last executing test programs: 43.409554104s ago: executing program 3 (id=4115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xffffffff, 0x3, 0xb, 0x1, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7f}, {0x0, 0xffffffff, 0x4, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x26000, 0x18, 0x3, 0xc, 0x2, 0x4, 0x1, 0x0, 0x1, 0x4}, {0xffffffff, 0x41000, 0x18, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x18, 0x3, 0x1, 0xf6, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x25000, 0x10, 0x3, 0x1, 0xdc, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x3ff8, 0x20, 0xb, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x80, 0x0, 0x1}, {0x1}, {}, 0x40010020, 0x0, 0x0, 0x0, 0x0, 0x800, 0x41000, [0x0, 0x1, 0xfffffffffffffffc]}) 43.298386382s ago: executing program 3 (id=4117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800080040"], 0x4a) 43.015513482s ago: executing program 3 (id=4120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/syzkaller0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) 42.810259244s ago: executing program 3 (id=4123): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) 42.663482272s ago: executing program 3 (id=4127): io_setup(0x1, &(0x7f0000000080)=0x0) mkdir(&(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000840)="380000007b0001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002000500010003000000", 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='freezer.self_freezing\x00', 0x275a, 0x0) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r3, &(0x7f00000004c0)='B', 0x1) r4 = syz_open_dev$vbi(&(0x7f0000000580), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000005c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000600)={0x0, @bt={0xffffffff, 0x86c, 0x1, 0x2, 0xd59f80, 0x19f2, 0x5, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x8840, 0x0) fcntl$addseals(r5, 0x409, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xe0, 0xf, 0x800}]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, 0x0, 0x3e) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000540)) io_pgetevents(r0, 0xf696, 0x9, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0), &(0x7f0000000100)={&(0x7f00000000c0)={[0x9]}, 0x8}) migrate_pages(r7, 0x1, &(0x7f0000000140)=0x10001, &(0x7f0000000180)=0x5) 42.234316968s ago: executing program 3 (id=4132): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000880)={0xa, 0x0, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac437", 0x1a}], 0x2, &(0x7f00000029c0)=[@ip_tos_int={{0x14, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 27.146031723s ago: executing program 32 (id=4132): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000880)={0xa, 0x0, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac437", 0x1a}], 0x2, &(0x7f00000029c0)=[@ip_tos_int={{0x14, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 5.118537555s ago: executing program 5 (id=4560): mq_open(0x0, 0x42, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$can_j1939(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) accept4$inet6(r2, 0x0, 0x0, 0x80000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac2814aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 4.992905057s ago: executing program 5 (id=4561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000000000000014100000018001700000021000000006574683a64"], 0x34}}, 0x0) 4.925839622s ago: executing program 5 (id=4562): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, r3, 0x0, 0x2, 0x0, &(0x7f0000000400), 0x4}) 4.729823624s ago: executing program 5 (id=4566): link(&(0x7f0000004600)='./file0/../file0/file0\x00', &(0x7f0000004640)='./file0/../file0/file0\x00') 4.661149737s ago: executing program 5 (id=4568): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 4.568146027s ago: executing program 5 (id=4570): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xefb8b6f4896c1f8c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f00000003c0)='./file1\x00', 0x0, 0x181) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x20) 4.441038025s ago: executing program 4 (id=4572): mkdir(&(0x7f0000005580)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc.0', 0xc) 4.401212017s ago: executing program 4 (id=4574): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x13a8, 0xffffffffffffffff, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000640)={0x2, 0x15, @loopback}, 0x10) write(r1, &(0x7f0000000680)='PA', 0x2) 4.312838709s ago: executing program 4 (id=4576): mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/224, 0xe0}], 0x1, 0x8000, 0x3) pread64$ublk_bdev(r0, 0x0, 0x0, 0x5) 4.306954881s ago: executing program 4 (id=4577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800080040"], 0x4a) 4.167540865s ago: executing program 4 (id=4583): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 4.102141218s ago: executing program 4 (id=4585): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) 2.844406495s ago: executing program 1 (id=4601): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, r3, 0x0, 0x2, 0x2, &(0x7f0000000400)='iz', 0x4}) 2.739884148s ago: executing program 1 (id=4602): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) syz_usb_connect(0x3, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="cd3d"], 0x0) syz_open_dev$audion(&(0x7f0000000900), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.480565279s ago: executing program 1 (id=4609): r0 = syz_open_dev$video(&(0x7f0000000840), 0x0, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000000)={0x3, "e071e75307ccf36bf6bab597850272fe5fb8b371daa04d3835a43353145cd407", 0x20, 0x3, 0x5, 0x1, 0x3}) 1.389483129s ago: executing program 1 (id=4610): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) 1.331425182s ago: executing program 1 (id=4612): syz_usb_connect(0x0, 0x24, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000d5de9410410e51410062f02103740902"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000001180)='proc\x00', 0x2800008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000001200)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000001240)='./proc_dir\x00', 0x1ff) syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000ec0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xfc, 0x0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1}}}}}]}}, 0x0) pipe2(0x0, 0x0) unshare(0x2a020400) open$dir(0x0, 0x440000, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000001280)='./proc_dir\x00', &(0x7f00000012c0)='proc\x00', 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x22400, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x7fff, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0x4, "b546baaecc590d30d4d8b40d29968173b959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", r4}) 1.213557674s ago: executing program 2 (id=4613): mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000180)=0x9, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000880), 0x80100, 0x0) read$rfkill(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x109000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000980)=0x1) ioctl$PPPIOCSMAXCID(r2, 0x80047458, 0x0) 1.164440987s ago: executing program 2 (id=4614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x54}}, 0x0) 1.107654495s ago: executing program 2 (id=4615): r0 = fsopen(&(0x7f00000005c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='secret\x00', &(0x7f0000000640)='AQB1234567890123456789012345678901234567890=\x00', 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x7) 622.924864ms ago: executing program 0 (id=4617): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) keyctl$read(0x2, 0x0, &(0x7f0000001180)=""/4090, 0xffffff2d) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7061746830") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='27', 0x2) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0\x00', 0x3f) ioctl(r0, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d7061746830") 598.313108ms ago: executing program 0 (id=4618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000006d00)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d80)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000006e00)={0x0, 0x0, &(0x7f0000006e40)={&(0x7f0000006e80)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 537.858468ms ago: executing program 2 (id=4619): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)={0x10c, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0xfa, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x10c}], 0x1}, 0x0) 525.661316ms ago: executing program 0 (id=4620): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') 445.882939ms ago: executing program 2 (id=4621): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="358d", 0x2) 424.67305ms ago: executing program 0 (id=4622): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) 325.600499ms ago: executing program 2 (id=4623): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030a4308083767010080910102030109022400018e0510070904fb0b0282d2d20009059f0240000700070805010240"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./dev/ttyUSB0\x00', 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 285.012462ms ago: executing program 0 (id=4624): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000006c0)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000000)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x0, 0x4, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x61, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4e24, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x0, 0x1, 0xa, 0x100, @void}, "db61c3e61e153b3cba6a2b9ccd973a55baebe0cc6c880fbf3255007bd80c3a7f2347e6154e6baa4586c2fd4d56caf6f7dda6f46e474eb9b26d7daf36275dde5dac"}}}}, 0x6f) 159.651898ms ago: executing program 0 (id=4625): close(0xffffffffffffffff) syz_usb_connect$uac1(0x3, 0xa8, &(0x7f0000000580)=ANY=[@ANYBLOB="1201100100000010820556014000010203010902"], 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) 0s ago: executing program 1 (id=4626): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x7fff, 0x1, 0x800, 0x0, 0x2}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) pwrite64(r1, 0x0, 0x0, 0x1000) ioctl$GET_DISK_INFO(r1, 0x80140912, 0x0) ioctl$STOP_ARRAY(r1, 0x932, 0x0) kernel console output (not intermixed with test programs): .712706][T22245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1647.712721][T22245] RSP: 002b:00007f4660783028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1647.712738][T22245] RAX: ffffffffffffffda RBX: 00007f465fc25fa0 RCX: 00007f465f99f559 [ 1647.712749][T22245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060020000 [ 1647.712759][T22245] RBP: 00007f465fa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1647.712769][T22245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1647.712778][T22245] R13: 00007f465fc26038 R14: 00007f465fc25fa0 R15: 00007ffeaa2f5288 [ 1647.712802][T22245] [ 1647.712844][T22245] debugfs: out of free dentries, can not create symlink 'netns-25b-4026535066-notrefcnt' [ 1647.938241][ T2042] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1647.970214][T19431] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 1648.000298][T22245] rxe_eth0 speed is unknown, defaulting to 1000 [ 1648.029444][T22250] Need at least one configuration in g1. [ 1648.035626][T22250] udc usbip-vudc.0: failed to start g1: -22 [ 1648.035654][T22250] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 1648.245605][T22245] wlan1 speed is unknown, defaulting to 1000 [ 1648.333199][ T2042] usb 5-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1648.350424][ T2042] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1648.350459][ T2042] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1648.350494][ T2042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.363567][T22250] UDC core: g1: couldn't find an available UDC or it's busy [ 1648.370389][T19431] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1648.370420][T19431] usb 2-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 1648.404198][T19431] usb 2-1: config 142 has an invalid interface number: 251 but max is 0 [ 1648.404224][T19431] usb 2-1: config 142 has no interface number 0 [ 1648.404262][T19431] usb 2-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1648.404286][T19431] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 1648.404306][T19431] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 1648.404322][T19431] usb 2-1: config 142 interface 251 has no altsetting 0 [ 1648.561672][T19431] usb 2-1: string descriptor 0 read error: -22 [ 1648.561772][T19431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.578520][T22242] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1648.597520][T22239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1648.597606][T22239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1648.609245][T19431] cypress_m8 2-1:142.251: HID->COM RS232 Adapter converter detected [ 1648.632654][ T2042] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1648.635685][T19431] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 1648.806484][T22261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1648.871125][T19712] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1648.985761][ T53] Bluetooth: hci5: unexpected event for opcode 0x0c7d [ 1649.031097][T19712] usb 4-1: Using ep0 maxpacket: 8 [ 1649.031721][T19712] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1649.032573][T19712] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1649.032612][T19712] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1649.032633][T19712] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1649.032655][T19712] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1649.032673][T19712] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1649.032706][T19712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.111783][T10873] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1649.165264][T21422] usb 5-1: USB disconnect, device number 124 [ 1649.246773][T19712] usb 4-1: usb_control_msg returned -32 [ 1649.246816][T19712] usbtmc 4-1:16.0: can't read capabilities [ 1649.263976][T10873] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1649.264806][T10873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.293279][T10873] usb 3-1: config 0 descriptor?? [ 1649.499496][T10873] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1649.700397][T22269] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -32 [ 1649.700423][T22269] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 1649.700638][ C0] usb 2-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 1649.748944][T10873] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1649.748968][T10873] [drm] Initialized udl on minor 1 [ 1649.811667][ T29] audit: type=1400 audit(1792967944.400:676): avc: denied { create } for pid=22281 comm="syz.4.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1649.814498][ T29] audit: type=1400 audit(1792967944.410:677): avc: denied { ioctl } for pid=22281 comm="syz.4.4000" path="socket:[98446]" dev="sockfs" ino=98446 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1649.841212][T19431] usb 4-1: USB disconnect, device number 89 [ 1649.848512][T22274] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -71 [ 1649.857267][T22277] md: array md0 already initialised! [ 1649.904762][T22277] md: could not open device unknown-block(1,0). [ 1649.904820][T22277] md: error, md_import_device() returned -16 [ 1649.911943][ T29] audit: type=1400 audit(1792967944.500:678): avc: denied { read } for pid=22262 comm="syz.2.3994" name="card1" dev="devtmpfs" ino=5355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1649.911991][ T29] audit: type=1400 audit(1792967944.500:679): avc: denied { open } for pid=22262 comm="syz.2.3994" path="/dev/dri/card1" dev="devtmpfs" ino=5355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1649.973164][T21422] usb 2-1: USB disconnect, device number 100 [ 1649.989505][T21422] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 1649.990045][T21422] cypress_m8 2-1:142.251: device disconnected [ 1650.178788][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1650.178804][ T29] audit: type=1400 audit(1792967944.770:682): avc: denied { wake_alarm } for pid=22295 comm="syz.4.4006" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1650.331372][ T29] audit: type=1400 audit(1792967944.930:683): avc: denied { write } for pid=22302 comm="syz.0.4009" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1650.332878][ T29] audit: type=1400 audit(1792967944.930:684): avc: denied { open } for pid=22302 comm="syz.0.4009" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1650.474701][ T29] audit: type=1400 audit(1792967945.070:685): avc: denied { unmount } for pid=17810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1650.594764][ T29] audit: type=1400 audit(1792967945.190:686): avc: denied { listen } for pid=22317 comm="syz.1.4015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1650.767709][ T29] audit: type=1400 audit(1792967945.360:687): avc: denied { write } for pid=22328 comm="syz.4.4020" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1650.794642][T22330] netlink: 'syz.1.4019': attribute type 29 has an invalid length. [ 1650.794895][T22327] netlink: 'syz.1.4019': attribute type 29 has an invalid length. [ 1650.795037][T22327] netlink: 'syz.1.4019': attribute type 29 has an invalid length. [ 1650.795168][T22327] netlink: 'syz.1.4019': attribute type 29 has an invalid length. [ 1650.795298][T22327] netlink: 'syz.1.4019': attribute type 29 has an invalid length. [ 1650.795421][T22327] netlink: 'syz.1.4019': attribute type 29 has an invalid length. [ 1650.795561][T22327] netlink: 'syz.1.4019': attribute type 29 has an invalid length. [ 1650.801103][ T10] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1650.962115][ T10] usb 1-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1650.962980][ T10] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.966819][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.966841][ T10] usb 1-1: Product: syz [ 1650.966856][ T10] usb 1-1: Manufacturer: syz [ 1650.966869][ T10] usb 1-1: SerialNumber: syz [ 1650.982434][ T10] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1650.982720][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1651.009405][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1651.010515][ T10] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1651.010555][ T10] usb 1-1: media controller created [ 1651.048850][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1651.123655][ T10] DVB: Unable to find symbol mt352_attach() [ 1651.123670][ T10] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1651.126230][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1651.151822][ T10] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1651.262280][T22313] dvb-usb: bulk message failed: -22 (2/0) [ 1651.263300][T19431] usb 1-1: USB disconnect, device number 94 [ 1651.305227][T19431] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1651.519755][T22366] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 1651.519769][T22366] device-mapper: raid: Choosing default region size of 4MiB [ 1651.519908][T22366] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 1651.519915][T22366] device-mapper: raid: Superblocks created for new raid set [ 1651.520277][T22366] device-mapper: table: 248:10: raid: Insufficient redundancy to activate array (-EINVAL) [ 1651.520289][T22366] device-mapper: ioctl: error adding target to table [ 1652.015130][ T29] audit: type=1400 audit(1792967946.610:688): avc: denied { bind } for pid=22381 comm="syz.0.4044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1652.517918][ T29] audit: type=1400 audit(1792967947.110:689): avc: denied { connect } for pid=22409 comm="syz.1.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1652.528232][T22406] syz.0.4055 (22406): drop_caches: 2 [ 1652.561375][T20067] Bluetooth: hci0: command 0x1003 tx timeout [ 1652.561955][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1652.590692][ T29] audit: type=1400 audit(1792967947.190:690): avc: denied { connect } for pid=22409 comm="syz.1.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1653.021659][T19431] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1653.035571][T22438] svc: failed to register nfsdv3 RPC service (errno 97). [ 1653.035591][T22438] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1653.175768][T19431] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1653.180015][T19431] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.180041][T19431] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1653.180072][T19431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.183141][T19431] usb 4-1: config 0 descriptor?? [ 1653.372965][ T29] audit: type=1400 audit(1792967947.970:691): avc: denied { read write } for pid=22458 comm="syz.0.4080" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1653.429916][T22460] bq24190-charger 0-0006: No support for SMBUS_BYTE_DATA [ 1653.430138][T22460] i2c i2c-0: new_device: Instantiated device bq24190 at 0x06 [ 1653.571185][T19431] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1653.721154][T16371] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1653.731611][T19431] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1653.732488][T19431] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1653.732507][T19431] usb 2-1: config 1 has no interface number 0 [ 1653.734748][T19431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.734769][T19431] usb 2-1: Product: syz [ 1653.734781][T19431] usb 2-1: Manufacturer: syz [ 1653.734794][T19431] usb 2-1: SerialNumber: syz [ 1653.751876][T19431] usb 2-1: 3:0 : does not exist [ 1653.751897][T19431] usb 2-1: 3:0 : does not exist [ 1653.871146][T16371] usb 1-1: Using ep0 maxpacket: 8 [ 1653.871937][T16371] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1653.872837][T16371] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1653.872875][T16371] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1653.872896][T16371] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1653.872915][T16371] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1653.872955][T16371] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1653.872984][T16371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.045322][T21422] usb 2-1: USB disconnect, device number 101 [ 1654.078649][T16371] usb 1-1: usb_control_msg returned -32 [ 1654.078673][T16371] usbtmc 1-1:16.0: can't read capabilities [ 1654.371085][T19431] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1654.433427][T22488] usbtmc 1-1:16.0: INITIATE_CLEAR returned 0 [ 1654.521069][T19431] usb 5-1: Using ep0 maxpacket: 32 [ 1654.521634][T19431] usb 5-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1654.522517][T19431] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1654.524045][T19431] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1654.524059][T19431] usb 5-1: Product: syz [ 1654.524072][T19431] usb 5-1: Manufacturer: syz [ 1654.524087][T19431] usb 5-1: SerialNumber: syz [ 1654.525884][T19431] usb 5-1: config 0 descriptor?? [ 1654.526421][T22487] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1654.634778][T21422] usb 1-1: USB disconnect, device number 95 [ 1654.803820][T10873] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1654.808298][T10873] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1654.835619][T10873] usb 3-1: USB disconnect, device number 98 [ 1654.924634][T19431] usb 5-1: USB disconnect, device number 125 [ 1655.004653][T22503] FAULT_INJECTION: forcing a failure. [ 1655.004653][T22503] name (null), interval 1, probability 0, space 0, times 1 [ 1655.004676][T22503] CPU: 0 UID: 0 PID: 22503 Comm: syz.1.4097 Tainted: G L syzkaller #0 PREEMPT(full) [ 1655.004693][T22503] Tainted: [L]=SOFTLOCKUP [ 1655.004698][T22503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1655.004704][T22503] Call Trace: [ 1655.004709][T22503] [ 1655.004714][T22503] dump_stack_lvl+0x100/0x190 [ 1655.004737][T22503] should_fail_ex.cold+0x5/0xa [ 1655.004754][T22503] null_queue_rq+0x24d/0xfb0 [ 1655.004770][T22503] null_queue_rqs+0xe9/0x2f0 [ 1655.004783][T22503] ? __pfx_null_queue_rqs+0x10/0x10 [ 1655.004795][T22503] ? blk_mq_dispatch_queue_requests+0x148/0x7b0 [ 1655.004810][T22503] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1655.004825][T22503] __blk_mq_flush_list+0x9a/0xc0 [ 1655.004842][T22503] blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 1655.004858][T22503] blk_mq_flush_plug_list+0x1f2/0x600 [ 1655.004870][T22503] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1655.004883][T22503] ? update_io_ticks+0x137/0x2a0 [ 1655.004893][T22503] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1655.004906][T22503] ? __pfx_update_io_ticks+0x10/0x10 [ 1655.004917][T22503] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1655.004935][T22503] blk_add_rq_to_plug+0x276/0x610 [ 1655.004949][T22503] blk_mq_submit_bio+0x1c98/0x2dd0 [ 1655.004964][T22503] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 1655.004982][T22503] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 1655.004999][T22503] __submit_bio+0x90/0x3d0 [ 1655.005016][T22503] submit_bio_noacct_nocheck+0x662/0xd00 [ 1655.005029][T22503] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1655.005042][T22503] ? __pfx___might_resched+0x10/0x10 [ 1655.005058][T22503] submit_bio_noacct+0xc8e/0x2100 [ 1655.005080][T22503] blkdev_direct_IO+0x12da/0x1d00 [ 1655.005112][T22503] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1655.005128][T22503] ? rcu_is_watching+0x13/0xc0 [ 1655.005145][T22503] blkdev_write_iter+0xa62/0x11d0 [ 1655.005160][T22503] vfs_write+0x6af/0x1050 [ 1655.005175][T22503] ? __pfx_blkdev_write_iter+0x10/0x10 [ 1655.005188][T22503] ? __pfx_vfs_write+0x10/0x10 [ 1655.005200][T22503] ? find_held_lock+0x2b/0x80 [ 1655.005219][T22503] ksys_write+0x12a/0x250 [ 1655.005238][T22503] ? __pfx_ksys_write+0x10/0x10 [ 1655.005255][T22503] do_syscall_64+0x123/0x790 [ 1655.005274][T22503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.005289][T22503] RIP: 0033:0x7f37d719f559 [ 1655.005300][T22503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.005311][T22503] RSP: 002b:00007f37d807b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1655.005323][T22503] RAX: ffffffffffffffda RBX: 00007f37d7425fa0 RCX: 00007f37d719f559 [ 1655.005331][T22503] RDX: 00000000fffffe38 RSI: 0000200000000600 RDI: 0000000000000007 [ 1655.005339][T22503] RBP: 00007f37d7236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1655.005346][T22503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1655.005352][T22503] R13: 00007f37d7426038 R14: 00007f37d7425fa0 R15: 00007ffe8c7cf708 [ 1655.005367][T22503] [ 1655.396288][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1655.396304][ T29] audit: type=1400 audit(1792967949.990:696): avc: denied { mounton } for pid=22517 comm="syz.2.4104" path="/219/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1655.434512][ T29] audit: type=1800 audit(1792967950.000:697): pid=22518 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4104" name=08 dev="sda1" ino=2061 res=0 errno=-22 [ 1655.486201][ T29] audit: type=1400 audit(1792967950.080:698): avc: denied { mount } for pid=22519 comm="syz.0.4105" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1655.522979][ T53] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1655.523039][ T53] Bluetooth: hci2: Injecting HCI hardware error event [ 1655.524849][T20067] Bluetooth: hci2: hardware error 0x00 [ 1655.825112][ T2042] usb 4-1: USB disconnect, device number 90 [ 1656.679564][T22572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=22572 comm=syz.3.4127 [ 1656.679642][T22572] FAULT_INJECTION: forcing a failure. [ 1656.679642][T22572] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.679669][T22572] CPU: 0 UID: 0 PID: 22572 Comm: syz.3.4127 Tainted: G L syzkaller #0 PREEMPT(full) [ 1656.679693][T22572] Tainted: [L]=SOFTLOCKUP [ 1656.679700][T22572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1656.679711][T22572] Call Trace: [ 1656.679717][T22572] [ 1656.679724][T22572] dump_stack_lvl+0x100/0x190 [ 1656.679753][T22572] should_fail_ex.cold+0x5/0xa [ 1656.679780][T22572] should_failslab+0xc2/0x120 [ 1656.679805][T22572] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1656.679828][T22572] ? __alloc_skb+0x5b7/0x710 [ 1656.679857][T22572] ? __alloc_skb+0x140/0x710 [ 1656.679894][T22572] __alloc_skb+0x140/0x710 [ 1656.679917][T22572] ? __alloc_skb+0x5b7/0x710 [ 1656.679940][T22572] ? __pfx___alloc_skb+0x10/0x10 [ 1656.679972][T22572] netlink_ack+0x117/0xba0 [ 1656.679997][T22572] netlink_rcv_skb+0x333/0x420 [ 1656.680013][T22572] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1656.680035][T22572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1656.680061][T22572] ? netlink_deliver_tap+0x1ae/0xb50 [ 1656.680093][T22572] netlink_unicast+0x668/0x950 [ 1656.680114][T22572] ? __pfx_netlink_unicast+0x10/0x10 [ 1656.680140][T22572] netlink_sendmsg+0x9ac/0x10c0 [ 1656.680162][T22572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1656.680187][T22572] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1656.680217][T22572] ? sock_write_iter+0x560/0x5d0 [ 1656.680237][T22572] sock_write_iter+0x560/0x5d0 [ 1656.680258][T22572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1656.680276][T22572] ? __pfx_sock_write_iter+0x10/0x10 [ 1656.680304][T22572] ? bpf_lsm_file_permission+0x9/0x10 [ 1656.680326][T22572] ? security_file_permission+0x76/0x210 [ 1656.680345][T22572] ? rw_verify_area+0xce/0x6d0 [ 1656.680367][T22572] vfs_write+0x6af/0x1050 [ 1656.680389][T22572] ? __pfx_sock_write_iter+0x10/0x10 [ 1656.680411][T22572] ? __pfx_vfs_write+0x10/0x10 [ 1656.680431][T22572] ? find_held_lock+0x2b/0x80 [ 1656.680464][T22572] ksys_write+0x1f8/0x250 [ 1656.680486][T22572] ? __pfx_ksys_write+0x10/0x10 [ 1656.680514][T22572] do_syscall_64+0x123/0x790 [ 1656.680540][T22572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.680560][T22572] RIP: 0033:0x7fc25bf9f559 [ 1656.680577][T22572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.680595][T22572] RSP: 002b:00007fc25cec3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1656.680617][T22572] RAX: ffffffffffffffda RBX: 00007fc25c225fa0 RCX: 00007fc25bf9f559 [ 1656.680631][T22572] RDX: 0000000000000038 RSI: 0000200000000840 RDI: 0000000000000004 [ 1656.680644][T22572] RBP: 00007fc25c036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1656.680657][T22572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1656.680670][T22572] R13: 00007fc25c226038 R14: 00007fc25c225fa0 R15: 00007ffc1febb5c8 [ 1656.680698][T22572] [ 1656.735389][T22571] FAULT_INJECTION: forcing a failure. [ 1656.735389][T22571] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.735420][T22571] CPU: 0 UID: 0 PID: 22571 Comm: syz.0.4128 Tainted: G L syzkaller #0 PREEMPT(full) [ 1656.735445][T22571] Tainted: [L]=SOFTLOCKUP [ 1656.735452][T22571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1656.735462][T22571] Call Trace: [ 1656.735469][T22571] [ 1656.735476][T22571] dump_stack_lvl+0x100/0x190 [ 1656.735508][T22571] should_fail_ex.cold+0x5/0xa [ 1656.735534][T22571] should_failslab+0xc2/0x120 [ 1656.735559][T22571] __kmalloc_noprof+0xfc/0x840 [ 1656.735580][T22571] ? rcu_is_watching+0x13/0xc0 [ 1656.735597][T22571] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1656.735621][T22571] tomoyo_realpath_from_path+0xb6/0x690 [ 1656.735646][T22571] tomoyo_path2_perm+0x366/0x700 [ 1656.735672][T22571] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 1656.735694][T22571] ? try_to_unlazy+0x296/0x910 [ 1656.735747][T22571] tomoyo_path_rename+0xfc/0x1a0 [ 1656.735765][T22571] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 1656.735786][T22571] ? do_raw_spin_unlock+0x145/0x1e0 [ 1656.735815][T22571] security_path_rename+0x18e/0x3c0 [ 1656.735839][T22571] filename_renameat2+0x731/0xa60 [ 1656.735864][T22571] ? __pfx_filename_renameat2+0x10/0x10 [ 1656.735889][T22571] ? lock_acquire+0x1d1/0x380 [ 1656.735908][T22571] ? __might_fault+0xc5/0x140 [ 1656.735936][T22571] ? __might_fault+0xc5/0x140 [ 1656.735975][T22571] ? do_getname+0x191/0x390 [ 1656.735994][T22571] __x64_sys_rename+0x81/0xb0 [ 1656.736012][T22571] do_syscall_64+0x123/0x790 [ 1656.736039][T22571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.736057][T22571] RIP: 0033:0x7f755719f559 [ 1656.736071][T22571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.736087][T22571] RSP: 002b:00007f75580c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1656.736103][T22571] RAX: ffffffffffffffda RBX: 00007f7557425fa0 RCX: 00007f755719f559 [ 1656.736115][T22571] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000200000000d00 [ 1656.736125][T22571] RBP: 00007f7557236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1656.736135][T22571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1656.736145][T22571] R13: 00007f7557426038 R14: 00007f7557425fa0 R15: 00007ffd847feee8 [ 1656.736169][T22571] [ 1656.738212][T22571] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1657.552438][T22596] kAFS: No cell specified [ 1657.601371][T20067] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1657.615983][T22600] FAULT_INJECTION: forcing a failure. [ 1657.615983][T22600] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.616012][T22600] CPU: 0 UID: 0 PID: 22600 Comm: syz.4.4141 Tainted: G L syzkaller #0 PREEMPT(full) [ 1657.616035][T22600] Tainted: [L]=SOFTLOCKUP [ 1657.616041][T22600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1657.616051][T22600] Call Trace: [ 1657.616058][T22600] [ 1657.616065][T22600] dump_stack_lvl+0x100/0x190 [ 1657.616096][T22600] should_fail_ex.cold+0x5/0xa [ 1657.616121][T22600] should_failslab+0xc2/0x120 [ 1657.616146][T22600] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1657.616167][T22600] ? alloc_vfsmnt+0x25/0x840 [ 1657.616191][T22600] alloc_vfsmnt+0x25/0x840 [ 1657.616213][T22600] clone_mnt+0x4b/0x9c0 [ 1657.616235][T22600] __do_loopback+0x46c/0x540 [ 1657.616256][T22600] vfs_open_tree+0x651/0xb60 [ 1657.616273][T22600] ? _raw_spin_unlock+0x28/0x50 [ 1657.616292][T22600] ? __pfx_vfs_open_tree+0x10/0x10 [ 1657.616315][T22600] __x64_sys_open_tree+0xbe/0x150 [ 1657.616334][T22600] do_syscall_64+0x123/0x790 [ 1657.616358][T22600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.616375][T22600] RIP: 0033:0x7f04c079f559 [ 1657.616389][T22600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.616405][T22600] RSP: 002b:00007f04c160f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1657.616422][T22600] RAX: ffffffffffffffda RBX: 00007f04c0a25fa0 RCX: 00007f04c079f559 [ 1657.616433][T22600] RDX: 0000000000081801 RSI: 0000000000000000 RDI: 0000000000000003 [ 1657.616443][T22600] RBP: 00007f04c0836b20 R08: 0000000000000000 R09: 0000000000000000 [ 1657.616453][T22600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1657.616463][T22600] R13: 00007f04c0a26038 R14: 00007f04c0a25fa0 R15: 00007ffe652649c8 [ 1657.616486][T22600] [ 1657.883177][ T29] audit: type=1400 audit(1792967952.480:699): avc: denied { setopt } for pid=22605 comm="syz.4.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1657.883233][ T29] audit: type=1400 audit(1792967952.480:700): avc: denied { accept } for pid=22605 comm="syz.4.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1658.328453][T22622] comedi comedi1: pcmda12: I/O base address or length out of range [ 1659.549240][T22568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1659.549260][T22568] nci: nci_start_poll: failed to set local general bytes [ 1659.565092][T22559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1659.568865][T22608] netlink: 'syz.0.4145': attribute type 1 has an invalid length. [ 1660.432001][T22695] capability: warning: `syz.4.4184' uses deprecated v2 capabilities in a way that may be insecure [ 1660.951085][ T2042] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1660.989442][T22720] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1661.111610][ T2042] usb 1-1: Using ep0 maxpacket: 32 [ 1661.112257][ T2042] usb 1-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1661.114166][ T2042] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.114206][ T2042] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1661.114231][ T2042] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1661.114255][ T2042] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1661.115995][ T2042] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.116016][ T2042] usb 1-1: Product: syz [ 1661.116030][ T2042] usb 1-1: Manufacturer: syz [ 1661.116045][ T2042] usb 1-1: SerialNumber: syz [ 1661.130364][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1661.153383][T22725] netlink: 'syz.2.4199': attribute type 3 has an invalid length. [ 1661.158191][ T2042] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input74 [ 1661.201086][ T5742] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1661.342291][ T5742] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1661.343247][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.344769][ T5742] usb 5-1: config 0 descriptor?? [ 1661.353000][ T2042] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1661.353014][ T2042] (id 0x00) [ 1661.444948][ T2042] rc_core: IR keymap rc-imon-pad not found [ 1661.444966][ T2042] Registered IR keymap rc-empty [ 1661.445272][ T2042] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1661.445292][ T2042] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1661.445424][T12859] null_blk: rq ffff888028891500 timed out [ 1661.445599][T12859] timeout error, dev nullb0, sector 3320 op 0x1:(WRITE) flags 0xc800 phys_seg 33 prio class 2 [ 1661.561742][ T5742] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1661.562321][ T2042] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1661.564635][ T2042] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input75 [ 1661.594541][ T2042] imon 1-1:155.0: iMON device (15c2:ffdc) on usb<1:96> initialized [ 1661.868367][ T5742] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 1661.868392][ T5742] [drm] Initialized udl on minor 1 [ 1662.051607][T22743] md: array md2 already initialised! [ 1662.411797][T22743] md: could not open device unknown-block(1,4). [ 1662.411846][T22743] md: error, md_import_device() returned -16 [ 1662.473377][T22746] imon:send_packet: task interrupted [ 1662.473511][T22746] imon:send_packet: packet tx failed (-512) [ 1662.474149][T22746] imon:vfd_write: send packet #1 failed [ 1662.509105][T22746] imon:send_packet: packet tx failed (-32) [ 1662.521521][T22746] imon:vfd_write: send packet #0 failed [ 1662.871679][T19431] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1663.018640][ T29] audit: type=1400 audit(1792967957.610:701): avc: denied { watch watch_reads } for pid=22764 comm="syz.1.4214" path="/189/file1" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1663.053260][T19431] usb 3-1: Using ep0 maxpacket: 32 [ 1663.053946][T19431] usb 3-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1663.056457][T19431] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1663.056479][T19431] usb 3-1: config 0 has no interface number 0 [ 1663.060080][T19431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.060105][T19431] usb 3-1: Product: syz [ 1663.060120][T19431] usb 3-1: Manufacturer: syz [ 1663.060135][T19431] usb 3-1: SerialNumber: syz [ 1663.067263][T19431] usb 3-1: config 0 descriptor?? [ 1663.077297][T19431] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1663.077335][T19431] usb 3-1: selecting invalid altsetting 1 [ 1663.077350][T19431] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1663.095314][T19431] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1663.095568][T19431] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1663.095609][T19431] usb 3-1: media controller created [ 1663.138387][T19431] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1663.214115][T22768] overlayfs: failed to resolve './bus': -2 [ 1663.290021][T22772] netlink: 'syz.0.4217': attribute type 1 has an invalid length. [ 1663.363097][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1663.694414][T22786] syzkaller1: entered promiscuous mode [ 1663.694436][T22786] syzkaller1: entered allmulticast mode [ 1664.014189][ T29] audit: type=1400 audit(1792967958.610:702): avc: denied { search } for pid=22791 comm="syz.0.4226" name="/" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1664.015263][ T29] audit: type=1400 audit(1792967958.610:703): avc: denied { search } for pid=22791 comm="syz.0.4226" name="cluster" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1664.140235][T21422] usb 1-1: USB disconnect, device number 96 [ 1664.231788][T22798] netlink: 'syz.1.4229': attribute type 1 has an invalid length. [ 1664.252763][T19431] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1664.253777][T19431] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1664.294883][T22760] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1664.330065][T19431] usb 3-1: USB disconnect, device number 99 [ 1664.501125][T21422] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1664.653675][T21422] usb 1-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1664.654525][T21422] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.656860][T21422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.656883][T21422] usb 1-1: Product: syz [ 1664.656897][T21422] usb 1-1: Manufacturer: syz [ 1664.656911][T21422] usb 1-1: SerialNumber: syz [ 1664.709671][T21422] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1664.709710][T21422] dvb-usb: bulk message failed: -22 (3/0) [ 1664.728033][T21422] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1664.730112][T21422] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1664.730154][T21422] usb 1-1: media controller created [ 1664.772858][T21422] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1664.869150][T21422] DVB: Unable to find symbol mt352_attach() [ 1664.869166][T21422] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1664.869803][T21422] dvb-usb: bulk message failed: -22 (3/0) [ 1664.891753][T21422] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1664.963809][T22796] dvb-usb: bulk message failed: -22 (2/0) [ 1664.972346][T19431] usb 1-1: USB disconnect, device number 97 [ 1665.066474][T19431] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1665.323945][T22823] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1665.655429][ T29] audit: type=1400 audit(1792967960.250:704): avc: denied { append } for pid=22833 comm="syz.0.4245" name="sg0" dev="devtmpfs" ino=893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1666.216572][T22857] rxe_eth0 speed is unknown, defaulting to 1000 [ 1666.278214][T22858] tipc: Started in network mode [ 1666.278262][T22858] tipc: Node identity ac1414aa, cluster identity 4711 [ 1666.279342][T22858] tipc: New replicast peer: 172.20.20.187 [ 1666.290165][T22858] tipc: Enabled bearer , priority 10 [ 1666.342574][ T2042] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1666.405373][T22857] wlan1 speed is unknown, defaulting to 1000 [ 1666.511105][ T2042] usb 1-1: Using ep0 maxpacket: 16 [ 1666.511818][ T2042] usb 1-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 1666.512782][ T2042] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.512822][ T2042] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.512848][ T2042] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.512868][ T2042] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1666.512890][ T2042] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1666.512918][ T2042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.523717][ T2042] usb 1-1: config 0 descriptor?? [ 1666.881473][ T5742] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1666.881905][ T5742] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1666.939816][ T5742] usb 5-1: USB disconnect, device number 126 [ 1667.016271][ T2042] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 1667.016309][ T2042] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 1667.016332][ T2042] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 1667.016352][ T2042] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 1667.016373][ T2042] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 1667.016393][ T2042] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 1667.016412][ T2042] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 1667.016433][ T2042] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 1667.016452][ T2042] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 1667.016473][ T2042] logitech-djreceiver 0003:046D:C53A.0002: unknown main item tag 0x0 [ 1667.246651][ T9398] usb 1-1: USB disconnect, device number 98 [ 1667.279135][T19431] tipc: Node number set to 2886997162 [ 1667.451082][ T2042] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1667.581113][ T2042] usb 2-1: device descriptor read/64, error -71 [ 1667.831389][ T2042] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1667.877803][ T29] audit: type=1400 audit(1792967962.470:705): avc: denied { read write } for pid=22896 comm="syz.2.4273" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1667.877851][ T29] audit: type=1400 audit(1792967962.470:706): avc: denied { open } for pid=22896 comm="syz.2.4273" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1667.892475][T22899] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1667.961623][ T2042] usb 2-1: device descriptor read/64, error -71 [ 1667.994647][T22902] netlink: 'syz.4.4275': attribute type 10 has an invalid length. [ 1667.994666][T22902] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4275'. [ 1667.994827][T22902] dummy0: entered promiscuous mode [ 1667.994855][T22902] dummy0: entered allmulticast mode [ 1667.997218][T22902] bridge0: port 3(dummy0) entered blocking state [ 1667.997297][T22902] bridge0: port 3(dummy0) entered disabled state [ 1668.000935][T22902] bridge0: port 3(dummy0) entered blocking state [ 1668.001084][T22902] bridge0: port 3(dummy0) entered forwarding state [ 1668.081684][ T2042] usb usb2-port1: attempt power cycle [ 1668.137470][T22907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1668.421085][ T2042] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1668.442293][ T2042] usb 2-1: device descriptor read/8, error -71 [ 1668.594377][ T29] audit: type=1400 audit(1792967963.190:707): avc: denied { module_request } for pid=22920 comm="syz.0.4282" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1668.681095][ T2042] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1668.704215][ T2042] usb 2-1: device descriptor read/8, error -71 [ 1668.811285][ T2042] usb usb2-port1: unable to enumerate USB device [ 1669.000599][T22934] FAULT_INJECTION: forcing a failure. [ 1669.000599][T22934] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.000633][T22934] CPU: 1 UID: 0 PID: 22934 Comm: syz.2.4287 Tainted: G L syzkaller #0 PREEMPT(full) [ 1669.000662][T22934] Tainted: [L]=SOFTLOCKUP [ 1669.000671][T22934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1669.000683][T22934] Call Trace: [ 1669.000691][T22934] [ 1669.000699][T22934] dump_stack_lvl+0x100/0x190 [ 1669.000734][T22934] should_fail_ex.cold+0x5/0xa [ 1669.000763][T22934] should_failslab+0xc2/0x120 [ 1669.000791][T22934] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1669.000814][T22934] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1669.000843][T22934] ? alloc_pwq+0x58c/0x1450 [ 1669.000870][T22934] alloc_pwq+0x58c/0x1450 [ 1669.000897][T22934] apply_wqattrs_prepare+0x61e/0x980 [ 1669.000925][T22934] __alloc_workqueue+0xdae/0x1900 [ 1669.000961][T22934] alloc_workqueue_noprof+0xc7/0x130 [ 1669.000990][T22934] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1669.001029][T22934] ? __pfx___debug_object_init+0x10/0x10 [ 1669.001060][T22934] nci_register_device+0x394/0xb80 [ 1669.001084][T22934] ? __pfx_nci_register_device+0x10/0x10 [ 1669.001110][T22934] ? lockdep_init_map_type+0x5c/0x250 [ 1669.001141][T22934] virtual_ncidev_open+0x141/0x220 [ 1669.001169][T22934] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1669.001194][T22934] misc_open+0x26d/0x450 [ 1669.001219][T22934] ? __pfx_misc_open+0x10/0x10 [ 1669.001242][T22934] chrdev_open+0x234/0x6a0 [ 1669.001271][T22934] ? __pfx_chrdev_open+0x10/0x10 [ 1669.001300][T22934] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1669.001328][T22934] do_dentry_open+0x674/0x1470 [ 1669.001353][T22934] ? __pfx_chrdev_open+0x10/0x10 [ 1669.001386][T22934] vfs_open_consume+0xcc/0x460 [ 1669.001419][T22934] path_openat+0x1547/0x23f0 [ 1669.001452][T22934] ? __pfx_path_openat+0x10/0x10 [ 1669.001488][T22934] do_file_open+0x20e/0x430 [ 1669.001517][T22934] ? __pfx_do_file_open+0x10/0x10 [ 1669.001565][T22934] ? _raw_spin_unlock+0x28/0x50 [ 1669.001587][T22934] ? alloc_fd+0x471/0x7a0 [ 1669.001624][T22934] do_sys_openat2+0x163/0x1d0 [ 1669.001642][T22934] ? __pfx_do_sys_openat2+0x10/0x10 [ 1669.001672][T22934] __x64_sys_openat+0x12d/0x210 [ 1669.001692][T22934] ? __pfx___x64_sys_openat+0x10/0x10 [ 1669.001721][T22934] do_syscall_64+0x123/0x790 [ 1669.001751][T22934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.001771][T22934] RIP: 0033:0x7f465f99f559 [ 1669.001788][T22934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1669.001807][T22934] RSP: 002b:00007f4660783028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1669.001827][T22934] RAX: ffffffffffffffda RBX: 00007f465fc25fa0 RCX: 00007f465f99f559 [ 1669.001840][T22934] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1669.001852][T22934] RBP: 00007f465fa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1669.001864][T22934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1669.001875][T22934] R13: 00007f465fc26038 R14: 00007f465fc25fa0 R15: 00007ffeaa2f5288 [ 1669.001902][T22934] [ 1669.309733][T22938] syzkaller1: entered promiscuous mode [ 1669.309753][T22938] syzkaller1: entered allmulticast mode [ 1669.320940][ T29] audit: type=1400 audit(1792967963.910:708): avc: denied { ioctl } for pid=22937 comm="syz.4.4289" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x405c5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1669.366790][T22938] input: syz0 as /devices/virtual/input/input76 [ 1669.705568][T22945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1669.761536][T10873] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1669.851136][T21422] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1669.912559][T10873] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1669.913948][T10873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.916015][T10873] usb 3-1: config 0 descriptor?? [ 1670.024268][T21422] usb 5-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 1670.026445][T21422] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.026498][T21422] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1670.030144][T21422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.030169][T21422] usb 5-1: Product: syz [ 1670.030184][T21422] usb 5-1: Manufacturer: syz [ 1670.030198][T21422] usb 5-1: SerialNumber: syz [ 1670.102379][T21422] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1670.107342][T21422] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1670.107342][T21422] Please send a copy of this message to and [ 1670.158057][T10873] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1670.343733][ T2042] usb 5-1: USB disconnect, device number 127 [ 1670.402408][T10873] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1670.402431][T10873] [drm] Initialized udl on minor 1 [ 1670.550129][ T29] audit: type=1800 audit(1792967965.140:709): pid=22968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4301" name="file2" dev="sda1" ino=2062 res=0 errno=-22 [ 1671.432698][ T29] audit: type=1400 audit(1792967966.030:710): avc: denied { watch } for pid=22993 comm="syz.4.4311" path="/295/bus" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1671.432742][ T29] audit: type=1400 audit(1792967966.030:711): avc: denied { watch_sb } for pid=22993 comm="syz.4.4311" path="/295/bus" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1671.661099][ T2042] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1671.816778][ T2042] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1671.818534][ T2042] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.826119][ T2042] usb 2-1: config 0 descriptor?? [ 1672.051874][ T2042] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1672.310751][ T2042] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1672.310776][ T2042] [drm] Initialized udl on minor 2 [ 1672.449898][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1672.464226][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1672.468168][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1672.469028][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1672.473235][ T2042] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1672.473526][ T2042] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1672.500847][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1672.626736][ T6321] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.693390][ T6321] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.800463][ T6321] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.875017][ T29] audit: type=1400 audit(1792967967.470:712): avc: denied { map } for pid=23051 comm="syz.0.4331" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1672.909524][ T6321] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.983114][T23033] rxe_eth0 speed is unknown, defaulting to 1000 [ 1673.318419][T23033] wlan1 speed is unknown, defaulting to 1000 [ 1673.339360][ T6321] bridge_slave_1: left allmulticast mode [ 1673.339399][ T6321] bridge_slave_1: left promiscuous mode [ 1673.340752][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.364520][ T6321] bridge_slave_0: left allmulticast mode [ 1673.364545][ T6321] bridge_slave_0: left promiscuous mode [ 1673.364737][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.691826][ T29] audit: type=1400 audit(1792967968.280:713): avc: denied { write } for pid=23058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.812326][ T29] audit: type=1400 audit(1792967968.410:714): avc: denied { write } for pid=23073 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1674.010192][ T6321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1674.027206][ T6321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1674.034758][ T6321] bond0 (unregistering): Released all slaves [ 1674.062331][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1674.333411][T19712] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1674.484280][T19712] usb 1-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 1674.487850][T19712] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.487878][T19712] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1674.487913][T19712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.564721][T20067] Bluetooth: hci0: command tx timeout [ 1674.585714][T19712] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1674.789532][ T29] audit: type=1400 audit(1792967969.380:715): avc: denied { write } for pid=23079 comm="syz.0.4336" name="idmouse0" dev="devtmpfs" ino=5448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1674.925811][ T29] audit: type=1400 audit(1792967969.520:716): avc: denied { write } for pid=23084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1674.964070][ T6321] hsr_slave_0: left promiscuous mode [ 1674.964738][ T6321] hsr_slave_1: left promiscuous mode [ 1674.965474][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1674.965528][ T6321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1674.966407][ T6321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1674.966422][ T6321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.014322][ T29] audit: type=1400 audit(1792967969.610:717): avc: denied { write } for pid=23112 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1675.040154][ T6321] veth1_macvtap: left promiscuous mode [ 1675.040202][ T6321] veth0_macvtap: left promiscuous mode [ 1675.040304][ T6321] veth1_vlan: left promiscuous mode [ 1675.040381][ T6321] veth0_vlan: left promiscuous mode [ 1675.335393][ T6321] team0 (unregistering): Port device team_slave_1 removed [ 1675.357040][ T6321] team0 (unregistering): Port device team_slave_0 removed [ 1675.442103][T10873] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1675.448100][T10873] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1675.461819][T19431] usb 2-1: USB disconnect, device number 106 [ 1675.462434][ T2042] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1675.492499][T21422] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1675.508092][ T2042] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1675.521904][T10873] usb 3-1: USB disconnect, device number 100 [ 1675.530214][T21422] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1675.530384][T21422] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1675.653130][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1675.684759][T23033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.684949][T23033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.685071][T23033] bridge_slave_0: entered allmulticast mode [ 1675.686371][T23033] bridge_slave_0: entered promiscuous mode [ 1675.728663][T23033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.728823][T23033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.728929][T23033] bridge_slave_1: entered allmulticast mode [ 1675.730590][T23033] bridge_slave_1: entered promiscuous mode [ 1675.862680][T23033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.875493][T23033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.971414][T23033] team0: Port device team_slave_0 added [ 1675.977953][T23033] team0: Port device team_slave_1 added [ 1676.071441][T23134] smbdirect: ib_dev[rxe0] renamed to [sqz2] [ 1676.081831][T23033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.081846][T23033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.081884][T23033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.089261][T23033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.089278][T23033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.089299][T23033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.388210][T23033] hsr_slave_0: entered promiscuous mode [ 1676.390537][T23033] hsr_slave_1: entered promiscuous mode [ 1676.398129][T23033] debugfs: 'hsr0' already exists in 'hsr' [ 1676.398147][T23033] Cannot create hsr debugfs directory [ 1676.425734][ T29] audit: type=1400 audit(1792967971.020:718): avc: denied { write } for pid=23136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1676.529199][ T29] audit: type=1400 audit(1792967971.120:719): avc: denied { write } for pid=23158 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1676.565274][ T2042] usb 1-1: USB disconnect, device number 99 [ 1676.596537][ T2042] idmouse 1-1:1.0: disconnected [ 1676.641480][T20067] Bluetooth: hci0: command tx timeout [ 1676.647290][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1676.851894][T23033] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1676.869133][T23033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1676.870511][T23033] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1676.893122][T23033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1676.895435][T23033] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1676.905778][T23033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1676.906381][T23033] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1676.942576][T23033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1677.150448][ T29] audit: type=1400 audit(1792967971.740:720): avc: denied { write } for pid=23167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.181375][T19431] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1677.227366][T23033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.263295][T23033] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.280080][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.280163][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1677.308066][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.308134][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1677.331941][T19431] usb 2-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 1677.335755][T19431] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1677.336645][T19431] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1677.340555][T19431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.340577][T19431] usb 2-1: Product: syz [ 1677.340591][T19431] usb 2-1: Manufacturer: syz [ 1677.340605][T19431] usb 2-1: SerialNumber: syz [ 1677.352308][ T29] audit: type=1400 audit(1792967971.950:721): avc: denied { write } for pid=23196 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.397475][T23033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1677.397495][T23033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1677.425613][T19431] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 1677.465980][T19431] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1677.469109][T19431] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1677.484126][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1677.530026][T23198] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1677.756680][T23217] fuse: Bad value for 'fd' [ 1677.760333][T23217] fuse: Bad value for 'fd' [ 1678.092493][ T29] audit: type=1400 audit(1792967972.690:722): avc: denied { read } for pid=23233 comm="syz.2.4366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1678.245991][T23033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1678.261271][T21422] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1678.393283][T21422] usb 1-1: device descriptor read/64, error -71 [ 1678.524560][T23033] veth0_vlan: entered promiscuous mode [ 1678.535814][T23033] veth1_vlan: entered promiscuous mode [ 1678.589326][T23033] veth0_macvtap: entered promiscuous mode [ 1678.595875][T23033] veth1_macvtap: entered promiscuous mode [ 1678.619522][T23033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1678.631485][T21422] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1678.639588][T23033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1678.652178][ T6538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.672616][ T6538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.716666][ T6321] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.716709][ T6321] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.722969][T20067] Bluetooth: hci0: command tx timeout [ 1678.766647][T21422] usb 1-1: device descriptor read/64, error -71 [ 1678.804664][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1678.804685][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1678.845107][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1678.845126][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1678.849999][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1678.850012][ T29] audit: type=1400 audit(1792967973.440:724): avc: denied { mounton } for pid=23033 comm="syz-executor" path="/root/syzkaller.7TLxth/syz-tmp" dev="sda1" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1678.872410][T21422] usb usb1-port1: attempt power cycle [ 1679.211432][T21422] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1679.233891][T21422] usb 1-1: device descriptor read/8, error -71 [ 1679.337514][T23272] loop0: detected capacity change from 0 to 4096 [ 1679.473707][T21422] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1679.478228][ T29] audit: type=1400 audit(1792967974.070:725): avc: denied { associate } for pid=23280 comm="syz.4.4377" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1679.495494][T21422] usb 1-1: device descriptor read/8, error -71 [ 1679.601842][T21422] usb usb1-port1: unable to enumerate USB device [ 1679.639058][ T6538] Bluetooth: hci1: Frame reassembly failed (-84) [ 1679.861239][T21422] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1680.011221][T16371] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1680.012961][T21422] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 1680.016987][T21422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.017007][T21422] usb 5-1: Product: syz [ 1680.017019][T21422] usb 5-1: Manufacturer: syz [ 1680.017032][T21422] usb 5-1: SerialNumber: syz [ 1680.161693][T16371] usb 3-1: Using ep0 maxpacket: 16 [ 1680.162643][T16371] usb 3-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 1680.163371][T16371] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.163393][T16371] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.163408][T16371] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1680.163435][T16371] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1680.163450][T16371] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1680.163467][T16371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.165610][T16371] usb 3-1: config 0 descriptor?? [ 1680.401482][T23170] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 1680.405760][ T5742] usb 2-1: USB disconnect, device number 107 [ 1680.433115][ T5742] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1680.459830][ T5742] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1680.460621][ T5742] ti_usb_3410_5052 2-1:2.0: device disconnected [ 1680.488523][T21422] rtl8150 5-1:1.0: couldn't reset the device [ 1680.488672][T21422] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1680.498566][T21422] usb 5-1: USB disconnect, device number 2 [ 1680.573036][T16371] usbhid 3-1:0.0: can't add hid device: -71 [ 1680.573126][T16371] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1680.575173][T16371] usb 3-1: USB disconnect, device number 101 [ 1680.801084][ T53] Bluetooth: hci0: command tx timeout [ 1681.231117][T16371] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1681.381144][T16371] usb 5-1: Using ep0 maxpacket: 32 [ 1681.381639][T16371] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1681.382374][T16371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.382390][T16371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1681.382410][T16371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.383889][T16371] usb 5-1: config 0 descriptor?? [ 1681.386547][T16371] hub 5-1:0.0: USB hub found [ 1681.481062][ T2042] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1681.588981][T16371] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1681.641620][ T2042] usb 1-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=0.06 [ 1681.641659][ T2042] usb 1-1: no configurations [ 1681.641671][ T2042] usb 1-1: can't read configurations, error -22 [ 1681.682706][T20067] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1681.771532][ T2042] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1681.923835][ T2042] usb 1-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=0.06 [ 1681.923872][ T2042] usb 1-1: no configurations [ 1681.923883][ T2042] usb 1-1: can't read configurations, error -22 [ 1681.924121][ T2042] usb usb1-port1: attempt power cycle [ 1681.997427][T16371] hid_parser_main: 14 callbacks suppressed [ 1681.997449][T16371] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 1682.044904][T16371] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 1682.261131][ T2042] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1682.282279][ T2042] usb 1-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=0.06 [ 1682.282316][ T2042] usb 1-1: no configurations [ 1682.282335][ T2042] usb 1-1: can't read configurations, error -22 [ 1682.456760][T19431] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1682.458099][ T2042] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1682.478377][ T2042] usb 1-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=0.06 [ 1682.478413][ T2042] usb 1-1: no configurations [ 1682.478425][ T2042] usb 1-1: can't read configurations, error -22 [ 1682.478763][ T2042] usb usb1-port1: unable to enumerate USB device [ 1682.591109][ T5742] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 1682.591247][T19431] usb 6-1: device descriptor read/64, error -71 [ 1682.762693][ T5742] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1682.762719][ T5742] usb 2-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 1682.763523][ T5742] usb 2-1: config 142 has an invalid interface number: 251 but max is 0 [ 1682.763538][ T5742] usb 2-1: config 142 descriptor has 1 excess byte, ignoring [ 1682.763548][ T5742] usb 2-1: config 142 has no interface number 0 [ 1682.763565][ T5742] usb 2-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1682.763579][ T5742] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 1682.763592][ T5742] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 1682.763604][ T5742] usb 2-1: config 142 interface 251 has no altsetting 0 [ 1682.765937][ T5742] usb 2-1: string descriptor 0 read error: -22 [ 1682.766045][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.768571][T23334] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1682.768679][T23334] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1682.770158][ T5742] cypress_m8 2-1:142.251: HID->COM RS232 Adapter converter detected [ 1682.775062][ T5742] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 1682.841313][T19431] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1682.971329][T19431] usb 6-1: device descriptor read/64, error -71 [ 1683.081729][T19431] usb usb6-port1: attempt power cycle [ 1683.339456][ T29] audit: type=1400 audit(1792967977.930:726): avc: denied { connect } for pid=23347 comm="syz.2.4407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1683.363673][T23348] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input77 [ 1683.441548][T19431] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1683.461730][T19431] usb 6-1: device descriptor read/8, error -71 [ 1683.502095][T23334] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 1683.502114][T23334] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 1683.502295][ C1] usb 2-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 1683.701111][T19431] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1683.731636][T19431] usb 6-1: device descriptor read/8, error -71 [ 1683.774255][ T2042] usb 2-1: USB disconnect, device number 108 [ 1683.777367][ T2042] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 1683.777867][ T2042] cypress_m8 2-1:142.251: device disconnected [ 1683.851834][T19431] usb usb6-port1: unable to enumerate USB device [ 1684.210285][ T29] audit: type=1400 audit(1792967978.800:727): avc: denied { open } for pid=23363 comm="syz.2.4412" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1684.235123][ T29] audit: type=1400 audit(1792967978.830:728): avc: denied { ioctl } for pid=23363 comm="syz.2.4412" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1684.325582][T23369] netlink: 'syz.2.4414': attribute type 4 has an invalid length. [ 1684.416881][ T29] audit: type=1400 audit(1792967979.010:729): avc: denied { ioctl } for pid=23370 comm="syz.1.4415" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1684.776597][T23400] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1684.776619][T23400] audit: out of memory in audit_log_start [ 1684.993353][ T29] audit: type=1400 audit(1792967979.590:730): avc: denied { sys_module } for pid=23409 comm="syz.2.4427" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1685.181121][T21422] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1685.333008][T21422] usb 2-1: Using ep0 maxpacket: 16 [ 1685.334654][T21422] usb 2-1: New USB device found: idVendor=0e41, idProduct=4151, bcdDevice=62.00 [ 1685.334689][T21422] usb 2-1: too many configurations: 116, using maximum allowed: 8 [ 1685.335143][T21422] usb 2-1: config 0 has no interfaces? [ 1685.336233][T21422] usb 2-1: config 0 has no interfaces? [ 1685.336633][T21422] usb 2-1: config 0 has no interfaces? [ 1685.337040][T21422] usb 2-1: config 0 has no interfaces? [ 1685.337455][T21422] usb 2-1: config 0 has no interfaces? [ 1685.337865][T21422] usb 2-1: config 0 has no interfaces? [ 1685.338269][T21422] usb 2-1: config 0 has no interfaces? [ 1685.339233][T21422] usb 2-1: config 0 has no interfaces? [ 1685.340953][T21422] usb 2-1: New USB device strings: Mfr=240, Product=33, SerialNumber=3 [ 1685.340974][T21422] usb 2-1: Product: syz [ 1685.342637][T21422] usb 2-1: Manufacturer: syz [ 1685.342651][T21422] usb 2-1: SerialNumber: syz [ 1685.345044][T21422] usb 2-1: config 0 descriptor?? [ 1685.352103][T23430] smbdirect: ib_dev[sqz2] renamed to [s] [ 1685.512431][T16371] usb 5-1: USB disconnect, device number 3 [ 1685.615087][T23408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1685.615454][T23408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.666744][T23440] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1685.668806][T19431] kernel read not supported for file /trace_pipe (pid: 19431 comm: kworker/0:3) [ 1685.679819][T23408] FAULT_INJECTION: forcing a failure. [ 1685.679819][T23408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1685.679849][T23408] CPU: 1 UID: 0 PID: 23408 Comm: syz.1.4425 Tainted: G L syzkaller #0 PREEMPT(full) [ 1685.679873][T23408] Tainted: [L]=SOFTLOCKUP [ 1685.679881][T23408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1685.679892][T23408] Call Trace: [ 1685.679899][T23408] [ 1685.679906][T23408] dump_stack_lvl+0x100/0x190 [ 1685.679936][T23408] should_fail_ex.cold+0x5/0xa [ 1685.679962][T23408] _copy_to_user+0x32/0xd0 [ 1685.679985][T23408] sync_file_ioctl+0xc00/0xea0 [ 1685.680008][T23408] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1685.680032][T23408] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1685.680051][T23408] ? do_vfs_ioctl+0x226/0x13e0 [ 1685.680071][T23408] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1685.680091][T23408] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 1685.680120][T23408] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1685.680160][T23408] ? selinux_file_ioctl+0x1e0/0x290 [ 1685.680184][T23408] ? selinux_file_ioctl+0x1e7/0x290 [ 1685.680209][T23408] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1685.680229][T23408] __x64_sys_ioctl+0x18e/0x210 [ 1685.680254][T23408] do_syscall_64+0x123/0x790 [ 1685.680278][T23408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.680296][T23408] RIP: 0033:0x7f37d719f559 [ 1685.680312][T23408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1685.680328][T23408] RSP: 002b:00007f37d807b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1685.680346][T23408] RAX: ffffffffffffffda RBX: 00007f37d7425fa0 RCX: 00007f37d719f559 [ 1685.680359][T23408] RDX: 0000200000000180 RSI: 00000000c0303e03 RDI: 0000000000000008 [ 1685.680371][T23408] RBP: 00007f37d7236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1685.680382][T23408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1685.680393][T23408] R13: 00007f37d7426038 R14: 00007f37d7425fa0 R15: 00007ffe8c7cf708 [ 1685.680415][T23408] [ 1685.933773][T23453] overlayfs: missing 'lowerdir' [ 1686.053468][ T29] audit: type=1400 audit(1792967980.650:731): avc: denied { ioctl } for pid=23460 comm="syz.0.4447" path="socket:[105465]" dev="sockfs" ino=105465 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1686.151165][T19431] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1686.231458][T21422] usb 2-1: USB disconnect, device number 109 [ 1686.281254][T19431] usb 3-1: device descriptor read/64, error -71 [ 1686.391302][T16371] usb 1-1: new low-speed USB device number 108 using dummy_hcd [ 1686.425206][T23488] overlayfs: missing 'lowerdir' [ 1686.531460][T19431] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1686.549688][T16371] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1686.549731][T16371] usb 1-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 1686.550595][T16371] usb 1-1: config 142 has an invalid interface number: 251 but max is 0 [ 1686.550617][T16371] usb 1-1: config 142 has no interface number 0 [ 1686.550650][T16371] usb 1-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1686.550673][T16371] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 1686.550694][T16371] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 1686.550712][T16371] usb 1-1: config 142 interface 251 has no altsetting 0 [ 1686.563422][T16371] usb 1-1: string descriptor 0 read error: -22 [ 1686.563521][T16371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.575181][T23469] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1686.575293][T23469] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1686.579301][T16371] cypress_m8 1-1:142.251: HID->COM RS232 Adapter converter detected [ 1686.594541][T16371] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 1686.681880][T19431] usb 3-1: device descriptor read/64, error -71 [ 1686.699160][T23500] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1686.704503][T16371] kernel read not supported for file /trace_pipe (pid: 16371 comm: kworker/1:1) [ 1686.754662][T23502] kvm: emulating exchange as write [ 1686.791435][T19431] usb usb3-port1: attempt power cycle [ 1687.132540][T19431] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1687.151777][T19431] usb 3-1: device descriptor read/8, error -71 [ 1687.421171][T19431] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1687.442883][T19431] usb 3-1: device descriptor read/8, error -71 [ 1687.496753][T23535] capability: warning: `syz.5.4475' uses 32-bit capabilities (legacy support in use) [ 1687.497035][T23535] FAULT_INJECTION: forcing a failure. [ 1687.497035][T23535] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.497074][T23535] CPU: 0 UID: 0 PID: 23535 Comm: syz.5.4475 Tainted: G L syzkaller #0 PREEMPT(full) [ 1687.497101][T23535] Tainted: [L]=SOFTLOCKUP [ 1687.497108][T23535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1687.497119][T23535] Call Trace: [ 1687.497125][T23535] [ 1687.497133][T23535] dump_stack_lvl+0x100/0x190 [ 1687.497162][T23535] should_fail_ex.cold+0x5/0xa [ 1687.497180][T23535] should_failslab+0xc2/0x120 [ 1687.497197][T23535] __kmalloc_cache_noprof+0x91/0x6d0 [ 1687.497209][T23535] ? x509_cert_parse+0x9a/0x910 [ 1687.497229][T23535] x509_cert_parse+0x9a/0x910 [ 1687.497246][T23535] x509_key_preparse+0x65/0x9c0 [ 1687.497260][T23535] asymmetric_key_preparse+0xce/0x1d0 [ 1687.497281][T23535] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 1687.497307][T23535] __key_create_or_update+0x3f6/0xe10 [ 1687.497341][T23535] ? __pfx___key_create_or_update+0x10/0x10 [ 1687.497373][T23535] ? lookup_user_key+0x477/0x13e0 [ 1687.497390][T23535] ? __pfx_lookup_user_key+0x10/0x10 [ 1687.497418][T23535] key_create_or_update+0x42/0x60 [ 1687.497439][T23535] __do_sys_add_key+0x2e8/0x460 [ 1687.497454][T23535] ? __pfx___do_sys_add_key+0x10/0x10 [ 1687.497467][T23535] ? selinux_file_fcntl+0xe5/0x170 [ 1687.497486][T23535] do_syscall_64+0x123/0x790 [ 1687.497503][T23535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.497515][T23535] RIP: 0033:0x7f4668b9f559 [ 1687.497524][T23535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1687.497535][T23535] RSP: 002b:00007f46699bb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1687.497546][T23535] RAX: ffffffffffffffda RBX: 00007f4668e25fa0 RCX: 00007f4668b9f559 [ 1687.497553][T23535] RDX: 0000200000001700 RSI: 0000000000000000 RDI: 00002000000016c0 [ 1687.497560][T23535] RBP: 00007f4668c36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 1687.497567][T23535] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1687.497573][T23535] R13: 00007f4668e26038 R14: 00007f4668e25fa0 R15: 00007ffeb089e378 [ 1687.497588][T23535] [ 1687.534575][ C1] usb 1-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 1687.534604][ C1] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 1687.536260][ C1] usb 1-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 1687.587317][T19431] usb usb3-port1: unable to enumerate USB device [ 1687.796978][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1687.798051][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1687.798721][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1688.006541][T21422] usb 1-1: USB disconnect, device number 108 [ 1688.029011][T21422] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 1688.029516][T21422] cypress_m8 1-1:142.251: device disconnected [ 1688.105028][ T29] audit: type=1400 audit(1792967982.700:732): avc: denied { write } for pid=23547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.207590][ T29] audit: type=1400 audit(1792967982.800:733): avc: denied { write } for pid=23569 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.399281][T23542] infiniband syz0: set active [ 1688.399332][T21422] vcan0 speed is unknown, defaulting to 1000 [ 1688.411447][T23542] infiniband syz0: added vcan0 [ 1688.429028][T23542] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1688.429067][T23542] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1688.429102][T23542] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1688.452490][T23542] RDS/IB: syz0: added [ 1688.452535][T23542] smc: adding ib device syz0 with port count 1 [ 1688.452551][T23542] smc: ib device syz0 port 1 has no pnetid [ 1688.452607][T21422] vcan0 speed is unknown, defaulting to 1000 [ 1688.455998][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1688.732412][T23596] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1688.807611][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1688.809725][ T29] audit: type=1400 audit(1792967983.400:734): avc: denied { write } for pid=23572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.109132][T23610] overlayfs: missing 'lowerdir' [ 1689.140070][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1689.375618][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1689.391170][T21422] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1689.425394][T23626] syzkaller1: entered promiscuous mode [ 1689.425415][T23626] syzkaller1: entered allmulticast mode [ 1689.519158][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1689.519175][ T29] audit: type=1400 audit(1792967984.110:736): avc: denied { write } for pid=23615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.567919][T21422] usb 5-1: Using ep0 maxpacket: 8 [ 1689.575488][T21422] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1689.575523][T21422] usb 5-1: New USB device found: idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1689.584437][T21422] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.584473][T21422] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1689.589218][T21422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.589243][T21422] usb 5-1: Product: syz [ 1689.589255][T21422] usb 5-1: Manufacturer: syz [ 1689.589267][T21422] usb 5-1: SerialNumber: syz [ 1689.591512][T21422] usb 5-1: config 0 descriptor?? [ 1689.599908][T21422] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1689.701720][ T29] audit: type=1400 audit(1792967984.290:737): avc: denied { write } for pid=23636 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.833498][T23613] FAULT_INJECTION: forcing a failure. [ 1689.833498][T23613] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.833523][T23613] CPU: 1 UID: 0 PID: 23613 Comm: syz.4.4493 Tainted: G L syzkaller #0 PREEMPT(full) [ 1689.833540][T23613] Tainted: [L]=SOFTLOCKUP [ 1689.833545][T23613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1689.833552][T23613] Call Trace: [ 1689.833556][T23613] [ 1689.833561][T23613] dump_stack_lvl+0x100/0x190 [ 1689.833582][T23613] should_fail_ex.cold+0x5/0xa [ 1689.833600][T23613] should_failslab+0xc2/0x120 [ 1689.833617][T23613] __kmalloc_noprof+0xfc/0x840 [ 1689.833631][T23613] ? fib_default_rule_add+0x4f/0x420 [ 1689.833648][T23613] fib_default_rule_add+0x4f/0x420 [ 1689.833664][T23613] fib4_rules_init+0x52/0x1c0 [ 1689.833677][T23613] fib_net_init+0x1fb/0x460 [ 1689.833693][T23613] ? __pfx_fib_net_init+0x10/0x10 [ 1689.833708][T23613] ? timer_init_key+0x150/0x310 [ 1689.833728][T23613] ? devinet_init_net+0x56c/0x8d0 [ 1689.833744][T23613] ? __pfx_arp_net_init+0x10/0x10 [ 1689.833762][T23613] ? __pfx_fib_net_init+0x10/0x10 [ 1689.833776][T23613] ops_init+0x1e2/0x5f0 [ 1689.833788][T23613] setup_net+0x118/0x3a0 [ 1689.833799][T23613] ? __pfx_setup_net+0x10/0x10 [ 1689.833810][T23613] ? bpf_lsm_namespace_init+0x9/0x10 [ 1689.833829][T23613] copy_net_ns+0x340/0x7a0 [ 1689.833842][T23613] create_new_namespaces+0x3ea/0xac0 [ 1689.833864][T23613] copy_namespaces+0x468/0x5e0 [ 1689.833887][T23613] copy_process+0x39dc/0x84c0 [ 1689.833921][T23613] ? __pfx_copy_process+0x10/0x10 [ 1689.833940][T23613] ? __pfx_get_futex_key+0x10/0x10 [ 1689.833962][T23613] kernel_clone+0x176/0x9d0 [ 1689.833975][T23613] ? __pfx_kernel_clone+0x10/0x10 [ 1689.833995][T23613] __do_sys_clone+0xd9/0x120 [ 1689.834007][T23613] ? __pfx___do_sys_clone+0x10/0x10 [ 1689.834030][T23613] do_syscall_64+0x123/0x790 [ 1689.834047][T23613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.834060][T23613] RIP: 0033:0x7f04c079f559 [ 1689.834070][T23613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1689.834081][T23613] RSP: 002b:00007f04c160efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1689.834092][T23613] RAX: ffffffffffffffda RBX: 00007f04c0a25fa0 RCX: 00007f04c079f559 [ 1689.834099][T23613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f8024000 [ 1689.834105][T23613] RBP: 00007f04c0836b20 R08: 0000000000000000 R09: 0000000000000000 [ 1689.834112][T23613] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1689.834118][T23613] R13: 00007f04c0a26038 R14: 00007f04c0a25fa0 R15: 00007ffe652649c8 [ 1689.834133][T23613] [ 1690.193286][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1690.196410][T21422] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1690.207912][T21422] usb 5-1: USB disconnect, device number 4 [ 1690.237756][T21069] udevd[21069]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1690.381097][T19431] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1690.531078][T19431] usb 1-1: Using ep0 maxpacket: 16 [ 1690.531645][T19431] usb 1-1: New USB device found: idVendor=0e41, idProduct=4151, bcdDevice=62.00 [ 1690.531677][T19431] usb 1-1: too many configurations: 116, using maximum allowed: 8 [ 1690.532234][T19431] usb 1-1: config 0 has no interfaces? [ 1690.532721][T19431] usb 1-1: config 0 has no interfaces? [ 1690.533135][T19431] usb 1-1: config 0 has no interfaces? [ 1690.533547][T19431] usb 1-1: config 0 has no interfaces? [ 1690.533990][T19431] usb 1-1: config 0 has no interfaces? [ 1690.534413][T19431] usb 1-1: config 0 has no interfaces? [ 1690.534845][T19431] usb 1-1: config 0 has no interfaces? [ 1690.535234][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1690.539079][T19431] usb 1-1: config 0 has no interfaces? [ 1690.541389][T19431] usb 1-1: New USB device strings: Mfr=240, Product=33, SerialNumber=3 [ 1690.541412][T19431] usb 1-1: Product: syz [ 1690.541426][T19431] usb 1-1: Manufacturer: syz [ 1690.541439][T19431] usb 1-1: SerialNumber: syz [ 1690.570393][T23672] overlayfs: missing 'lowerdir' [ 1690.613869][ T29] audit: type=1400 audit(1792967985.210:738): avc: denied { write } for pid=23645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1690.675545][T19431] usb 1-1: config 0 descriptor?? [ 1690.763718][ T29] audit: type=1400 audit(1792967985.360:739): avc: denied { write } for pid=23676 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1690.932063][T23649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1690.932416][T23649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1690.955937][T23649] FAULT_INJECTION: forcing a failure. [ 1690.955937][T23649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.955968][T23649] CPU: 0 UID: 0 PID: 23649 Comm: syz.0.4502 Tainted: G L syzkaller #0 PREEMPT(full) [ 1690.955990][T23649] Tainted: [L]=SOFTLOCKUP [ 1690.955997][T23649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1690.956007][T23649] Call Trace: [ 1690.956013][T23649] [ 1690.956019][T23649] dump_stack_lvl+0x100/0x190 [ 1690.956048][T23649] should_fail_ex.cold+0x5/0xa [ 1690.956072][T23649] _copy_to_user+0x32/0xd0 [ 1690.956092][T23649] sync_file_ioctl+0xc00/0xea0 [ 1690.956115][T23649] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1690.956139][T23649] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1690.956158][T23649] ? do_vfs_ioctl+0x226/0x13e0 [ 1690.956179][T23649] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1690.956196][T23649] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 1690.956225][T23649] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1690.956264][T23649] ? selinux_file_ioctl+0x1e0/0x290 [ 1690.956286][T23649] ? selinux_file_ioctl+0x1e7/0x290 [ 1690.956312][T23649] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1690.956332][T23649] __x64_sys_ioctl+0x18e/0x210 [ 1690.956354][T23649] do_syscall_64+0x123/0x790 [ 1690.956378][T23649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.956396][T23649] RIP: 0033:0x7f755719f559 [ 1690.956410][T23649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.956425][T23649] RSP: 002b:00007f75580c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1690.956442][T23649] RAX: ffffffffffffffda RBX: 00007f7557425fa0 RCX: 00007f755719f559 [ 1690.956453][T23649] RDX: 0000200000000180 RSI: 00000000c0303e03 RDI: 0000000000000008 [ 1690.956463][T23649] RBP: 00007f7557236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1690.956473][T23649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1690.956483][T23649] R13: 00007f7557426038 R14: 00007f7557425fa0 R15: 00007ffd847feee8 [ 1690.956507][T23649] [ 1690.973679][T21422] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1690.975283][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1691.162863][T21422] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1691.181784][T21422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.218528][T21422] usb 3-1: config 0 descriptor?? [ 1691.296067][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1691.414815][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1691.427250][T21422] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1691.452293][T23692] md: array md4 already initialised! [ 1691.509132][T16371] usb 1-1: USB disconnect, device number 109 [ 1691.656331][T21422] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1691.656357][T21422] [drm] Initialized udl on minor 1 [ 1691.660204][T23542] vcan0 speed is unknown, defaulting to 1000 [ 1691.725713][T23697] FAULT_INJECTION: forcing a failure. [ 1691.725713][T23697] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1691.725752][T23697] CPU: 0 UID: 0 PID: 23697 Comm: syz.0.4517 Tainted: G L syzkaller #0 PREEMPT(full) [ 1691.725780][T23697] Tainted: [L]=SOFTLOCKUP [ 1691.725787][T23697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1691.725798][T23697] Call Trace: [ 1691.725806][T23697] [ 1691.725814][T23697] dump_stack_lvl+0x100/0x190 [ 1691.725849][T23697] should_fail_ex.cold+0x5/0xa [ 1691.725877][T23697] get_futex_key+0x1c9/0x13e0 [ 1691.725911][T23697] ? __pfx_get_futex_key+0x10/0x10 [ 1691.725950][T23697] futex_wake+0xf4/0x5e0 [ 1691.725977][T23697] ? __pfx_futex_wake+0x10/0x10 [ 1691.726004][T23697] ? percpu_counter_add_batch+0xb9/0x230 [ 1691.726030][T23697] ? errseq_sample+0x51/0x70 [ 1691.726051][T23697] ? file_init_path+0x48e/0x670 [ 1691.726084][T23697] do_futex+0x2b2/0x440 [ 1691.726105][T23697] ? __pfx_do_futex+0x10/0x10 [ 1691.726124][T23697] ? fd_install+0x223/0x580 [ 1691.726157][T23697] __x64_sys_futex+0x34f/0x4d0 [ 1691.726178][T23697] ? __sys_socket+0xac/0x260 [ 1691.726202][T23697] ? __pfx___x64_sys_futex+0x10/0x10 [ 1691.726232][T23697] do_syscall_64+0x123/0x790 [ 1691.726262][T23697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.726284][T23697] RIP: 0033:0x7f755719f559 [ 1691.726302][T23697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1691.726322][T23697] RSP: 002b:00007f75580c30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1691.726343][T23697] RAX: ffffffffffffffda RBX: 00007f7557425fa8 RCX: 00007f755719f559 [ 1691.726356][T23697] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7557425fac [ 1691.726368][T23697] RBP: 00007f7557425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1691.726380][T23697] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1691.726392][T23697] R13: 00007f7557426038 R14: 00007ffd847fee00 R15: 00007ffd847feee8 [ 1691.726418][T23697] [ 1691.771512][T23692] md: could not open device unknown-block(1,8). [ 1691.771563][T23692] md: error, md_import_device() returned -16 [ 1691.975646][T23697] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1692.037548][T23701] Need at least one configuration in g1. [ 1692.037644][T23701] udc usbip-vudc.0: failed to start g1: -22 [ 1692.037686][T23701] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 1692.040629][T23701] UDC core: g1: couldn't find an available UDC or it's busy [ 1692.216733][ T29] audit: type=1400 audit(1792967986.810:740): avc: denied { bind } for pid=23713 comm="syz.4.4524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1692.218082][ T29] audit: type=1400 audit(1792967986.810:741): avc: denied { write } for pid=23713 comm="syz.4.4524" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1692.241529][ T29] audit: type=1400 audit(1792967986.820:742): avc: denied { ioctl } for pid=23713 comm="syz.4.4524" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x40047438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1692.241578][ T29] audit: type=1400 audit(1792967986.820:743): avc: denied { create } for pid=23715 comm="syz.1.4525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1692.382746][ T29] audit: type=1400 audit(1792967986.980:744): avc: denied { connect } for pid=23721 comm="syz.0.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1692.386099][ T29] audit: type=1400 audit(1792967986.980:745): avc: denied { ioctl } for pid=23721 comm="syz.0.4528" path="socket:[107086]" dev="sockfs" ino=107086 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1692.502847][T23730] netlink: 'syz.0.4531': attribute type 1 has an invalid length. [ 1692.502867][T23730] netlink: 'syz.0.4531': attribute type 3 has an invalid length. [ 1692.502877][T23730] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4531'. [ 1692.868279][T23756] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1692.870404][ T2042] kernel read not supported for file /trace_pipe (pid: 2042 comm: kworker/0:2) [ 1692.958514][ T6321] IPVS: starting estimator thread 0... [ 1693.071953][T23762] IPVS: using max 75 ests per chain, 180000 per kthread [ 1693.528298][T23787] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1693.529834][ T10] kernel read not supported for file /trace_pipe (pid: 10 comm: kworker/0:1) [ 1694.071111][ T10] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1694.221331][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1694.221961][ T10] usb 1-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 1694.223321][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1694.223344][ T10] usb 1-1: config 0 has no interface number 0 [ 1694.223381][ T10] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1694.223405][ T10] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.223424][ T10] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1694.223449][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1694.223476][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.229078][ T10] usb 1-1: config 0 descriptor?? [ 1694.238263][ T10] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 1694.309929][T23803] tipc: Enabling of bearer rejected, failed to enable media [ 1694.493743][ T10] usbhid 1-1:0.1: can't add hid device: -71 [ 1694.493842][ T10] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 1694.505769][ T10] usb 1-1: USB disconnect, device number 110 [ 1694.654517][T23824] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1694.666292][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1694.666309][ T29] audit: type=1400 audit(1792967989.270:750): avc: denied { mounton } for pid=23821 comm="syz.5.4568" path="/56/file1/dev" dev="autofs" ino=107428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 1694.704367][ T29] audit: type=1400 audit(1792967989.300:751): avc: denied { unmount } for pid=23033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1694.761479][ T29] audit: type=1400 audit(1792967989.360:752): avc: denied { write } for pid=23827 comm="syz.4.4571" name="functions" dev="configfs" ino=9345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1694.786494][ T29] audit: type=1400 audit(1792967989.390:753): avc: denied { add_name } for pid=23827 comm="syz.4.4571" name="tcm.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1694.839241][T23830] Need at least one configuration in g1. [ 1694.839335][T23830] udc usbip-vudc.0: failed to start g1: -22 [ 1694.839362][T23830] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 1694.844114][T23830] UDC core: g1: couldn't find an available UDC or it's busy [ 1695.179458][T23854] FAULT_INJECTION: forcing a failure. [ 1695.179458][T23854] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1695.179480][T23854] CPU: 1 UID: 0 PID: 23854 Comm: syz.0.4584 Tainted: G L syzkaller #0 PREEMPT(full) [ 1695.179496][T23854] Tainted: [L]=SOFTLOCKUP [ 1695.179500][T23854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1695.179507][T23854] Call Trace: [ 1695.179511][T23854] [ 1695.179516][T23854] dump_stack_lvl+0x100/0x190 [ 1695.179538][T23854] should_fail_ex.cold+0x5/0xa [ 1695.179556][T23854] get_futex_key+0x1c9/0x13e0 [ 1695.179579][T23854] ? __pfx_get_futex_key+0x10/0x10 [ 1695.179596][T23854] ? find_held_lock+0x2b/0x80 [ 1695.179606][T23854] ? get_pid_task+0xfc/0x250 [ 1695.179621][T23854] ? get_pid_task+0xfc/0x250 [ 1695.179639][T23854] futex_wake+0xf4/0x5e0 [ 1695.179653][T23854] ? find_held_lock+0x2b/0x80 [ 1695.179663][T23854] ? __pfx_futex_wake+0x10/0x10 [ 1695.179680][T23854] ? rcu_read_lock_any_held+0x6a/0x90 [ 1695.179693][T23854] ? find_held_lock+0x2b/0x80 [ 1695.179704][T23854] ? ksys_write+0x190/0x250 [ 1695.179717][T23854] ? ksys_write+0x190/0x250 [ 1695.179732][T23854] do_futex+0x2b2/0x440 [ 1695.179744][T23854] ? __pfx_do_futex+0x10/0x10 [ 1695.179756][T23854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1695.179774][T23854] __x64_sys_futex+0x34f/0x4d0 [ 1695.179786][T23854] ? fput+0x7c/0x100 [ 1695.179802][T23854] ? __pfx___x64_sys_futex+0x10/0x10 [ 1695.179813][T23854] ? ksys_write+0x1ac/0x250 [ 1695.179825][T23854] ? __pfx_ksys_write+0x10/0x10 [ 1695.179843][T23854] do_syscall_64+0x123/0x790 [ 1695.179864][T23854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.179876][T23854] RIP: 0033:0x7f755719f559 [ 1695.179887][T23854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.179898][T23854] RSP: 002b:00007f75580c30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1695.179911][T23854] RAX: ffffffffffffffda RBX: 00007f7557425fa8 RCX: 00007f755719f559 [ 1695.179918][T23854] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7557425fac [ 1695.179926][T23854] RBP: 00007f7557425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1695.179933][T23854] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1695.179940][T23854] R13: 00007f7557426038 R14: 00007ffd847fee00 R15: 00007ffd847feee8 [ 1695.179957][T23854] [ 1695.277843][T23856] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1695.299211][ T29] audit: type=1400 audit(1792967989.870:754): avc: denied { mounton } for pid=23855 comm="syz.0.4586" path="/373/debug/tracing/trace_pipe" dev="tracefs" ino=3869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1695.391309][ T10] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1695.571288][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1695.573620][ T10] usb 2-1: New USB device found: idVendor=0e41, idProduct=4151, bcdDevice=62.00 [ 1695.573656][ T10] usb 2-1: too many configurations: 116, using maximum allowed: 8 [ 1695.574130][ T10] usb 2-1: config 0 has no interfaces? [ 1695.574554][ T10] usb 2-1: config 0 has no interfaces? [ 1695.574971][ T10] usb 2-1: config 0 has no interfaces? [ 1695.575382][ T10] usb 2-1: config 0 has no interfaces? [ 1695.575796][ T10] usb 2-1: config 0 has no interfaces? [ 1695.576215][ T10] usb 2-1: config 0 has no interfaces? [ 1695.576640][ T10] usb 2-1: config 0 has no interfaces? [ 1695.577054][ T10] usb 2-1: config 0 has no interfaces? [ 1695.578752][ T10] usb 2-1: New USB device strings: Mfr=240, Product=33, SerialNumber=3 [ 1695.578775][ T10] usb 2-1: Product: syz [ 1695.578789][ T10] usb 2-1: Manufacturer: syz [ 1695.578803][ T10] usb 2-1: SerialNumber: syz [ 1695.580920][ T10] usb 2-1: config 0 descriptor?? [ 1695.887041][T23850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.887391][T23850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.896852][T23850] FAULT_INJECTION: forcing a failure. [ 1695.896852][T23850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1695.896878][T23850] CPU: 1 UID: 0 PID: 23850 Comm: syz.1.4581 Tainted: G L syzkaller #0 PREEMPT(full) [ 1695.896904][T23850] Tainted: [L]=SOFTLOCKUP [ 1695.896910][T23850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1695.896919][T23850] Call Trace: [ 1695.896925][T23850] [ 1695.896932][T23850] dump_stack_lvl+0x100/0x190 [ 1695.896961][T23850] should_fail_ex.cold+0x5/0xa [ 1695.896985][T23850] _copy_from_user+0x2e/0xd0 [ 1695.897005][T23850] sync_file_ioctl+0x681/0xea0 [ 1695.897027][T23850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1695.897051][T23850] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1695.897069][T23850] ? do_vfs_ioctl+0x226/0x13e0 [ 1695.897089][T23850] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1695.897108][T23850] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 1695.897138][T23850] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1695.897177][T23850] ? selinux_file_ioctl+0x1e0/0x290 [ 1695.897200][T23850] ? selinux_file_ioctl+0x1e7/0x290 [ 1695.897225][T23850] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1695.897245][T23850] __x64_sys_ioctl+0x18e/0x210 [ 1695.897266][T23850] do_syscall_64+0x123/0x790 [ 1695.897290][T23850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.897307][T23850] RIP: 0033:0x7f37d719f559 [ 1695.897322][T23850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.897337][T23850] RSP: 002b:00007f37d807b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1695.897354][T23850] RAX: ffffffffffffffda RBX: 00007f37d7425fa0 RCX: 00007f37d719f559 [ 1695.897365][T23850] RDX: 0000200000000180 RSI: 00000000c0303e03 RDI: 0000000000000008 [ 1695.897375][T23850] RBP: 00007f37d7236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1695.897385][T23850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1695.897395][T23850] R13: 00007f37d7426038 R14: 00007f37d7425fa0 R15: 00007ffe8c7cf708 [ 1695.897419][T23850] [ 1695.972123][ T29] audit: type=1400 audit(1792967990.560:755): avc: denied { bind } for pid=23877 comm="syz.0.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1695.972168][ T29] audit: type=1400 audit(1792967990.570:756): avc: denied { listen } for pid=23877 comm="syz.0.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1695.989748][ T29] audit: type=1400 audit(1792967990.580:757): avc: denied { read } for pid=23877 comm="syz.0.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1696.030227][T23882] FAULT_INJECTION: forcing a failure. [ 1696.030227][T23882] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1696.030257][T23882] CPU: 1 UID: 0 PID: 23882 Comm: syz.0.4597 Tainted: G L syzkaller #0 PREEMPT(full) [ 1696.030280][T23882] Tainted: [L]=SOFTLOCKUP [ 1696.030289][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1696.030298][T23882] Call Trace: [ 1696.030304][T23882] [ 1696.030310][T23882] dump_stack_lvl+0x100/0x190 [ 1696.030342][T23882] should_fail_ex.cold+0x5/0xa [ 1696.030369][T23882] get_futex_key+0x1c9/0x13e0 [ 1696.030399][T23882] ? __pfx_get_futex_key+0x10/0x10 [ 1696.030423][T23882] ? find_held_lock+0x2b/0x80 [ 1696.030438][T23882] ? get_pid_task+0xfc/0x250 [ 1696.030460][T23882] ? get_pid_task+0xfc/0x250 [ 1696.030486][T23882] futex_wake+0xf4/0x5e0 [ 1696.030508][T23882] ? find_held_lock+0x2b/0x80 [ 1696.030522][T23882] ? __pfx_futex_wake+0x10/0x10 [ 1696.030545][T23882] ? rcu_read_lock_any_held+0x6a/0x90 [ 1696.030562][T23882] ? find_held_lock+0x2b/0x80 [ 1696.030577][T23882] ? ksys_write+0x190/0x250 [ 1696.030596][T23882] ? ksys_write+0x190/0x250 [ 1696.030617][T23882] do_futex+0x2b2/0x440 [ 1696.030635][T23882] ? __pfx_do_futex+0x10/0x10 [ 1696.030652][T23882] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1696.030679][T23882] __x64_sys_futex+0x34f/0x4d0 [ 1696.030698][T23882] ? fput+0x7c/0x100 [ 1696.030720][T23882] ? __pfx___x64_sys_futex+0x10/0x10 [ 1696.030737][T23882] ? ksys_write+0x1ac/0x250 [ 1696.030762][T23882] ? __pfx_ksys_write+0x10/0x10 [ 1696.030790][T23882] do_syscall_64+0x123/0x790 [ 1696.030813][T23882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.030831][T23882] RIP: 0033:0x7f755719f559 [ 1696.030845][T23882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1696.030863][T23882] RSP: 002b:00007f75580c30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1696.030880][T23882] RAX: ffffffffffffffda RBX: 00007f7557425fa8 RCX: 00007f755719f559 [ 1696.030893][T23882] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7557425fac [ 1696.030904][T23882] RBP: 00007f7557425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1696.030916][T23882] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1696.030926][T23882] R13: 00007f7557426038 R14: 00007ffd847fee00 R15: 00007ffd847feee8 [ 1696.030949][T23882] [ 1696.211666][T23886] md: array md0 already initialised! [ 1696.421532][T16371] usb 2-1: USB disconnect, device number 110 [ 1696.501099][T19712] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 1696.652512][T19712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1696.652539][T19712] usb 1-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 1696.653247][T19712] usb 1-1: config 142 has an invalid interface number: 251 but max is 0 [ 1696.653275][T19712] usb 1-1: config 142 has no interface number 0 [ 1696.653294][T19712] usb 1-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1696.653308][T19712] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 1696.653322][T19712] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 1696.653334][T19712] usb 1-1: config 142 interface 251 has no altsetting 0 [ 1696.655361][T19712] usb 1-1: string descriptor 0 read error: -22 [ 1696.655431][T19712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.657465][T23888] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1696.657589][T23888] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1696.659229][T19712] cypress_m8 1-1:142.251: HID->COM RS232 Adapter converter detected [ 1696.671673][T19712] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 1696.722357][T21422] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1696.722644][T21422] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1696.727429][T19712] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1696.737387][T19712] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1696.737539][T19712] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1696.749076][T19712] usb 3-1: USB disconnect, device number 106 [ 1696.881207][T16371] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1697.031508][T16371] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1697.032243][T16371] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1697.032261][T16371] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1697.032275][T16371] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1697.033932][T16371] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1697.033946][T16371] usb 2-1: Product: syz [ 1697.033954][T16371] usb 2-1: Manufacturer: syz [ 1697.033964][T16371] usb 2-1: SerialNumber: syz [ 1697.036098][T16371] usb 2-1: config 0 descriptor?? [ 1697.039716][T16371] usb 2-1: selecting invalid altsetting 0 [ 1697.257816][T16371] usb 2-1: USB disconnect, device number 111 [ 1697.576821][ C0] usb 1-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 1697.576851][ C0] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 1697.577053][ C0] usb 1-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 1697.799753][T23907] FAULT_INJECTION: forcing a failure. [ 1697.799753][T23907] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1697.799786][T23907] CPU: 0 UID: 0 PID: 23907 Comm: syz.2.4608 Tainted: G L syzkaller #0 PREEMPT(full) [ 1697.799813][T23907] Tainted: [L]=SOFTLOCKUP [ 1697.799820][T23907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1697.799831][T23907] Call Trace: [ 1697.799839][T23907] [ 1697.799847][T23907] dump_stack_lvl+0x100/0x190 [ 1697.799880][T23907] should_fail_ex.cold+0x5/0xa [ 1697.799907][T23907] get_futex_key+0x1c9/0x13e0 [ 1697.799939][T23907] ? __pfx_get_futex_key+0x10/0x10 [ 1697.799966][T23907] ? find_held_lock+0x2b/0x80 [ 1697.799984][T23907] ? get_pid_task+0xfc/0x250 [ 1697.800008][T23907] ? get_pid_task+0xfc/0x250 [ 1697.800036][T23907] futex_wake+0xf4/0x5e0 [ 1697.800059][T23907] ? find_held_lock+0x2b/0x80 [ 1697.800076][T23907] ? __pfx_futex_wake+0x10/0x10 [ 1697.800110][T23907] ? rcu_read_lock_any_held+0x6a/0x90 [ 1697.800130][T23907] ? find_held_lock+0x2b/0x80 [ 1697.800148][T23907] ? ksys_write+0x190/0x250 [ 1697.800168][T23907] ? ksys_write+0x190/0x250 [ 1697.800193][T23907] do_futex+0x2b2/0x440 [ 1697.800213][T23907] ? __pfx_do_futex+0x10/0x10 [ 1697.800234][T23907] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1697.800264][T23907] __x64_sys_futex+0x34f/0x4d0 [ 1697.800286][T23907] ? fput+0x7c/0x100 [ 1697.800315][T23907] ? __pfx___x64_sys_futex+0x10/0x10 [ 1697.800334][T23907] ? ksys_write+0x1ac/0x250 [ 1697.800357][T23907] ? __pfx_ksys_write+0x10/0x10 [ 1697.800387][T23907] do_syscall_64+0x123/0x790 [ 1697.800415][T23907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.800435][T23907] RIP: 0033:0x7f465f99f559 [ 1697.800451][T23907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1697.800469][T23907] RSP: 002b:00007f46607830e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1697.800489][T23907] RAX: ffffffffffffffda RBX: 00007f465fc25fa8 RCX: 00007f465f99f559 [ 1697.800502][T23907] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f465fc25fac [ 1697.800513][T23907] RBP: 00007f465fc25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1697.800525][T23907] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1697.800537][T23907] R13: 00007f465fc26038 R14: 00007ffeaa2f51a0 R15: 00007ffeaa2f5288 [ 1697.800565][T23907] [ 1698.002901][T23914] FAULT_INJECTION: forcing a failure. [ 1698.002901][T23914] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.002930][T23914] CPU: 1 UID: 0 PID: 23914 Comm: syz.2.4611 Tainted: G L syzkaller #0 PREEMPT(full) [ 1698.002953][T23914] Tainted: [L]=SOFTLOCKUP [ 1698.002960][T23914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1698.002970][T23914] Call Trace: [ 1698.002976][T23914] [ 1698.002983][T23914] dump_stack_lvl+0x100/0x190 [ 1698.003013][T23914] should_fail_ex.cold+0x5/0xa [ 1698.003037][T23914] should_failslab+0xc2/0x120 [ 1698.003060][T23914] __kmalloc_cache_noprof+0x91/0x6d0 [ 1698.003078][T23914] ? ll_open+0x4f/0x3c0 [ 1698.003103][T23914] ll_open+0x4f/0x3c0 [ 1698.003124][T23914] hci_uart_tty_ioctl+0x681/0xcb0 [ 1698.003144][T23914] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 1698.003161][T23914] tty_ioctl+0x12f4/0x1870 [ 1698.003189][T23914] ? __pfx_tty_ioctl+0x10/0x10 [ 1698.003213][T23914] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 1698.003241][T23914] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1698.003269][T23914] ? __fget_files+0x34/0x3d0 [ 1698.003304][T23914] ? selinux_file_ioctl+0x1e0/0x290 [ 1698.003332][T23914] ? selinux_file_ioctl+0x1e7/0x290 [ 1698.003358][T23914] ? __pfx_tty_ioctl+0x10/0x10 [ 1698.003382][T23914] __x64_sys_ioctl+0x18e/0x210 [ 1698.003405][T23914] do_syscall_64+0x123/0x790 [ 1698.003429][T23914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.003447][T23914] RIP: 0033:0x7f465f99f559 [ 1698.003461][T23914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.003475][T23914] RSP: 002b:00007f4660783028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1698.003492][T23914] RAX: ffffffffffffffda RBX: 00007f465fc25fa0 RCX: 00007f465f99f559 [ 1698.003503][T23914] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 1698.003514][T23914] RBP: 00007f465fa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1698.003524][T23914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1698.003534][T23914] R13: 00007f465fc26038 R14: 00007f465fc25fa0 R15: 00007ffeaa2f5288 [ 1698.003559][T23914] [ 1698.048004][T16371] usb 1-1: USB disconnect, device number 111 [ 1698.087864][T16371] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 1698.088288][T16371] cypress_m8 1-1:142.251: device disconnected [ 1698.271905][T21422] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1698.421061][T21422] usb 2-1: Using ep0 maxpacket: 16 [ 1698.421496][T21422] usb 2-1: New USB device found: idVendor=0e41, idProduct=4151, bcdDevice=62.00 [ 1698.421518][T21422] usb 2-1: too many configurations: 116, using maximum allowed: 8 [ 1698.421938][T21422] usb 2-1: config 0 has no interfaces? [ 1698.422299][T21422] usb 2-1: config 0 has no interfaces? [ 1698.422647][T21422] usb 2-1: config 0 has no interfaces? [ 1698.422987][T21422] usb 2-1: config 0 has no interfaces? [ 1698.423335][T21422] usb 2-1: config 0 has no interfaces? [ 1698.423682][T21422] usb 2-1: config 0 has no interfaces? [ 1698.424028][T21422] usb 2-1: config 0 has no interfaces? [ 1698.424371][T21422] usb 2-1: config 0 has no interfaces? [ 1698.425760][T21422] usb 2-1: New USB device strings: Mfr=240, Product=33, SerialNumber=3 [ 1698.425775][T21422] usb 2-1: Product: syz [ 1698.425783][T21422] usb 2-1: Manufacturer: syz [ 1698.425792][T21422] usb 2-1: SerialNumber: syz [ 1698.427922][T21422] usb 2-1: config 0 descriptor?? [ 1698.619671][T23926] FAULT_INJECTION: forcing a failure. [ 1698.619671][T23926] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.619696][T23926] CPU: 1 UID: 0 PID: 23926 Comm: syz.0.4617 Tainted: G L syzkaller #0 PREEMPT(full) [ 1698.619712][T23926] Tainted: [L]=SOFTLOCKUP [ 1698.619717][T23926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1698.619724][T23926] Call Trace: [ 1698.619729][T23926] [ 1698.619733][T23926] dump_stack_lvl+0x100/0x190 [ 1698.619754][T23926] should_fail_ex.cold+0x5/0xa [ 1698.619770][T23926] should_failslab+0xc2/0x120 [ 1698.619787][T23926] __kmalloc_cache_noprof+0x91/0x6d0 [ 1698.619800][T23926] ? bioset_init+0x575/0x8a0 [ 1698.619816][T23926] bioset_init+0x575/0x8a0 [ 1698.619831][T23926] ? __pfx_bioset_init+0x10/0x10 [ 1698.619843][T23926] ? kasan_save_track+0x14/0x30 [ 1698.619862][T23926] ? __kasan_kmalloc+0xaa/0xb0 [ 1698.619885][T23926] ? __kmalloc_cache_node_noprof+0x30c/0x710 [ 1698.619908][T23926] ? dm_table_complete+0xaa6/0x1c90 [ 1698.619934][T23926] ? dm_table_complete+0xbc0/0x1c90 [ 1698.619954][T23926] dm_table_complete+0xdb1/0x1c90 [ 1698.619974][T23926] ? __pfx_dm_table_add_target+0x10/0x10 [ 1698.619990][T23926] ? __pfx_dm_table_complete+0x10/0x10 [ 1698.620006][T23926] ? dm_table_create+0x2d3/0x3d0 [ 1698.620023][T23926] table_load+0x44d/0x7b0 [ 1698.620039][T23926] ? __pfx_table_load+0x10/0x10 [ 1698.620052][T23926] ? __might_fault+0xc5/0x140 [ 1698.620069][T23926] ? __might_fault+0xc5/0x140 [ 1698.620090][T23926] ctl_ioctl+0x4d2/0xcc0 [ 1698.620104][T23926] ? __pfx_table_load+0x10/0x10 [ 1698.620118][T23926] ? __pfx_ctl_ioctl+0x10/0x10 [ 1698.620145][T23926] ? selinux_file_ioctl+0x1e0/0x290 [ 1698.620164][T23926] dm_ctl_ioctl+0x22/0x30 [ 1698.620175][T23926] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1698.620187][T23926] __x64_sys_ioctl+0x18e/0x210 [ 1698.620202][T23926] do_syscall_64+0x123/0x790 [ 1698.620219][T23926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.620231][T23926] RIP: 0033:0x7f755719f559 [ 1698.620241][T23926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.620252][T23926] RSP: 002b:00007f75580c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1698.620263][T23926] RAX: ffffffffffffffda RBX: 00007f7557425fa0 RCX: 00007f755719f559 [ 1698.620271][T23926] RDX: 0000200000001000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 1698.620277][T23926] RBP: 00007f7557236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1698.620284][T23926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1698.620290][T23926] R13: 00007f7557426038 R14: 00007f7557425fa0 R15: 00007ffd847feee8 [ 1698.620306][T23926] [ 1698.620321][T23926] device-mapper: table: unable to allocate mempools [ 1698.687810][T23915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.688137][T23915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.713574][T23915] FAULT_INJECTION: forcing a failure. [ 1698.713574][T23915] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.713604][T23915] CPU: 0 UID: 0 PID: 23915 Comm: syz.1.4612 Tainted: G L syzkaller #0 PREEMPT(full) [ 1698.713631][T23915] Tainted: [L]=SOFTLOCKUP [ 1698.713638][T23915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1698.713651][T23915] Call Trace: [ 1698.713659][T23915] [ 1698.713666][T23915] dump_stack_lvl+0x100/0x190 [ 1698.713700][T23915] should_fail_ex.cold+0x5/0xa [ 1698.713729][T23915] should_failslab+0xc2/0x120 [ 1698.713756][T23915] __kmalloc_noprof+0xfc/0x840 [ 1698.713778][T23915] ? find_held_lock+0x2b/0x80 [ 1698.713796][T23915] ? dma_fence_array_create+0x23/0x60 [ 1698.713827][T23915] dma_fence_array_create+0x23/0x60 [ 1698.713858][T23915] __dma_fence_unwrap_merge+0x7c7/0x960 [ 1698.713895][T23915] sync_file_merge.constprop.0+0x109/0x270 [ 1698.713918][T23915] ? __pfx_sync_file_merge.constprop.0+0x10/0x10 [ 1698.713939][T23915] ? find_held_lock+0x2b/0x80 [ 1698.713956][T23915] ? __fget_files+0x215/0x3d0 [ 1698.713989][T23915] ? __fget_files+0x21f/0x3d0 [ 1698.714021][T23915] sync_file_ioctl+0xbd6/0xea0 [ 1698.714047][T23915] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1698.714074][T23915] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1698.714103][T23915] ? do_vfs_ioctl+0x226/0x13e0 [ 1698.714128][T23915] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1698.714149][T23915] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 1698.714187][T23915] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1698.714232][T23915] ? selinux_file_ioctl+0x1e0/0x290 [ 1698.714259][T23915] ? selinux_file_ioctl+0x1e7/0x290 [ 1698.714287][T23915] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1698.714307][T23915] __x64_sys_ioctl+0x18e/0x210 [ 1698.714329][T23915] do_syscall_64+0x123/0x790 [ 1698.714353][T23915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.714371][T23915] RIP: 0033:0x7f37d719f559 [ 1698.714385][T23915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.714402][T23915] RSP: 002b:00007f37d807b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1698.714419][T23915] RAX: ffffffffffffffda RBX: 00007f37d7425fa0 RCX: 00007f37d719f559 [ 1698.714430][T23915] RDX: 0000200000000180 RSI: 00000000c0303e03 RDI: 0000000000000008 [ 1698.714440][T23915] RBP: 00007f37d7236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1698.714450][T23915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1698.714460][T23915] R13: 00007f37d7426038 R14: 00007f37d7425fa0 R15: 00007ffe8c7cf708 [ 1698.714483][T23915] [ 1699.211306][T10873] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 1699.259876][ T10] usb 2-1: USB disconnect, device number 112 [ 1699.291719][T23945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1699.314210][T23945] md: array md1 already initialised! [ 1699.361810][T23945] md: could not open device unknown-block(1,2). [ 1699.361861][T23945] md: error, md_import_device() returned -16 [ 1699.375080][T21422] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1699.376003][T10873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1699.376036][T10873] usb 3-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 1699.376859][T10873] usb 3-1: config 142 has an invalid interface number: 251 but max is 0 [ 1699.376879][T10873] usb 3-1: config 142 descriptor has 1 excess byte, ignoring [ 1699.376894][T10873] usb 3-1: config 142 has no interface number 0 [ 1699.376922][T10873] usb 3-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1699.376942][T10873] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 1699.376961][T10873] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 1699.376980][T10873] usb 3-1: config 142 interface 251 has no altsetting 0 [ 1699.379263][T10873] usb 3-1: string descriptor 0 read error: -22 [ 1699.379347][T10873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.383392][T ** replaying previous printk message ** [ 1699.383392][T23939] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1699.383477][T23939] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1699.384790][T10873] cypress_m8 3-1:142.251: HID->COM RS232 Adapter converter detected [ 1699.389691][T10873] usb 3-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 1699.481483][T23945] md/raid1:md1: active with 1 out of 513 mirrors [ 1699.481843][T23945] ------------[ cut here ]------------ [ 1699.481850][T23945] UBSAN: array-index-out-of-bounds in drivers/md/md.c:1726:29 [ 1699.481863][T23945] index 28 is out of range for type 'mdp_disk_t [27]' [ 1699.481878][T23945] CPU: 1 UID: 0 PID: 23945 Comm: syz.1.4626 Tainted: G L syzkaller #0 PREEMPT(full) [ 1699.481902][T23945] Tainted: [L]=SOFTLOCKUP [ 1699.481909][T23945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1699.481919][T23945] Call Trace: [ 1699.481926][T23945] [ 1699.481933][T23945] dump_stack_lvl+0x100/0x190 [ 1699.481964][T23945] ubsan_epilogue+0xa/0x30 [ 1699.481985][T23945] __ubsan_handle_out_of_bounds+0xcc/0xf0 [ 1699.482013][T23945] super_90_sync+0x1c95/0x1ff0 [ 1699.482043][T23945] md_update_sb+0xbba/0x2840 [ 1699.482069][T23945] ? __pfx_md_update_sb+0x10/0x10 [ 1699.482086][T23945] ? kernfs_put+0x3f/0x60 [ 1699.482105][T23945] ? sysfs_do_create_link_sd+0xbb/0x140 [ 1699.482129][T23945] md_run+0x1c1a/0x2510 [ 1699.482155][T23945] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1699.482176][T23945] ? __pfx_md_run+0x10/0x10 [ 1699.482206][T23945] do_md_run+0x36/0x660 [ 1699.482224][T23945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1699.482250][T23945] md_ioctl+0x27e6/0x36c0 [ 1699.482276][T23945] ? __pfx_md_ioctl+0x10/0x10 [ 1699.482297][T23945] ? do_vfs_ioctl+0x226/0x13e0 [ 1699.482318][T23945] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1699.482335][T23945] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 1699.482362][T23945] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1699.482390][T23945] ? __fget_files+0x34/0x3d0 [ 1699.482417][T23945] ? __pfx_md_ioctl+0x10/0x10 [ 1699.482443][T23945] blkdev_ioctl+0x5ad/0x6f0 [ 1699.482461][T23945] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1699.482478][T23945] ? selinux_file_ioctl+0x1e0/0x290 [ 1699.482501][T23945] ? selinux_file_ioctl+0x1e7/0x290 [ 1699.482527][T23945] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1699.482546][T23945] __x64_sys_ioctl+0x18e/0x210 [ 1699.482575][T23945] do_syscall_64+0x123/0x790 [ 1699.482600][T23945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.482619][T23945] RIP: 0033:0x7f37d719f559 [ 1699.482635][T23945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.482651][T23945] RSP: 002b:00007f37d807b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1699.482669][T23945] RAX: ffffffffffffffda RBX: 00007f37d7425fa0 RCX: 00007f37d719f559 [ 1699.482681][T23945] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004 [ 1699.482695][T23945] RBP: 00007f37d7236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1699.482705][T23945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1699.482715][T23945] R13: 00007f37d7426038 R14: 00007f37d7425fa0 R15: 00007ffe8c7cf708 [ 1699.482738][T23945] [ 1699.482753][T23945] ---[ end trace ]--- [ 1699.482761][T23945] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1699.804568][T23945] CPU: 1 UID: 0 PID: 23945 Comm: syz.1.4626 Tainted: G L syzkaller #0 PREEMPT(full) [ 1699.815590][T23945] Tainted: [L]=SOFTLOCKUP [ 1699.819897][T23945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1699.829923][T23945] Call Trace: [ 1699.833177][T23945] [ 1699.836083][T23945] dump_stack_lvl+0x100/0x190 [ 1699.840752][T23945] vpanic+0x553/0x970 [ 1699.844713][T23945] ? __pfx_vpanic+0x10/0x10 [ 1699.849212][T23945] ? irqentry_exit+0x202/0xab0 [ 1699.853957][T23945] panic+0xd1/0xe0 [ 1699.857651][T23945] ? __pfx_panic+0x10/0x10 [ 1699.862052][T23945] ? dump_stack_lvl+0x176/0x190 [ 1699.866888][T23945] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 1699.872936][T23945] check_panic_on_warn.cold+0x19/0x34 [ 1699.878283][T23945] __ubsan_handle_out_of_bounds+0xcc/0xf0 [ 1699.883990][T23945] super_90_sync+0x1c95/0x1ff0 [ 1699.888733][T23945] md_update_sb+0xbba/0x2840 [ 1699.893299][T23945] ? __pfx_md_update_sb+0x10/0x10 [ 1699.898305][T23945] ? kernfs_put+0x3f/0x60 [ 1699.902606][T23945] ? sysfs_do_create_link_sd+0xbb/0x140 [ 1699.908127][T23945] md_run+0x1c1a/0x2510 [ 1699.912269][T23945] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1699.917613][T23945] ? __pfx_md_run+0x10/0x10 [ 1699.922093][T23945] do_md_run+0x36/0x660 [ 1699.926220][T23945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1699.932098][T23945] md_ioctl+0x27e6/0x36c0 [ 1699.936404][T23945] ? __pfx_md_ioctl+0x10/0x10 [ 1699.941072][T23945] ? do_vfs_ioctl+0x226/0x13e0 [ 1699.945843][T23945] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1699.950840][T23945] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 1699.957320][T23945] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1699.964147][T23945] ? __fget_files+0x34/0x3d0 [ 1699.968805][T23945] ? __pfx_md_ioctl+0x10/0x10 [ 1699.973462][T23945] blkdev_ioctl+0x5ad/0x6f0 [ 1699.977956][T23945] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1699.982954][T23945] ? selinux_file_ioctl+0x1e0/0x290 [ 1699.988138][T23945] ? selinux_file_ioctl+0x1e7/0x290 [ 1699.993313][T23945] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1699.998310][T23945] __x64_sys_ioctl+0x18e/0x210 [ 1700.003049][T23945] do_syscall_64+0x123/0x790 [ 1700.007615][T23945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.013481][T23945] RIP: 0033:0x7f37d719f559 [ 1700.017869][T23945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1700.037447][T23945] RSP: 002b:00007f37d807b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1700.045841][T23945] RAX: ffffffffffffffda RBX: 00007f37d7425fa0 RCX: 00007f37d719f559 [ 1700.053786][T23945] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004 [ 1700.061731][T23945] RBP: 00007f37d7236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1700.069672][T23945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1700.077631][T23945] R13: 00007f37d7426038 R14: 00007f37d7425fa0 R15: 00007ffe8c7cf708 [ 1700.085585][T23945] [ 1700.088785][T23945] Kernel Offset: disabled [ 1700.093083][T23945] Rebooting in 86400 seconds..