last executing test programs: 15.352243671s ago: executing program 1 (id=1828): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x3f, 0x2, 0x0, "4a5ae5f6f99826beb34789a56a62b5b92b9010128130e6d352b97b35207cf97d", 0x43353039}) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000000000000000000000000000a00010000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="010000004800010073686132353600000000000000000088d0f3c28d67f2bf5100"/79], 0x144}, 0x1, 0x0, 0x0, 0xc004011}, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000440)=""/252, 0xfffffd90) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x1, 0x8000000000000000, 0xfff, 0xfffffffffffffffe, 0xb, 0x8b3b, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x20000000000, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x100, 0x0, 0x1a, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x4, 0x800000, 0x0, 0x5, 0x0, 0xd721, 0x80000000000, 0x4, 0x8001, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x71ad, 0x0, 0x0, 0x2]}) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1861aca460808d23ab3200000000000000003f07bc6e0780"], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) getsockopt$inet_buf(r9, 0x0, 0x30, 0x0, &(0x7f0000000180)) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x7fffffff, 0x402001) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x40}) r12 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r11, 0xc01c64a3, &(0x7f0000000100)={0x1, r13, 0x6, 0x2, 0xa, 0x1ff, 0x1}) 12.428334127s ago: executing program 3 (id=1836): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = getpgid(0x0) kcmp(r1, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x35, &(0x7f0000000380)={0x2f, 0x6, 0x10000}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200cd4c1960b89c40ebb373", 0x39}], 0x1}, 0x4004000) syz_usb_connect(0x0, 0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 11.114785429s ago: executing program 1 (id=1840): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0x10001, 0x8}) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) (async, rerun: 64) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) (rerun: 64) vmsplice(r1, &(0x7f0000002680)=[{&(0x7f0000000100)="cdece68e3fbea142dc22cc2931bcee420ea7f0a2075d77f3e0a0da6e26942a6cfac8524364cd76c1a8bf9a0ff1402d20b1f0d390c637e6821df96fa3360aa8fa92454b6709be1f49eb4f66ee8ccac272fdd9f6f3f970158917f6cbc5f1f4baae4dca0a1f18ef527d35e6b3a2b272ca75914d9d5e7ab609afed887e785a2b6ed40d22c0848c4766faad3581a20fb2225790787c58", 0x94}, {&(0x7f00000001c0)="4ccfb11b35e5869eb55a548752cb1dda0153ab9b92733f4ef0c057eadf12bf1f7f49df3ac9e270009dd45f6eb36f219d43d56d42ce826997335eb3f97d1b85d6170347f8fba37aea3e2134469f794f023061bc34c75f8516dd78aa2440852512d33d90f672f37e595b06d73a8241b46e44ec97b58fdd20d8d58c6bca8fc1d2866230f2c79620e8f24cdc5ab1743c11ab1b9e76ac04eb3b432e0ca6afe7885e677e2c0e71e67f8edb2c9292900c18918c9a3b9043bb2a32836c4a9e36feb75f685b8d8da5dc0b3780ddcf690675d0e6ae449947581c52aa7d00ecf935a54dbb3897ea919ade43288feedef5b333c50815d2a8971384", 0xf5}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="d2f4145a64114309b8802d68d306d1399a03d6b1286cd9140af2d8c76d4143952f69cb8e21a7e7f73ca1a84fe11dfa22d69428e0dc79b1df307d9dcf674cec761d23713fabd41b9249c2c6acee50d8a69a7c55066c3d9e9b3a431770f201226f9b5d8393179cb572b98eea271196f1723ee1b329f65348238a0844246f874b8b41c4a1a4d8f6a935ad6328823f76f4d006d7d4e11739ecd824bbb0045efd5eca7266a5961c27695e050d35df56cd0865b1a82e41b2442ab8e518a6da38dcebf6c4a1a405be613d50023e8228c0e7bfdce60f96e2ce3e12", 0xd7}, {&(0x7f00000013c0)="e46fb5429911105a7884092a8fe269a6654200c1a6b2f94dc799a625724307cd3d6c7e1ac6d86b534f912e7e37e0e68a0a1a2aff3895ec82b5c09879f61f5b5dd4d6fe79dcbdb96727e891cd80feddc9c976fb47139746a24e367fa410c58457754af4395babb926764623aea5ef16814044f6ed9d5d31fc88aef038fdbeaaf9a738630b1d3aa2b8ba2d82a38f05f0c752a69363cdec9cb2dd0cb9997537bdf687fe20dee7ae9f9d3265c01fde99fbaa99d977644f59f70930a350c26965e2017478fbbddcbbee52858a4582e112df3918f8e1f0e6576d42323d84b44799fad4a0c69f9aa2c01b2ffdcc7e09dfef7e59e1cedb167d8c4f4b", 0xf8}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="7e599eda89b2be0ae87162eac9f7f5a6374238ba7a6ea91b717b515785d13e95b83748b9e2442a4433b4f93c6786aa5d28dd37318c598968e70e1e6666678cfb7502cd5769c4542ce3dd0a694bd69a1b427d9664cec6a72834afcd986af9f8710c72421aae68dee56b36746818d297774bcc29f4a2ce50235beb8166bef88e1a9e0c22d29eb50e259f38d06a9e55fe9dfa49b7ffb7708b1d15781567f3717ee1b8ad850b6fafe7f41f4e5e7b6ea616dcde65c50ad7146269e4d5879749763fe3d4b7", 0xc2}, {&(0x7f00000025c0)="166cf107b07e0ecde51817e833133c1f3d340f7d0f865cd76cf5b2511679d0af5d60fdea60ff472927c9f3aae08cbc2a1e93ee12c54aaabbc5fda0e8551c0e5d423552b6efc7096b2a8c8f8b8910a367fc8888f32f435a53e6750dfe804ae4af3865600e5496ec8bcb6848c32a4c27b8aa6ee46589fc41b7b9ccc3a7e368beda670e27cce8d7ee896983ba072ae3f3ff56df91b8aeab1df6a30e620466e49f28d2de339a2cc1f319cd56ac0024d2144c42178d6f36b2cb8ee430fe4a0955", 0xbe}], 0x8, 0x3) sendmmsg$alg(r0, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000002700)}, {&(0x7f0000002740)="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", 0x1000}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4800) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000003800)={0x9, &(0x7f00000037c0)=[{0x7fff, 0x7}, {0x8, 0x5}, {0x23, 0x7}, {0xb, 0x6}, {0x6, 0x2}, {0x9, 0x6}, {0x100, 0x7f}, {0x1000, 0xfff7}, {0x6, 0x9}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), r0) (async, rerun: 64) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000003880)={0x6, 0x1ff, 0x3, 0xffffffffffffffff, 0xc, 0x4}) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003a00)={r0, &(0x7f00000038c0)="dfa738e012ddff2bc1a8ccb95a86199d3c2118be3052edbd84d0d17716f4ea1ebe952e99ac1468aa97f4ec0426d0b1642776180e64defbf0f9787fa56dd731818f2736fa8da2acbe073a59cf2f51a6d0093ba6b66c40d3ff8ad496a5b8e79ed663adc5c668bb51733163a670fcd1cbad38a3749f118cbf0dcc6db2c61d81a5faa9f48ba6448cd33249b5a6ee2adf0471290b07e7999446211b6f11444a7624b21450de0b68bbcbfb60ce85c257c5a30044c1018e4519d4273dd1", &(0x7f0000003980)=""/116}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003a40)={0xffffffffffffffff}) (async) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r3 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 32) r4 = syz_open_dev$mouse(&(0x7f0000003a80), 0x3e, 0x2000) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003bc0)={@map=r0, 0x26, 0x0, 0x9, &(0x7f0000003ac0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000003b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003c00)={@cgroup=r0, r4, 0x9, 0x0, r1, @void, @value=r1, @void, @void, r6}, 0x20) (async) r7 = getpgid(0xffffffffffffffff) r8 = getpgrp(0xffffffffffffffff) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) kcmp(r7, r8, 0x4, r4, r9) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000004100)=0x0) stat(&(0x7f0000004140)='./file0\x00', &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000004240)=@generic={&(0x7f0000004200)='./file0\x00', 0x0, 0x18}, 0x18) (async, rerun: 32) r13 = openat$audio1(0xffffffffffffff9c, &(0x7f0000004280), 0x101000, 0x0) (rerun: 32) sendmsg$unix(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000003c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004080)=[{&(0x7f0000003cc0)="86032ba94ad6f03bcac2d90f4e34eea283487efc57864208efac5af74765f7f905917ae786c29633", 0x28}, {&(0x7f0000003d00)="a9b2d48bf524a803cc578eb5b1cfb2b45eee2a64ae507ea7fac0fb27b3cb1a561bfe9e1e80d84753f1bf13f7e83d4f67a5cf84c8fa8b948edf2c4d501d36febc12c25a6ba6758356b1cee62a97755b80cee15afda7607e8e50f231b689aab207f668c6da1ab5a48bb59064c015d079e75e5604f96f6993b918d67bb977ed9b89245aeed654e0aa0c9e966dec284a1d6f6eea7aa991cba99ef8044060b81183a73bca9b794174c08336a66b5ec1382f8491c804bcf074d3a60ec8cfaa0f8dc9560adaed91a20d40ad299ee71d5276d10abbe8565278977d471a6401269e579ab6471040d7a6", 0xe5}, {&(0x7f0000003e00)="52e0456493e888c913691e633f495452baa30ef382dbee362e8eed1ddf98dbf427ac4c2a5184aa83485022d05cc1d2e0a641f69f4170dd7e2211b447e6534b289c85673fb487fe630bc1ecc9fe844a705ef8a6ac8c2e5f6ad7b614ce3f1f3ea9debd38b50be9325f8b9884b2304a76c817b35d2b436b9d9951933dce64f57ce7bdd09d675083de52cbf206ece86d8edb98f77b", 0x93}, {&(0x7f0000003ec0)="750be2653c493242d82a05723c5212980cb67ef665aea78c3d53f6a9f4e6e1e267466a9a6d1c44e1aff67b1ba6e68dabdaaa65798c60f221a412f1b8497842f657f777544d02cba0587f82c3381e9e732bc8dc4331fcb9b0c052090150c2a6dcd6f8285752c0941b51001ca7817cd43eeecaee7a529cdc4ae8751e9ec47e6856d0841575d3799aa9360363345faeff5515f8aba93c103fce2c4b4299e95a50c44ba6d574f808e97c651ed468005249fe3f6e198bdfdccee97ff5727276a20976600db240b08e4c460347c8e53bae9c388957", 0xd2}, {&(0x7f0000003fc0)="0dd3d099252fa1546bec5ecfdb125f237ad7d84d4220a5680efaf520fb877cf8eb1fe39d76a8b8f850336adaf9506a1187c52fc07f9aabee643e363a1bda662d37d5c6d1b75752c2598911551f78d9620b242be3ef21ddd38b5c3c633628c498157cc370ffe9acd1309040b3d1122b53a61697ad59a355785f48bcddb54d7c4ebc6c5f5a7055fe7cb00c3afd4f22ca1a86dc64bd5fe977ed780cc44c45e3a200e38c3eb949055c073a8e57e52994", 0xae}], 0x5, &(0x7f00000042c0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, r11}}}, @rights={{0x28, 0x1, 0x1, [r3, r0, r12, r13, r2, r5]}}], 0x48, 0x4040005}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000004380)=0x7, 0x0, 0x4) (async) clock_gettime(0x0, &(0x7f0000004400)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f00000043c0), 0x0, 0x40000000, &(0x7f0000004440)={r14, r15+10000000}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004480)) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000044c0)) (rerun: 64) 10.981549295s ago: executing program 1 (id=1841): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0x0, 0x10a000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r6 = dup(r5) shutdown(r6, 0x1) fchdir(r4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)=0x0) sendmsg$netlink(r4, &(0x7f0000001e80)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e00)=[{&(0x7f0000002340)={0x3f8, 0x37, 0x400, 0x70bd27, 0x25dfdbfe, "", [@generic="fd2e406d52d9205d49b5575f10a167173c04e48f8a2b49e2be103e739df06afbe070ee7f73084c75eb35e4a89049eb6fd6c49ce0cff94e27beff544df33cc22dc5b3a38861e90865bef1a9e707", @nested={0x2ee, 0x4c, 0x0, 0x1, [@typed={0x4, 0x21}, @typed={0xf2, 0x53, 0x0, 0x0, @binary="5891865a21d8d7864d9cc98ea162448833bb6c661f7850596ffaf249b39bc052ae08e8e5a5dfda1a6222ad32981fa9f9eb9921744b1369cd5031565ebe20dcdfec4d60a489bf9d4b76b2cdf1986c43e78b3c5e0f1e8c7581cb1e757dcf62ac8921f02c19a2ee5156ac16f9aaa4d0a759c8527a0e5372c7c9d026342f6e03f834cae15504152c9339edad4db60d637341dd45cb4d341b01f580bc25c825117135ae3f8452ab25462637e0ce8192381807947edd24e189ff7e970e2f2b3c119e4be8e87e3e037665a1d692449be13e4ca3426ff60d69adb7e79aedc875c2f2ff1dfa4e7a118e2819de22744f7a5187"}, @generic="605659f4b7c673db4d3c1fc74c88da7b612b5df054dbba3533ba3187a6b5e2d3ecaa7bac9b5ea2891b8786e658d86277b6d39ff5a00a4cb56f4e647aea6ec3dc0a582c76b52a10c727a13edc79b635e372e8ce28ac93cc354d669ba4407f99630dd7885d7bd0", @generic="e91ceeb69bfa362440197e98ac342b9aebda6ccb4e5ab0d1f30e136a7364c67c16bb7be41f3b48552782ca4836a0ec5ab9d662e9ed7b329733acd137dd335f09ef3be483045f33e068c79f7beab8e9543863cf6f3eaa89ba71a63f3cc556d4e63a613632b91cc45a76879ff27eed91fe9ce74310b98a810fab5f50633fe72a29aa895e173836836792dd854bf31547d38955eb135648d4624c2caf4b3af347376734b89d24a61c9e6c72384fdbd35ac172c3ce51f95e8df99f817bdda97c5e6cb6fd104d14b6a0872089e546a18100d2cfaaa0eea982e08f6a5a4ab54f6b0820eafd39d32ee27746bc509710f02e5d67a05431", @generic="86a44351223672ced97a096fd817e4dcd5b78e8ddd7a6b6256d7e4d6332897302d4678bdbef72cb0d36e1f193bc9ae9f9c0ee16108459f6ee2b94b7a7713a9af04031728fa6f59f26607370cd59ee5eb220635153e9c0d738ec76b68ce057863237a96c85290b1e0c619d392e07b243b77738722d1", @typed={0x8, 0x1b, 0x0, 0x0, @str='4-]\x00'}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x8, 0x79, 0x0, 0x0, @uid=r7}]}, @nested={0x8, 0xaf, 0x0, 0x1, [@nested={0x4, 0xf1}]}, @generic="261869d0a065cbe91914349b0a47825333e8876c4893215e4907ad6a077db8794ae2493b19bb2d53d26afb606e1e256bab29b520e6f4a69109619c7962d821a70e9a4c6fb33cda80f3c13fecabc2f72d7cfcfa7c5af5c3f8b13f64170826bc3de1e64d0c0f47303ddb9f60e0a5879d73d6a0a34e867ef4d277cec5a8641784218c3f6d0baceb7bb6c09ce04339685a1150e608cd7dc54c18bd99d2cbc453a7c0c3f2"]}, 0x3f8}, {&(0x7f0000002840)={0x1010, 0x36, 0x20, 0x70bd29, 0x25dfdbfb, "", [@generic="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"]}, 0x1010}, {&(0x7f0000001ec0)={0x184, 0x16, 0x8, 0x70bd26, 0x25dfdbfe, "", [@nested={0x8, 0x21, 0x0, 0x1, [@generic, @typed={0x4, 0x82, 0x0, 0x0, @binary}]}, @typed={0x4, 0x77}, @nested={0x168, 0x95, 0x0, 0x1, [@generic="20a955364576809a29fd56b980453dbc8531828f1185ad3de2cb1bc26c43cfbc3e55d949014877ef47d27f3e8b788d8b5b46d5789e4c912a3f5c6c918b3240c160488ab64fa9e614975824db939eaf99b05ee93247c00ba9ce51db909188d8fea8d485257acbaa8acce0605b1eb69ebc9a0fd0a94437ad0776c256872f2586793f21b559383d74b8381ebc9083b7afef54a8719ef15e41ec69e06daac8d7cdaa2da4149ce4900cb5c2da098e75aa966c7112affedd8c4aee3a32c34f0dec6ad23876a2bc00", @typed={0x8, 0xef, 0x0, 0x0, @uid}, @generic="d6ada24a4f2df646690802758db940ac9c9a3c387e435abb3dfe878ee4b096b451067f363d0a67feed75a8ed89c85c8520f740cdefe8b1f81f49cdfbea83c23ba5de624660d11dd2f8837099d66f3e7650d49380b21d309c8c7606d0ab28d40caaa552795bbccddfa22011f945a9abed4162ae75d7832c14dbbd0632b97f2331daccd0fcf253646966ebd4ff4d653224a1ed070f8e1416"]}]}, 0x184}, {0x0}, {&(0x7f00000004c0)={0x2f0, 0x3f, 0x10, 0x70bd27, 0x25dfdbfe, "", [@nested={0x1dd, 0x110, 0x0, 0x1, [@nested={0x18e, 0xf5, 0x0, 0x1, [@nested={0x164, 0xdc, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @nested={0x140, 0xda, 0x0, 0x1, [@nested={0x139, 0xf1, 0x0, 0x1, [@nested={0x4, 0x64}, @typed={0xba, 0x43, 0x0, 0x0, @binary="c75d34b1176b8fc2dc6f9b458770c699f6b4543f645e9f39549703f55e4349948c6fcac4f203a9c894830077859979d924aa5fe271b7db38aaa154003b5ee31bd71a24d626343dfa3b45179e4fb6202772677a11b1236203be61628b5dbfbc23032ddf15a19d66e4a8f75efb1f7e88b9af05e83c16c98237ecbdad1c31e1e112de364f11dea305ae2d442323e6e854de6e7809d7eb3a46260367634c82a1368f5dcee96b68880c145b67c87e5e4cd6fe0f1995adac02"}, @nested={0x4, 0xec}, @nested={0x4, 0x14f}, @generic="4f864f6a34e194bd5d95eea06feb7fa4a1a8373ac2b52e3a534ee76d402de4abb140f654283714832522df214e69b3870e240520e67ba2fd24b0ddb9bf7d0c81de79efd3f0c1456c8020f3c55292b4b821970f219cf5139d984b6d4e8a1b13cafb42517d5eef9e0d224c09b0d9"]}]}, @typed={0x14, 0xa8, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x4, 0x11a}]}, @generic="aca2dfda0c0cf02be3e1a8c0a020742ee598984a0de02e200e5dde2303b39ffc5f89dc9e8041"]}, @generic="c452e02e27baa8b80437dfd16d2042e0b9353cf1cf854a9fa7a2187694567cfbb2c4a606f29b76ec2afeb54f3e38e9eed82577e7c409997e4dc5bdd9dad1e64cda7dc534c3b761d7fc"]}, @typed={0x8, 0x117, 0x0, 0x0, @pid=r8}, @nested={0xb7, 0x98, 0x0, 0x1, [@nested={0x4, 0xdc}, @generic="75e10af68d18c9d0aec5dacb3d64b4887b356738b8525963ffd49bfd330f2a990aca21e9688e9e9c3ec9a70bcf32757efc0e24b60e3cc97f2a1dc4e9dd919ae3a329e57fcef3cb4bd00a3f1176e9c03b983669f633cfde4baa1a0a4a7672a0870a7b71145c402c94bd7dba119d30f21acae01890a73f58726087b0c583848b115cff9971630950a5f131148714f9e62eb2c9f46aa55a8ae488885a2549d81716cb2f211ce4b1c853b15f7a", @nested={0x4, 0x55}]}, @typed={0x8, 0x8d, 0x0, 0x0, @fd=r6}, @typed={0x10, 0x45, 0x0, 0x0, @str='ocfs2_dlmfs\x00'}, @generic="8426dc65cbd414b55a79ade5f3a9777762e6a480c43a17caafc642360aad67c8d76e69f6eb33e778"]}, 0x2f0}], 0x5, 0x0, 0x0, 0x80}, 0x4008000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005511b308d8130100dfda000000010902120001000000000904cf"], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 9.688783506s ago: executing program 4 (id=1845): r0 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) ioctl$TCGETS(r4, 0x5401, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 9.021772846s ago: executing program 0 (id=1847): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1, 0x900}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc6fffffd) 8.907616268s ago: executing program 4 (id=1848): lsetxattr$system_posix_acl(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000300000000002d000500", @ANYRES32, @ANYBLOB="040004000000000010000200000000002000020000000000"], 0x2c, 0x1) socket$kcm(0x28, 0x1, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000680)={{0x3, @rose}, [@rose, @default, @bcast, @null, @remote, @default, @default]}, &(0x7f0000000500)=0x48, 0x100000) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f00000005c0)=0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000480), 0x100) rt_sigaction(0x25, &(0x7f0000000140)={0x0, 0x10000000, 0x0, {[0x5c40]}}, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000440)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) rmdir(&(0x7f0000000700)='./cgroup\x00') ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x3) r3 = syz_clone(0x0, &(0x7f00000001c0)="5558a573f855a6bdb397d4c15cf93f14e1c672d335c4fae784dd45c20af61eeb0596431279", 0x25, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="1670a16c37404158dabf33ba1b5c055ba2a5befa316923dcd0c48a988b2c33db58c77c08dd235efe5cd45e1ec814d81b2ee166e6155aed090aacaa889f5dc7af2428f9841341c3045417e3945dc5a0f73e46c7516247bf80aa") ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000380)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000200000000200"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_open_dev$MSR(&(0x7f0000000740), 0xf, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.481426829s ago: executing program 3 (id=1849): syz_open_dev$sndmidi(0x0, 0x2, 0x143102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$l2tp(0x2, 0x2, 0x73) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r4) write$cgroup_int(r3, &(0x7f0000000040)=0x800000000001c8, 0x12) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) recvmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f0000000140)}, {0x0}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000000800)=""/49, 0x31}], 0x7, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0x208a, &(0x7f0000008000)={0x0, 0x989680}) unshare(0x68040200) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 8.220152321s ago: executing program 1 (id=1850): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x3f, 0x2, 0x0, "4a5ae5f6f99826beb34789a56a62b5b92b9010128130e6d352b97b35207cf97d", 0x43353039}) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x144}, 0x1, 0x0, 0x0, 0xc004011}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) flistxattr(r6, &(0x7f0000000440)=""/252, 0xfffffd90) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x1, 0x8000000000000000, 0xfff, 0xfffffffffffffffe, 0xb, 0x8b3b, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x20000000000, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x100, 0x0, 0x1a, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x4, 0x800000, 0x0, 0x5, 0x0, 0xd721, 0x80000000000, 0x4, 0x8001, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x71ad, 0x0, 0x0, 0x2]}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1861aca460808d23ab3200000000000000003f07bc6e0780"], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) getsockopt$inet_buf(r8, 0x0, 0x30, 0x0, &(0x7f0000000180)) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x7fffffff, 0x402001) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x40}) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r10, 0xc01c64a3, &(0x7f0000000100)={0x1, r12, 0x6, 0x2, 0xa, 0x1ff, 0x1}) 8.201847046s ago: executing program 4 (id=1851): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r1 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c00018006000600800a0000f0160280ec161780", @ANYRESHEX=r3], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x2400c000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0xfffffffa, 0x0, "5a77bd31875bd42a21f5b99be588e4e66bed86d85b25a5665a3247e500f61681905db88235f8a5447dd2b2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d684fe8b9398a646717af75fc008daefba68e6222180002bc55704cdb72b4b9956bc00000000000000a8ffff7d34171113d80672661538363d10f70da60fd53ded22c87eb2be010e4a62fb630e0024b437b989000000ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e3a9ca1864f0460c25311963884e6b39905a9719a9001457df7be7e1aefe36350000f60000000000000000000000000000000000617f5f1800"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f000000a540)=[{{&(0x7f0000005980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005480)="c49de182d9c5357900f174009793898f6d0e7e15b62d82b19a0927793ebdb2f38188599cce83f4191aa73f6f82a6883fe2f24e480cab74dfbc95ec00f118c5d073caaa60b73b9a019e2c6cd69510818d416c7d5415824855f7864ddea968facb597ed55cbb7954eea0bedbd2bdabdc57dfb3934d43aed4d86552c82e1c8d5e2b1a001aa8e87186f371319c1c0b6619e7b1f0368702248b6aece55c0a40a5d51ee99ea3f4d503fc", 0xa7}, {&(0x7f0000005540)="7c68f7a7630191f241546a7b6e13e29314136acbb5d21a471750e19a91675926badbe39efc49e2d907380c5914eca78950c32083429975ebe7b530dd50687637b6383ba90fbdbe9195df3b1b3b6632d3b7cdd9752c741d62ce11af", 0x5b}, {&(0x7f00000055c0)="41422207df07788fee648eda41f76c1b374dfb255580f59a12f60bcb35c1c35669eae41d19e2e7e6e50d605f19361afbb956f967b02466f9f60395a3083e", 0x3e}, {&(0x7f0000005600)="dc384ca1e19bca82264456b7a0373b2ce9b62b05da05c6f8fb032b9c65af7b32d2ad12254bd3c05976c949f0a0233884ca24ed123d16a73933a2fb669090a08dc0aef2359f3f3625f56cc05518dd6fc4ffcc19d6765dbc0a6e8f5b5a995339bfe25797ac1ad85e473d9451cb2e08bb7c7c1290a67b3e8b12272f03a5753a11d3ecb195", 0x83}, {&(0x7f00000056c0)="d923083a4c07630788fdca6bdf82fd1915cefa2a362ef0a771a2a2f387cb65b05c5591a9caf60dd0adad0075b7f568bf6e84fb1f3367d9ba196e71daf27322af247ee92845853db7a96a61f0e7c3b77000d8b5363d1452099df44a854f17f3e418fff8a54e11eee308a58d9d998328ea1a72477a913d9f18ad612ecc1e90775f1eaa5a40eac091cfbb55383d15e1325d0cb6b16435b6ed68af9a51352d534384abef85b4f5027efe27ecc8ba64bb5666e2b6ab", 0xb3}, {&(0x7f0000005780)}, {&(0x7f0000005880)="f8a9d151ed3b64d4f0d12bc766398f762546784c6c68e34405aaa14ba064c742d0e1563aa387de605a04eaf9340b56a20c537e3576231574632dba6cf9fb8afd3a4e630e99dca838599ea5ca4e022831d54e8aaa28e26026f6432a48470cd36d8513289800178e3e68b5f9ce9f4c77a068f31760abe4314c16c3064933ac588d16edd6df980853acc9600d83f531314a8d51ec07eae54b3bd01de2ce3700a06529158da69add9bcf670bd115de886378e5137c49573424e2f8b9441a8130e4b4a8adca93851a939601f16d3ec3f909adc484cf0f9bb6d3fcf9f24ea138aff28580878048fffa", 0xe6}, {&(0x7f0000005b00)="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", 0x16b}], 0x8, &(0x7f0000006280), 0x0, 0x40004}}], 0x1, 0x42e086a1ab2b1c41) recvmmsg(r1, &(0x7f00000052c0)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/202}, {&(0x7f00000007c0)=""/4096}]}, 0x2}, {{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/151}, {&(0x7f00000017c0)=""/152}, {&(0x7f0000001880)=""/255}, {&(0x7f0000000700)=""/78}, {&(0x7f0000001980)=""/243}], 0x0, &(0x7f0000000280)=""/23}, 0xfff}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000004c0)=""/45}, {&(0x7f0000001b00)=""/124}, {&(0x7f0000001b80)=""/4096}, {&(0x7f0000002b80)=""/173}], 0x0, &(0x7f0000002c80)=""/4096}, 0xb9f}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000003c80)=""/32}, {&(0x7f0000003cc0)=""/4096}]}, 0x8}, {{&(0x7f0000004d00)=@ieee802154, 0x0, &(0x7f0000005180)=[{&(0x7f0000004d80)=""/22}, {&(0x7f0000004dc0)=""/169}, {&(0x7f0000004e80)=""/19}, {&(0x7f0000004ec0)=""/222}, {&(0x7f0000004fc0)=""/89}, {&(0x7f0000005040)=""/138}, {&(0x7f0000005100)=""/34}, {&(0x7f0000005140)=""/39}], 0x0, &(0x7f0000005200)=""/187}, 0x200}], 0x9e2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) sched_setattr(0x0, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 7.627587222s ago: executing program 0 (id=1852): r0 = epoll_create1(0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x10, r1, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000040)) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000480)="80ca091cc2e0c56279", 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000002}) 7.432791196s ago: executing program 3 (id=1853): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 6.548062684s ago: executing program 4 (id=1854): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea1fabde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.478702812s ago: executing program 0 (id=1855): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x44, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200040d4}, 0x20040084) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r5}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9) (async) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000040)={0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r9, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r10, 0x10c, 0x5, &(0x7f0000000080)=0x3ff, 0x4) 5.94562869s ago: executing program 4 (id=1856): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) timerfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x3, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x20000800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r2, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 5.803716433s ago: executing program 3 (id=1857): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="7dbf04e03de9827b84f97f8e0db7f42d397b36bbe565d01bb6735f8adbca2444ba33e4a359aeae70250a4094492c2ac9db2c07cb2a65", 0x36}, {&(0x7f0000000100)="9eaad156e3e8b4e7c5122cfd4088fe5bf05f4fb5f0c0f4774afa459372b5223b0d28d5ea8690e8b7c2fcde3d02ebf909e74bbbde0734bdd41ad75de40cc2476e7a18d4d8773def065ed53201f35797d9023c4f1ed2d7a44d0d262194a607683d62af9e7bcce546b81756cd2c96f740e1a2481ff1e933b5ad5b8dd73149cdf4f7b45e95090f02bf5c6e6699804d39e035956cd9afdcf2e30dafc7df86b02ffd7623d7ebad430baa9629faed1f5049c0c0e49c152f6605ab0b57c5e945fb30ed229358be1b3f31a828163c5dd9e8c8b19ed848d9fbb30df549be3c5286779d1c90f7889b3ab27ea46fea402d83bb15d80d74c7e8df2d4a", 0xf6}, {&(0x7f00000002c0)="1ff178d57c83f14c1021b8dd069c30d13aee8092a71b38b7e9c95440ccb89e70fa25e571f0cca19dcb2e2bf0797206099b10dd1e808092d47dd90d70bd86a6ca96fbd9be4f609cc4825ae29b83e325faabdef27a2a43e7e47e3c62cf5ec65061e848d798c80e1545752084836658c5782c9dc511d4fe19382850bea1f9b576c7b30d59c7957ecb4430ba35e701e104c1622c539f9b13e33e8c023dc8b29ac5f8b46c2d7c15479f95c00cc881e70903b17395accf5332b49d33a16a0ac8548ccd5f5f9ca4ab5ca6e21f0912eca66a49aa940e116ff5a1bea7baa88f2d3cba8cfb", 0xe0}], 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000340), 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x40084) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_SUBDINFO(r3, 0x80486402, &(0x7f0000000080)) 5.647989123s ago: executing program 3 (id=1858): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000040)={0x0, 0x10a000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r6 = dup(r5) shutdown(r6, 0x1) fchdir(r3) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005511b308d8130100dfda000000010902120001000000000904cf"], 0x0) 5.575127017s ago: executing program 2 (id=1859): syz_open_dev$mouse(0x0, 0x0, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d4, 0x4, 0x11, 0xffff, 0x9, 0x1ed, 0x2, 0x3, 0xbb, 0x4, 0x70, 0x2, 0xfffffff7, 0x1ab, 0xfffffff8], 0x0, 0x4}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000019c0)={0x1024, r6, 0x1, 0x40, 0x0, {}, [@TIPC_NLA_NODE={0x1010, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x524}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x1024}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x24040010) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$inet6(0xa, 0x3, 0xff) 5.534710384s ago: executing program 1 (id=1860): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) prlimit64(0x0, 0x1, &(0x7f00000001c0)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) getpid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x208080, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000280)={0x10000008}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000000)={0x1}) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x412081, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="20180d1f980100"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x80801) 5.045481301s ago: executing program 0 (id=1861): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0x0, 0x10a000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r6 = dup(r5) shutdown(r6, 0x1) fchdir(r4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)=0x0) sendmsg$netlink(r4, &(0x7f0000001e80)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e00)=[{&(0x7f0000002340)={0x3f8, 0x37, 0x400, 0x70bd27, 0x25dfdbfe, "", [@generic="fd2e406d52d9205d49b5575f10a167173c04e48f8a2b49e2be103e739df06afbe070ee7f73084c75eb35e4a89049eb6fd6c49ce0cff94e27beff544df33cc22dc5b3a38861e90865bef1a9e707", @nested={0x2ee, 0x4c, 0x0, 0x1, [@typed={0x4, 0x21}, @typed={0xf2, 0x53, 0x0, 0x0, @binary="5891865a21d8d7864d9cc98ea162448833bb6c661f7850596ffaf249b39bc052ae08e8e5a5dfda1a6222ad32981fa9f9eb9921744b1369cd5031565ebe20dcdfec4d60a489bf9d4b76b2cdf1986c43e78b3c5e0f1e8c7581cb1e757dcf62ac8921f02c19a2ee5156ac16f9aaa4d0a759c8527a0e5372c7c9d026342f6e03f834cae15504152c9339edad4db60d637341dd45cb4d341b01f580bc25c825117135ae3f8452ab25462637e0ce8192381807947edd24e189ff7e970e2f2b3c119e4be8e87e3e037665a1d692449be13e4ca3426ff60d69adb7e79aedc875c2f2ff1dfa4e7a118e2819de22744f7a5187"}, @generic="605659f4b7c673db4d3c1fc74c88da7b612b5df054dbba3533ba3187a6b5e2d3ecaa7bac9b5ea2891b8786e658d86277b6d39ff5a00a4cb56f4e647aea6ec3dc0a582c76b52a10c727a13edc79b635e372e8ce28ac93cc354d669ba4407f99630dd7885d7bd0", @generic="e91ceeb69bfa362440197e98ac342b9aebda6ccb4e5ab0d1f30e136a7364c67c16bb7be41f3b48552782ca4836a0ec5ab9d662e9ed7b329733acd137dd335f09ef3be483045f33e068c79f7beab8e9543863cf6f3eaa89ba71a63f3cc556d4e63a613632b91cc45a76879ff27eed91fe9ce74310b98a810fab5f50633fe72a29aa895e173836836792dd854bf31547d38955eb135648d4624c2caf4b3af347376734b89d24a61c9e6c72384fdbd35ac172c3ce51f95e8df99f817bdda97c5e6cb6fd104d14b6a0872089e546a18100d2cfaaa0eea982e08f6a5a4ab54f6b0820eafd39d32ee27746bc509710f02e5d67a05431", @generic="86a44351223672ced97a096fd817e4dcd5b78e8ddd7a6b6256d7e4d6332897302d4678bdbef72cb0d36e1f193bc9ae9f9c0ee16108459f6ee2b94b7a7713a9af04031728fa6f59f26607370cd59ee5eb220635153e9c0d738ec76b68ce057863237a96c85290b1e0c619d392e07b243b77738722d1", @typed={0x8, 0x1b, 0x0, 0x0, @str='4-]\x00'}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x8, 0x79, 0x0, 0x0, @uid=r7}]}, @nested={0x8, 0xaf, 0x0, 0x1, [@nested={0x4, 0xf1}]}, @generic="261869d0a065cbe91914349b0a47825333e8876c4893215e4907ad6a077db8794ae2493b19bb2d53d26afb606e1e256bab29b520e6f4a69109619c7962d821a70e9a4c6fb33cda80f3c13fecabc2f72d7cfcfa7c5af5c3f8b13f64170826bc3de1e64d0c0f47303ddb9f60e0a5879d73d6a0a34e867ef4d277cec5a8641784218c3f6d0baceb7bb6c09ce04339685a1150e608cd7dc54c18bd99d2cbc453a7c0c3f2"]}, 0x3f8}, {&(0x7f0000002840)={0x1010, 0x36, 0x20, 0x70bd29, 0x25dfdbfb, "", [@generic="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"]}, 0x1010}, {&(0x7f0000001ec0)={0x184, 0x16, 0x8, 0x70bd26, 0x25dfdbfe, "", [@nested={0x8, 0x21, 0x0, 0x1, [@generic, @typed={0x4, 0x82, 0x0, 0x0, @binary}]}, @typed={0x4, 0x77}, @nested={0x168, 0x95, 0x0, 0x1, [@generic="20a955364576809a29fd56b980453dbc8531828f1185ad3de2cb1bc26c43cfbc3e55d949014877ef47d27f3e8b788d8b5b46d5789e4c912a3f5c6c918b3240c160488ab64fa9e614975824db939eaf99b05ee93247c00ba9ce51db909188d8fea8d485257acbaa8acce0605b1eb69ebc9a0fd0a94437ad0776c256872f2586793f21b559383d74b8381ebc9083b7afef54a8719ef15e41ec69e06daac8d7cdaa2da4149ce4900cb5c2da098e75aa966c7112affedd8c4aee3a32c34f0dec6ad23876a2bc00", @typed={0x8, 0xef, 0x0, 0x0, @uid}, @generic="d6ada24a4f2df646690802758db940ac9c9a3c387e435abb3dfe878ee4b096b451067f363d0a67feed75a8ed89c85c8520f740cdefe8b1f81f49cdfbea83c23ba5de624660d11dd2f8837099d66f3e7650d49380b21d309c8c7606d0ab28d40caaa552795bbccddfa22011f945a9abed4162ae75d7832c14dbbd0632b97f2331daccd0fcf253646966ebd4ff4d653224a1ed070f8e1416"]}]}, 0x184}, {0x0}, {&(0x7f00000004c0)={0x2f0, 0x3f, 0x10, 0x70bd27, 0x25dfdbfe, "", [@nested={0x1dd, 0x110, 0x0, 0x1, [@nested={0x18e, 0xf5, 0x0, 0x1, [@nested={0x164, 0xdc, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @nested={0x140, 0xda, 0x0, 0x1, [@nested={0x139, 0xf1, 0x0, 0x1, [@nested={0x4, 0x64}, @typed={0xba, 0x43, 0x0, 0x0, @binary="c75d34b1176b8fc2dc6f9b458770c699f6b4543f645e9f39549703f55e4349948c6fcac4f203a9c894830077859979d924aa5fe271b7db38aaa154003b5ee31bd71a24d626343dfa3b45179e4fb6202772677a11b1236203be61628b5dbfbc23032ddf15a19d66e4a8f75efb1f7e88b9af05e83c16c98237ecbdad1c31e1e112de364f11dea305ae2d442323e6e854de6e7809d7eb3a46260367634c82a1368f5dcee96b68880c145b67c87e5e4cd6fe0f1995adac02"}, @nested={0x4, 0xec}, @nested={0x4, 0x14f}, @generic="4f864f6a34e194bd5d95eea06feb7fa4a1a8373ac2b52e3a534ee76d402de4abb140f654283714832522df214e69b3870e240520e67ba2fd24b0ddb9bf7d0c81de79efd3f0c1456c8020f3c55292b4b821970f219cf5139d984b6d4e8a1b13cafb42517d5eef9e0d224c09b0d9"]}]}, @typed={0x14, 0xa8, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x4, 0x11a}]}, @generic="aca2dfda0c0cf02be3e1a8c0a020742ee598984a0de02e200e5dde2303b39ffc5f89dc9e8041"]}, @generic="c452e02e27baa8b80437dfd16d2042e0b9353cf1cf854a9fa7a2187694567cfbb2c4a606f29b76ec2afeb54f3e38e9eed82577e7c409997e4dc5bdd9dad1e64cda7dc534c3b761d7fc"]}, @typed={0x8, 0x117, 0x0, 0x0, @pid=r8}, @nested={0xb7, 0x98, 0x0, 0x1, [@nested={0x4, 0xdc}, @generic="75e10af68d18c9d0aec5dacb3d64b4887b356738b8525963ffd49bfd330f2a990aca21e9688e9e9c3ec9a70bcf32757efc0e24b60e3cc97f2a1dc4e9dd919ae3a329e57fcef3cb4bd00a3f1176e9c03b983669f633cfde4baa1a0a4a7672a0870a7b71145c402c94bd7dba119d30f21acae01890a73f58726087b0c583848b115cff9971630950a5f131148714f9e62eb2c9f46aa55a8ae488885a2549d81716cb2f211ce4b1c853b15f7a", @nested={0x4, 0x55}]}, @typed={0x8, 0x8d, 0x0, 0x0, @fd=r6}, @typed={0x10, 0x45, 0x0, 0x0, @str='ocfs2_dlmfs\x00'}, @generic="8426dc65cbd414b55a79ade5f3a9777762e6a480c43a17caafc642360aad67c8d76e69f6eb33e778"]}, 0x2f0}], 0x5, 0x0, 0x0, 0x80}, 0x4008000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005511b308d8130100dfda000000010902120001000000000904cf"], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 4.147860925s ago: executing program 2 (id=1862): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000540)={[0x4, 0xb4fb, 0x5, 0x7, 0x0, 0x4, 0x7, 0x1800000000, 0x81, 0x6, 0x7, 0x1, 0x4, 0xeb, 0x43d, 0xffffffffffffffff], 0xffff1000}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000140)={0x28, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x2}) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) r5 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f00000008c0)={0x2a, "0d3154df30934d68ef49e4b2441112bfb76bb765c95269ffaaecd78543c000bd838c3b34c19c0b3b86c975437807198ab3f65989d7dc4e2125b0c2fcd6f37aa41cfa6e9a72cb7947686fc6d92dfa46764381984a91391bf4b64fbc9ea7ac8dd41590ac1c9920e92e6700eec3ac1747a85e9ca97aeef90db125b488f9d7852905"}) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x34, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f00000000c0)=""/55, 0x37) ioctl$EVIOCGBITKEY(r5, 0x80404521, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r9 = eventfd(0x200) io_submit(0x0, 0x9, &(0x7f000001c0c0)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x430b, 0xffffffffffffffff, &(0x7f0000000b00)="2cbbbdaa44d8040603a5d01cffe5b1a9f3b3cc982e6c249edcb74b5004630237bea449ae8c6abedef9585727a5a593341a60a7d7ea6d3dcb5f294f54eb6a3c6e59ff68f522dd1eb1aadc3238ba3f05b2ba86f1c62eb3707dca3c4d9712fcd0095f8a44585572b49d6f7e8aeae12fb402188c4a761d40f0757272d350c4530759351acd179753445c7a23969c76393a18b6c0f7631d4630a09e03388614dafb4a08f71fcbbb20739a6c4cae4525dc3d5ec75ca090053de3c8854c954096befb0badbbda830f367b7dc4b0b00fd4098b74e161bc", 0xd3, 0x3, 0x0, 0x6, r0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000000640)="1263826fd0fcc7477155c54cfe039ef1bb9c92dc17ee79f4c559b5cd36f793ef8870204e4aad1c13d2e5a2f8a4bc20acc1a8060b4e5a716cf8f8f5921aa1167db61fc98d5b263988080efb19f189a82db31b202519", 0x55, 0x3, 0x0, 0x1, r5}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, &(0x7f0000000c00)="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", 0x1000, 0x8, 0x0, 0x0, r0}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x2, r5, &(0x7f0000001c00)="7606d540036bf0ab6924ef836ab86ac03f4358cc374f2e42f37e43bff6fd16b00b9367d7b775ac721371cc5eef06ed4191e44e2ae8bf1da9f2b0e55450cfcf4d8e694c220d7dbe56cd820153f2558811fd5e46e7a4e40605f2a75c7907dd84d52a9ffc650e23319ba74e2127648ec57ad8ee4c7da86fb8f28470d673799681334b79fe04e3e48c1849c715a9f4dc46f6", 0x90, 0x800, 0x0, 0x2, r5}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x2, 0x2, r3, &(0x7f0000001cc0)="aff87aecb4480ff4b6178f3bcf9a392163814b82b946e0dc92fe76cf2784af5169e36788c12b9087984a17", 0x2b, 0x800, 0x0, 0x2, r7}, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000001d80)="f5bf37e124aa92f2d859bf5eb0b96486feda558faecca7784ac1d3e22d664e54c2d4c8f049e026d6d9f395ba45cf050e764143b7dd62395478339c55502aa0f2b93c223e5fe160db3643baa3a88c6ba69b83a6", 0x53, 0x1, 0x0, 0x5, r7}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x7, r6, &(0x7f000001b000)="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", 0x1000, 0x2, 0x0, 0x3}, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x738, r8, &(0x7f0000001e80)="b541ba8bc7635ed49f9758ed579b9389ab0ef0ac5b3db204a8c74559eb14e638ede7e9c84465f95b666f20fe3e8e1ce30c9a786422781d615d8cb15b67ffbbf5536ac86f3993", 0x46, 0x8, 0x0, 0x2}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x2, 0x8, r7, &(0x7f000001c000)="743c54d1a422f663fae561afe041e7dd84224eb04fd2b27b3c94af9f8aa4a10f8a92a151693f4ee069343a01240576f1088d654628f8c5eee7e13d169678c293ce1100e970ba2db2ffb045caa3ef59703ff2e0037e6d68e192c6ee641607b311f7b4fc0164505ef6b8bed1015574d32e9cfdeeeabe803f4cddcb2a6cbe8df5685c752c7fdeb38bb578d1adbce455347d6d556a607d01ae79b1d3c638c2a26a", 0x9f, 0x9, 0x0, 0x1, r9}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1002}, 0x94) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x2, 0x0, 0x43d, 0x0, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xaa, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d51e619, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc44, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x9, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1d, 0x0, 0x83, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x4c9d6cf1]}) 3.582299181s ago: executing program 2 (id=1863): syz_open_dev$sndmidi(0x0, 0x2, 0x143102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$l2tp(0x2, 0x2, 0x73) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r4) write$cgroup_int(r3, &(0x7f0000000040)=0x800000000001c8, 0x12) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) recvmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000000800)=""/49, 0x31}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0x208a, &(0x7f0000008000)={0x0, 0x989680}) unshare(0x68040200) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 2.581442763s ago: executing program 2 (id=1864): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$comedi(0xffffff9c, 0x0, 0xa400, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) r1 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f0000000b00), 0x0, r1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) r3 = socket(0x10, 0x3, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x4}, 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) 1.955473349s ago: executing program 2 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @local}, &(0x7f00000000c0)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x100, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xd0, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0xd0}, 0x40000c1) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)={0x4c, r1, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.917140941s ago: executing program 4 (id=1866): r0 = openat(0xffffffffffffff9c, 0x0, 0x20000, 0x88) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f00000000c0), 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}) socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() rt_sigprocmask(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{r4, r5+60000000}, {0x0, 0x9}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49f, &(0x7f0000000180)={0x0, 0x6ad8, 0x400, 0x7ffc, 0x8040034e, 0x0, r0}, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x2) 1.887073555s ago: executing program 0 (id=1867): r0 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 1.792596455s ago: executing program 3 (id=1868): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40048c6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_clone(0x82000, &(0x7f0000000080)="b020bace96af3310b2f20e0bca22bb7ea400997a447836f431f8f391c6", 0x1d, &(0x7f0000000140), &(0x7f0000000380), &(0x7f00000003c0)="1d0093e5b5d2167cc600e869b023c85f5bdf56c8f73a5731aa00b0e18c262608cba5019b5a4821c656ce82d70211cf5acf3e055d0a735822cd9dd2") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea00c7beef91590a4c90c200", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000084}, 0x20040041) r7 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x10) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000240)=[0xee00]) setregid(0x0, r8) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) mkdir(&(0x7f0000000340)='./file0\x00', 0xff0c) 1.384860969s ago: executing program 2 (id=1869): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x4199c1, 0x0) write$nbd(r1, 0x0, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001780), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000000)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400888a}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket(0x25, 0xa, 0x6) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x80000002, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) 1.383796947s ago: executing program 0 (id=1870): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x3f, 0x2, 0x0, "4a5ae5f6f99826beb34789a56a62b5b92b9010128130e6d352b97b35207cf97d", 0x43353039}) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x144}, 0x1, 0x0, 0x0, 0xc004011}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) flistxattr(r6, &(0x7f0000000440)=""/252, 0xfffffd90) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x1, 0x8000000000000000, 0xfff, 0xfffffffffffffffe, 0xb, 0x8b3b, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x20000000000, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x100, 0x0, 0x1a, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x4, 0x800000, 0x0, 0x5, 0x0, 0xd721, 0x80000000000, 0x4, 0x8001, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x71ad, 0x0, 0x0, 0x2]}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1861aca460808d23ab3200000000000000003f07bc6e0780"], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) getsockopt$inet_buf(r8, 0x0, 0x30, 0x0, &(0x7f0000000180)) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x7fffffff, 0x402001) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x40}) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r10, 0xc01c64a3, &(0x7f0000000100)={0x1, r12, 0x6, 0x2, 0xa, 0x1ff, 0x1}) 0s ago: executing program 1 (id=1871): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010000002800", @ANYRES32, @ANYBLOB="000000000000000000004599c4", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000100)={0x1, 0xff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b000000000014001a80100002800c0001800c001a"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) io_submit(r1, 0x4, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x10}, 0x0, 0x0]) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @empty}, {0x1, @random="b781cada9994"}, 0x2, {0x2, 0x4e20, @multicast1}, 'veth0_virt_wifi\x00'}) kernel console output (not intermixed with test programs): 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 593.760662][ T5859] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 594.328593][T11692] tmpfs: Bad value for 'mpol' [ 595.088716][ T5854] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 595.099503][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 595.099529][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 595.099540][ T5854] Workqueue: hci2 hci_rx_work [ 595.099565][ T5854] Call Trace: [ 595.099572][ T5854] [ 595.099581][ T5854] dump_stack_lvl+0x16c/0x1f0 [ 595.099606][ T5854] sysfs_warn_dup+0x7f/0xa0 [ 595.099631][ T5854] sysfs_create_dir_ns+0x24b/0x2b0 [ 595.099656][ T5854] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 595.099679][ T5854] ? find_held_lock+0x2b/0x80 [ 595.099708][ T5854] ? do_raw_spin_unlock+0x172/0x230 [ 595.099730][ T5854] kobject_add_internal+0x2c4/0x9b0 [ 595.099762][ T5854] kobject_add+0x16e/0x240 [ 595.099788][ T5854] ? __pfx_kobject_add+0x10/0x10 [ 595.099817][ T5854] ? do_raw_spin_unlock+0x172/0x230 [ 595.099838][ T5854] ? kobject_put+0xab/0x5a0 [ 595.099870][ T5854] device_add+0x288/0x1aa0 [ 595.099898][ T5854] ? __pfx_dev_set_name+0x10/0x10 [ 595.099923][ T5854] ? __pfx_device_add+0x10/0x10 [ 595.099949][ T5854] ? mgmt_send_event_skb+0x2fb/0x460 [ 595.099977][ T5854] hci_conn_add_sysfs+0x17e/0x230 [ 595.100000][ T5854] le_conn_complete_evt+0x1260/0x2150 [ 595.100028][ T5854] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 595.100048][ T5854] ? hci_event_packet+0x459/0x11c0 [ 595.100077][ T5854] hci_le_conn_complete_evt+0x23c/0x370 [ 595.100104][ T5854] hci_le_meta_evt+0x354/0x5e0 [ 595.100126][ T5854] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 595.100150][ T5854] hci_event_packet+0x685/0x11c0 [ 595.100169][ T5854] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 595.100191][ T5854] ? __pfx_hci_event_packet+0x10/0x10 [ 595.100212][ T5854] ? kcov_remote_start+0x3c9/0x6d0 [ 595.100233][ T5854] ? lockdep_hardirqs_on+0x7c/0x110 [ 595.100263][ T5854] hci_rx_work+0x2c5/0x16b0 [ 595.100285][ T5854] ? rcu_is_watching+0x12/0xc0 [ 595.100312][ T5854] process_one_work+0x9cc/0x1b70 [ 595.100344][ T5854] ? __pfx_process_one_work+0x10/0x10 [ 595.100372][ T5854] ? assign_work+0x1a0/0x250 [ 595.100394][ T5854] worker_thread+0x6c8/0xf10 [ 595.100430][ T5854] ? __pfx_worker_thread+0x10/0x10 [ 595.100450][ T5854] kthread+0x3c2/0x780 [ 595.100469][ T5854] ? __pfx_kthread+0x10/0x10 [ 595.100488][ T5854] ? rcu_is_watching+0x12/0xc0 [ 595.100507][ T5854] ? __pfx_kthread+0x10/0x10 [ 595.100525][ T5854] ret_from_fork+0x56a/0x730 [ 595.100541][ T5854] ? __pfx_kthread+0x10/0x10 [ 595.100559][ T5854] ret_from_fork_asm+0x1a/0x30 [ 595.100592][ T5854] [ 595.394808][ T5854] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 595.408872][ T5854] Bluetooth: hci2: failed to register connection device [ 595.411306][ T30] audit: type=1326 audit(1759015375.837:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11663 comm="syz.2.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ae012af79 code=0x7fc00000 [ 595.418772][ T5901] usb 3-1: USB disconnect, device number 15 [ 597.475394][T11722] fuse: Bad value for 'fd' [ 597.495479][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 597.552597][T11723] tmpfs: Bad value for 'mpol' [ 597.810642][ T43] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 597.969861][T11728] lo speed is unknown, defaulting to 1000 [ 598.404420][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 598.472283][ T43] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 598.615130][ T30] audit: type=1400 audit(1759015378.977:511): avc: denied { create } for pid=11733 comm="syz.2.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 598.643617][ T43] usb 2-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.878642][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 599.843565][ T43] usb 2-1: string descriptor 0 read error: -71 [ 599.943991][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 600.134543][T11747] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 600.142401][T11747] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1427'. [ 600.151549][T11747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1427'. [ 600.308836][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.516023][ T43] usb 2-1: can't set config #1, error -71 [ 600.633150][ T43] usb 2-1: USB disconnect, device number 29 [ 600.959812][T11755] lo speed is unknown, defaulting to 1000 [ 602.170624][T11764] siw: device registration error -23 [ 604.345036][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1438'. [ 604.763610][T11807] tipc: Started in network mode [ 604.768742][T11807] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 604.776204][T11807] tipc: Enabled bearer , priority 10 [ 604.802050][T11807] siw: device registration error -23 [ 605.900292][ T43] tipc: Node number set to 10005162 [ 608.220565][ T43] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 608.434500][ T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 608.702450][T11839] siw: device registration error -23 [ 608.733288][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.796417][ T43] usb 2-1: Product: syz [ 608.805511][ T43] usb 2-1: Manufacturer: syz [ 608.810170][ T43] usb 2-1: SerialNumber: syz [ 608.827639][ T43] usb 2-1: config 0 descriptor?? [ 609.131445][ T43] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 609.265357][ T30] audit: type=1400 audit(1759015389.747:512): avc: denied { create } for pid=11846 comm="syz.2.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 609.780600][T10878] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 609.951998][T11854] netlink: 'syz.3.1454': attribute type 12 has an invalid length. [ 610.066051][T10878] usb 5-1: Using ep0 maxpacket: 8 [ 610.097849][T10878] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 610.105463][T11858] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1455'. [ 610.114938][T10878] usb 5-1: config 179 has no interface number 0 [ 610.405068][T10878] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 610.565246][T10878] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 610.656696][ T43] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 610.726940][ T43] usb 2-1: USB disconnect, device number 30 [ 610.750575][T10878] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 610.785050][T10878] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 610.807165][T10878] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 610.902437][T10878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.935158][T11845] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 611.163734][ T5859] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 611.620652][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 611.639756][ T5859] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 611.659065][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.679305][ T5859] usb 1-1: Product: syz [ 611.698272][ T5859] usb 1-1: Manufacturer: syz [ 611.721729][ T5859] usb 1-1: SerialNumber: syz [ 611.770067][ T5859] usb 1-1: config 0 descriptor?? [ 611.813968][ T5859] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 611.865778][ T5859] usb 1-1: Detected FT-X [ 612.013619][ T5859] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 612.997771][ T5859] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 613.014095][T10878] usb 5-1: USB disconnect, device number 16 [ 613.041884][ T5859] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 613.162446][ T5859] usb 1-1: USB disconnect, device number 20 [ 613.179833][ T5859] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 613.931290][ T5859] ftdi_sio 1-1:0.0: device disconnected [ 614.959532][ T5957] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 615.140537][ T5957] usb 5-1: Using ep0 maxpacket: 16 [ 615.159723][ T5957] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 615.231892][T11900] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1467'. [ 615.341917][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.429105][ T5957] usb 5-1: Product: syz [ 615.459847][ T5957] usb 5-1: Manufacturer: syz [ 615.492845][ T5957] usb 5-1: SerialNumber: syz [ 615.522709][ T5957] usb 5-1: config 0 descriptor?? [ 615.634716][ T30] audit: type=1326 audit(1759015396.057:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11901 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae018eec9 code=0x7fc00000 [ 615.723459][ T5957] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 615.773420][ T5957] usb 5-1: Detected FT-X [ 615.811233][ T5957] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 616.133079][T11909] netlink: 'syz.0.1469': attribute type 12 has an invalid length. [ 616.249973][ T5859] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 616.379892][ T5957] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 616.394564][ T5957] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 616.448584][ T5957] usb 5-1: USB disconnect, device number 17 [ 616.493300][ T5957] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 616.534417][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 616.539562][ T5957] ftdi_sio 5-1:0.0: device disconnected [ 616.660366][ T5859] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 616.698739][ T5859] usb 3-1: config 0 has no interface number 0 [ 616.710797][T10878] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 616.728964][ T5859] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 616.766274][ T5859] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 616.778830][ T5859] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 616.792312][ T5859] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 616.802846][ T5859] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 616.821050][ T5859] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 616.831334][ T5859] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 616.841778][ T5859] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 616.852013][ T5859] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.870119][ T5859] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 616.885920][T10878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.896136][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.897169][T10878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 616.911873][ T5859] usb 3-1: Product: syz [ 616.916203][ T5859] usb 3-1: Manufacturer: syz [ 616.943283][ T5859] usb 3-1: SerialNumber: syz [ 616.960384][ T5859] usb 3-1: config 0 descriptor?? [ 616.982460][T10878] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 616.989040][T11905] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 616.999603][T10878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.000667][ T5859] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 617.059577][T10878] usb 4-1: Product: syz [ 617.078491][ T5859] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 617.084086][T10878] usb 4-1: Manufacturer: syz [ 617.141400][T11922] tmpfs: Bad value for 'mpol' [ 617.245389][T10878] usb 4-1: SerialNumber: syz [ 617.259655][T10878] usb 4-1: config 0 descriptor?? [ 617.337038][T10878] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 617.799272][T10878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 617.845263][T10878] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 617.872554][T10878] usb 4-1: media controller created [ 618.117805][T10878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.600581][ T5859] usb 3-1: USB disconnect, device number 16 [ 619.089958][ T30] audit: type=1326 audit(1759015398.957:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11901 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ae012af79 code=0x7fc00000 [ 619.339678][T11950] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1478'. [ 619.636844][T11952] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 619.650765][T10878] DVB: Unable to find symbol tda10046_attach() [ 619.679008][T10878] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 619.781544][T10878] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 619.845639][T10878] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 620.393990][T10878] usb 4-1: USB disconnect, device number 20 [ 621.756695][T11965] sp0: Synchronizing with TNC [ 622.074148][T11960] [U] è [ 623.595590][T11989] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 623.603529][T11989] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1489'. [ 623.612733][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1489'. [ 623.759918][T11990] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.856933][ T5850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 623.866485][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 623.866512][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 623.866525][ T5850] Workqueue: hci2 hci_rx_work [ 623.866551][ T5850] Call Trace: [ 623.866557][ T5850] [ 623.866565][ T5850] dump_stack_lvl+0x16c/0x1f0 [ 623.866591][ T5850] sysfs_warn_dup+0x7f/0xa0 [ 623.866618][ T5850] sysfs_create_dir_ns+0x24b/0x2b0 [ 623.866643][ T5850] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 623.866664][ T5850] ? find_held_lock+0x2b/0x80 [ 623.866692][ T5850] ? do_raw_spin_unlock+0x172/0x230 [ 623.866715][ T5850] kobject_add_internal+0x2c4/0x9b0 [ 623.866746][ T5850] kobject_add+0x16e/0x240 [ 623.866771][ T5850] ? __pfx_kobject_add+0x10/0x10 [ 623.866799][ T5850] ? do_raw_spin_unlock+0x172/0x230 [ 623.866819][ T5850] ? kobject_put+0xab/0x5a0 [ 623.866850][ T5850] device_add+0x288/0x1aa0 [ 623.866876][ T5850] ? __pfx_dev_set_name+0x10/0x10 [ 623.866894][ T5850] ? __pfx_device_add+0x10/0x10 [ 623.866920][ T5850] ? mgmt_send_event_skb+0x2fb/0x460 [ 623.866947][ T5850] hci_conn_add_sysfs+0x17e/0x230 [ 623.866970][ T5850] le_conn_complete_evt+0x1260/0x2150 [ 623.866995][ T5850] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 623.867014][ T5850] ? hci_event_packet+0x459/0x11c0 [ 623.867040][ T5850] hci_le_conn_complete_evt+0x23c/0x370 [ 623.867065][ T5850] hci_le_meta_evt+0x354/0x5e0 [ 623.867091][ T5850] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 623.867115][ T5850] hci_event_packet+0x685/0x11c0 [ 623.867136][ T5850] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 623.867160][ T5850] ? __pfx_hci_event_packet+0x10/0x10 [ 623.867181][ T5850] ? kcov_remote_start+0x3c9/0x6d0 [ 623.867202][ T5850] ? lockdep_hardirqs_on+0x7c/0x110 [ 623.867230][ T5850] hci_rx_work+0x2c5/0x16b0 [ 623.867251][ T5850] ? rcu_is_watching+0x12/0xc0 [ 623.867277][ T5850] process_one_work+0x9cc/0x1b70 [ 623.867310][ T5850] ? __pfx_process_one_work+0x10/0x10 [ 623.867337][ T5850] ? assign_work+0x1a0/0x250 [ 623.867359][ T5850] worker_thread+0x6c8/0xf10 [ 623.867391][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 623.867410][ T5850] kthread+0x3c2/0x780 [ 623.867430][ T5850] ? __pfx_kthread+0x10/0x10 [ 623.867449][ T5850] ? rcu_is_watching+0x12/0xc0 [ 623.867471][ T5850] ? __pfx_kthread+0x10/0x10 [ 623.867490][ T5850] ret_from_fork+0x56a/0x730 [ 623.867506][ T5850] ? __pfx_kthread+0x10/0x10 [ 623.867525][ T5850] ret_from_fork_asm+0x1a/0x30 [ 623.867558][ T5850] [ 623.867583][ T5850] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 624.230750][ T5850] Bluetooth: hci2: failed to register connection device [ 624.231042][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.250623][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.258716][ T1298] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 624.985153][T12004] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1492'. [ 625.290260][T12015] fuse: Unknown parameter '00000000000000000000' [ 626.292120][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 626.952328][ T5979] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 627.259253][T12037] tmpfs: Bad value for 'mpol' [ 627.264416][ T5979] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 627.274393][ T5979] usb 2-1: config 0 has no interface number 0 [ 627.287785][ T5979] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 627.298531][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.797443][ T5979] usb 2-1: config 0 descriptor?? [ 627.836224][ T5979] usb 2-1: selecting invalid altsetting 3 [ 627.857353][ T5979] comedi comedi5: could not set alternate setting 3 in high speed [ 627.896108][ T5979] usbdux 2-1:0.207: driver 'usbdux' failed to auto-configure device. [ 627.920058][ T5979] usbdux 2-1:0.207: probe with driver usbdux failed with error -22 [ 628.703855][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1502'. [ 628.866033][T12045] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 628.931263][T12055] FAULT_INJECTION: forcing a failure. [ 628.931263][T12055] name failslab, interval 1, probability 0, space 0, times 0 [ 628.948359][T12055] CPU: 0 UID: 0 PID: 12055 Comm: syz.3.1503 Not tainted syzkaller #0 PREEMPT(full) [ 628.948381][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 628.948391][T12055] Call Trace: [ 628.948397][T12055] [ 628.948403][T12055] dump_stack_lvl+0x16c/0x1f0 [ 628.948431][T12055] should_fail_ex+0x512/0x640 [ 628.948452][T12055] ? fs_reclaim_acquire+0xae/0x150 [ 628.948476][T12055] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 628.948500][T12055] should_failslab+0xc2/0x120 [ 628.948520][T12055] __kmalloc_noprof+0xd2/0x510 [ 628.948543][T12055] tomoyo_realpath_from_path+0xc2/0x6e0 [ 628.948571][T12055] ? tomoyo_profile+0x47/0x60 [ 628.948590][T12055] tomoyo_path_number_perm+0x245/0x580 [ 628.948611][T12055] ? tomoyo_path_number_perm+0x237/0x580 [ 628.948635][T12055] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 628.948657][T12055] ? find_held_lock+0x2b/0x80 [ 628.948702][T12055] ? find_held_lock+0x2b/0x80 [ 628.948722][T12055] ? hook_file_ioctl_common+0x145/0x410 [ 628.948744][T12055] ? __fget_files+0x20e/0x3c0 [ 628.948769][T12055] security_file_ioctl+0x9b/0x240 [ 628.948802][T12055] __x64_sys_ioctl+0xb7/0x210 [ 628.948829][T12055] do_syscall_64+0xcd/0x4e0 [ 628.948854][T12055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.948871][T12055] RIP: 0033:0x7faed338eec9 [ 628.948885][T12055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.948902][T12055] RSP: 002b:00007faed4271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.948919][T12055] RAX: ffffffffffffffda RBX: 00007faed35e5fa0 RCX: 00007faed338eec9 [ 628.948930][T12055] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 628.948940][T12055] RBP: 00007faed4271090 R08: 0000000000000000 R09: 0000000000000000 [ 628.948950][T12055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.948959][T12055] R13: 00007faed35e6038 R14: 00007faed35e5fa0 R15: 00007ffeb8e17c18 [ 628.948984][T12055] [ 628.948991][T12055] ERROR: Out of memory at tomoyo_realpath_from_path. [ 628.960724][ T43] usb 2-1: USB disconnect, device number 31 [ 629.294140][T12045] macsec1: entered allmulticast mode [ 629.313557][T12045] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 630.967529][T12071] netlink: 'syz.0.1506': attribute type 12 has an invalid length. [ 631.254416][ T5957] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 632.058986][ T5957] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 632.120378][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.305813][ T5957] usb 2-1: config 0 descriptor?? [ 632.376672][ T5957] cp210x 2-1:0.0: cp210x converter detected [ 632.827822][ T5957] usb 2-1: cp210x converter now attached to ttyUSB0 [ 633.311881][ T5957] usb 2-1: USB disconnect, device number 32 [ 633.322267][ T5957] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 633.923861][ T5957] cp210x 2-1:0.0: device disconnected [ 636.755898][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'. [ 636.872162][T12123] openvswitch: netlink: Missing key (keys=40, expected=100) [ 636.970952][ T5908] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 637.138468][ T5908] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 637.270571][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 637.305886][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'. [ 637.489105][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 637.684312][T12134] lo speed is unknown, defaulting to 1000 [ 638.220968][ T5908] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 638.468692][T12141] o2cb: This node has not been configured. [ 638.474639][T12141] o2cb: Cluster check failed. Fix errors before retrying. [ 638.483036][T12141] (syz.4.1522,12141,0):user_dlm_register:674 ERROR: status = -22 [ 638.490898][T12141] (syz.4.1522,12141,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 638.659151][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.774255][ T5908] usb 2-1: Product: syz [ 638.788854][ T5908] usb 2-1: Manufacturer: syz [ 638.835685][ T5908] usb 2-1: SerialNumber: syz [ 638.980593][ T5859] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 639.010590][ T43] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 639.099841][ T5908] usb 2-1: config 0 descriptor?? [ 639.107426][T12121] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 639.117601][ T5908] usb 2-1: ucan: probing device on interface #0 [ 639.124406][ T5908] usb 2-1: ucan: invalid endpoint configuration [ 639.130750][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 639.134971][ T5859] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 639.140509][ T5908] usb 2-1: ucan: probe failed; try to update the device firmware [ 639.151373][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.196539][ T5859] usb 1-1: Product: syz [ 639.201618][ T5859] usb 1-1: Manufacturer: syz [ 639.206293][ T5859] usb 1-1: SerialNumber: syz [ 639.234144][ T5859] usb 1-1: config 0 descriptor?? [ 639.245132][ T5859] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 639.262003][ T43] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 639.278738][ T43] usb 5-1: config 0 has no interface number 0 [ 639.285202][ T5859] usb 1-1: Detected FT-X [ 639.527930][ T5859] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 639.540812][T12121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.566841][T12121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.569537][ T43] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 639.605935][T12150] fuse: Unknown parameter '00000000000000000000' [ 639.616871][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.923574][ T43] usb 5-1: config 0 descriptor?? [ 639.987953][ T43] usb 5-1: selecting invalid altsetting 3 [ 640.019167][ T43] comedi comedi5: could not set alternate setting 3 in high speed [ 640.049792][ T43] usbdux 5-1:0.207: driver 'usbdux' failed to auto-configure device. [ 640.092038][ T43] usbdux 5-1:0.207: probe with driver usbdux failed with error -22 [ 640.108311][ T5859] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 640.116829][ T5859] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 640.163703][ T5859] usb 1-1: USB disconnect, device number 21 [ 640.769443][ T5859] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 640.870179][ T5859] ftdi_sio 1-1:0.0: device disconnected [ 640.876287][ T5979] usb 2-1: USB disconnect, device number 33 [ 641.008240][T10878] usb 5-1: USB disconnect, device number 18 [ 642.647462][T12180] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 642.673880][T12180] CIFS mount error: No usable UNC path provided in device string! [ 642.673880][T12180] [ 642.684560][T12180] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 642.856831][ T30] audit: type=1400 audit(1759015423.297:515): avc: denied { connect } for pid=12172 comm="syz.4.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 643.495012][T12186] o2cb: This node has not been configured. [ 643.502112][T12186] o2cb: Cluster check failed. Fix errors before retrying. [ 643.510761][T12186] (syz.3.1534,12186,0):user_dlm_register:674 ERROR: status = -22 [ 643.518586][T12186] (syz.3.1534,12186,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 643.910658][ T5859] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 644.313264][T12196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1538'. [ 644.356353][T12201] tmpfs: Bad value for 'mpol' [ 644.633593][ T5859] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 644.690645][ T5859] usb 4-1: config 0 has no interface number 0 [ 644.715822][ T5859] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 644.729548][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.760756][ T5859] usb 4-1: config 0 descriptor?? [ 644.810583][T12202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 644.842909][ T5859] usb 4-1: selecting invalid altsetting 3 [ 644.898228][ T5859] comedi comedi5: could not set alternate setting 3 in high speed [ 644.921249][T10878] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 644.938782][ T5859] usbdux 4-1:0.207: driver 'usbdux' failed to auto-configure device. [ 645.618771][T10878] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 645.619386][ T5859] usbdux 4-1:0.207: probe with driver usbdux failed with error -22 [ 645.930458][T10878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 645.955598][ T5859] usb 4-1: USB disconnect, device number 21 [ 645.986975][T10878] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 646.046048][T10878] usb 5-1: string descriptor 0 read error: -22 [ 646.067341][T10878] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 646.178697][T10878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.700707][ T5957] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 646.745529][T10878] usb 5-1: config 0 descriptor?? [ 646.797188][T10878] em28xx 5-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 646.831338][T10878] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 646.860804][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 647.040418][ T5957] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 647.070524][ T5957] usb 3-1: config 0 has no interface number 0 [ 647.076671][ T5957] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 647.094800][T12226] fuse: Unknown parameter '00000000000000000000' [ 647.101302][T10878] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 647.116600][T10878] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 647.420860][ T5957] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 647.437534][T10878] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 647.460310][T10878] em28xx 5-1:0.0: No AC97 audio processor [ 647.467980][ T5957] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 647.555578][T10878] usb 5-1: USB disconnect, device number 19 [ 647.576588][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.607003][T10878] em28xx 5-1:0.0: Disconnecting em28xx [ 647.630592][ T5957] usb 3-1: Product: syz [ 647.635693][ T5957] usb 3-1: Manufacturer: syz [ 647.640299][ T5957] usb 3-1: SerialNumber: syz [ 647.726130][T10878] em28xx 5-1:0.0: Freeing device [ 647.732531][ T5957] usb 3-1: config 0 descriptor?? [ 647.742744][T12217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 647.760192][T12217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 648.302019][T12245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.311769][ T5957] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, f2:26:00:e4:a3:99 [ 648.318863][T12217] lo speed is unknown, defaulting to 1000 [ 648.466988][T12245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.571127][ T5859] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 649.001256][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 649.005108][ T5859] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 649.005135][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.668430][ T30] audit: type=1400 audit(1759015430.157:516): avc: denied { append } for pid=12254 comm="syz.1.1552" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 649.673343][ T5859] pvrusb2: Hardware description: Terratec Grabster AV400 [ 649.744319][ T5859] pvrusb2: ********** [ 649.779452][ T5859] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 649.800777][ T5923] usb 3-1: USB disconnect, device number 17 [ 649.939159][ T5923] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 650.584248][ T5859] pvrusb2: Important functionality might not be entirely working. [ 650.651010][T10878] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 650.728323][ T5859] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 650.882084][T10878] usb 2-1: Using ep0 maxpacket: 32 [ 651.072929][T10878] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 651.099767][T10878] usb 2-1: config 0 has no interface number 0 [ 651.106071][ T5859] pvrusb2: ********** [ 651.842272][T10878] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=fe.8f [ 651.909295][T10878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.024416][T10878] usb 2-1: Product: syz [ 652.067036][T10878] usb 2-1: Manufacturer: syz [ 652.090644][T10878] usb 2-1: SerialNumber: syz [ 652.119436][T10878] usb 2-1: config 0 descriptor?? [ 652.503228][T12256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.584852][T12283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25970 sclass=netlink_route_socket pid=12283 comm=syz.4.1556 [ 652.683023][T12256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.975777][T12289] loop2: detected capacity change from 0 to 7 [ 653.041196][ T30] audit: type=1400 audit(1759015433.507:517): avc: denied { mounton } for pid=12288 comm="syz.3.1558" path="/file0" dev="ramfs" ino=95285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 653.063107][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.075617][T12289] Dev loop2: unable to read RDB block 7 [ 653.163756][ T2337] pvrusb2: Invalid write control endpoint [ 653.170345][T12289] loop2: unable to read partition table [ 653.184558][T12289] loop2: partition table beyond EOD, truncated [ 653.418641][ T5859] usb 1-1: USB disconnect, device number 22 [ 653.436086][T12289] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 653.620242][ T2337] pvrusb2: Invalid write control endpoint [ 653.676150][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 653.788600][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 654.776878][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 654.982115][T12314] lo speed is unknown, defaulting to 1000 [ 655.401584][ T2337] pvrusb2: Device being rendered inoperable [ 655.421722][ T2337] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 655.429182][ T2337] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 655.727619][ T2337] pvrusb2: Attached sub-driver cx25840 [ 655.733652][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 655.757881][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 656.133125][T12329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1565'. [ 656.142164][T12329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1565'. [ 656.173002][ T5859] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 656.297674][T12329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1565'. [ 656.306878][T12329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1565'. [ 656.393503][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.463531][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.640912][ T5859] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 656.807918][T12340] lo speed is unknown, defaulting to 1000 [ 657.138941][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.148965][ T5859] usb 1-1: config 0 descriptor?? [ 657.159129][ T5859] usb 1-1: can't set config #0, error -71 [ 657.247406][ T5859] usb 1-1: USB disconnect, device number 23 [ 658.086880][ T5859] usb 2-1: USB disconnect, device number 34 [ 661.991612][ T5923] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 662.152126][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 662.175187][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 662.194936][ T5923] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 662.214574][ T5923] usb 3-1: can't read configurations, error -71 [ 662.270990][ T30] audit: type=1326 audit(1759015442.757:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5198eec9 code=0x7fc00000 [ 662.339394][T12410] fuse: Unknown parameter '00000000000000000000' [ 662.453745][T12413] netlink: 'syz.0.1583': attribute type 1 has an invalid length. [ 662.461625][T12413] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1583'. [ 662.541142][T10878] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 662.831041][T10878] usb 2-1: Using ep0 maxpacket: 32 [ 662.883307][T10878] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 662.925184][T10878] usb 2-1: config 0 has no interface number 0 [ 662.946827][T10878] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 662.973643][T10878] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 662.999060][T10878] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 663.013619][T10878] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 663.061993][T10878] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 663.131478][T10878] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 663.144478][T10878] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 663.154764][T10878] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 663.194724][T10878] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.252455][T10878] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 663.500609][T10878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.796666][T10878] usb 2-1: Product: syz [ 663.826942][T10878] usb 2-1: Manufacturer: syz [ 663.832146][T10878] usb 2-1: SerialNumber: syz [ 663.839967][T10878] usb 2-1: config 0 descriptor?? [ 663.846070][T12408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 663.855547][T10878] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 663.865565][T10878] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 665.815580][ T30] audit: type=1326 audit(1759015446.307:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.1.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb5192af79 code=0x7fc00000 [ 666.308295][ T5923] usb 2-1: USB disconnect, device number 35 [ 666.430788][T10878] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 666.644235][T10878] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 666.772937][T10878] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 666.788935][T12464] SELinux: policydb magic number 0x50 does not match expected magic number 0xf97cff8c [ 666.802230][T12464] SELinux: failed to load policy [ 666.808979][T10878] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 666.822747][T10878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.831236][T10878] usb 5-1: Product: syz [ 666.835406][T10878] usb 5-1: Manufacturer: syz [ 666.839995][T10878] usb 5-1: SerialNumber: syz [ 666.852027][T10878] usb 5-1: config 0 descriptor?? [ 666.995969][T12468] fuse: Unknown parameter '00000000000000000000' [ 667.190827][ T5908] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 667.490877][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 667.590189][ T5908] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 667.615403][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 667.638930][ T5908] usb 3-1: Product: syz [ 667.653958][ T5908] usb 3-1: Manufacturer: syz [ 667.670182][ T5908] usb 3-1: SerialNumber: syz [ 667.737308][ T5908] usb 3-1: config 0 descriptor?? [ 668.545212][ T30] audit: type=1400 audit(1759015449.037:520): avc: denied { write } for pid=12480 comm="syz.1.1602" path="socket:[97275]" dev="sockfs" ino=97275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 668.681659][T10878] usb 5-1: USB disconnect, device number 20 [ 668.887439][ T30] audit: type=1400 audit(1759015449.117:521): avc: denied { accept } for pid=12480 comm="syz.1.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 668.929476][ T30] audit: type=1400 audit(1759015449.157:522): avc: denied { ioctl } for pid=12463 comm="syz.2.1597" path="socket:[97363]" dev="sockfs" ino=97363 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 668.957988][T12465] lo speed is unknown, defaulting to 1000 [ 669.312226][ T5908] usb 3-1: USB disconnect, device number 20 [ 669.400471][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.419463][ T30] audit: type=1326 audit(1759015449.907:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.1.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5198eec9 code=0x7fc00000 [ 669.442877][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.921425][T10878] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 670.112582][T10878] usb 2-1: Using ep0 maxpacket: 32 [ 670.129853][T10878] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 670.142483][T10878] usb 2-1: config 0 has no interface number 0 [ 670.163769][ T5901] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 670.172453][T10878] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 670.207345][T12504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.268790][T10878] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 670.280597][T10878] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 670.291974][T10878] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 670.302178][T10878] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 670.331699][T10878] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 670.403483][T10878] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 670.464569][ T5901] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 670.475930][T10878] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 670.498251][T10878] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.502256][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.538042][T10878] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 670.551373][T10878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.571228][ T5901] usb 1-1: Product: syz [ 670.574581][T12507] sp0: Synchronizing with TNC [ 670.575414][ T5901] usb 1-1: Manufacturer: syz [ 670.588277][T10878] usb 2-1: Product: syz [ 670.603122][T10878] usb 2-1: Manufacturer: syz [ 670.617895][T10878] usb 2-1: SerialNumber: syz [ 670.633046][ T5901] usb 1-1: SerialNumber: syz [ 670.642823][T10878] usb 2-1: config 0 descriptor?? [ 670.681451][T12495] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 670.694472][ T5901] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 670.696814][T10878] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 670.736778][T10878] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 670.773608][ T30] audit: type=1400 audit(1759015451.267:524): avc: denied { firmware_load } for pid=5923 comm="kworker/0:6" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 670.789871][ T5923] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 670.799686][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.080218][T12503] [U] è [ 671.084840][T10878] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 671.240616][T10878] usb 4-1: device descriptor read/64, error -71 [ 671.501330][T10878] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 671.722797][T10878] usb 4-1: device descriptor read/64, error -71 [ 671.768069][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'. [ 671.805273][T12524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1612'. [ 671.865727][ T5859] usb 1-1: USB disconnect, device number 24 [ 671.883089][T10878] usb usb4-port1: attempt power cycle [ 672.067799][ T5923] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 672.184711][ T5923] ath9k_htc: Failed to initialize the device [ 672.204408][ T5859] usb 1-1: ath9k_htc: USB layer deinitialized [ 672.255672][ T30] audit: type=1326 audit(1759015452.707:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.1.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb5192af79 code=0x7fc00000 [ 672.258807][ T5979] usb 2-1: USB disconnect, device number 36 [ 672.278994][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.350742][T10878] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 672.410706][T12534] netlink: 'syz.0.1613': attribute type 12 has an invalid length. [ 672.551884][T12533] syz_tun: left allmulticast mode [ 672.557090][T12533] dvmrp8: left allmulticast mode [ 672.596950][T10878] usb 4-1: device descriptor read/8, error -71 [ 672.791624][ T5859] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 672.850695][T10878] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 672.901339][T10878] usb 4-1: device descriptor read/8, error -71 [ 673.010924][T10878] usb usb4-port1: unable to enumerate USB device [ 673.334628][ T5859] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 673.355602][ T5859] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 673.386067][ T5859] usb 3-1: config 8 has no interface number 0 [ 673.475383][ T5859] usb 3-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 673.512895][ T5859] usb 3-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8B has invalid maxpacket 255 [ 673.659949][ T5859] usb 3-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.934889][ T5859] usb 3-1: config 8 interface 177 has no altsetting 0 [ 674.456976][ T5859] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 674.716113][T12522] syz.2.1611 (12522) used greatest stack depth: 17768 bytes left [ 674.755437][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.936455][ T5859] usb 3-1: can't set config #8, error -71 [ 674.945315][ T5859] usb 3-1: USB disconnect, device number 21 [ 675.573423][ T30] audit: type=1326 audit(1759015456.037:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f358eec9 code=0x7fc00000 [ 676.586545][ T5923] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 676.771783][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 676.782069][ T5923] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 676.792076][ T5923] usb 1-1: config 0 has no interface number 0 [ 676.805261][ T5923] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 676.826139][ T5923] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 676.964518][ T5923] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 676.976382][ T5923] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 676.987252][ T5923] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 677.042284][ T5923] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 677.484478][ T5923] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 677.498712][ T5923] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 677.509277][ T5923] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.575698][ T5923] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 677.638341][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.667729][ T5923] usb 1-1: Product: syz [ 677.719577][ T5923] usb 1-1: Manufacturer: syz [ 677.743124][ T5923] usb 1-1: SerialNumber: syz [ 677.768432][ T5923] usb 1-1: config 0 descriptor?? [ 678.075115][T12578] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 678.084283][ T5923] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 678.100573][ T5923] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 678.119015][T12603] siw: device registration error -23 [ 678.717035][T12611] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 678.747736][T12611] bridge_slave_0: left allmulticast mode [ 678.753589][T12611] bridge_slave_0: left promiscuous mode [ 679.232050][T12612] netlink: 'syz.1.1631': attribute type 10 has an invalid length. [ 679.251391][T12611] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.317060][ T43] usb 1-1: USB disconnect, device number 25 [ 679.350740][ T30] audit: type=1326 audit(1759015459.787:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91f352af79 code=0x7fc00000 [ 679.479942][T12611] bridge_slave_1: left allmulticast mode [ 679.485756][T12611] bridge_slave_1: left promiscuous mode [ 679.924477][T12611] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.054538][T12611] bond0: (slave bond_slave_0): Releasing backup interface [ 680.289453][T12611] bond0: (slave bond_slave_1): Releasing backup interface [ 680.368012][T12611] team0: Port device team_slave_0 removed [ 680.558001][T12611] team0: Port device team_slave_1 removed [ 680.592627][T12611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.265925][T12611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.301586][T12612] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 681.452233][T12612] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 681.672847][ T30] audit: type=1400 audit(1759015462.157:528): avc: denied { connect } for pid=12635 comm="syz.2.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 681.718542][T12638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.771822][ T30] audit: type=1400 audit(1759015462.157:529): avc: denied { write } for pid=12635 comm="syz.2.1640" path="socket:[101089]" dev="sockfs" ino=101089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 682.253468][T12648] netlink: 'syz.3.1643': attribute type 12 has an invalid length. [ 683.062873][T10878] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 683.221931][T12660] netlink: 'syz.0.1647': attribute type 1 has an invalid length. [ 683.230506][T12660] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1647'. [ 683.400552][T10878] usb 5-1: Using ep0 maxpacket: 16 [ 683.436482][T10878] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 683.483260][T10878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.546887][T10878] usb 5-1: Product: syz [ 683.580524][ T30] audit: type=1400 audit(1759015464.057:530): avc: denied { write } for pid=12655 comm="syz.2.1646" path="socket:[101270]" dev="sockfs" ino=101270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 683.618887][T10878] usb 5-1: Manufacturer: syz [ 683.723626][T10878] usb 5-1: SerialNumber: syz [ 683.760772][T10878] usb 5-1: config 0 descriptor?? [ 683.775794][T10878] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 683.823707][T10878] usb 5-1: Detected FT-X [ 684.023475][T10878] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 684.030368][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1646'. [ 684.430768][ T5979] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 684.484733][T10878] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5 [ 684.493567][T10878] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 684.529227][T10878] usb 5-1: USB disconnect, device number 21 [ 684.560061][T10878] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 684.595346][T10878] ftdi_sio 5-1:0.0: device disconnected [ 684.690561][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 684.715704][ T5979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 684.790955][ T5979] usb 4-1: no configurations [ 684.795584][ T5979] usb 4-1: can't read configurations, error -22 [ 684.967360][ T5979] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 684.975505][T12672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1646'. [ 684.986558][T12679] Invalid ELF section header size [ 684.995164][ T30] audit: type=1400 audit(1759015465.477:531): avc: denied { module_load } for pid=12678 comm="syz.0.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 685.061588][ T5923] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 685.150800][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 685.164656][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 685.204145][ T5979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 685.262488][ T5979] usb 4-1: no configurations [ 685.267698][ T5979] usb 4-1: can't read configurations, error -22 [ 685.274580][T12683] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1655'. [ 685.336963][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 685.380486][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 685.380995][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.392392][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.399798][ T5979] usb usb4-port1: attempt power cycle [ 685.400919][ T1298] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 685.641667][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 685.916229][ T5923] usb 3-1: config 7 has an invalid interface number: 58 but max is 0 [ 685.990977][ T30] audit: type=1400 audit(1759015466.467:532): avc: denied { create } for pid=12688 comm="syz.1.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 686.160548][ T5979] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 686.169185][ T5923] usb 3-1: config 7 has no interface number 0 [ 686.180528][ T5923] usb 3-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 111, changing to 7 [ 686.192075][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 686.197693][ T5923] usb 3-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid maxpacket 25702, setting to 1024 [ 686.224482][ T5979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 686.340297][ T5923] usb 3-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.353468][ T5979] usb 4-1: no configurations [ 686.358071][ T5979] usb 4-1: can't read configurations, error -22 [ 686.380996][ T5854] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 686.390788][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 686.390804][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 686.390811][ T5854] Workqueue: hci2 hci_rx_work [ 686.390829][ T5854] Call Trace: [ 686.390833][ T5854] [ 686.390837][ T5854] dump_stack_lvl+0x16c/0x1f0 [ 686.390853][ T5854] sysfs_warn_dup+0x7f/0xa0 [ 686.390868][ T5854] sysfs_create_dir_ns+0x24b/0x2b0 [ 686.390881][ T5854] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 686.390894][ T5854] ? find_held_lock+0x2b/0x80 [ 686.390911][ T5854] ? do_raw_spin_unlock+0x172/0x230 [ 686.390923][ T5854] kobject_add_internal+0x2c4/0x9b0 [ 686.390941][ T5854] kobject_add+0x16e/0x240 [ 686.390956][ T5854] ? __pfx_kobject_add+0x10/0x10 [ 686.390973][ T5854] ? do_raw_spin_unlock+0x172/0x230 [ 686.390984][ T5854] ? kobject_put+0xab/0x5a0 [ 686.391002][ T5854] device_add+0x288/0x1aa0 [ 686.391018][ T5854] ? __pfx_dev_set_name+0x10/0x10 [ 686.391028][ T5854] ? __pfx_device_add+0x10/0x10 [ 686.391042][ T5854] ? mgmt_send_event_skb+0x2fb/0x460 [ 686.391057][ T5854] hci_conn_add_sysfs+0x17e/0x230 [ 686.391070][ T5854] le_conn_complete_evt+0x1260/0x2150 [ 686.391084][ T5854] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 686.391095][ T5854] ? hci_event_packet+0x459/0x11c0 [ 686.391109][ T5854] hci_le_conn_complete_evt+0x23c/0x370 [ 686.391123][ T5854] hci_le_meta_evt+0x354/0x5e0 [ 686.391134][ T5854] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 686.391146][ T5854] hci_event_packet+0x685/0x11c0 [ 686.391157][ T5854] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 686.391169][ T5854] ? __pfx_hci_event_packet+0x10/0x10 [ 686.391182][ T5854] ? kcov_remote_start+0x3c9/0x6d0 [ 686.391193][ T5854] ? lockdep_hardirqs_on+0x7c/0x110 [ 686.391209][ T5854] hci_rx_work+0x2c5/0x16b0 [ 686.391221][ T5854] ? rcu_is_watching+0x12/0xc0 [ 686.391236][ T5854] process_one_work+0x9cc/0x1b70 [ 686.391253][ T5854] ? __pfx_process_one_work+0x10/0x10 [ 686.391268][ T5854] ? assign_work+0x1a0/0x250 [ 686.391280][ T5854] worker_thread+0x6c8/0xf10 [ 686.391297][ T5854] ? __pfx_worker_thread+0x10/0x10 [ 686.391308][ T5854] kthread+0x3c2/0x780 [ 686.391319][ T5854] ? __pfx_kthread+0x10/0x10 [ 686.391330][ T5854] ? rcu_is_watching+0x12/0xc0 [ 686.391342][ T5854] ? __pfx_kthread+0x10/0x10 [ 686.391352][ T5854] ret_from_fork+0x56a/0x730 [ 686.391362][ T5854] ? __pfx_kthread+0x10/0x10 [ 686.391372][ T5854] ret_from_fork_asm+0x1a/0x30 [ 686.391391][ T5854] [ 686.391403][ T5854] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 686.645631][ T5854] Bluetooth: hci2: failed to register connection device [ 687.213676][ T5923] usb 3-1: config 7 interface 58 has no altsetting 0 [ 687.338314][ T5923] usb 3-1: string descriptor 0 read error: -71 [ 687.348246][ T5979] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 687.356780][ T5923] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 687.401345][T12703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1660'. [ 687.429788][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.492303][ T5923] usb 3-1: can't set config #7, error -71 [ 687.510649][ T5923] usb 3-1: USB disconnect, device number 22 [ 687.630552][ T5979] usb 4-1: device not accepting address 29, error -71 [ 687.776771][T12711] siw: device registration error -23 [ 688.189015][T12713] siw: device registration error -23 [ 688.577326][ T5979] usb usb4-port1: unable to enumerate USB device [ 688.690623][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 688.893903][ T30] audit: type=1400 audit(1759015469.387:533): avc: denied { read } for pid=12709 comm="syz.3.1663" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 689.269768][T12730] FAULT_INJECTION: forcing a failure. [ 689.269768][T12730] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 689.283382][T12730] CPU: 0 UID: 0 PID: 12730 Comm: syz.4.1666 Not tainted syzkaller #0 PREEMPT(full) [ 689.283406][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 689.283416][T12730] Call Trace: [ 689.283424][T12730] [ 689.283431][T12730] dump_stack_lvl+0x16c/0x1f0 [ 689.283459][T12730] should_fail_ex+0x512/0x640 [ 689.283485][T12730] should_fail_alloc_page+0xe7/0x130 [ 689.283505][T12730] prepare_alloc_pages+0x3c2/0x610 [ 689.283529][T12730] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 689.283548][T12730] ? find_lock_lowest_rq+0x4d/0x760 [ 689.283570][T12730] ? lock_acquire+0x179/0x350 [ 689.283581][T12730] ? find_held_lock+0x2b/0x80 [ 689.283600][T12730] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 689.283613][T12730] ? finish_task_switch.isra.0+0x221/0xc10 [ 689.283629][T12730] ? lockdep_hardirqs_on+0x7c/0x110 [ 689.283646][T12730] ? finish_task_switch.isra.0+0x221/0xc10 [ 689.283667][T12730] ? __lock_acquire+0x62e/0x1ce0 [ 689.283688][T12730] ? __lock_acquire+0xb97/0x1ce0 [ 689.283707][T12730] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 689.283724][T12730] ? policy_nodemask+0xea/0x4e0 [ 689.283742][T12730] alloc_pages_mpol+0x1fb/0x550 [ 689.283758][T12730] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 689.283772][T12730] ? page_table_check_set+0x627/0x750 [ 689.283792][T12730] alloc_pages_noprof+0x131/0x390 [ 689.283808][T12730] pte_alloc_one+0x1c/0x3a0 [ 689.283824][T12730] __pte_alloc+0x6d/0x3c0 [ 689.283841][T12730] ? __pfx___pte_alloc+0x10/0x10 [ 689.283855][T12730] ? __lock_acquire+0x62e/0x1ce0 [ 689.283879][T12730] do_pte_missing+0x285a/0x3ba0 [ 689.283900][T12730] ? mtree_range_walk+0x718/0xc00 [ 689.283916][T12730] ? find_held_lock+0x2b/0x80 [ 689.283933][T12730] __handle_mm_fault+0x152a/0x2a50 [ 689.283958][T12730] ? __pfx___handle_mm_fault+0x10/0x10 [ 689.283996][T12730] handle_mm_fault+0x589/0xd10 [ 689.284020][T12730] __get_user_pages+0x551/0x34a0 [ 689.284044][T12730] ? down_read_killable+0x220/0x4b0 [ 689.284063][T12730] ? find_lock_lowest_rq+0x4d/0x760 [ 689.284076][T12730] ? __pfx___get_user_pages+0x10/0x10 [ 689.284094][T12730] ? __gup_longterm_locked+0x1171/0x17e0 [ 689.284115][T12730] __gup_longterm_locked+0xa92/0x17e0 [ 689.284139][T12730] ? __pfx___gup_longterm_locked+0x10/0x10 [ 689.284160][T12730] ? find_held_lock+0x2b/0x80 [ 689.284175][T12730] ? sanity_check_pinned_pages+0x23/0x11d0 [ 689.284196][T12730] gup_fast_fallback+0xf78/0x23f0 [ 689.284228][T12730] ? __pfx_gup_fast_fallback+0x10/0x10 [ 689.284245][T12730] ? lock_acquire+0x179/0x350 [ 689.284261][T12730] ? mark_held_locks+0x49/0x80 [ 689.284283][T12730] pin_user_pages_fast+0xa7/0xf0 [ 689.284300][T12730] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 689.284324][T12730] iov_iter_extract_pages+0x3a2/0x1ed0 [ 689.284345][T12730] ? __pfx_nh_generic+0x10/0x10 [ 689.284366][T12730] ? __pfx_nhpoly1305_units+0x10/0x10 [ 689.284385][T12730] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 689.284403][T12730] ? __pfx___schedule+0x10/0x10 [ 689.284417][T12730] ? irqentry_exit+0x3b/0x90 [ 689.284436][T12730] ? crypto_nhpoly1305_update_helper+0x15e/0x420 [ 689.284457][T12730] ? __pfx_nh_generic+0x10/0x10 [ 689.284479][T12730] extract_iter_to_sg+0xf6e/0x20c0 [ 689.284497][T12730] ? crypto_hash_walk_done+0x63/0x400 [ 689.284515][T12730] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 689.284529][T12730] ? gup_put_folio+0x8d/0x260 [ 689.284546][T12730] ? __pfx_unpin_user_page+0x10/0x10 [ 689.284593][T12730] ? af_alg_free_sg+0x170/0x260 [ 689.284616][T12730] hash_sendmsg+0x43e/0xfb0 [ 689.284641][T12730] ____sys_sendmsg+0xa98/0xc70 [ 689.284663][T12730] ? copy_msghdr_from_user+0x10a/0x160 [ 689.284679][T12730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.284703][T12730] ? ___sys_sendmsg+0x94/0x1d0 [ 689.284721][T12730] ___sys_sendmsg+0x134/0x1d0 [ 689.284738][T12730] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.284779][T12730] __sys_sendmsg+0x16d/0x220 [ 689.284795][T12730] ? __pfx___sys_sendmsg+0x10/0x10 [ 689.284825][T12730] do_syscall_64+0xcd/0x4e0 [ 689.284844][T12730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.284858][T12730] RIP: 0033:0x7fca3738eec9 [ 689.284870][T12730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.284883][T12730] RSP: 002b:00007fca381b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.284897][T12730] RAX: ffffffffffffffda RBX: 00007fca375e6180 RCX: 00007fca3738eec9 [ 689.284905][T12730] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 689.284913][T12730] RBP: 00007fca381b7090 R08: 0000000000000000 R09: 0000000000000000 [ 689.284921][T12730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.284928][T12730] R13: 00007fca375e6218 R14: 00007fca375e6180 R15: 00007ffcf61525c8 [ 689.284947][T12730] [ 689.856692][T12732] FAULT_INJECTION: forcing a failure. [ 689.856692][T12732] name failslab, interval 1, probability 0, space 0, times 0 [ 690.115523][T12732] CPU: 0 UID: 0 PID: 12732 Comm: syz.1.1668 Not tainted syzkaller #0 PREEMPT(full) [ 690.115541][T12732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 690.115548][T12732] Call Trace: [ 690.115552][T12732] [ 690.115556][T12732] dump_stack_lvl+0x16c/0x1f0 [ 690.115574][T12732] should_fail_ex+0x512/0x640 [ 690.115588][T12732] ? fs_reclaim_acquire+0xae/0x150 [ 690.115604][T12732] ? tomoyo_encode2+0x100/0x3e0 [ 690.115620][T12732] should_failslab+0xc2/0x120 [ 690.115632][T12732] __kmalloc_noprof+0xd2/0x510 [ 690.115643][T12732] ? d_absolute_path+0x136/0x1a0 [ 690.115661][T12732] tomoyo_encode2+0x100/0x3e0 [ 690.115678][T12732] tomoyo_encode+0x29/0x50 [ 690.115692][T12732] tomoyo_realpath_from_path+0x18f/0x6e0 [ 690.115712][T12732] tomoyo_path_number_perm+0x245/0x580 [ 690.115724][T12732] ? tomoyo_path_number_perm+0x237/0x580 [ 690.115739][T12732] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 690.115753][T12732] ? find_held_lock+0x2b/0x80 [ 690.115777][T12732] ? find_held_lock+0x2b/0x80 [ 690.115789][T12732] ? hook_file_ioctl_common+0x145/0x410 [ 690.115803][T12732] ? __fget_files+0x20e/0x3c0 [ 690.115817][T12732] security_file_ioctl+0x9b/0x240 [ 690.115834][T12732] __x64_sys_ioctl+0xb7/0x210 [ 690.115850][T12732] do_syscall_64+0xcd/0x4e0 [ 690.115871][T12732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.115882][T12732] RIP: 0033:0x7fcb5198eec9 [ 690.115891][T12732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.115901][T12732] RSP: 002b:00007fcb528d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.115911][T12732] RAX: ffffffffffffffda RBX: 00007fcb51be5fa0 RCX: 00007fcb5198eec9 [ 690.115917][T12732] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 690.115923][T12732] RBP: 00007fcb528d4090 R08: 0000000000000000 R09: 0000000000000000 [ 690.115929][T12732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.115935][T12732] R13: 00007fcb51be6038 R14: 00007fcb51be5fa0 R15: 00007ffc3c7b2118 [ 690.115948][T12732] [ 690.815547][T12732] ERROR: Out of memory at tomoyo_realpath_from_path. [ 691.467444][T12754] tmpfs: Bad value for 'mpol' [ 692.036034][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 692.316494][ T5850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 692.326452][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 692.326478][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 692.326490][ T5850] Workqueue: hci4 hci_rx_work [ 692.326516][ T5850] Call Trace: [ 692.326522][ T5850] [ 692.326529][ T5850] dump_stack_lvl+0x16c/0x1f0 [ 692.326554][ T5850] sysfs_warn_dup+0x7f/0xa0 [ 692.326579][ T5850] sysfs_create_dir_ns+0x24b/0x2b0 [ 692.326599][ T5850] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 692.326617][ T5850] ? find_held_lock+0x2b/0x80 [ 692.326643][ T5850] ? do_raw_spin_unlock+0x172/0x230 [ 692.326664][ T5850] kobject_add_internal+0x2c4/0x9b0 [ 692.326695][ T5850] kobject_add+0x16e/0x240 [ 692.326717][ T5850] ? __pfx_kobject_add+0x10/0x10 [ 692.326742][ T5850] ? do_raw_spin_unlock+0x172/0x230 [ 692.326761][ T5850] ? kobject_put+0xab/0x5a0 [ 692.326790][ T5850] device_add+0x288/0x1aa0 [ 692.326825][ T5850] ? __pfx_dev_set_name+0x10/0x10 [ 692.326842][ T5850] ? __pfx_device_add+0x10/0x10 [ 692.326867][ T5850] ? mgmt_send_event_skb+0x2fb/0x460 [ 692.326893][ T5850] hci_conn_add_sysfs+0x17e/0x230 [ 692.326917][ T5850] le_conn_complete_evt+0x1260/0x2150 [ 692.326943][ T5850] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 692.326962][ T5850] ? hci_event_packet+0x459/0x11c0 [ 692.326988][ T5850] hci_le_conn_complete_evt+0x23c/0x370 [ 692.327015][ T5850] hci_le_meta_evt+0x354/0x5e0 [ 692.327036][ T5850] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 692.327056][ T5850] hci_event_packet+0x685/0x11c0 [ 692.327076][ T5850] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 692.327098][ T5850] ? __pfx_hci_event_packet+0x10/0x10 [ 692.327119][ T5850] ? kcov_remote_start+0x3c9/0x6d0 [ 692.327139][ T5850] ? lockdep_hardirqs_on+0x7c/0x110 [ 692.327167][ T5850] hci_rx_work+0x2c5/0x16b0 [ 692.327190][ T5850] ? rcu_is_watching+0x12/0xc0 [ 692.327215][ T5850] process_one_work+0x9cc/0x1b70 [ 692.327246][ T5850] ? __pfx_process_one_work+0x10/0x10 [ 692.327273][ T5850] ? assign_work+0x1a0/0x250 [ 692.327293][ T5850] worker_thread+0x6c8/0xf10 [ 692.327325][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 692.327344][ T5850] kthread+0x3c2/0x780 [ 692.327363][ T5850] ? __pfx_kthread+0x10/0x10 [ 692.327382][ T5850] ? rcu_is_watching+0x12/0xc0 [ 692.327401][ T5850] ? __pfx_kthread+0x10/0x10 [ 692.327420][ T5850] ret_from_fork+0x56a/0x730 [ 692.327437][ T5850] ? __pfx_kthread+0x10/0x10 [ 692.327455][ T5850] ret_from_fork_asm+0x1a/0x30 [ 692.327497][ T5850] [ 692.327547][ T5850] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 692.580614][ T5850] Bluetooth: hci4: failed to register connection device [ 693.317775][T12772] o2cb: This node has not been configured. [ 693.323728][T12772] o2cb: Cluster check failed. Fix errors before retrying. [ 693.331297][T12772] (syz.0.1679,12772,0):user_dlm_register:674 ERROR: status = -22 [ 693.339162][T12772] (syz.0.1679,12772,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 693.810524][ T5901] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 694.070984][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 694.336791][ T5901] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 694.345150][ T5901] usb 1-1: config 0 has no interface number 0 [ 694.400816][ T5901] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 694.455530][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.629277][T12765] Bluetooth: hci4: command 0x0c1a tx timeout [ 694.811583][ T5901] usb 1-1: config 0 descriptor?? [ 694.847241][ T5901] usb 1-1: selecting invalid altsetting 3 [ 694.863910][ T5901] comedi comedi5: could not set alternate setting 3 in high speed [ 694.890570][ T5901] usbdux 1-1:0.207: driver 'usbdux' failed to auto-configure device. [ 694.909608][ T5901] usbdux 1-1:0.207: probe with driver usbdux failed with error -22 [ 695.678989][ T5901] usb 1-1: USB disconnect, device number 26 [ 698.610903][T12819] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1693'. [ 699.584379][T10878] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 699.674068][T12837] tmpfs: Bad value for 'mpol' [ 699.762130][T10878] usb 1-1: Using ep0 maxpacket: 32 [ 699.924687][T10878] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 699.939227][T10878] usb 1-1: config 0 has no interface number 0 [ 699.952789][T10878] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 700.295219][T10878] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 700.320731][T10878] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 700.373448][T10878] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 700.438774][T10878] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 700.704925][T10878] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 700.870748][ T30] audit: type=1326 audit(1759015481.287:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.0.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f358eec9 code=0x7fc00000 [ 700.894130][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.974600][T10878] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 701.655168][T10878] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 701.964790][T10878] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.045831][T10878] usb 1-1: string descriptor 0 read error: -71 [ 702.126840][T10878] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 702.252770][T10878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.295385][T10878] usb 1-1: config 0 descriptor?? [ 702.311192][T10878] usb 1-1: can't set config #0, error -71 [ 702.426890][T10878] usb 1-1: USB disconnect, device number 27 [ 703.077273][T12868] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1707'. [ 704.530728][ T30] audit: type=1326 audit(1759015484.157:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5198eec9 code=0x7fc00000 [ 704.583459][T12885] lo speed is unknown, defaulting to 1000 [ 706.345175][ T5901] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 706.761611][ T30] audit: type=1326 audit(1759015486.977:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12873 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb5192af79 code=0x7fc00000 [ 707.099332][T12912] siw: device registration error -23 [ 709.445355][ T30] audit: type=1400 audit(1759015489.937:537): avc: denied { bind } for pid=12926 comm="syz.0.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 709.920893][T12942] lo speed is unknown, defaulting to 1000 [ 710.312929][T12945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25970 sclass=netlink_route_socket pid=12945 comm=syz.3.1724 [ 711.520912][ T30] audit: type=1326 audit(1759015492.007:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae018eec9 code=0x7fc00000 [ 711.544282][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.040650][ T5901] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 712.534785][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 712.592744][ T5901] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 712.988864][ T5901] usb 3-1: config 0 has no interface number 0 [ 713.017210][ T5901] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 713.123042][ T5901] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 713.193504][ T5901] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 713.208769][ T5901] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 713.271628][ T5901] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 713.310603][ T5901] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 713.329757][ T5901] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 713.343102][ T5901] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 713.372641][ T5901] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.536087][T12978] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1734'. [ 713.817332][T12982] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1733'. [ 714.051674][ T5901] usb 3-1: string descriptor 0 read error: -71 [ 714.134290][ T30] audit: type=1326 audit(1759015494.477:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ae012af79 code=0x7fc00000 [ 714.163455][ T5901] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 714.333872][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.529549][ T5901] usb 3-1: config 0 descriptor?? [ 714.606987][ T5901] usb 3-1: can't set config #0, error -71 [ 714.976084][ T5901] usb 3-1: USB disconnect, device number 23 [ 715.940826][T13002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25970 sclass=netlink_route_socket pid=13002 comm=syz.1.1739 [ 717.417173][ T30] audit: type=1400 audit(1759015497.907:540): avc: denied { mounton } for pid=13014 comm="syz.3.1743" path=2F70726F632F313237332F6E65742F70666B6579202864656C6574656429 dev="proc" ino=4026533298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 720.205717][ T30] audit: type=1400 audit(1759015500.697:541): avc: denied { write } for pid=13050 comm="syz.2.1751" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 720.229319][T13052] random: crng reseeded on system resumption [ 720.251576][ T43] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 720.284605][ T30] audit: type=1400 audit(1759015500.727:542): avc: denied { ioctl } for pid=13050 comm="syz.2.1751" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 720.317525][T13064] netlink: 9896 bytes leftover after parsing attributes in process `syz.4.1753'. [ 720.460639][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 720.494650][ T43] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 720.781856][ T43] usb 2-1: config 0 has no interface number 0 [ 720.788407][ T43] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 720.801079][ T43] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 720.937003][ T43] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 721.028117][ T43] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 721.071815][ T43] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 721.116739][ T43] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 721.163914][ T43] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 721.206120][ T43] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 721.240631][ T43] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 721.287391][ T43] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 721.348491][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.372397][T13079] IPVS: sed: FWM 3 0x00000003 - no destination available [ 721.386528][T10878] IPVS: starting estimator thread 0... [ 721.388546][T13079] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1757'. [ 721.442239][ T43] usb 2-1: Product: syz [ 721.446493][ T43] usb 2-1: Manufacturer: syz [ 721.484043][ T43] usb 2-1: SerialNumber: syz [ 721.490583][T13080] IPVS: using max 39 ests per chain, 93600 per kthread [ 721.519747][ T43] usb 2-1: config 0 descriptor?? [ 721.557267][T13053] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 721.565975][ T43] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 721.614239][ T43] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 721.639902][ T30] audit: type=1326 audit(1759015502.127:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13042 comm="syz.1.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb5198eec9 code=0x7fc00000 [ 721.775180][ T43] usb 2-1: USB disconnect, device number 38 [ 722.904792][T13091] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1761'. [ 723.924141][T13101] lo speed is unknown, defaulting to 1000 [ 724.720288][T13111] netlink: 'syz.2.1766': attribute type 3 has an invalid length. [ 724.790638][T13111] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1766'. [ 725.660530][ T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 725.910520][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 725.931345][ T43] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 725.939558][ T43] usb 4-1: config 0 has no interface number 0 [ 725.980576][ T30] audit: type=1400 audit(1759015506.467:544): avc: denied { read } for pid=13120 comm="syz.0.1767" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 726.045489][T13124] random: crng reseeded on system resumption [ 726.197348][ T30] audit: type=1400 audit(1759015506.467:545): avc: denied { open } for pid=13120 comm="syz.0.1767" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 726.200508][ T43] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 726.220430][ C1] vkms_vblank_simulate: vblank timer overrun [ 726.254164][T13126] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.273750][ T30] audit: type=1400 audit(1759015506.537:546): avc: denied { append } for pid=13109 comm="syz.2.1766" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 726.636154][ T30] audit: type=1400 audit(1759015506.757:547): avc: denied { read } for pid=13120 comm="syz.0.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 726.688803][ T43] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 726.708841][T13123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.740849][ T43] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 726.940797][ T43] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 727.144131][T13133] lo speed is unknown, defaulting to 1000 [ 727.452747][ T30] audit: type=1326 audit(1759015507.897:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13105 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed338eec9 code=0x7fc00000 [ 727.476127][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.539201][ T43] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 727.597612][ T5957] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 727.718337][ T43] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 727.785244][ T43] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 727.830697][ T5957] usb 5-1: Using ep0 maxpacket: 16 [ 727.835942][ T43] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 727.883814][ T5957] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 728.163128][ T43] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.180810][ T5957] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 728.317236][ T5957] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 728.348062][ T43] usb 4-1: string descriptor 0 read error: -71 [ 728.355388][ T43] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 728.365363][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.375456][ T5957] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 728.762152][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.770304][ T5957] usb 5-1: Product: syz [ 728.774693][ T5957] usb 5-1: Manufacturer: syz [ 728.779337][ T5957] usb 5-1: SerialNumber: syz [ 728.861667][ T43] usb 4-1: config 0 descriptor?? [ 728.868158][ T43] usb 4-1: can't set config #0, error -71 [ 728.932174][ T43] usb 4-1: USB disconnect, device number 30 [ 728.957401][T13150] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 729.376569][ T5957] usb 5-1: unit 4 not found! [ 729.451345][T13148] tmpfs: Bad value for 'mpol' [ 729.631836][ T5957] usb 5-1: USB disconnect, device number 22 [ 729.939324][T10824] udevd[10824]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 732.419695][T13195] netlink: 'syz.3.1787': attribute type 1 has an invalid length. [ 732.427772][T13195] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1787'. [ 732.632057][T13197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1786'. [ 732.641257][T13197] netlink: 'syz.0.1786': attribute type 7 has an invalid length. [ 732.649898][T13197] netlink: 'syz.0.1786': attribute type 8 has an invalid length. [ 732.657770][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'. [ 732.695914][T13197] syz_tun: entered promiscuous mode [ 732.715057][T13197] batadv_slave_1: entered promiscuous mode [ 732.725446][T13197] erspan0: entered promiscuous mode [ 732.782443][T13197] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 732.793477][T13197] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 732.805283][T13197] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 732.970690][ T5908] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 733.182729][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'. [ 733.346241][T13211] FAULT_INJECTION: forcing a failure. [ 733.346241][T13211] name failslab, interval 1, probability 0, space 0, times 0 [ 733.358938][T13211] CPU: 1 UID: 0 PID: 13211 Comm: syz.2.1785 Not tainted syzkaller #0 PREEMPT(full) [ 733.358962][T13211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 733.358972][T13211] Call Trace: [ 733.358978][T13211] [ 733.358985][T13211] dump_stack_lvl+0x16c/0x1f0 [ 733.359015][T13211] should_fail_ex+0x512/0x640 [ 733.359037][T13211] ? __kmalloc_noprof+0xbf/0x510 [ 733.359058][T13211] ? sock_kmalloc+0x111/0x170 [ 733.359082][T13211] should_failslab+0xc2/0x120 [ 733.359103][T13211] __kmalloc_noprof+0xd2/0x510 [ 733.359120][T13211] ? do_raw_spin_lock+0x12c/0x2b0 [ 733.359141][T13211] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 733.359163][T13211] sock_kmalloc+0x111/0x170 [ 733.359190][T13211] af_alg_alloc_areq+0xbc/0x2e0 [ 733.359213][T13211] aead_recvmsg+0x3fd/0x16a0 [ 733.359249][T13211] ? __pfx_aead_recvmsg+0x10/0x10 [ 733.359282][T13211] sock_recvmsg+0x1f9/0x250 [ 733.359309][T13211] ____sys_recvmsg+0x218/0x6b0 [ 733.359339][T13211] ? __pfx_____sys_recvmsg+0x10/0x10 [ 733.359375][T13211] ? __lock_acquire+0x62e/0x1ce0 [ 733.359406][T13211] ___sys_recvmsg+0x114/0x1a0 [ 733.359428][T13211] ? __pfx____sys_recvmsg+0x10/0x10 [ 733.359453][T13211] ? find_held_lock+0x2b/0x80 [ 733.359490][T13211] do_recvmmsg+0x2fe/0x750 [ 733.359515][T13211] ? __pfx_do_recvmmsg+0x10/0x10 [ 733.359542][T13211] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 733.359575][T13211] ? __fget_files+0x20e/0x3c0 [ 733.359602][T13211] __x64_sys_recvmmsg+0x22a/0x280 [ 733.359626][T13211] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 733.359663][T13211] do_syscall_64+0xcd/0x4e0 [ 733.359689][T13211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.359707][T13211] RIP: 0033:0x7f7ae018eec9 [ 733.359722][T13211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.359738][T13211] RSP: 002b:00007f7ae0fb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 733.359755][T13211] RAX: ffffffffffffffda RBX: 00007f7ae03e6180 RCX: 00007f7ae018eec9 [ 733.359767][T13211] RDX: 0000000000000002 RSI: 0000200000003d40 RDI: 0000000000000009 [ 733.359778][T13211] RBP: 00007f7ae0fb3090 R08: 0000000000000000 R09: 0000000000000000 [ 733.359788][T13211] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 733.359798][T13211] R13: 00007f7ae03e6218 R14: 00007f7ae03e6180 R15: 00007ffc5a59fe08 [ 733.359823][T13211] [ 733.592478][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.791721][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 733.802163][ T5908] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 733.810363][ T5908] usb 1-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 733.821139][ T5908] usb 1-1: config 0 has no interface number 0 [ 733.827204][ T5908] usb 1-1: config 0 interface 110 altsetting 2 bulk endpoint 0xB has invalid maxpacket 8 [ 733.837067][ T5908] usb 1-1: config 0 interface 110 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 733.847770][ T5908] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 733.858827][ T5908] usb 1-1: config 0 interface 110 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 733.859247][T13213] tmpfs: Bad value for 'mpol' [ 733.869667][ T5908] usb 1-1: config 0 interface 110 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 14 [ 733.869704][ T5908] usb 1-1: config 0 interface 110 has no altsetting 0 [ 733.997189][ T5908] usb 1-1: New USB device found, idVendor=17a8, idProduct=0102, bcdDevice=75.54 [ 734.006345][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.058968][T13205] SELinux: failed to load policy [ 734.068781][ T5908] usb 1-1: Product: syz [ 734.076242][ T5908] usb 1-1: Manufacturer: syz [ 734.089654][ T5908] usb 1-1: SerialNumber: syz [ 734.106978][ T5908] usb 1-1: config 0 descriptor?? [ 734.140385][T13198] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 734.154060][ T5908] cp210x 1-1:0.110: cp210x converter detected [ 734.250897][ T30] audit: type=1400 audit(1759015514.747:549): avc: denied { bind } for pid=13218 comm="syz.1.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 734.270298][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.278237][T13219] SELinux: policydb magic number 0x50 does not match expected magic number 0xf97cff8c [ 734.324154][T13219] SELinux: failed to load policy [ 734.339538][ T30] audit: type=1400 audit(1759015514.767:550): avc: denied { setopt } for pid=13218 comm="syz.1.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 734.985001][T13235] FAULT_INJECTION: forcing a failure. [ 734.985001][T13235] name failslab, interval 1, probability 0, space 0, times 0 [ 734.997835][T13235] CPU: 1 UID: 0 PID: 13235 Comm: syz.4.1797 Not tainted syzkaller #0 PREEMPT(full) [ 734.997860][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 734.997870][T13235] Call Trace: [ 734.997876][T13235] [ 734.997883][T13235] dump_stack_lvl+0x16c/0x1f0 [ 734.997910][T13235] should_fail_ex+0x512/0x640 [ 734.997934][T13235] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 734.997954][T13235] should_failslab+0xc2/0x120 [ 734.997974][T13235] __kmalloc_cache_node_noprof+0x6d/0x420 [ 734.997990][T13235] ? trace_sched_exit_tp+0xd1/0x120 [ 734.998010][T13235] ? __get_vm_area_node+0x101/0x330 [ 734.998033][T13235] ? __lock_acquire+0x62e/0x1ce0 [ 734.998061][T13235] __get_vm_area_node+0x101/0x330 [ 734.998088][T13235] __vmalloc_node_range_noprof+0x271/0x14b0 [ 734.998113][T13235] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 734.998133][T13235] ? __pfx___schedule+0x10/0x10 [ 734.998155][T13235] ? avc_has_perm_noaudit+0x117/0x3b0 [ 734.998174][T13235] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 734.998198][T13235] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 734.998222][T13235] ? irqentry_exit+0x3b/0x90 [ 734.998242][T13235] ? lockdep_hardirqs_on+0x7c/0x110 [ 734.998270][T13235] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 734.998287][T13235] __vmalloc_node_noprof+0xad/0xf0 [ 734.998311][T13235] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 734.998331][T13235] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 734.998347][T13235] ? security_capable+0x7e/0x260 [ 734.998369][T13235] bpf_prog_alloc+0x3b/0x230 [ 734.998384][T13235] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 734.998406][T13235] bpf_prog_load+0x160e/0x2490 [ 734.998433][T13235] ? __pfx_bpf_prog_load+0x10/0x10 [ 734.998458][T13235] ? avc_has_perm+0x144/0x1f0 [ 734.998488][T13235] ? selinux_bpf+0xde/0x130 [ 734.998505][T13235] ? bpf_lsm_bpf+0x9/0x10 [ 734.998531][T13235] __sys_bpf+0x4a3f/0x4de0 [ 734.998556][T13235] ? __pfx___sys_bpf+0x10/0x10 [ 734.998579][T13235] ? ksys_write+0x190/0x250 [ 734.998600][T13235] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 734.998636][T13235] ? fput+0x9b/0xd0 [ 734.998658][T13235] ? ksys_write+0x1ac/0x250 [ 734.998680][T13235] ? __pfx_ksys_write+0x10/0x10 [ 734.998701][T13235] __x64_sys_bpf+0x78/0xc0 [ 734.998723][T13235] ? lockdep_hardirqs_on+0x7c/0x110 [ 734.998743][T13235] do_syscall_64+0xcd/0x4e0 [ 734.998768][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.998785][T13235] RIP: 0033:0x7fca3738eec9 [ 734.998798][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.998814][T13235] RSP: 002b:00007fca381b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 734.998831][T13235] RAX: ffffffffffffffda RBX: 00007fca375e6180 RCX: 00007fca3738eec9 [ 734.998842][T13235] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 734.998852][T13235] RBP: 00007fca381b7090 R08: 0000000000000000 R09: 0000000000000000 [ 734.998861][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.998871][T13235] R13: 00007fca375e6218 R14: 00007fca375e6180 R15: 00007ffcf61525c8 [ 734.998894][T13235] [ 734.999154][T13235] syz.4.1797: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 735.253293][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.324973][T13235] ,cpuset= [ 735.324999][ T43] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 735.325183][T13235] /,mems_allowed=0-1 [ 735.340111][T13235] CPU: 0 UID: 0 PID: 13235 Comm: syz.4.1797 Not tainted syzkaller #0 PREEMPT(full) [ 735.340136][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 735.340146][T13235] Call Trace: [ 735.340151][T13235] [ 735.340158][T13235] dump_stack_lvl+0x16c/0x1f0 [ 735.340184][T13235] warn_alloc+0x248/0x3a0 [ 735.340204][T13235] ? __pfx_warn_alloc+0x10/0x10 [ 735.340223][T13235] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 735.340238][T13235] ? trace_sched_exit_tp+0xd1/0x120 [ 735.340261][T13235] ? __kasan_kmalloc+0x8a/0xb0 [ 735.340278][T13235] ? __get_vm_area_node+0x208/0x330 [ 735.340301][T13235] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 735.340325][T13235] ? __pfx___schedule+0x10/0x10 [ 735.340345][T13235] ? avc_has_perm_noaudit+0x117/0x3b0 [ 735.340364][T13235] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 735.340388][T13235] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 735.340407][T13235] ? irqentry_exit+0x3b/0x90 [ 735.340428][T13235] ? lockdep_hardirqs_on+0x7c/0x110 [ 735.340455][T13235] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 735.340470][T13235] __vmalloc_node_noprof+0xad/0xf0 [ 735.340492][T13235] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 735.340510][T13235] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 735.340524][T13235] ? security_capable+0x7e/0x260 [ 735.340544][T13235] bpf_prog_alloc+0x3b/0x230 [ 735.340555][T13235] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 735.340572][T13235] bpf_prog_load+0x160e/0x2490 [ 735.340594][T13235] ? __pfx_bpf_prog_load+0x10/0x10 [ 735.340612][T13235] ? avc_has_perm+0x144/0x1f0 [ 735.340635][T13235] ? selinux_bpf+0xde/0x130 [ 735.340648][T13235] ? bpf_lsm_bpf+0x9/0x10 [ 735.340670][T13235] __sys_bpf+0x4a3f/0x4de0 [ 735.340690][T13235] ? __pfx___sys_bpf+0x10/0x10 [ 735.340708][T13235] ? ksys_write+0x190/0x250 [ 735.340725][T13235] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 735.340753][T13235] ? fput+0x9b/0xd0 [ 735.340770][T13235] ? ksys_write+0x1ac/0x250 [ 735.340782][T13235] ? __pfx_ksys_write+0x10/0x10 [ 735.340800][T13235] __x64_sys_bpf+0x78/0xc0 [ 735.340818][T13235] ? lockdep_hardirqs_on+0x7c/0x110 [ 735.340834][T13235] do_syscall_64+0xcd/0x4e0 [ 735.340852][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.340866][T13235] RIP: 0033:0x7fca3738eec9 [ 735.340878][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.340891][T13235] RSP: 002b:00007fca381b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 735.340904][T13235] RAX: ffffffffffffffda RBX: 00007fca375e6180 RCX: 00007fca3738eec9 [ 735.340912][T13235] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 735.340920][T13235] RBP: 00007fca381b7090 R08: 0000000000000000 R09: 0000000000000000 [ 735.340928][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.340937][T13235] R13: 00007fca375e6218 R14: 00007fca375e6180 R15: 00007ffcf61525c8 [ 735.340956][T13235] [ 735.626701][T13235] Mem-Info: [ 735.629812][T13235] active_anon:13538 inactive_anon:0 isolated_anon:0 [ 735.629812][T13235] active_file:17534 inactive_file:41363 isolated_file:0 [ 735.629812][T13235] unevictable:768 dirty:221 writeback:0 [ 735.629812][T13235] slab_reclaimable:13751 slab_unreclaimable:109725 [ 735.629812][T13235] mapped:36094 shmem:5308 pagetables:1238 [ 735.629812][T13235] sec_pagetables:0 bounce:0 [ 735.629812][T13235] kernel_misc_reclaimable:0 [ 735.629812][T13235] free:1284298 free_pcp:16112 free_cma:0 [ 735.675992][T13235] Node 0 active_anon:54152kB inactive_anon:0kB active_file:70136kB inactive_file:165252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144376kB dirty:884kB writeback:0kB shmem:19696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12592kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 735.708384][T13235] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 735.738304][T13235] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.767338][T13235] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 735.773092][T13235] Node 0 DMA32 free:1233992kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54100kB inactive_anon:0kB active_file:70136kB inactive_file:163924kB unevictable:1536kB writepending:884kB present:3129332kB managed:2539308kB mlocked:0kB bounce:0kB free_pcp:49884kB local_pcp:22564kB free_cma:0kB [ 735.805358][T13235] lowmem_reserve[]: 0 0 1 1 1 [ 735.810064][T13235] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 735.839021][T13235] lowmem_reserve[]: 0 0 0 0 0 [ 735.843969][T13235] Node 1 Normal free:3887712kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14720kB local_pcp:5376kB free_cma:0kB [ 735.875451][T13235] lowmem_reserve[]: 0 0 0 0 0 [ 735.880133][T13235] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 735.892732][T13235] Node 0 DMA32: 543*4kB (UME) 493*8kB (UME) 232*16kB (UE) 346*32kB (UME) 185*64kB (UME) 74*128kB (UME) 39*256kB (UME) 4*512kB (M) 18*1024kB (UME) 1*2048kB (M) 283*4096kB (UM) = 1233892kB [ 735.911176][T13235] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 735.922624][T13235] Node 1 Normal: 156*4kB (UE) 46*8kB (UME) 26*16kB (UME) 135*32kB (UME) 48*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 945*4096kB (M) = 3887712kB [ 735.940701][T13235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.950223][T13235] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 735.959515][T13235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.969413][T13235] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 735.978740][T13235] 64201 total pagecache pages [ 735.983423][T13235] 0 pages in swap cache [ 735.987550][T13235] Free swap = 124996kB [ 735.991690][T13235] Total swap = 124996kB [ 735.995825][T13235] 2097051 pages RAM [ 735.999617][T13235] 0 pages HighMem/MovableOnly [ 736.004307][T13235] 430262 pages reserved [ 736.008436][T13235] 0 pages cma reserved [ 736.204503][ T43] usb 2-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=35.7f [ 736.217000][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.428067][ T5908] cp210x 1-1:0.110: failed to get vendor val 0x370b size 1: -71 [ 736.437504][ T43] usb 2-1: string descriptor 0 read error: -71 [ 736.447965][ T43] usb 2-1: NDI device with a latency value of 1 [ 736.464291][ T43] ftdi_sio 2-1:129.0: FTDI USB Serial Device converter detected [ 736.475239][ T5908] cp210x 1-1:0.110: querying part number failed [ 736.573954][ T912] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 736.596175][ T43] ftdi_sio ttyUSB0: unknown device type: 0x357f [ 736.605536][ T5908] usb 1-1: cp210x converter now attached to ttyUSB1 [ 736.725398][ T30] audit: type=1326 audit(1759015517.177:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13244 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f358eec9 code=0x7ffc0000 [ 736.956873][ T30] audit: type=1326 audit(1759015517.177:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13244 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f358eec9 code=0x7ffc0000 [ 737.070163][ T43] usb 2-1: USB disconnect, device number 39 [ 737.083708][ T5908] usb 1-1: USB disconnect, device number 28 [ 737.101044][ T43] ftdi_sio 2-1:129.0: device disconnected [ 737.116670][ T30] audit: type=1326 audit(1759015517.177:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13244 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f91f358eec9 code=0x7ffc0000 [ 737.140534][ T30] audit: type=1326 audit(1759015517.177:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13244 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f358eec9 code=0x7ffc0000 [ 737.164211][ T30] audit: type=1326 audit(1759015517.187:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13244 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f358eec9 code=0x7ffc0000 [ 737.188668][ T5908] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 737.198363][ T912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.222959][ T912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 737.235712][ T5908] cp210x 1-1:0.110: device disconnected [ 737.254689][ T912] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 737.275736][ T912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.312017][ T912] usb 3-1: config 0 descriptor?? [ 737.315373][ T30] audit: type=1326 audit(1759015517.187:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13244 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f91f358eec9 code=0x7ffc0000 [ 737.347274][ T30] audit: type=1326 audit(1759015517.187:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13244 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f358eec9 code=0x7ffc0000 [ 737.355089][ T912] gspca_main: spca501-2.14.0 probing 0000:0000 [ 737.390775][ T30] audit: type=1326 audit(1759015517.187:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13244 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f358eec9 code=0x7ffc0000 [ 737.423794][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1803'. [ 738.340904][ T912] gspca_spca501: reg write: error -71 [ 738.342678][T13262] tmpfs: Bad value for 'mpol' [ 738.346376][ T912] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 738.425370][ T912] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 738.554904][ T912] usb 3-1: USB disconnect, device number 24 [ 739.375053][T13274] IPVS: sed: FWM 3 0x00000003 - no destination available [ 740.801061][T13298] sp0: Synchronizing with TNC [ 741.131128][T13302] netlink: 'syz.0.1813': attribute type 1 has an invalid length. [ 741.139026][T13302] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1813'. [ 741.148349][T13302] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1813'. [ 741.352805][T13288] [U] è [ 742.135153][T13310] overlayfs: overlapping lowerdir path [ 742.550047][T13321] fuse: Unknown parameter '00000000000000000000' [ 743.352053][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 743.352069][ T30] audit: type=1400 audit(1759015523.837:618): avc: denied { bind } for pid=13327 comm="syz.1.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 744.895161][T13353] siw: device registration error -23 [ 746.596521][T13372] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 746.604436][T13372] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1831'. [ 746.614105][T13372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1831'. [ 746.851022][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.857361][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.865413][ T1298] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 747.107614][T13376] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 747.119234][T13376] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 748.411323][ T30] audit: type=1326 audit(1759015528.857:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13385 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed338eec9 code=0x7fc00000 [ 748.717849][T13393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.790703][ T30] audit: type=1400 audit(1759015529.267:620): avc: denied { create } for pid=13392 comm="syz.4.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 748.932168][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 748.945675][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 749.010704][ T5923] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 749.122625][T13411] o2cb: This node has not been configured. [ 749.128506][T13411] o2cb: Cluster check failed. Fix errors before retrying. [ 749.135861][T13411] (syz.1.1841,13411,0):user_dlm_register:674 ERROR: status = -22 [ 749.143658][T13411] (syz.1.1841,13411,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 749.318491][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 749.334837][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 749.503891][T13405] ceph: No mds server is up or the cluster is laggy [ 749.649937][ T30] audit: type=1400 audit(1759015530.077:621): avc: denied { wake_alarm } for pid=13403 comm="syz.4.1842" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 749.690522][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 749.710543][ T5901] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 749.719575][T12765] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 749.729184][T12765] CPU: 0 UID: 0 PID: 12765 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 749.729211][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 749.729227][T12765] Workqueue: hci1 hci_rx_work [ 749.729252][T12765] Call Trace: [ 749.729259][T12765] [ 749.729267][T12765] dump_stack_lvl+0x16c/0x1f0 [ 749.729295][T12765] sysfs_warn_dup+0x7f/0xa0 [ 749.729320][T12765] sysfs_create_dir_ns+0x24b/0x2b0 [ 749.729343][T12765] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 749.729365][T12765] ? find_held_lock+0x2b/0x80 [ 749.729393][T12765] ? do_raw_spin_unlock+0x172/0x230 [ 749.729415][T12765] kobject_add_internal+0x2c4/0x9b0 [ 749.729446][T12765] kobject_add+0x16e/0x240 [ 749.729472][T12765] ? __pfx_kobject_add+0x10/0x10 [ 749.729500][T12765] ? do_raw_spin_unlock+0x172/0x230 [ 749.729520][T12765] ? kobject_put+0xab/0x5a0 [ 749.729551][T12765] device_add+0x288/0x1aa0 [ 749.729579][T12765] ? __pfx_dev_set_name+0x10/0x10 [ 749.729609][T12765] ? __pfx_device_add+0x10/0x10 [ 749.729637][T12765] ? mgmt_send_event_skb+0x2fb/0x460 [ 749.729665][T12765] hci_conn_add_sysfs+0x17e/0x230 [ 749.729688][T12765] le_conn_complete_evt+0x1260/0x2150 [ 749.729713][T12765] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 749.729730][T12765] ? hci_event_packet+0x459/0x11c0 [ 749.729756][T12765] hci_le_conn_complete_evt+0x23c/0x370 [ 749.729782][T12765] hci_le_meta_evt+0x354/0x5e0 [ 749.729802][T12765] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 749.729825][T12765] hci_event_packet+0x685/0x11c0 [ 749.729844][T12765] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 749.729866][T12765] ? __pfx_hci_event_packet+0x10/0x10 [ 749.729888][T12765] ? kcov_remote_start+0x3c9/0x6d0 [ 749.729907][T12765] ? lockdep_hardirqs_on+0x7c/0x110 [ 749.729936][T12765] hci_rx_work+0x2c5/0x16b0 [ 749.729958][T12765] ? rcu_is_watching+0x12/0xc0 [ 749.729985][T12765] process_one_work+0x9cc/0x1b70 [ 749.730016][T12765] ? __pfx_process_one_work+0x10/0x10 [ 749.730044][T12765] ? assign_work+0x1a0/0x250 [ 749.730065][T12765] worker_thread+0x6c8/0xf10 [ 749.730093][T12765] ? __kthread_parkme+0x19e/0x250 [ 749.730120][T12765] ? __pfx_worker_thread+0x10/0x10 [ 749.730140][T12765] kthread+0x3c2/0x780 [ 749.730159][T12765] ? __pfx_kthread+0x10/0x10 [ 749.730178][T12765] ? rcu_is_watching+0x12/0xc0 [ 749.730200][T12765] ? __pfx_kthread+0x10/0x10 [ 749.730219][T12765] ret_from_fork+0x56a/0x730 [ 749.730235][T12765] ? __pfx_kthread+0x10/0x10 [ 749.730253][T12765] ret_from_fork_asm+0x1a/0x30 [ 749.730289][T12765] [ 749.730329][T12765] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 749.995688][T12765] Bluetooth: hci1: failed to register connection device [ 750.004616][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 750.013021][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 750.108370][ T5923] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 750.139999][ T5923] usb 4-1: config 0 has no interface number 0 [ 750.173835][ T5901] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 750.183004][ T5923] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 750.230770][ T5901] usb 2-1: config 0 has no interface number 0 [ 750.236898][ T5901] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 750.268810][ T5923] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 750.302288][T13415] Unsupported ieee802154 address type: 0 [ 750.322703][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.336760][ T5923] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 750.711271][ T5901] usb 2-1: config 0 descriptor?? [ 750.736981][ T5923] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 750.774172][ T5901] usb 2-1: selecting invalid altsetting 3 [ 750.779943][ T5901] comedi comedi5: could not set alternate setting 3 in high speed [ 750.819274][ T5923] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 750.878973][ T5901] usbdux 2-1:0.207: driver 'usbdux' failed to auto-configure device. [ 750.893466][ T5923] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 750.926173][ T5901] usbdux 2-1:0.207: probe with driver usbdux failed with error -22 [ 750.948707][ T5923] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 750.973936][ T5901] usb 2-1: USB disconnect, device number 40 [ 751.014115][ T5923] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 751.109952][T13428] futex_wake_op: syz.0.1847 tries to shift op by -1; fix this program [ 751.128835][ T5923] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.179613][ T30] audit: type=1326 audit(1759015531.667:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13385 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faed332af79 code=0x7fc00000 [ 751.202947][ C1] vkms_vblank_simulate: vblank timer overrun [ 751.340247][ T5923] usb 4-1: string descriptor 0 read error: -71 [ 751.367191][ T5923] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 751.405380][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.462163][ T5923] usb 4-1: config 0 descriptor?? [ 751.474646][ T5923] usb 4-1: can't set config #0, error -71 [ 751.495968][ T5923] usb 4-1: USB disconnect, device number 31 [ 751.839969][T13436] lo speed is unknown, defaulting to 1000 [ 752.108581][T12765] Bluetooth: hci1: command 0x0c1a tx timeout [ 752.932246][T12765] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 752.942278][T12765] CPU: 1 UID: 0 PID: 12765 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 752.942303][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 752.942316][T12765] Workqueue: hci3 hci_rx_work [ 752.942339][T12765] Call Trace: [ 752.942345][T12765] [ 752.942352][T12765] dump_stack_lvl+0x16c/0x1f0 [ 752.942378][T12765] sysfs_warn_dup+0x7f/0xa0 [ 752.942401][T12765] sysfs_create_dir_ns+0x24b/0x2b0 [ 752.942423][T12765] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 752.942443][T12765] ? find_held_lock+0x2b/0x80 [ 752.942468][T12765] ? do_raw_spin_unlock+0x172/0x230 [ 752.942490][T12765] kobject_add_internal+0x2c4/0x9b0 [ 752.942521][T12765] kobject_add+0x16e/0x240 [ 752.942547][T12765] ? __pfx_kobject_add+0x10/0x10 [ 752.942574][T12765] ? do_raw_spin_unlock+0x172/0x230 [ 752.942594][T12765] ? kobject_put+0xab/0x5a0 [ 752.942626][T12765] device_add+0x288/0x1aa0 [ 752.942661][T12765] ? __pfx_dev_set_name+0x10/0x10 [ 752.942679][T12765] ? __pfx_device_add+0x10/0x10 [ 752.942707][T12765] ? mgmt_send_event_skb+0x2fb/0x460 [ 752.942736][T12765] hci_conn_add_sysfs+0x17e/0x230 [ 752.942763][T12765] le_conn_complete_evt+0x1260/0x2150 [ 752.942789][T12765] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 752.942808][T12765] ? hci_event_packet+0x459/0x11c0 [ 752.942834][T12765] hci_le_conn_complete_evt+0x23c/0x370 [ 752.942860][T12765] hci_le_meta_evt+0x354/0x5e0 [ 752.942882][T12765] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 752.942905][T12765] hci_event_packet+0x685/0x11c0 [ 752.942924][T12765] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 752.942946][T12765] ? __pfx_hci_event_packet+0x10/0x10 [ 752.942968][T12765] ? kcov_remote_start+0x3c9/0x6d0 [ 752.942988][T12765] ? lockdep_hardirqs_on+0x7c/0x110 [ 752.943018][T12765] hci_rx_work+0x2c5/0x16b0 [ 752.943041][T12765] ? rcu_is_watching+0x12/0xc0 [ 752.943067][T12765] process_one_work+0x9cc/0x1b70 [ 752.943099][T12765] ? __pfx_process_one_work+0x10/0x10 [ 752.943127][T12765] ? assign_work+0x1a0/0x250 [ 752.943148][T12765] worker_thread+0x6c8/0xf10 [ 752.943177][T12765] ? __kthread_parkme+0x19e/0x250 [ 752.943205][T12765] ? __pfx_worker_thread+0x10/0x10 [ 752.943225][T12765] kthread+0x3c2/0x780 [ 752.943244][T12765] ? __pfx_kthread+0x10/0x10 [ 752.943264][T12765] ? rcu_is_watching+0x12/0xc0 [ 752.943286][T12765] ? __pfx_kthread+0x10/0x10 [ 752.943304][T12765] ret_from_fork+0x56a/0x730 [ 752.943322][T12765] ? __pfx_kthread+0x10/0x10 [ 752.943340][T12765] ret_from_fork_asm+0x1a/0x30 [ 752.943376][T12765] [ 752.943443][T12765] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 753.200214][T12765] Bluetooth: hci3: failed to register connection device [ 753.561429][T13457] netlink: 'syz.4.1854': attribute type 1 has an invalid length. [ 753.624325][T13457] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1854'. [ 754.764155][T13473] Device name cannot be null; rc = [-22] [ 754.790704][ T5923] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 755.001037][T13477] siw: device registration error -23 [ 755.150691][ T5908] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 755.345688][T12765] Bluetooth: hci3: command 0x0c1a tx timeout [ 755.441277][T13479] o2cb: This node has not been configured. [ 755.447189][T13479] o2cb: Cluster check failed. Fix errors before retrying. [ 755.455028][T13479] (syz.0.1861,13479,0):user_dlm_register:674 ERROR: status = -22 [ 755.463042][T13479] (syz.0.1861,13479,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 755.500597][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 755.597898][ T5908] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 755.722144][ T5923] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 755.765933][ T5908] usb 2-1: config 0 has no interface number 0 [ 755.776871][ T5908] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 755.780521][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.795274][ T5901] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 755.874804][ T5908] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 755.877183][ T5923] usb 4-1: config 0 descriptor?? [ 755.943620][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.205886][ T5908] usb 2-1: Product: syz [ 756.223762][ T5901] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 756.230542][ T5908] usb 2-1: Manufacturer: syz [ 756.232210][ T5923] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 756.254961][ T5908] usb 2-1: SerialNumber: syz [ 756.275244][ T5901] usb 1-1: config 0 has no interface number 0 [ 756.286227][ T5908] usb 2-1: config 0 descriptor?? [ 756.290590][ T5901] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 756.319481][ T5908] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 756.320553][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.366545][ T5908] em28xx 2-1:0.132: Video interface 132 found: [ 756.449970][ T5901] usb 1-1: config 0 descriptor?? [ 756.571007][T13468] o2cb: This node has not been configured. [ 756.576831][T13468] o2cb: Cluster check failed. Fix errors before retrying. [ 756.584029][T13468] (syz.3.1858,13468,1):user_dlm_register:674 ERROR: status = -22 [ 756.591755][T13468] (syz.3.1858,13468,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 756.604572][T13468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.732666][T13488] lo speed is unknown, defaulting to 1000 [ 757.134533][T13468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.156745][ T5901] usb 1-1: selecting invalid altsetting 3 [ 757.174511][ T5923] [drm:udl_init] *ERROR* Selecting channel failed [ 757.184313][ T5908] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 757.187258][ T5901] comedi comedi5: could not set alternate setting 3 in high speed [ 757.358948][ T5901] usbdux 1-1:0.207: driver 'usbdux' failed to auto-configure device. [ 757.378045][ T5923] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 757.395239][ T5901] usbdux 1-1:0.207: probe with driver usbdux failed with error -22 [ 757.412297][ T5923] [drm] Initialized udl on minor 2 [ 757.443210][ T5923] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 757.458994][ T5901] usb 1-1: USB disconnect, device number 29 [ 757.485657][ T5923] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 757.612840][ T5859] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 757.613522][ T5908] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 757.820235][ T5859] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 757.837165][ T5908] em28xx 2-1:0.132: board has no eeprom [ 757.839000][ T5923] usb 4-1: USB disconnect, device number 32 [ 757.879150][ T5859] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 758.020609][ T5908] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 758.068889][ T5908] em28xx 2-1:0.132: analog set to bulk mode. [ 758.084312][ T912] em28xx 2-1:0.132: Registering V4L2 extension [ 759.766439][ T912] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 759.780965][ T912] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 759.797553][ T912] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 759.818867][ T912] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 759.882365][ T43] usb 2-1: USB disconnect, device number 41 [ 759.911182][ T43] em28xx 2-1:0.132: Disconnecting em28xx [ 760.650024][ T912] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 760.668891][ T912] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 760.699955][ T912] em28xx 2-1:0.132: No AC97 audio processor [ 760.786661][ T912] usb 2-1: Decoder not found [ 760.799118][ T912] em28xx 2-1:0.132: failed to create media graph [ 760.815153][ T912] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 760.925203][ T912] em28xx 2-1:0.132: Remote control support is not available for this card. [ 760.935412][T13529] ================================================================== [ 760.937638][ T43] em28xx 2-1:0.132: Closing input extension [ 760.943490][T13529] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 760.943521][T13529] Read of size 8 at addr ffff88807bf18740 by task v4l_id/13529 [ 760.943535][T13529] [ 760.943542][T13529] CPU: 0 UID: 0 PID: 13529 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 760.943559][T13529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 760.943569][T13529] Call Trace: [ 760.943575][T13529] [ 760.943581][T13529] dump_stack_lvl+0x116/0x1f0 [ 760.943604][T13529] print_report+0xcd/0x630 [ 760.943623][T13529] ? __virt_addr_valid+0x81/0x610 [ 760.943645][T13529] ? __phys_addr+0xe8/0x180 [ 760.943666][T13529] ? v4l2_fh_init+0x27d/0x2c0 [ 760.943684][T13529] kasan_report+0xe0/0x110 [ 760.943698][T13529] ? v4l2_fh_init+0x27d/0x2c0 [ 760.943717][T13529] v4l2_fh_init+0x27d/0x2c0 [ 760.943734][T13529] v4l2_fh_open+0x83/0xc0 [ 760.943750][T13529] em28xx_v4l2_open+0x24e/0x7e0 [ 760.943768][T13529] v4l2_open+0x225/0x490 [ 760.943783][T13529] ? __pfx_v4l2_open+0x10/0x10 [ 760.943798][T13529] chrdev_open+0x234/0x6a0 [ 760.943816][T13529] ? __pfx_chrdev_open+0x10/0x10 [ 760.943832][T13529] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 760.943851][T13529] do_dentry_open+0x97f/0x1530 [ 760.943867][T13529] ? __pfx_chrdev_open+0x10/0x10 [ 760.943886][T13529] vfs_open+0x82/0x3f0 [ 760.943905][T13529] path_openat+0x1de4/0x2cb0 [ 760.943924][T13529] ? __pfx_path_openat+0x10/0x10 [ 760.943942][T13529] do_filp_open+0x20b/0x470 [ 760.943958][T13529] ? __pfx_do_filp_open+0x10/0x10 [ 760.943980][T13529] ? alloc_fd+0x471/0x7d0 [ 760.943999][T13529] do_sys_openat2+0x11b/0x1d0 [ 760.944017][T13529] ? __pfx_do_sys_openat2+0x10/0x10 [ 760.944036][T13529] ? find_held_lock+0x2b/0x80 [ 760.944054][T13529] ? handle_mm_fault+0x2ab/0xd10 [ 760.944077][T13529] __x64_sys_openat+0x174/0x210 [ 760.944096][T13529] ? __pfx___x64_sys_openat+0x10/0x10 [ 760.944116][T13529] ? do_user_addr_fault+0x843/0x1370 [ 760.944133][T13529] do_syscall_64+0xcd/0x4e0 [ 760.944152][T13529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.944168][T13529] RIP: 0033:0x7f18f12a7407 [ 760.944180][T13529] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 760.944194][T13529] RSP: 002b:00007ffeb5a287d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 760.944209][T13529] RAX: ffffffffffffffda RBX: 00007f18f197c880 RCX: 00007f18f12a7407 [ 760.944219][T13529] RDX: 0000000000000000 RSI: 00007ffeb5a28f1c RDI: ffffffffffffff9c [ 760.944228][T13529] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 760.944236][T13529] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 760.944245][T13529] R13: 00007ffeb5a28a20 R14: 00007f18f1a81000 R15: 00005629e13dd4d8 [ 760.944259][T13529] [ 760.944264][T13529] [ 761.221809][T13529] Allocated by task 912: [ 761.226035][T13529] kasan_save_stack+0x33/0x60 [ 761.230700][T13529] kasan_save_track+0x14/0x30 [ 761.235360][T13529] __kasan_kmalloc+0xaa/0xb0 [ 761.239931][T13529] em28xx_v4l2_init+0x114/0x4080 [ 761.244848][T13529] em28xx_init_extension+0x13a/0x200 [ 761.250106][T13529] request_module_async+0x61/0x70 [ 761.255109][T13529] process_one_work+0x9cc/0x1b70 [ 761.260028][T13529] worker_thread+0x6c8/0xf10 [ 761.264596][T13529] kthread+0x3c2/0x780 [ 761.268654][T13529] ret_from_fork+0x56a/0x730 [ 761.273236][T13529] ret_from_fork_asm+0x1a/0x30 [ 761.277982][T13529] [ 761.280280][T13529] Freed by task 912: [ 761.284144][T13529] kasan_save_stack+0x33/0x60 [ 761.288798][T13529] kasan_save_track+0x14/0x30 [ 761.293471][T13529] kasan_save_free_info+0x3b/0x60 [ 761.298497][T13529] __kasan_slab_free+0x60/0x70 [ 761.303244][T13529] kfree+0x2b4/0x4d0 [ 761.307125][T13529] em28xx_v4l2_init+0x22b5/0x4080 [ 761.312131][T13529] em28xx_init_extension+0x13a/0x200 [ 761.317395][T13529] request_module_async+0x61/0x70 [ 761.322395][T13529] process_one_work+0x9cc/0x1b70 [ 761.327320][T13529] worker_thread+0x6c8/0xf10 [ 761.331886][T13529] kthread+0x3c2/0x780 [ 761.335957][T13529] ret_from_fork+0x56a/0x730 [ 761.340527][T13529] ret_from_fork_asm+0x1a/0x30 [ 761.345278][T13529] [ 761.347577][T13529] The buggy address belongs to the object at ffff88807bf18000 [ 761.347577][T13529] which belongs to the cache kmalloc-8k of size 8192 [ 761.361605][T13529] The buggy address is located 1856 bytes inside of [ 761.361605][T13529] freed 8192-byte region [ffff88807bf18000, ffff88807bf1a000) [ 761.375551][T13529] [ 761.377851][T13529] The buggy address belongs to the physical page: [ 761.384234][T13529] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bf18 [ 761.393054][T13529] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 761.401525][T13529] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 761.409043][T13529] page_type: f5(slab) [ 761.413012][T13529] raw: 00fff00000000040 ffff88801b842280 dead000000000100 dead000000000122 [ 761.421589][T13529] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 761.430156][T13529] head: 00fff00000000040 ffff88801b842280 dead000000000100 dead000000000122 [ 761.438803][T13529] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 761.447448][T13529] head: 00fff00000000003 ffffea0001efc601 00000000ffffffff 00000000ffffffff [ 761.456098][T13529] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 761.464741][T13529] page dumped because: kasan: bad access detected [ 761.471145][T13529] page_owner tracks the page as allocated [ 761.476833][T13529] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10557, tgid 10556 (syz.0.1121), ts 478817941936, free_ts 478817449527 [ 761.498352][T13529] post_alloc_hook+0x1c0/0x230 [ 761.503117][T13529] get_page_from_freelist+0x132b/0x38e0 [ 761.508640][T13529] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 761.514683][T13529] alloc_pages_mpol+0x1fb/0x550 [ 761.519513][T13529] new_slab+0x247/0x330 [ 761.523654][T13529] ___slab_alloc+0xcf2/0x1750 [ 761.528311][T13529] __slab_alloc.constprop.0+0x56/0xb0 [ 761.533665][T13529] __kmalloc_noprof+0x2f2/0x510 [ 761.538491][T13529] snd_seq_oss_readq_new+0x96/0x2c0 [ 761.543757][T13529] snd_seq_oss_open+0x54b/0xa20 [ 761.548590][T13529] odev_open+0x6f/0x90 [ 761.552638][T13529] soundcore_open+0x40c/0x580 [ 761.557294][T13529] chrdev_open+0x234/0x6a0 [ 761.561688][T13529] do_dentry_open+0x97f/0x1530 [ 761.566443][T13529] vfs_open+0x82/0x3f0 [ 761.570500][T13529] path_openat+0x1de4/0x2cb0 [ 761.575077][T13529] page last free pid 10557 tgid 10556 stack trace: [ 761.581551][T13529] __free_frozen_pages+0x7d5/0x10f0 [ 761.586734][T13529] bpf_check+0x909/0xc670 [ 761.591040][T13529] bpf_prog_load+0xe41/0x2490 [ 761.595712][T13529] __sys_bpf+0x4a3f/0x4de0 [ 761.600103][T13529] __x64_sys_bpf+0x78/0xc0 [ 761.604502][T13529] do_syscall_64+0xcd/0x4e0 [ 761.608984][T13529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.614853][T13529] [ 761.617148][T13529] Memory state around the buggy address: [ 761.622750][T13529] ffff88807bf18600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.630787][T13529] ffff88807bf18680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.638822][T13529] >ffff88807bf18700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.646853][T13529] ^ [ 761.652981][T13529] ffff88807bf18780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.661016][T13529] ffff88807bf18800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.669048][T13529] ================================================================== [ 761.971502][ T30] audit: type=1400 audit(1759015542.407:623): avc: denied { read } for pid=5202 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 762.061896][ T30] audit: type=1400 audit(1759015542.407:624): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.146168][ T30] audit: type=1400 audit(1759015542.407:625): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.275584][ T30] audit: type=1400 audit(1759015542.407:626): avc: denied { add_name } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.346772][T13529] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 762.353996][T13529] CPU: 0 UID: 0 PID: 13529 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 762.363016][T13529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 762.373054][T13529] Call Trace: [ 762.376337][T13529] [ 762.379245][T13529] dump_stack_lvl+0x3d/0x1f0 [ 762.383851][T13529] vpanic+0x6e8/0x7a0 [ 762.387807][T13529] ? __pfx_vpanic+0x10/0x10 [ 762.392310][T13529] ? v4l2_fh_init+0x27d/0x2c0 [ 762.396975][T13529] panic+0xca/0xd0 [ 762.400674][T13529] ? __pfx_panic+0x10/0x10 [ 762.405166][T13529] ? v4l2_fh_init+0x27d/0x2c0 [ 762.409833][T13529] ? preempt_schedule_common+0x44/0xc0 [ 762.415265][T13529] ? preempt_schedule_thunk+0x16/0x30 [ 762.420613][T13529] ? check_panic_on_warn+0x1f/0xb0 [ 762.425694][T13529] check_panic_on_warn+0xab/0xb0 [ 762.430602][T13529] end_report+0x107/0x170 [ 762.434907][T13529] kasan_report+0xee/0x110 [ 762.439306][T13529] ? v4l2_fh_init+0x27d/0x2c0 [ 762.443959][T13529] v4l2_fh_init+0x27d/0x2c0 [ 762.448434][T13529] v4l2_fh_open+0x83/0xc0 [ 762.452739][T13529] em28xx_v4l2_open+0x24e/0x7e0 [ 762.457576][T13529] v4l2_open+0x225/0x490 [ 762.461795][T13529] ? __pfx_v4l2_open+0x10/0x10 [ 762.466536][T13529] chrdev_open+0x234/0x6a0 [ 762.470934][T13529] ? __pfx_chrdev_open+0x10/0x10 [ 762.475855][T13529] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 762.482337][T13529] do_dentry_open+0x97f/0x1530 [ 762.487081][T13529] ? __pfx_chrdev_open+0x10/0x10 [ 762.492001][T13529] vfs_open+0x82/0x3f0 [ 762.496054][T13529] path_openat+0x1de4/0x2cb0 [ 762.500624][T13529] ? __pfx_path_openat+0x10/0x10 [ 762.505552][T13529] do_filp_open+0x20b/0x470 [ 762.510045][T13529] ? __pfx_do_filp_open+0x10/0x10 [ 762.515057][T13529] ? alloc_fd+0x471/0x7d0 [ 762.519375][T13529] do_sys_openat2+0x11b/0x1d0 [ 762.524041][T13529] ? __pfx_do_sys_openat2+0x10/0x10 [ 762.529230][T13529] ? find_held_lock+0x2b/0x80 [ 762.533900][T13529] ? handle_mm_fault+0x2ab/0xd10 [ 762.538828][T13529] __x64_sys_openat+0x174/0x210 [ 762.543671][T13529] ? __pfx___x64_sys_openat+0x10/0x10 [ 762.549032][T13529] ? do_user_addr_fault+0x843/0x1370 [ 762.554314][T13529] do_syscall_64+0xcd/0x4e0 [ 762.558804][T13529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.564672][T13529] RIP: 0033:0x7f18f12a7407 [ 762.569061][T13529] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 762.588645][T13529] RSP: 002b:00007ffeb5a287d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 762.597035][T13529] RAX: ffffffffffffffda RBX: 00007f18f197c880 RCX: 00007f18f12a7407 [ 762.604983][T13529] RDX: 0000000000000000 RSI: 00007ffeb5a28f1c RDI: ffffffffffffff9c [ 762.612932][T13529] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 762.620880][T13529] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 762.628828][T13529] R13: 00007ffeb5a28a20 R14: 00007f18f1a81000 R15: 00005629e13dd4d8 [ 762.636781][T13529] [ 762.639971][T13529] Kernel Offset: disabled [ 762.644269][T13529] Rebooting in 86400 seconds..