00007f844f235024 R08: 0000000000000000 R09: 0000000000000000 [ 563.809622][ T9762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.809644][ T9762] R13: 00007f844f426038 R14: 00007f844f425fa0 R15: 00007ffe78f68aa8 [ 563.809667][ T9762] [ 563.952068][ T8585] usb 3-1: USB disconnect, device number 21 [ 564.564564][ T9794] jffs2: notice: (9794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 564.567362][ T5695] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 564.607391][ T5702] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 564.715611][ T9801] syzkaller0: entered promiscuous mode [ 564.721893][ T9801] syzkaller0: entered allmulticast mode [ 564.732028][ T9801] tipc: Started in network mode [ 564.736991][ T9801] tipc: Node identity a25aafeb2757, cluster identity 4711 [ 564.737485][ T5695] usb 4-1: Using ep0 maxpacket: 16 [ 564.737961][ T5695] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 564.738808][ T5695] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 564.738832][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 564.740490][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.740508][ T5695] usb 4-1: Product: syz [ 564.740522][ T5695] usb 4-1: Manufacturer: syz [ 564.740535][ T5695] usb 4-1: SerialNumber: syz [ 564.747248][ T9801] tipc: Enabled bearer , priority 0 [ 564.747656][ T5695] usb 4-1: config 0 descriptor?? [ 564.751153][ T5695] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 564.751181][ T5695] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 564.777093][ T9800] tipc: Resetting bearer [ 564.779570][ T5702] usb 1-1: Using ep0 maxpacket: 32 [ 564.780865][ T5702] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 564.783952][ T5702] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 564.783975][ T5702] usb 1-1: config 0 has no interface number 0 [ 564.790984][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.791024][ T5702] usb 1-1: Product: syz [ 564.791037][ T5702] usb 1-1: Manufacturer: syz [ 564.791049][ T5702] usb 1-1: SerialNumber: syz [ 564.794519][ T5702] usb 1-1: config 0 descriptor?? [ 564.804726][ T5702] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 564.849779][ T9800] tipc: Disabling bearer [ 564.873082][ T9803] netlink: 'syz.4.1028': attribute type 1 has an invalid length. [ 564.921073][ T9803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 564.929632][ T9803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 564.933160][ T8585] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 565.018721][ T9786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.019166][ T9786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.051951][ T5702] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 565.065834][ T5702] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 565.117875][ T8585] usb 2-1: Using ep0 maxpacket: 32 [ 565.132272][ T8585] usb 2-1: unable to get BOS descriptor or descriptor too short [ 565.132324][ T8585] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 565.156346][ T8585] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.156398][ T8585] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 565.156437][ T8585] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 565.156461][ T8585] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.206993][ T8585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.207030][ T8585] usb 2-1: Product: syz [ 565.207054][ T8585] usb 2-1: Manufacturer: syz [ 565.207070][ T8585] usb 2-1: SerialNumber: syz [ 565.374416][ T5695] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 565.375004][ T5695] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 565.495460][ T9820] tipc: Started in network mode [ 565.495579][ T9820] tipc: Node identity 4, cluster identity 4711 [ 565.495601][ T9820] tipc: Node number set to 4 [ 565.522775][ T9820] input: syz0 as /devices/virtual/input/input16 [ 565.593776][ T2281] usb 1-1: USB disconnect, device number 24 [ 565.594480][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 565.901240][ T5695] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 565.901278][ T5695] em28xx 4-1:0.0: No AC97 audio processor [ 565.954975][ T2281] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 565.962073][ T2281] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 565.962395][ T8585] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 565.962436][ T8585] usb 2-1: MIDIStreaming interface descriptor not found [ 565.980407][ T2281] quatech2 1-1:0.51: device disconnected [ 566.001583][ T5695] usb 4-1: USB disconnect, device number 14 [ 566.034495][ T5695] em28xx 4-1:0.0: Disconnecting em28xx [ 566.046101][ T5695] em28xx: Freeing device [ 566.352292][ T8585] usb 2-1: USB disconnect, device number 24 [ 566.504538][ T9832] syzkaller0: entered promiscuous mode [ 566.504570][ T9832] syzkaller0: entered allmulticast mode [ 566.518335][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.605403][ T9834] netlink: 'syz.3.1040': attribute type 1 has an invalid length. [ 567.027051][ T9840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1040'. [ 567.076780][ T9839] bond2: (slave geneve3): making interface the new active one [ 567.089402][ T9839] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 567.096834][ T9840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 567.108722][ T6125] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 567.112195][ T6125] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 567.112235][ T6125] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 567.112262][ T6125] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 568.606922][ T31] audit: type=1400 audit(1788764593.722:481): avc: denied { connect } for pid=9856 comm="syz.4.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 568.737256][ T31] audit: type=1400 audit(1788764593.852:482): avc: denied { getopt } for pid=9856 comm="syz.4.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 568.901446][ T9868] syzkaller0: entered promiscuous mode [ 568.907185][ T9868] syzkaller0: entered allmulticast mode [ 570.437735][ T9886] jffs2: notice: (9886) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 570.657966][ T4918] Bluetooth: hci2: command 0x0406 tx timeout [ 571.623381][ T9899] FAULT_INJECTION: forcing a failure. [ 571.623381][ T9899] name failslab, interval 1, probability 0, space 0, times 0 [ 571.623433][ T9899] CPU: 0 UID: 0 PID: 9899 Comm: syz.1.1066 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.623463][ T9899] Tainted: [L]=SOFTLOCKUP [ 571.623471][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 571.623483][ T9899] Call Trace: [ 571.623490][ T9899] [ 571.623499][ T9899] dump_stack_lvl+0x100/0x190 [ 571.623534][ T9899] should_fail_ex.cold+0x5/0xa [ 571.623564][ T9899] should_failslab+0xc2/0x120 [ 571.623587][ T9899] kmem_cache_alloc_noprof+0x92/0x6a0 [ 571.623607][ T9899] ? fuse_request_alloc+0x22/0x200 [ 571.623638][ T9899] fuse_request_alloc+0x22/0x200 [ 571.623662][ T9899] fuse_get_req+0x20a/0x400 [ 571.623688][ T9899] ? __pfx_fuse_get_req+0x10/0x10 [ 571.623713][ T9899] ? from_kgid+0x8f/0xd0 [ 571.623734][ T9899] ? __pfx_from_kgid+0x10/0x10 [ 571.623756][ T9899] ? pid_nr_ns+0xe6/0x150 [ 571.623783][ T9899] fuse_chan_send_bg+0x3ab/0x800 [ 571.623813][ T9899] fuse_simple_background+0x273/0x2e0 [ 571.623846][ T9899] cuse_channel_open+0x5e6/0x8f0 [ 571.623870][ T9899] ? __pfx_cuse_channel_open+0x10/0x10 [ 571.623902][ T9899] misc_open+0x26d/0x450 [ 571.623932][ T9899] ? __pfx_misc_open+0x10/0x10 [ 571.623962][ T9899] chrdev_open+0x234/0x6a0 [ 571.623987][ T9899] ? __pfx_chrdev_open+0x10/0x10 [ 571.624010][ T9899] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 571.624039][ T9899] do_dentry_open+0x6ab/0x14d0 [ 571.624057][ T9899] ? __pfx_chrdev_open+0x10/0x10 [ 571.624078][ T9899] vfs_open+0x82/0x3f0 [ 571.624099][ T9899] path_openat+0x19fa/0x2440 [ 571.624122][ T9899] ? __pfx_path_openat+0x10/0x10 [ 571.624148][ T9899] do_file_open+0x20e/0x430 [ 571.624170][ T9899] ? __pfx_do_file_open+0x10/0x10 [ 571.624208][ T9899] ? _raw_spin_unlock+0x28/0x50 [ 571.624224][ T9899] ? alloc_fd+0x471/0x7a0 [ 571.624252][ T9899] do_sys_openat2+0x10f/0x1e0 [ 571.624275][ T9899] ? __pfx_do_sys_openat2+0x10/0x10 [ 571.624308][ T9899] __x64_sys_openat+0x12d/0x210 [ 571.624332][ T9899] ? __pfx___x64_sys_openat+0x10/0x10 [ 571.624365][ T9899] do_syscall_64+0x123/0x790 [ 571.624387][ T9899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.624403][ T9899] RIP: 0033:0x7fc3d4f9e159 [ 571.624419][ T9899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.624434][ T9899] RSP: 002b:00007fc3d31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 571.624451][ T9899] RAX: ffffffffffffffda RBX: 00007fc3d5225fa0 RCX: 00007fc3d4f9e159 [ 571.624461][ T9899] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 571.624472][ T9899] RBP: 00007fc3d5035024 R08: 0000000000000000 R09: 0000000000000000 [ 571.624482][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.624492][ T9899] R13: 00007fc3d5226038 R14: 00007fc3d5225fa0 R15: 00007fff463ec7a8 [ 571.624514][ T9899] [ 571.637226][ T5702] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 571.839498][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 571.840000][ T5702] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 571.951260][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.951287][ T5702] usb 5-1: Product: syz [ 571.951301][ T5702] usb 5-1: Manufacturer: syz [ 571.951316][ T5702] usb 5-1: SerialNumber: syz [ 571.990584][ T5702] usb 5-1: config 0 descriptor?? [ 572.003483][ T5702] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 572.283041][ T9914] netlink: 'syz.1.1071': attribute type 1 has an invalid length. [ 572.360206][ T9917] bond2: (slave geneve3): making interface the new active one [ 572.375774][ T9917] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 572.387963][ T309] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 572.388189][ T309] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 572.388244][ T309] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 572.388275][ T309] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 572.426932][ T9914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1071'. [ 572.432615][ T5702] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 572.432863][ T5702] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 572.453236][ T5702] usb 5-1: USB disconnect, device number 18 [ 573.540951][ T4918] Bluetooth: hci2: command 0x0406 tx timeout [ 573.749875][ T9932] netlink: 'syz.3.1078': attribute type 12 has an invalid length. [ 573.845640][ T31] audit: type=1400 audit(1788764598.962:483): avc: denied { transfer } for pid=9937 comm="syz.0.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 574.079852][ T5702] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 574.142803][ T31] audit: type=1400 audit(1788764599.262:484): avc: denied { write } for pid=9950 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 574.248014][ T5702] usb 3-1: Using ep0 maxpacket: 32 [ 574.248516][ T5702] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 574.249366][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.249389][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.249417][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.259953][ T5702] usb 3-1: config 0 descriptor?? [ 574.263394][ T5702] hub 3-1:0.0: USB hub found [ 575.438838][ T5702] hub 3-1:0.0: 1 port detected [ 575.645424][ T5702] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 575.677444][ T5702] usbhid 3-1:0.0: can't add hid device: -71 [ 575.677545][ T5702] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 576.169288][ T5702] usb 3-1: USB disconnect, device number 22 [ 576.268119][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 576.448558][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 576.454207][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 576.466604][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.466659][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.491849][ T10] usb 1-1: config 0 descriptor?? [ 576.774392][ T10] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 576.819173][ T9972] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 576.947723][ T9976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1093'. [ 577.128418][ T31] audit: type=1400 audit(1788764602.242:485): avc: denied { write } for pid=9973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.154492][ T31] audit: type=1400 audit(1788764602.252:486): avc: denied { write } for pid=9956 comm="syz.0.1089" name="iowarrior0" dev="devtmpfs" ino=3029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 577.262991][ T31] audit: type=1400 audit(1788764602.382:487): avc: denied { write } for pid=9987 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.339802][ T30] usb 1-1: USB disconnect, device number 25 [ 577.393712][ T9976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 578.326486][T10002] FAULT_INJECTION: forcing a failure. [ 578.326486][T10002] name failslab, interval 1, probability 0, space 0, times 0 [ 578.326535][T10002] CPU: 1 UID: 0 PID: 10002 Comm: syz.1.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.326567][T10002] Tainted: [L]=SOFTLOCKUP [ 578.326574][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 578.326586][T10002] Call Trace: [ 578.326594][T10002] [ 578.326602][T10002] dump_stack_lvl+0x100/0x190 [ 578.326635][T10002] should_fail_ex.cold+0x5/0xa [ 578.326664][T10002] should_failslab+0xc2/0x120 [ 578.326690][T10002] kmem_cache_alloc_noprof+0x92/0x6a0 [ 578.326712][T10002] ? fuse_request_alloc+0x22/0x200 [ 578.326742][T10002] fuse_request_alloc+0x22/0x200 [ 578.326766][T10002] fuse_get_req+0x20a/0x400 [ 578.326799][T10002] ? __pfx_fuse_get_req+0x10/0x10 [ 578.326825][T10002] ? from_kgid+0x8f/0xd0 [ 578.326847][T10002] ? __pfx_from_kgid+0x10/0x10 [ 578.326871][T10002] ? pid_nr_ns+0xe6/0x150 [ 578.326900][T10002] fuse_chan_send_bg+0x3ab/0x800 [ 578.326930][T10002] fuse_simple_background+0x273/0x2e0 [ 578.326961][T10002] cuse_channel_open+0x5e6/0x8f0 [ 578.326984][T10002] ? __pfx_cuse_channel_open+0x10/0x10 [ 578.327009][T10002] misc_open+0x26d/0x450 [ 578.327036][T10002] ? __pfx_misc_open+0x10/0x10 [ 578.327063][T10002] chrdev_open+0x234/0x6a0 [ 578.327088][T10002] ? __pfx_chrdev_open+0x10/0x10 [ 578.327112][T10002] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 578.327146][T10002] do_dentry_open+0x6ab/0x14d0 [ 578.327164][T10002] ? __pfx_chrdev_open+0x10/0x10 [ 578.327190][T10002] vfs_open+0x82/0x3f0 [ 578.327217][T10002] path_openat+0x19fa/0x2440 [ 578.327244][T10002] ? __pfx_path_openat+0x10/0x10 [ 578.327273][T10002] do_file_open+0x20e/0x430 [ 578.327293][T10002] ? __pfx_do_file_open+0x10/0x10 [ 578.327328][T10002] ? _raw_spin_unlock+0x28/0x50 [ 578.327347][T10002] ? alloc_fd+0x471/0x7a0 [ 578.327378][T10002] do_sys_openat2+0x10f/0x1e0 [ 578.327403][T10002] ? __pfx_do_sys_openat2+0x10/0x10 [ 578.327438][T10002] __x64_sys_openat+0x12d/0x210 [ 578.327464][T10002] ? __pfx___x64_sys_openat+0x10/0x10 [ 578.327501][T10002] do_syscall_64+0x123/0x790 [ 578.327526][T10002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.327546][T10002] RIP: 0033:0x7fc3d4f9e159 [ 578.327562][T10002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.327580][T10002] RSP: 002b:00007fc3d31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 578.327599][T10002] RAX: ffffffffffffffda RBX: 00007fc3d5225fa0 RCX: 00007fc3d4f9e159 [ 578.327611][T10002] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 578.327623][T10002] RBP: 00007fc3d5035024 R08: 0000000000000000 R09: 0000000000000000 [ 578.327635][T10002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.327646][T10002] R13: 00007fc3d5226038 R14: 00007fc3d5225fa0 R15: 00007fff463ec7a8 [ 578.327674][T10002] [ 580.225797][T10043] 0x00000000000a-0x000000000309 : "" [ 580.261153][T10043] ftl_cs: FTL header corrupt! [ 582.396358][ T31] audit: type=1400 audit(1788764607.512:488): avc: denied { write } for pid=10027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.467742][ T31] audit: type=1400 audit(1788764607.592:489): avc: denied { write } for pid=10052 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.632424][ T31] audit: type=1400 audit(1788764607.742:490): avc: denied { ioctl } for pid=10054 comm="syz.4.1111" path="socket:[24197]" dev="sockfs" ino=24197 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 582.697397][ T31] audit: type=1400 audit(1788764607.802:491): avc: denied { accept } for pid=10054 comm="syz.4.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 582.699552][ T31] audit: type=1400 audit(1788764607.822:492): avc: denied { open } for pid=10054 comm="syz.4.1111" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 582.774592][ T31] audit: type=1400 audit(1788764607.882:493): avc: denied { ioctl } for pid=10054 comm="syz.4.1111" path="/dev/ttyqd" dev="devtmpfs" ino=388 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 583.791837][T10066] FAULT_INJECTION: forcing a failure. [ 583.791837][T10066] name fail_futex, interval 1, probability 0, space 0, times 1 [ 583.791888][T10066] CPU: 1 UID: 0 PID: 10066 Comm: syz.0.1112 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.791917][T10066] Tainted: [L]=SOFTLOCKUP [ 583.791924][T10066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 583.791939][T10066] Call Trace: [ 583.791945][T10066] [ 583.791953][T10066] dump_stack_lvl+0x100/0x190 [ 583.791985][T10066] should_fail_ex.cold+0x5/0xa [ 583.792014][T10066] get_futex_key+0x1d0/0x14f0 [ 583.792043][T10066] ? __pfx_get_futex_key+0x10/0x10 [ 583.792069][T10066] ? putname+0xb1/0x110 [ 583.792098][T10066] futex_wait_setup+0x91/0x540 [ 583.792135][T10066] __futex_wait+0x19f/0x300 [ 583.792169][T10066] ? __pfx___futex_wait+0x10/0x10 [ 583.792197][T10066] ? futex_hash+0x311/0x400 [ 583.792221][T10066] ? __pfx_futex_wake_mark+0x10/0x10 [ 583.792263][T10066] ? __pfx_futex_hash+0x10/0x10 [ 583.792296][T10066] futex_wait+0xe6/0x370 [ 583.792328][T10066] ? __pfx_futex_wait+0x10/0x10 [ 583.792365][T10066] ? putname+0xb1/0x110 [ 583.792390][T10066] ? kmem_cache_free+0x127/0x6c0 [ 583.792427][T10066] do_futex+0x265/0x440 [ 583.792454][T10066] ? __pfx_do_futex+0x10/0x10 [ 583.792479][T10066] ? __pfx_do_sys_openat2+0x10/0x10 [ 583.792512][T10066] __x64_sys_futex+0x34f/0x4d0 [ 583.792538][T10066] ? __x64_sys_openat+0x12d/0x210 [ 583.792565][T10066] ? __pfx___x64_sys_futex+0x10/0x10 [ 583.792600][T10066] do_syscall_64+0x123/0x790 [ 583.792627][T10066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.792647][T10066] RIP: 0033:0x7fe2b539e159 [ 583.792664][T10066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.792682][T10066] RSP: 002b:00007fe2b618b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 583.792711][T10066] RAX: ffffffffffffffda RBX: 00007fe2b5625fa8 RCX: 00007fe2b539e159 [ 583.792726][T10066] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe2b5625fa8 [ 583.792739][T10066] RBP: 00007fe2b5625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 583.792751][T10066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.792764][T10066] R13: 00007fe2b5626038 R14: 00007ffce1e8e100 R15: 00007ffce1e8e1e8 [ 583.792791][T10066] [ 583.953926][T10073] sg_write: data in/out 1536/136 bytes for SCSI command 0x0-- guessing data in; [ 583.953926][T10073] program syz.3.1115 not setting count and/or reply_len properly [ 583.959597][ T31] audit: type=1400 audit(1788764609.072:494): avc: denied { append } for pid=10064 comm="syz.3.1115" name="sg0" dev="devtmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 584.252004][ T31] audit: type=1400 audit(1788764609.372:495): avc: denied { create } for pid=10074 comm="syz.0.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 584.284911][ T31] audit: type=1400 audit(1788764609.402:496): avc: denied { bind } for pid=10074 comm="syz.0.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 584.434432][ T31] audit: type=1400 audit(1788764609.552:497): avc: denied { write } for pid=10055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.386630][T10110] openvswitch: netlink: Missing valid actions attribute. [ 585.386831][T10110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.772967][T10131] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1127'. [ 585.822714][ T5702] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 585.956524][T10138] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 585.956524][T10138] program syz.0.1125 not setting count and/or reply_len properly [ 586.048226][ T5702] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 586.060393][ T5702] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.072746][ T5702] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.097387][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.105624][ T5702] usb 3-1: Product: syz [ 586.105671][ T5702] usb 3-1: Manufacturer: syz [ 586.105701][ T5702] usb 3-1: SerialNumber: syz [ 587.384527][ T5702] usb 3-1: USB disconnect, device number 23 [ 587.646413][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 587.646463][ T31] audit: type=1400 audit(1788764612.762:505): avc: denied { setopt } for pid=10156 comm="syz.0.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 587.733858][T10159] trusted_key: syz.3.1135 sent an empty control message without MSG_MORE. [ 587.834582][ T31] audit: type=1400 audit(1788764612.852:506): avc: denied { accept } for pid=10148 comm="syz.3.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 587.855026][ T31] audit: type=1400 audit(1788764612.852:507): avc: denied { setopt } for pid=10148 comm="syz.3.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 587.855161][ T31] audit: type=1400 audit(1788764612.852:508): avc: denied { write } for pid=10148 comm="syz.3.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 588.088039][ T2281] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 588.234649][ T31] audit: type=1400 audit(1788764613.352:509): avc: denied { write } for pid=10141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.259359][ T2281] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 588.270083][ T2281] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.270143][ T2281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.301396][ T2281] as10x_usb: device has been detected [ 588.304026][ T2281] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 588.464656][ T2281] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 588.694161][ T31] audit: type=1400 audit(1788764613.772:510): avc: denied { write } for pid=10175 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.159895][T10153] ------------[ cut here ]------------ [ 589.159920][T10153] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 589.159936][T10153] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#1: syz.4.1134/10153 [ 589.181464][T10153] Modules linked in: [ 589.185372][T10153] CPU: 1 UID: 0 PID: 10153 Comm: syz.4.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.196448][T10153] Tainted: [L]=SOFTLOCKUP [ 589.200816][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 589.210998][T10153] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 589.216409][T10153] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 88 3e 73 05 45 85 c0 75 13 48 8d 3d 8c 49 76 05 48 c7 c6 c0 f4 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 589.236264][T10153] RSP: 0000:ffffc90004b276a0 EFLAGS: 00010246 [ 589.242453][T10153] RAX: 0000000000000003 RBX: ffff88807b2c6010 RCX: 1ffffffff228a880 [ 589.250460][T10153] RDX: 0000000000000000 RSI: ffffffff8beff4c0 RDI: ffffffff91484f10 [ 589.258564][T10153] RBP: ffffc90004b27810 R08: 0000000000000000 R09: 0000000000000000 [ 589.266537][T10153] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 589.274536][T10153] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88802bcfb320 [ 589.282554][T10153] FS: 00007f27d2e026c0(0000) GS:ffff888123c5d000(0000) knlGS:0000000000000000 [ 589.291509][T10153] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.298181][T10153] CR2: 00007f17d996eeb8 CR3: 0000000094e99000 CR4: 00000000003526f0 [ 589.306154][T10153] Call Trace: [ 589.309471][T10153] [ 589.312404][T10153] ? as102_stream_ctrl+0x28/0xd0 [ 589.317375][T10153] ? __pfx___mutex_lock+0x10/0x10 [ 589.322402][T10153] ? __pfx___schedule+0x10/0x10 [ 589.327260][T10153] ? irqentry_exit+0x24d/0xa10 [ 589.332071][T10153] ? lockdep_hardirqs_on+0x7d/0x110 [ 589.337293][T10153] ? irqentry_exit+0x24d/0xa10 [ 589.342063][T10153] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 589.347810][T10153] ? as102_stream_ctrl+0x28/0xd0 [ 589.352761][T10153] as102_stream_ctrl+0x28/0xd0 [ 589.357578][T10153] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 589.363302][T10153] __dvb_frontend_open+0x122/0xf20 [ 589.368443][T10153] dvb_frontend_open+0x77c/0x910 [ 589.373388][T10153] ? find_held_lock+0x2b/0x80 [ 589.378121][T10153] ? __pfx_dvb_frontend_open+0x10/0x10 [ 589.383620][T10153] dvb_device_open+0x270/0x3b0 [ 589.388464][T10153] ? __pfx_dvb_device_open+0x10/0x10 [ 589.393765][T10153] chrdev_open+0x234/0x6a0 [ 589.398209][T10153] ? __pfx_chrdev_open+0x10/0x10 [ 589.403151][T10153] ? do_dentry_open+0x660/0x14d0 [ 589.408147][T10153] do_dentry_open+0x6ab/0x14d0 [ 589.412997][T10153] ? __pfx_chrdev_open+0x10/0x10 [ 589.417951][T10153] vfs_open+0x82/0x3f0 [ 589.422025][T10153] path_openat+0x19fa/0x2440 [ 589.426618][T10153] ? __pfx_path_openat+0x10/0x10 [ 589.431607][T10153] do_file_open+0x20e/0x430 [ 589.436123][T10153] ? __pfx_do_file_open+0x10/0x10 [ 589.441191][T10153] ? _raw_spin_unlock+0x28/0x50 [ 589.446059][T10153] ? alloc_fd+0x471/0x7a0 [ 589.450523][T10153] do_sys_openat2+0x10f/0x1e0 [ 589.455225][T10153] ? __pfx_do_sys_openat2+0x10/0x10 [ 589.460824][T10153] ? __sys_connect+0xe4/0x170 [ 589.465521][T10153] __x64_sys_openat+0x12d/0x210 [ 589.470399][T10153] ? __pfx___x64_sys_openat+0x10/0x10 [ 589.475782][T10153] do_syscall_64+0x123/0x790 [ 589.480406][T10153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.486300][T10153] RIP: 0033:0x7f27d1f5e98e [ 589.490726][T10153] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 589.510541][T10153] RSP: 002b:00007f27d2e01b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 589.518975][T10153] RAX: ffffffffffffffda RBX: 00007f27d2e026c0 RCX: 00007f27d1f5e98e [ 589.527050][T10153] RDX: 0000000000000802 RSI: 00007f27d2e01c00 RDI: ffffffffffffff9c [ 589.535059][T10153] RBP: 00007f27d2e01c00 R08: 0000000000000000 R09: 0000000000000000 [ 589.543064][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 589.551072][T10153] R13: 00007f27d2226128 R14: 00007f27d2226090 R15: 00007ffd798d68d8 [ 589.559089][T10153] [ 589.562107][T10153] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 589.569399][T10153] CPU: 1 UID: 0 PID: 10153 Comm: syz.4.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.580777][T10153] Tainted: [L]=SOFTLOCKUP [ 589.585096][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 589.595148][T10153] Call Trace: [ 589.598424][T10153] [ 589.601355][T10153] dump_stack_lvl+0x100/0x190 [ 589.606050][T10153] vpanic+0x553/0x970 [ 589.610033][T10153] ? __pfx_vpanic+0x10/0x10 [ 589.614533][T10153] ? lock_release+0x24d/0x310 [ 589.619217][T10153] panic+0xd1/0xe0 [ 589.622937][T10153] ? __pfx_panic+0x10/0x10 [ 589.627355][T10153] check_panic_on_warn.cold+0x19/0x34 [ 589.632726][T10153] ? __mutex_lock+0x944/0x1bd0 [ 589.637490][T10153] __warn.cold+0x191/0x318 [ 589.641905][T10153] __report_bug+0x30f/0x440 [ 589.646410][T10153] ? __mutex_lock+0x944/0x1bd0 [ 589.651180][T10153] ? __pfx___report_bug+0x10/0x10 [ 589.656213][T10153] ? __mutex_lock+0x94b/0x1bd0 [ 589.660985][T10153] report_bug_entry+0xe2/0x290 [ 589.665755][T10153] ? __mutex_lock+0x94b/0x1bd0 [ 589.670526][T10153] handle_bug+0x1cd/0x2a0 [ 589.674864][T10153] exc_invalid_op+0x17/0x50 [ 589.679375][T10153] asm_exc_invalid_op+0x1a/0x20 [ 589.684226][T10153] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 589.689606][T10153] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 88 3e 73 05 45 85 c0 75 13 48 8d 3d 8c 49 76 05 48 c7 c6 c0 f4 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 589.709221][T10153] RSP: 0000:ffffc90004b276a0 EFLAGS: 00010246 [ 589.715295][T10153] RAX: 0000000000000003 RBX: ffff88807b2c6010 RCX: 1ffffffff228a880 [ 589.723268][T10153] RDX: 0000000000000000 RSI: ffffffff8beff4c0 RDI: ffffffff91484f10 [ 589.731267][T10153] RBP: ffffc90004b27810 R08: 0000000000000000 R09: 0000000000000000 [ 589.739239][T10153] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 589.747226][T10153] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88802bcfb320 [ 589.755206][T10153] ? as102_stream_ctrl+0x28/0xd0 [ 589.760248][T10153] ? __pfx___mutex_lock+0x10/0x10 [ 589.765278][T10153] ? __pfx___schedule+0x10/0x10 [ 589.770128][T10153] ? irqentry_exit+0x24d/0xa10 [ 589.774893][T10153] ? lockdep_hardirqs_on+0x7d/0x110 [ 589.780098][T10153] ? irqentry_exit+0x24d/0xa10 [ 589.784873][T10153] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 589.790592][T10153] ? as102_stream_ctrl+0x28/0xd0 [ 589.795539][T10153] as102_stream_ctrl+0x28/0xd0 [ 589.800312][T10153] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 589.806032][T10153] __dvb_frontend_open+0x122/0xf20 [ 589.811155][T10153] dvb_frontend_open+0x77c/0x910 [ 589.816097][T10153] ? find_held_lock+0x2b/0x80 [ 589.820781][T10153] ? __pfx_dvb_frontend_open+0x10/0x10 [ 589.826270][T10153] dvb_device_open+0x270/0x3b0 [ 589.831037][T10153] ? __pfx_dvb_device_open+0x10/0x10 [ 589.836311][T10153] chrdev_open+0x234/0x6a0 [ 589.840707][T10153] ? __pfx_chrdev_open+0x10/0x10 [ 589.845631][T10153] ? do_dentry_open+0x660/0x14d0 [ 589.850562][T10153] do_dentry_open+0x6ab/0x14d0 [ 589.855303][T10153] ? __pfx_chrdev_open+0x10/0x10 [ 589.860220][T10153] vfs_open+0x82/0x3f0 [ 589.864372][T10153] path_openat+0x19fa/0x2440 [ 589.868954][T10153] ? __pfx_path_openat+0x10/0x10 [ 589.873880][T10153] do_file_open+0x20e/0x430 [ 589.878373][T10153] ? __pfx_do_file_open+0x10/0x10 [ 589.883394][T10153] ? _raw_spin_unlock+0x28/0x50 [ 589.888227][T10153] ? alloc_fd+0x471/0x7a0 [ 589.892534][T10153] do_sys_openat2+0x10f/0x1e0 [ 589.897200][T10153] ? __pfx_do_sys_openat2+0x10/0x10 [ 589.902374][T10153] ? __sys_connect+0xe4/0x170 [ 589.907034][T10153] __x64_sys_openat+0x12d/0x210 [ 589.911954][T10153] ? __pfx___x64_sys_openat+0x10/0x10 [ 589.917315][T10153] do_syscall_64+0x123/0x790 [ 589.921912][T10153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.927785][T10153] RIP: 0033:0x7f27d1f5e98e [ 589.932712][T10153] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 589.952301][T10153] RSP: 002b:00007f27d2e01b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 589.960706][T10153] RAX: ffffffffffffffda RBX: 00007f27d2e026c0 RCX: 00007f27d1f5e98e [ 589.968658][T10153] RDX: 0000000000000802 RSI: 00007f27d2e01c00 RDI: ffffffffffffff9c [ 589.976610][T10153] RBP: 00007f27d2e01c00 R08: 0000000000000000 R09: 0000000000000000 [ 589.984747][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 589.992701][T10153] R13: 00007f27d2226128 R14: 00007f27d2226090 R15: 00007ffd798d68d8 [ 590.000658][T10153] [ 590.003921][T10153] Kernel Offset: disabled [ 590.008224][T10153] Rebooting in 86400 seconds..