last executing test programs: 8m34.399149679s ago: executing program 4 (id=49): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800005, 0x110, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) inotify_init() r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000024c0)={0x1, 0x0, [{0x26000, 0x0, 0x0}]}) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000040)={0x5, 0x7, 0x2, 0x8, 0x4}) mknod$loop(0x0, 0x800, 0x0) dup2(r2, r4) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 8m30.975811807s ago: executing program 4 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040881}, 0x24000000) sendmsg$NFT_BATCH(r0, 0x0, 0x40) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3f, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x4, 0x6, 0x3}) madvise(&(0x7f00009b3000/0x2000)=nil, 0x2000, 0x15) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000002c0)={r1, 0x9, 0x81, 0xfffffffffffffffd}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe2, 0x0, 0x7fc000fd}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001080)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x5, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000300)=0x1) 8m29.933527841s ago: executing program 4 (id=57): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) epoll_create(0x1) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x2]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000003200)=[{&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000000140)=""/187, 0xbb}], 0x2, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000680)={0x2, 0x0, 0x4, {0x80000000, 0x2, 0x5e44, 0x2}}) 8m28.649765412s ago: executing program 4 (id=58): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x46eb, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000480)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) mbind(&(0x7f000079b000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x1, 0x2, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000038c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}]}, 0x66}}, 0x0) 8m25.713731342s ago: executing program 4 (id=65): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRES64=0x0, @ANYBLOB="5a1a2d78340ab1fc9359098a55c070ead9f72806e9497de52557a4b137d2670a9b3b97b63bf35acde7cec5862aa9f39182010adda71e0fcdb811a813c3715ddb98344fb3ab57096a68349903b5dfbd4416cf33ef5f0eed10dea6ccaa4a2362584b7a8be1013768db27f9f9073b2053e7c042ea28c26db5bafd48fc41e36b32000387b16db8bccbc435cc0651f6903324fad45bffb5c84de3f17c5cf2820df366a36fd6b97f60a8cfa8408a1756e508e6", @ANYBLOB="5569cdd9f449caa15ed093f5bf0c715f37219755e759aef107b38e4681ea10513f8408a01f4e1d7600bd9dfe0bfa8beb528d8bceaba6431ba56ee9ed4dbdcf3a7aaf9d84b4aa036a3af1408ccdfe6023d170d92bc429f5ff8ace6ec7775cf85319d4d3aa858231a4af3e7a082e72dfe478b5249047b4a3eacc6c8f1098e4c5a071241a570646b9396e526cdd47b554cd54b742b4162c2f366ef480dfa6af73a1fb57da56b239c611f2f1a8d42c99f1661af21331b20c7431c0d986486a53e897f76dcc1311340404a9766b0bb82e589786f3bc0cd018ca78a87ed04d4741fb29b61492e345320a67e43b84469fc3a08dbffc67f6d7d82a63ab"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000810) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r2, &(0x7f0000000040)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 8m24.397116779s ago: executing program 4 (id=68): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000081000000040000000080000016000000", @ANYRES32, @ANYBLOB="ffffffff000000000000000300000070a78733e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) gettid() readv(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f00000003c0)=""/129, 0x81}, {0x0}, {&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000000240)=""/67, 0x3a}, {&(0x7f0000000080)=""/75, 0x4b}], 0x40) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40088c5}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 8m8.725813217s ago: executing program 32 (id=68): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000081000000040000000080000016000000", @ANYRES32, @ANYBLOB="ffffffff000000000000000300000070a78733e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) gettid() readv(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f00000003c0)=""/129, 0x81}, {0x0}, {&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000000240)=""/67, 0x3a}, {&(0x7f0000000080)=""/75, 0x4b}], 0x40) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40088c5}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 16.413481109s ago: executing program 3 (id=1654): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa3005000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0xa, 0x0, 0x0, &(0x7f00008fc000/0x2000)=nil, 0x2000}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$inet(0x2, 0x3, 0xa3) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x6, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 'caif0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, 0x5, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x48020}, 0x4000014) 15.431214751s ago: executing program 3 (id=1656): mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) write(0xffffffffffffffff, &(0x7f0000000280)="ed", 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, &(0x7f0000000240)=""/41, 0x400, 0x0, 0x1000, 0x6, &(0x7f0000000340)="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", &(0x7f0000001340)="f064313d1d73", 0x3, 0x0, 0x5}, 0x50) sendmsg$nl_crypto(r5, 0x0, 0x40000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x24, r6, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}], @chandef_params]}, 0x24}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x7e0b2000) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 12.20311979s ago: executing program 1 (id=1664): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xa7f3bbc663947270, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') read$FUSE(r6, &(0x7f0000001840)={0x2020}, 0x2020) write$tun(0xffffffffffffffff, 0x0, 0x141) 11.119491707s ago: executing program 1 (id=1665): openat$hwrng(0xffffffffffffff9c, 0x0, 0x101381, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000000)="00060000627454", 0x7, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) r5 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r5, 0x1, 0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x3cc1, 0x4) sendmsg$inet(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x40) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) 10.990414489s ago: executing program 3 (id=1667): pipe(0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000001c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x2) ptrace$cont(0x9, r0, 0xb, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203ff030e00"], 0x70}, 0x1, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10.424052283s ago: executing program 0 (id=1670): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000000)="00060000627454", 0x7, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) r5 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r5, 0x1, 0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x3cc1, 0x4) sendmsg$inet(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x40) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) 9.576512524s ago: executing program 5 (id=1672): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c00018006000600800a000018010280140117"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000b00)={0x0, 0x42474752, 0x3, @stepwise={0x9, 0xff, 0x7, 0x1ff, 0x5, 0x9}}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="bb76490840ba7c4d0358feeb65938c7e896f681c48a963a0d8a0551f4e59002b5f4bb971155641e9223a7719d80d6707276c034ec7a1f421c222ec7331390b64105edb3a22b2bad596a1a28eedc24ba1848ea884ddda7ab55b09df8ecd1b09f0e1ee78881df99a9c0b35532ba144f9521b60797de27b755a68c39634d9ea3ce182940b6162b3e81688b9f2f1a8fda14ad2576fa973faf924e983f466abdb20d601e332beb595450469022e7cd5620b9fd0b172faca1048164f652b34bfe45deea1d11f9492dec56b6254f18f8911fb43e9a0ea12dbeab29d99f2fd201f2f992e25c633f35066b5e3c92ad2990dc6adc7f450eecc63e06d3356a648ba6631ee63f7a93c7247b55a7413f9a42a8cbb0c067f25bca16edd9c6bc89a0078e3354f402011eb8aef4d594a16722bc932172fff0357569cc059f36b5d5968be1983bb8858b21df9c871746ad2bb5963e738dc6f838a1d9c382506ef6396d525de14109e5f728a5d5b6e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x10) close_range(r6, r7, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x2, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r10, r9, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000130001002cbd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="141004001f4c050008000a00", @ANYRES32=r9, @ANYBLOB="f981e8d876158f40e1e2e7f447a16314f1de6805ddddf9de33540996f71144765672a2599095790d85e0f054c0d0225de2f708d0b9a38f1beb24b0882413cf656886ce393f4e98962bee5c16b80e48f522eebfdc698fe90f366ec1903f2eba19a832ff1a1029e6cff53bcf6b70e2ed27ce6fe84888f37f61a15c9646a6b03ae49a04b0cccf52556caec9184e28f6790d4c57093958"], 0x28}}, 0x20040000) 9.382031259s ago: executing program 0 (id=1673): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x9c2, 0x2, 0xac7d, 0x1fd, 0x1, 0x1}, 0x1c) write$selinux_load(r0, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "eaf5b27ad06d15d4d488f4d7346ab64da645c75bb36b9317fed32427ebee6c0d8e167d75803c5fc4089c3546045406c5fc4ecf3324e7519c03b1590fedcf686c3877c9a24c622f8c6b4aac9a1d3481707d5eea194cc6ead4cb274819907bf6883b1c2618d79f0c1de3245d69dcd4d2be7d6c93f054271e72309a1f009f6166966b4e2c90256ebf32519d037f076e59518667c57994e016eb6bbf0ca57ad33fbb0b67723954df1cde97d17858de379014a51223327c77a664b36723ff33a81c4af8065f2917b0b4d5d318324d0956eb487faf27738091d8685710795d27b443cc0e60d56da566ae5ee9bc47e6997f28cf8994622b"}, 0x104) syz_usb_connect$uac2(0x2, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e04003040000102030109028600030180a00e080b0101010a20760904000000010120000924010000032600de11240806420000000000000200010003000c2403fd0405a80406f9ff22090401"], 0x0) 8.628004679s ago: executing program 1 (id=1674): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0xa4}}, 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000"], 0x18}}, 0x2000481c) r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x20048883) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getresgid(&(0x7f0000000080), &(0x7f0000000140), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c0002"], 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 8.259612306s ago: executing program 2 (id=1675): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 7.817132083s ago: executing program 0 (id=1676): set_mempolicy(0x3, 0x0, 0x7) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0xc, 0xffe1}, {0xffff, 0x3}, {0xf, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4000853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x6, 0x18, 0x13, 0xa, 0x0, 0x0, {0x8000, 0x2521, 0xff, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x4040001) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) r1 = socket$netlink(0x10, 0x3, 0xc) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES32], 0x0) (async) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000500)) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) (async) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x22002900}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80c4}, 0x4094) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x0) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x3, 0x1, 0x7, 0x9, 0xe2, 0xffffffffffffffff}], &(0x7f00000000c0)='GPL\x00', 0x4f7, 0xcc, &(0x7f0000000140)=""/204, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x39c9, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000280)=[{0x104, 0x3, 0x8, 0xb}, {0x1, 0x7, 0x7, 0xb}], 0x10, 0x1c17a378}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={r0, r3}) 7.465202065s ago: executing program 2 (id=1677): mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) write(0xffffffffffffffff, &(0x7f0000000280)="ed", 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, &(0x7f0000000240)=""/41, 0x400, 0x0, 0x1000, 0x6, &(0x7f0000000340)="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", &(0x7f0000001340)="f064313d1d73", 0x3, 0x0, 0x5}, 0x50) sendmsg$nl_crypto(r5, 0x0, 0x40000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x24, r6, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}], @chandef_params]}, 0x24}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x7e0b2000) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 6.47444935s ago: executing program 2 (id=1678): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c, 0x40000000}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x800) 6.28872998s ago: executing program 1 (id=1679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000078085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.986588174s ago: executing program 1 (id=1680): ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xdea2, 0x8, 0x1, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x200000d4) syz_ublk_setup_io_uring(0x5ee6, &(0x7f00000005c0)={0x0, 0xe565, 0x1248, 0x3, 0x134}, &(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) r10 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r10, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x11, 0x4e21, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000440)="08000000001f009e", 0x8}], 0x1}}], 0x2, 0x4080) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r1, r5, r9, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, r11, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x3, 0xba5, 0x0, 0x0, 0x1000, 0xffffffff, r12, 0x0, 0x24}}}, &(0x7f0000000440)) syz_open_dev$mtd(&(0x7f0000000900), 0x8, 0x505c81) 5.897113277s ago: executing program 5 (id=1681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x8000008000000002, r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) setresuid(0x0, 0xee00, 0x0) capset(0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002100), 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000002140)={0x0, 0x0, 0x7}) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, r5, &(0x7f0000000000)=ANY=[@ANYBLOB='load ecryptfs trusted: 09323372036854775808 \x00'], 0x2d, r5) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e26, 0x9, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x21) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0xb02, 0x40, 0x2, 0x0, 0x5, 0x7, 0x3, 0x0, r9}, 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={r9, 0x1}, &(0x7f00000002c0)=0x8) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r10, 0xc00c620f, 0x0) 4.617221678s ago: executing program 0 (id=1682): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$int_in(r0, 0x5421, &(0x7f0000000480)=0x6) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r5, &(0x7f0000000000)=@hci={0x1f, 0x4, 0x2}, 0x80) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x1, 0x0) write$P9_RGETATTR(r6, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x0, {0x4, 0x4, 0x1}, 0x50, 0x0, 0x0, 0x2000000012, 0x0, 0xa, 0x8, 0x9, 0x3, 0x3, 0x9, 0x5, 0x8, 0x7f, 0x1, 0x9, 0x3f1, 0x2}}, 0xa0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) socket$netlink(0x10, 0x3, 0x2) splice(r7, 0x0, r2, 0x0, 0x7ffffffffffffffe, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="852000a1c3"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c000780080006"], 0x5c}}, 0x20084884) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x1aa400, 0x0) syz_clone3(&(0x7f0000000200)={0x4304000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x63) syz_ublk_setup_io_uring(0x31ca, &(0x7f0000000180)={0x0, 0x6e47, 0x7d12, 0x1, 0x25, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) linkat(r9, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x1800) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000300)) 4.335556659s ago: executing program 5 (id=1683): r0 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='syz\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='dax\x00', &(0x7f00000000e0)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='dax\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8, 0x0) msgrcv(r1, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) msgctl$IPC_RMID(r1, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x835e, 0x40, 0x0, {0x1}}) io_uring_enter(r2, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./virtfs_dir\x00', 0x777) move_mount(r6, &(0x7f00000001c0)='\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./virtfs_dir\x00', 0x4) mount(&(0x7f0000000240)=@filename='syz\x00', 0x0, &(0x7f00000002c0)='virtiofs\x00', 0x0, 0x0) 3.46323355s ago: executing program 0 (id=1684): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff2cf0085d375101cc81d105a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r3) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x7) 2.797949338s ago: executing program 3 (id=1685): openat$hwrng(0xffffffffffffff9c, 0x0, 0x101381, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000000)="00060000627454", 0x7, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) r3 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r3, 0x1, 0x29, 0x0, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x40) 2.785674995s ago: executing program 1 (id=1686): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff2cf0085d375101cc81d105a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r3) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x7) 2.592426381s ago: executing program 2 (id=1687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000100040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x4c001, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) bind$inet(r2, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000100000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000008a09978b42d8210ca7844a33e897e3205b3c329c7178f350b1a1d720ec159900a9cd82b8afc6d6febffa0408ca6a617c7e555538c1b025172c6767a5f59d138edd23bef3748dd970948928b59b95d982a38d4ad7fdfb4ec709cf9c215678a02e1d6efcd205c451d953c33c0b355fd48c78de512a46abc8eaf0fbd239beef7eaf98cf46bc879bd64ddac6204f404debb6dcd88d2b71c0ee21c3d1aa0ab0a8278a00ec91d96a8b12c4f7aad98001f92f5c0f104308c3f742aaa75fdc84f3418fb28f034fca5d701c86015a243ad6539c3c7be3ef92f0c6bc902cdba3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b700000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x140, 0x0, 0x9, 0x6, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x9, 0xc72d, 0x0, 0x7, 0x3, 0x8, 0x29, 0x72f0, 0x102, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2d8, 0x0, 0x1001, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) 2.530259952s ago: executing program 2 (id=1688): mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) write(0xffffffffffffffff, &(0x7f0000000280)="ed", 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, &(0x7f0000000240)=""/41, 0x400, 0x0, 0x1000, 0x6, &(0x7f0000000340)="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", &(0x7f0000001340)="f064313d1d73", 0x3, 0x0, 0x5}, 0x50) sendmsg$nl_crypto(r5, 0x0, 0x40000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x24, r6, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}], @chandef_params]}, 0x24}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x7e0b2000) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 1.632365354s ago: executing program 2 (id=1689): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff2cf0085d375101cc81d105a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) 702.105151ms ago: executing program 5 (id=1690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000078085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 554.006318ms ago: executing program 5 (id=1691): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c, 0x40000000}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 553.345178ms ago: executing program 3 (id=1692): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:\x88\xfe\xf7\x01') r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000036c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}, {{&(0x7f0000000780)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f00000007c0)='H', 0x1}], 0x1}}], 0x3, 0x48000) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 111.465233ms ago: executing program 3 (id=1693): gettid() r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)='fdinfo\x00') ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x9, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{r3, r4+10000000}, {0x77359400}}, &(0x7f0000000380)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020e00000e0000000000fff300000000010015004e220000080012000000040000000000000000000600000000000000b500000000000000fe8001000000000000000000000000aaff010000000000000002000000e000000100000000000000002a33b9bdb9264af1fb27a3e0bf38374a1749dae26811e256e04cc41f6fb8d9f77a0a9a680bd256440fb318215a15c4316f0ace12922facde90b4850f4346d1b4a2"], 0x70}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="200001"], 0x38}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f0000000100)=""/2, &(0x7f0000000300)=0x2) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x201, 0x800003f, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000480)={{0xa, 0x4e20, 0x0, @mcast2, 0x101}, {0xa, 0x4e2b, 0x1000, @remote, 0x1}, 0x0, {[0x300000, 0x5, 0x0, 0x2000004, 0x11ff, 0x7fff, 0xd, 0x1]}}, 0x5c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000040)={r10}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r10}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x404a814}, 0x84) 1.384286ms ago: executing program 0 (id=1694): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) epoll_create(0x1) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x2]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) preadv(0xffffffffffffffff, &(0x7f0000003200)=[{&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000000140)=""/187, 0xbb}], 0x2, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000680)={0x2, 0x0, 0x4, {0x80000000, 0x2, 0x5e44, 0x2}}) 0s ago: executing program 5 (id=1695): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c00018006000600800a000018010280140117"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000b00)={0x0, 0x42474752, 0x3, @stepwise={0x9, 0xff, 0x7, 0x1ff, 0x5, 0x9}}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x10) close_range(r6, r7, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x2, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000130001002cbd7000fcdbdf2500000000", @ANYRES32=r11, @ANYBLOB="141004001f4c050008000a00", @ANYRES32=r9, @ANYBLOB="f981e8d876158f40e1e2e7f447a16314f1de6805ddddf9de33540996f71144765672a2599095790d85e0f054c0d0225de2f708d0b9a38f1beb24b0882413cf656886ce393f4e98962bee5c16b80e48f522eebfdc698fe90f366ec1903f2eba19a832ff1a1029e6cff53bcf6b70e2ed27ce6fe84888f37f61a15c9646a6b03ae49a04b0cccf52556caec9184e28f6790d4c57093958"], 0x28}}, 0x20040000) kernel console output (not intermixed with test programs): f+0x1f46/0x4a30 [ 401.347382][ T9419] ? __pfx___sys_bpf+0x10/0x10 [ 401.347393][ T9419] ? find_held_lock+0x2b/0x80 [ 401.347408][ T9419] ? get_pid_task+0xfc/0x250 [ 401.347423][ T9419] ? get_pid_task+0xfc/0x250 [ 401.347442][ T9419] ? find_held_lock+0x2b/0x80 [ 401.347461][ T9419] ? rcu_read_lock_any_held+0x6a/0x90 [ 401.347477][ T9419] ? find_held_lock+0x2b/0x80 [ 401.347492][ T9419] ? ksys_write+0x190/0x250 [ 401.347503][ T9419] ? ksys_write+0x190/0x250 [ 401.347513][ T9419] ? lock_acquire+0x1d1/0x380 [ 401.347543][ T9419] ? fput+0x7c/0x100 [ 401.347567][ T9419] ? ksys_write+0x1ac/0x250 [ 401.347589][ T9419] ? __x64_sys_bpf+0xce/0x140 [ 401.347607][ T9419] __x64_sys_bpf+0xce/0x140 [ 401.347623][ T9419] ? do_syscall_64+0xae/0x790 [ 401.347639][ T9419] do_syscall_64+0x123/0x790 [ 401.347655][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.347666][ T9419] RIP: 0033:0x7f337819e159 [ 401.347676][ T9419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.347687][ T9419] RSP: 002b:00007f337904f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.347699][ T9419] RAX: ffffffffffffffda RBX: 00007f3378425fa0 RCX: 00007f337819e159 [ 401.347706][ T9419] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 401.347714][ T9419] RBP: 00007f337904f090 R08: 0000000000000000 R09: 0000000000000000 [ 401.347720][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.347727][ T9419] R13: 00007f3378426038 R14: 00007f3378425fa0 R15: 00007fff23c5d138 [ 401.347742][ T9419] [ 401.347878][ T9419] syz.0.1150: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 401.348032][ T9419] CPU: 1 UID: 0 PID: 9419 Comm: syz.0.1150 Not tainted syzkaller #0 PREEMPT(full) [ 401.348047][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 401.348053][ T9419] Call Trace: [ 401.348057][ T9419] [ 401.348062][ T9419] dump_stack_lvl+0x100/0x190 [ 401.348081][ T9419] warn_alloc.cold+0x9e/0xb2 [ 401.348094][ T9419] ? __pfx_warn_alloc+0x10/0x10 [ 401.348111][ T9419] ? __kasan_kmalloc+0x8a/0xb0 [ 401.348129][ T9419] ? __get_vm_area_node+0x22b/0x350 [ 401.348147][ T9419] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 401.348164][ T9419] ? up_write+0x2dc/0x5b0 [ 401.348179][ T9419] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 401.348194][ T9419] ? lock_acquire+0x1d1/0x380 [ 401.348207][ T9419] ? find_held_lock+0x2b/0x80 [ 401.348222][ T9419] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 401.348237][ T9419] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 401.348256][ T9419] ? avc_has_perm_noaudit+0x145/0x3b0 [ 401.348272][ T9419] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 401.348285][ T9419] __vmalloc_node_noprof+0xad/0xf0 [ 401.348305][ T9419] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 401.348321][ T9419] __vmalloc_noprof+0xa3/0x120 [ 401.348335][ T9419] ? __pfx___vmalloc_noprof+0x10/0x10 [ 401.348351][ T9419] ? rcu_is_watching+0x13/0xc0 [ 401.348365][ T9419] ? cap_capable+0x107/0x430 [ 401.348383][ T9419] bpf_prog_alloc_no_stats+0x59/0x690 [ 401.348396][ T9419] ? security_capable+0x80/0x260 [ 401.348414][ T9419] bpf_prog_alloc+0x3b/0x200 [ 401.348427][ T9419] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 401.348441][ T9419] bpf_prog_load+0x49e/0x2a80 [ 401.348460][ T9419] ? __pfx_bpf_prog_load+0x10/0x10 [ 401.348487][ T9419] __sys_bpf+0x1f46/0x4a30 [ 401.348502][ T9419] ? __pfx___sys_bpf+0x10/0x10 [ 401.348512][ T9419] ? find_held_lock+0x2b/0x80 [ 401.348527][ T9419] ? get_pid_task+0xfc/0x250 [ 401.348541][ T9419] ? get_pid_task+0xfc/0x250 [ 401.348561][ T9419] ? find_held_lock+0x2b/0x80 [ 401.348579][ T9419] ? rcu_read_lock_any_held+0x6a/0x90 [ 401.348595][ T9419] ? find_held_lock+0x2b/0x80 [ 401.348610][ T9419] ? ksys_write+0x190/0x250 [ 401.348620][ T9419] ? ksys_write+0x190/0x250 [ 401.348631][ T9419] ? lock_acquire+0x1d1/0x380 [ 401.348653][ T9419] ? fput+0x7c/0x100 [ 401.348666][ T9419] ? ksys_write+0x1ac/0x250 [ 401.348679][ T9419] ? __x64_sys_bpf+0xce/0x140 [ 401.348690][ T9419] __x64_sys_bpf+0xce/0x140 [ 401.348701][ T9419] ? do_syscall_64+0xae/0x790 [ 401.348717][ T9419] do_syscall_64+0x123/0x790 [ 401.348733][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.348744][ T9419] RIP: 0033:0x7f337819e159 [ 401.348753][ T9419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.348763][ T9419] RSP: 002b:00007f337904f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.348774][ T9419] RAX: ffffffffffffffda RBX: 00007f3378425fa0 RCX: 00007f337819e159 [ 401.348781][ T9419] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 401.348788][ T9419] RBP: 00007f337904f090 R08: 0000000000000000 R09: 0000000000000000 [ 401.348797][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.348804][ T9419] R13: 00007f3378426038 R14: 00007f3378425fa0 R15: 00007fff23c5d138 [ 401.348819][ T9419] [ 401.348840][ T9419] Mem-Info: [ 401.348849][ T9419] active_anon:60042 inactive_anon:2 isolated_anon:0 [ 401.348849][ T9419] active_file:11 inactive_file:62517 isolated_file:0 [ 401.348849][ T9419] unevictable:0 dirty:242 writeback:0 [ 401.348849][ T9419] slab_reclaimable:12498 slab_unreclaimable:97628 [ 401.348849][ T9419] mapped:30656 shmem:48344 pagetables:1632 [ 401.348849][ T9419] sec_pagetables:0 bounce:0 [ 401.348849][ T9419] kernel_misc_reclaimable:0 [ 401.348849][ T9419] free:1223847 free_pcp:18586 free_cma:0 [ 401.348882][ T9419] Node 0 active_anon:240168kB inactive_anon:8kB active_file:44kB inactive_file:249876kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122624kB dirty:968kB writeback:0kB shmem:193376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12832kB pagetables:6372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 401.348911][ T9419] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 401.348938][ T9419] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.348981][ T9419] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 401.349001][ T9419] Node 0 DMA32 free:932312kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:240168kB inactive_anon:8kB active_file:44kB inactive_file:249876kB unevictable:0kB writepending:968kB zspages:0kB present:3129332kB managed:2530528kB mlocked:0kB bounce:0kB free_pcp:74344kB local_pcp:43192kB free_cma:0kB [ 401.349032][ T9419] lowmem_reserve[]: 0 0 0 0 0 [ 401.349050][ T9419] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.349079][ T9419] lowmem_reserve[]: 0 0 0 0 0 [ 401.349096][ T9419] Node 1 Normal free:3947716kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.349139][ T9419] lowmem_reserve[]: 0 0 0 0 0 [ 401.349157][ T9419] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 401.349220][ T9419] Node 0 DMA32: 1797*4kB (UM) 1606*8kB (UME) 938*16kB (UME) 1024*32kB (UM) 583*64kB (UME) 450*128kB (UME) 570*256kB (UME) 372*512kB (UM) 201*1024kB (UME) 25*2048kB (UM) 43*4096kB (UM) = 932260kB [ 401.349324][ T9419] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 401.349377][ T9419] Node 1 Normal: 5*4kB (UM) 4*8kB (UM) 7*16kB (UM) 7*32kB (UM) 5*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3947716kB [ 401.349478][ T9419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.349487][ T9419] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.349495][ T9419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.349503][ T9419] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.349511][ T9419] 110872 total pagecache pages [ 401.349515][ T9419] 2 pages in swap cache [ 401.349519][ T9419] Free swap = 124988kB [ 401.349522][ T9419] Total swap = 124996kB [ 401.349526][ T9419] 2097051 pages RAM [ 401.349541][ T9419] 0 pages HighMem/MovableOnly [ 401.349545][ T9419] 432785 pages reserved [ 401.349549][ T9419] 0 pages cma reserved [ 401.513465][ T30] ti_usb_3410_5052 1-1:0.70: TI USB 3410 1 port adapter converter detected [ 401.543136][ T9423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.670882][ T9424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.691325][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 401.901590][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 401.938572][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 402.075372][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 402.075403][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41416, setting to 1024 [ 402.075429][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 402.384606][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.384639][ T10] usb 6-1: Product: syz [ 402.384654][ T10] usb 6-1: Manufacturer: syz [ 402.384669][ T10] usb 6-1: SerialNumber: syz [ 402.683153][ T10] usb 6-1: config 0 descriptor?? [ 402.814513][ T30] usb 1-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 402.817273][ T10] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 403.566593][ T30] usb 1-1: USB disconnect, device number 27 [ 403.592851][ T30] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 403.600832][ T30] ti_usb_3410_5052 1-1:0.70: device disconnected [ 404.135022][ T9437] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5598] was attempted by ""[9437] [ 404.138646][ T9437] FAULT_INJECTION: forcing a failure. [ 404.138646][ T9437] name failslab, interval 1, probability 0, space 0, times 0 [ 404.138688][ T9437] CPU: 0 UID: 0 PID: 9437 Comm: syz.0.1153 Not tainted syzkaller #0 PREEMPT(full) [ 404.138711][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 404.138723][ T9437] Call Trace: [ 404.138730][ T9437] [ 404.138737][ T9437] dump_stack_lvl+0x100/0x190 [ 404.138773][ T9437] should_fail_ex.cold+0x5/0xa [ 404.138801][ T9437] should_failslab+0xc2/0x120 [ 404.138826][ T9437] __kmalloc_noprof+0xfc/0x840 [ 404.138848][ T9437] ? tomoyo_encode2+0xfb/0x3c0 [ 404.138878][ T9437] tomoyo_encode2+0xfb/0x3c0 [ 404.138905][ T9437] tomoyo_encode+0x29/0x50 [ 404.138927][ T9437] tomoyo_realpath_from_path+0x18c/0x690 [ 404.138957][ T9437] tomoyo_path_number_perm+0x23c/0x580 [ 404.138976][ T9437] ? tomoyo_path_number_perm+0x22e/0x580 [ 404.138996][ T9437] ? lock_acquire+0x154/0x380 [ 404.139018][ T9437] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 404.139037][ T9437] ? __pfx_sched_clock_cpu+0x10/0x10 [ 404.139058][ T9437] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 404.139090][ T9437] ? __lock_acquire+0x5c0/0x1f40 [ 404.139125][ T9437] ? __fget_files+0x34/0x3d0 [ 404.139149][ T9437] ? find_held_lock+0x2b/0x80 [ 404.139174][ T9437] ? hook_file_ioctl_common+0x140/0x440 [ 404.139207][ T9437] ? __fget_files+0x21f/0x3d0 [ 404.139235][ T9437] security_file_ioctl+0xd3/0x230 [ 404.139259][ T9437] __x64_sys_ioctl+0xb7/0x210 [ 404.139282][ T9437] do_syscall_64+0x123/0x790 [ 404.139311][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.139334][ T9437] RIP: 0033:0x7f337819e159 [ 404.139351][ T9437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.139368][ T9437] RSP: 002b:00007f337900d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.139388][ T9437] RAX: ffffffffffffffda RBX: 00007f3378426180 RCX: 00007f337819e159 [ 404.139401][ T9437] RDX: 0000200000000080 RSI: 0000000080047c05 RDI: 0000000000000007 [ 404.139414][ T9437] RBP: 00007f337900d090 R08: 0000000000000000 R09: 0000000000000000 [ 404.139426][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.139438][ T9437] R13: 00007f3378426218 R14: 00007f3378426180 R15: 00007fff23c5d138 [ 404.139472][ T9437] [ 404.139552][ T9437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 404.157401][ T9437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.440035][ T5705] usb 6-1: USB disconnect, device number 19 [ 405.821855][ T30] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 405.840582][ T9450] virtio-fs: tag not found [ 405.843673][ T9447] bond1: ARP target 9.0.0.0 is already present [ 405.843693][ T9447] bond1: option arp_ip_target: invalid value (9) [ 405.862201][ T9450] virtio-fs: tag not found [ 405.862745][ T9447] bond1 (unregistering): Released all slaves [ 405.890625][ T9451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.055423][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 406.058090][ T30] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 406.063303][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.063344][ T30] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 406.063368][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.065105][ T30] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 406.065127][ T30] usb 2-1: Product: syz [ 406.065142][ T30] usb 2-1: Manufacturer: syz [ 406.065156][ T30] usb 2-1: SerialNumber: syz [ 406.086325][ T30] usb 2-1: config 0 descriptor?? [ 406.402955][ T31] audit: type=1400 audit(1789491730.472:505): avc: denied { unmount } for pid=6160 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 406.621908][ T30] rc_core: IR keymap rc-imon-rsc not found [ 406.621926][ T30] Registered IR keymap rc-empty [ 406.623609][ T30] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 406.626773][ T9443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.627163][ T9443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.632306][ T9443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.632711][ T9443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.639062][ T30] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 406.740151][ T30] usb 2-1: USB disconnect, device number 30 [ 406.773591][ T6604] udevd[6604]: setting owner of /dev/bus/usb/002/030 to uid=0, gid=0 failed: No such file or directory [ 406.829537][ T9464] syz_tun: entered allmulticast mode [ 407.204330][ T9462] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1159'. [ 407.212544][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1159'. [ 407.270165][ T31] audit: type=1400 audit(1789491731.332:506): avc: denied { shutdown } for pid=9469 comm="syz.1.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 407.409907][ T9456] syz_tun: left allmulticast mode [ 407.662818][ T30] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 407.863159][ T9475] virtio-fs: tag not found [ 407.871540][ T30] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 407.876873][ T9475] virtio-fs: tag not found [ 407.880400][ T30] usb 2-1: config 0 has no interfaces? [ 407.901637][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.901672][ T30] usb 2-1: Product: syz [ 407.901710][ T30] usb 2-1: Manufacturer: syz [ 407.901749][ T30] usb 2-1: SerialNumber: syz [ 408.079105][ T30] usb 2-1: config 0 descriptor?? [ 408.202093][ T31] audit: type=1400 audit(1789491732.262:507): avc: denied { create } for pid=9474 comm="syz.3.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 408.202138][ T31] audit: type=1400 audit(1789491732.262:508): avc: denied { getopt } for pid=9474 comm="syz.3.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 408.202181][ T31] audit: type=1400 audit(1789491732.262:509): avc: denied { ioctl } for pid=9474 comm="syz.3.1163" path="socket:[29391]" dev="sockfs" ino=29391 ioctlcmd=0x6f04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 408.378068][ T9480] bond1: ARP target 9.0.0.0 is already present [ 408.378092][ T9480] bond1: option arp_ip_target: invalid value (9) [ 408.390768][ T9480] bond1 (unregistering): Released all slaves [ 408.447955][ T9492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.204777][ T5795] usb 2-1: USB disconnect, device number 31 [ 410.502582][ T9500] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6160] was attempted by ""[9500] [ 410.513975][ T9500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.966981][ T31] audit: type=1400 audit(1789491735.032:510): avc: denied { write } for pid=9484 comm="syz.3.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 411.875299][ T9512] netlink: 'syz.5.1171': attribute type 3 has an invalid length. [ 411.875327][ T9512] netlink: 'syz.5.1171': attribute type 1 has an invalid length. [ 412.123807][ T9519] FAULT_INJECTION: forcing a failure. [ 412.123807][ T9519] name failslab, interval 1, probability 0, space 0, times 0 [ 412.123837][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: syz.5.1176 Not tainted syzkaller #0 PREEMPT(full) [ 412.123859][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 412.123870][ T9519] Call Trace: [ 412.123877][ T9519] [ 412.123885][ T9519] dump_stack_lvl+0x100/0x190 [ 412.123917][ T9519] should_fail_ex.cold+0x5/0xa [ 412.123945][ T9519] should_failslab+0xc2/0x120 [ 412.123968][ T9519] kmem_cache_alloc_noprof+0x92/0x6a0 [ 412.123987][ T9519] ? find_held_lock+0x2b/0x80 [ 412.124011][ T9519] ? alloc_empty_file+0x5b/0x1c0 [ 412.124041][ T9519] alloc_empty_file+0x5b/0x1c0 [ 412.124067][ T9519] path_openat+0xdb/0x2440 [ 412.124096][ T9519] ? __pfx_path_openat+0x10/0x10 [ 412.124117][ T9519] ? kasan_save_stack+0x30/0x50 [ 412.124137][ T9519] ? kasan_save_track+0x14/0x30 [ 412.124156][ T9519] ? __kasan_slab_alloc+0x89/0x90 [ 412.124176][ T9519] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 412.124195][ T9519] ? do_getname_kernel+0x5d/0x250 [ 412.124219][ T9519] ? open_exec+0x16/0x40 [ 412.124236][ T9519] ? open_interp_file+0x74/0xf0 [ 412.124254][ T9519] ? bm_register_write+0xd15/0x2120 [ 412.124280][ T9519] do_file_open+0x20e/0x430 [ 412.124312][ T9519] ? __pfx_do_file_open+0x10/0x10 [ 412.124363][ T9519] ? rcu_is_watching+0x13/0xc0 [ 412.124392][ T9519] do_open_execat+0xd1/0x360 [ 412.124412][ T9519] ? __pfx_do_open_execat+0x10/0x10 [ 412.124431][ T9519] ? do_getname_kernel+0x5d/0x250 [ 412.124457][ T9519] ? __asan_memcpy+0x3c/0x60 [ 412.124476][ T9519] ? do_getname_kernel+0x1be/0x250 [ 412.124505][ T9519] open_exec+0x28/0x40 [ 412.124523][ T9519] open_interp_file+0x74/0xf0 [ 412.124544][ T9519] bm_register_write+0xd15/0x2120 [ 412.124574][ T9519] vfs_write+0x2aa/0x1050 [ 412.124595][ T9519] ? __pfx_bm_register_write+0x10/0x10 [ 412.124614][ T9519] ? lock_acquire+0x1d1/0x380 [ 412.124633][ T9519] ? __fget_files+0x34/0x3d0 [ 412.124655][ T9519] ? __pfx_vfs_write+0x10/0x10 [ 412.124673][ T9519] ? find_held_lock+0x2b/0x80 [ 412.124698][ T9519] ? __fget_files+0x215/0x3d0 [ 412.124725][ T9519] ? __fget_files+0x21f/0x3d0 [ 412.124758][ T9519] ksys_write+0x12a/0x250 [ 412.124777][ T9519] ? __pfx_ksys_write+0x10/0x10 [ 412.124806][ T9519] do_syscall_64+0x123/0x790 [ 412.124835][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.124856][ T9519] RIP: 0033:0x7ffbb3b9e159 [ 412.124872][ T9519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.124889][ T9519] RSP: 002b:00007ffbb4a28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.124908][ T9519] RAX: ffffffffffffffda RBX: 00007ffbb3e25fa0 RCX: 00007ffbb3b9e159 [ 412.124921][ T9519] RDX: 0000000000000034 RSI: 0000200000000100 RDI: 0000000000000004 [ 412.124933][ T9519] RBP: 00007ffbb4a28090 R08: 0000000000000000 R09: 0000000000000000 [ 412.124945][ T9519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.124956][ T9519] R13: 00007ffbb3e26038 R14: 00007ffbb3e25fa0 R15: 00007ffcf7f0fae8 [ 412.124985][ T9519] [ 412.168722][ T9519] binfmt_misc: register: failed to install interpreter ./file0 [ 412.182110][ T9521] syz_tun: entered allmulticast mode [ 412.968853][ T9533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.688109][ T9528] bond1: ARP target 9.0.0.0 is already present [ 413.688134][ T9528] bond1: option arp_ip_target: invalid value (9) [ 413.689527][ T9528] bond1 (unregistering): Released all slaves [ 413.726088][ T9536] 9pnet_virtio: no channels available for device 127.0.0.1 [ 413.746819][ T9513] syz_tun: left allmulticast mode [ 415.272019][ T5795] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 415.449705][ T5795] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 415.484724][ T5795] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 415.518323][ T5795] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 415.569685][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.570535][ T5795] usb 2-1: Product: syz [ 415.570655][ T5795] usb 2-1: Manufacturer: syz [ 415.570682][ T5795] usb 2-1: SerialNumber: syz [ 416.348656][ T5795] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 416.369170][ T5795] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 416.383286][ T5795] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 416.743715][ T9554] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1186'. [ 416.936449][ T31] audit: type=1400 audit(1789491741.002:511): avc: denied { create } for pid=9556 comm="syz.3.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 416.938805][ T31] audit: type=1400 audit(1789491741.002:512): avc: denied { write } for pid=9556 comm="syz.3.1188" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 417.105346][ T9562] FAULT_INJECTION: forcing a failure. [ 417.105346][ T9562] name failslab, interval 1, probability 0, space 0, times 0 [ 417.105376][ T9562] CPU: 1 UID: 0 PID: 9562 Comm: syz.3.1188 Not tainted syzkaller #0 PREEMPT(full) [ 417.105402][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 417.105413][ T9562] Call Trace: [ 417.105420][ T9562] [ 417.105427][ T9562] dump_stack_lvl+0x100/0x190 [ 417.105460][ T9562] should_fail_ex.cold+0x5/0xa [ 417.105488][ T9562] should_failslab+0xc2/0x120 [ 417.105513][ T9562] __kmalloc_noprof+0xfc/0x840 [ 417.105534][ T9562] ? __pfx_dynamic_dname+0x10/0x10 [ 417.105554][ T9562] ? tomoyo_encode2+0xfb/0x3c0 [ 417.105582][ T9562] tomoyo_encode2+0xfb/0x3c0 [ 417.105609][ T9562] tomoyo_encode+0x29/0x50 [ 417.105630][ T9562] tomoyo_realpath_from_path+0x18c/0x690 [ 417.105661][ T9562] tomoyo_path_number_perm+0x23c/0x580 [ 417.105680][ T9562] ? tomoyo_path_number_perm+0x22e/0x580 [ 417.105701][ T9562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 417.105733][ T9562] ? __lock_acquire+0x5c0/0x1f40 [ 417.105769][ T9562] ? __fget_files+0x34/0x3d0 [ 417.105793][ T9562] ? find_held_lock+0x2b/0x80 [ 417.105826][ T9562] ? hook_file_ioctl_common+0x140/0x440 [ 417.105859][ T9562] ? __fget_files+0x21f/0x3d0 [ 417.105886][ T9562] security_file_ioctl+0xd3/0x230 [ 417.105910][ T9562] __x64_sys_ioctl+0xb7/0x210 [ 417.105933][ T9562] do_syscall_64+0x123/0x790 [ 417.105961][ T9562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.105981][ T9562] RIP: 0033:0x7fc52359e159 [ 417.105998][ T9562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.106015][ T9562] RSP: 002b:00007fc52451a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.106035][ T9562] RAX: ffffffffffffffda RBX: 00007fc523826090 RCX: 00007fc52359e159 [ 417.106048][ T9562] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 417.106060][ T9562] RBP: 00007fc52451a090 R08: 0000000000000000 R09: 0000000000000000 [ 417.106072][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.106083][ T9562] R13: 00007fc523826128 R14: 00007fc523826090 R15: 00007fff09cbb8d8 [ 417.106111][ T9562] [ 417.106137][ T9562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 419.561742][ T5795] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 419.602256][ T9583] 9pnet_virtio: no channels available for device 127.0.0.1 [ 419.713455][ T5795] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 419.714482][ T5795] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.714528][ T5795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.755088][ T5795] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 419.755225][ T5795] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 419.755273][ T5795] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 419.762419][ T5795] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 419.762509][ T5795] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 419.769919][ T5795] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 419.790865][ T5795] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 419.790939][ T5795] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 419.802430][ T5795] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 420.295214][ T5698] usb 4-1: USB disconnect, device number 20 [ 420.325712][ T9544] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 420.326485][ T9544] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 420.326544][ T9544] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 420.327211][ T5698] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 420.327993][ T9544] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 420.329901][ T5698] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 420.330680][ T5698] keyspan 4-1:1.0: device disconnected [ 420.416034][ T5795] usb 2-1: USB disconnect, device number 32 [ 420.427965][ T5795] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 420.447155][ T5795] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 420.447617][ T5795] ti_usb_3410_5052 2-1:2.0: device disconnected [ 420.583753][ T31] audit: type=1400 audit(1789491744.652:513): avc: denied { write } for pid=9591 comm="syz.0.1198" name="core" dev="configfs" ino=3463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 420.584816][ T9592] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 420.587956][ T31] audit: type=1400 audit(1789491744.652:514): avc: denied { kexec_image_load } for pid=9591 comm="syz.0.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 420.632448][ T9590] syzkaller0: entered promiscuous mode [ 420.632469][ T9590] syzkaller0: entered allmulticast mode [ 420.661675][ T31] audit: type=1400 audit(1789491744.722:515): avc: denied { read write } for pid=9591 comm="syz.0.1198" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 420.661723][ T31] audit: type=1400 audit(1789491744.722:516): avc: denied { open } for pid=9591 comm="syz.0.1198" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 420.734375][ T31] audit: type=1400 audit(1789491744.802:517): avc: denied { setopt } for pid=9591 comm="syz.0.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 420.737410][ T31] audit: type=1400 audit(1789491744.802:518): avc: denied { bind } for pid=9591 comm="syz.0.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 420.739564][ T9590] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 420.742987][ T190] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 420.798225][ T31] audit: type=1400 audit(1789491744.862:519): avc: denied { map } for pid=9591 comm="syz.0.1198" path="socket:[29857]" dev="sockfs" ino=29857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 420.798273][ T31] audit: type=1400 audit(1789491744.862:520): avc: denied { read write } for pid=9591 comm="syz.0.1198" path="socket:[29857]" dev="sockfs" ino=29857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 420.860230][ T9594] bond1: ARP target 9.0.0.0 is already present [ 420.860245][ T9594] bond1: option arp_ip_target: invalid value (9) [ 420.870879][ T9598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.898415][ T9594] bond1 (unregistering): Released all slaves [ 421.182284][ T9608] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.1202'. [ 421.182306][ T9608] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.1202'. [ 421.351341][ T30] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 422.221964][ T30] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 422.222912][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.222957][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.281972][ T30] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 422.282170][ T30] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 422.282226][ T30] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 422.362114][ T30] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 422.362194][ T30] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 422.363789][ T30] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 422.365262][ T30] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 422.365333][ T30] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 422.366864][ T30] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 422.486102][ T9617] 9pnet_virtio: no channels available for device 127.0.0.1 [ 422.826354][ T30] usb 1-1: USB disconnect, device number 28 [ 423.591817][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 424.268690][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 424.328129][ T30] keyspan 1-1:1.0: device disconnected [ 425.313465][ T30] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 425.472833][ T30] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 425.473996][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.474042][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.512913][ T30] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 425.513084][ T9637] FAULT_INJECTION: forcing a failure. [ 425.513084][ T9637] name failslab, interval 1, probability 0, space 0, times 0 [ 425.513111][ T9637] CPU: 0 UID: 0 PID: 9637 Comm: syz.1.1213 Not tainted syzkaller #0 PREEMPT(full) [ 425.513129][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 425.513136][ T9637] Call Trace: [ 425.513140][ T9637] [ 425.513145][ T9637] dump_stack_lvl+0x100/0x190 [ 425.513168][ T9637] should_fail_ex.cold+0x5/0xa [ 425.513184][ T9637] should_failslab+0xc2/0x120 [ 425.513200][ T9637] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 425.513213][ T9637] ? sock_alloc_inode+0x26/0x2c0 [ 425.513230][ T9637] ? __pfx_sock_alloc_inode+0x10/0x10 [ 425.513245][ T9637] sock_alloc_inode+0x26/0x2c0 [ 425.513261][ T9637] ? __pfx_sock_alloc_inode+0x10/0x10 [ 425.513276][ T9637] alloc_inode+0x68/0x250 [ 425.513290][ T9637] sock_alloc+0x44/0x280 [ 425.513312][ T9637] ? security_socket_create+0x7f/0x250 [ 425.513341][ T9637] __sock_create+0xc2/0x860 [ 425.513360][ T9637] __sys_socket+0x14d/0x260 [ 425.513370][ T9637] ? fput+0x7c/0x100 [ 425.513383][ T9637] ? __pfx___sys_socket+0x10/0x10 [ 425.513393][ T9637] ? ksys_write+0x1ac/0x250 [ 425.513404][ T9637] ? __pfx_ksys_write+0x10/0x10 [ 425.513418][ T9637] __x64_sys_socket+0x72/0xb0 [ 425.513428][ T9637] ? lockdep_hardirqs_on+0x7d/0x110 [ 425.513443][ T9637] do_syscall_64+0x123/0x790 [ 425.513459][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.513471][ T9637] RIP: 0033:0x7f3061d9e159 [ 425.513481][ T9637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.513493][ T9637] RSP: 002b:00007f3062d0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 425.513505][ T9637] RAX: ffffffffffffffda RBX: 00007f3062025fa0 RCX: 00007f3061d9e159 [ 425.513512][ T9637] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 425.513519][ T9637] RBP: 00007f3061e3503b R08: 0000000000000000 R09: 0000000000000000 [ 425.513526][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.513534][ T9637] R13: 00007f3062026038 R14: 00007f3062025fa0 R15: 00007ffd0b55fa68 [ 425.513550][ T9637] [ 425.513556][ T9637] socket: no more sockets [ 425.516175][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 425.516237][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 425.517512][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 425.517581][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 425.519594][ T30] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 425.528759][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 425.528806][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 425.600652][ T30] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 426.160506][ T25] libceph: connect (1)[c::]:6789 error -101 [ 426.170896][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 426.185902][ T9643] ceph: No mds server is up or the cluster is laggy [ 426.202521][ T25] libceph: connect (1)[c::]:6789 error -101 [ 426.202699][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 426.271696][ T9648] FAULT_INJECTION: forcing a failure. [ 426.271696][ T9648] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 426.271727][ T9648] CPU: 0 UID: 0 PID: 9648 Comm: syz.1.1216 Not tainted syzkaller #0 PREEMPT(full) [ 426.271750][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 426.271761][ T9648] Call Trace: [ 426.271768][ T9648] [ 426.271776][ T9648] dump_stack_lvl+0x100/0x190 [ 426.271808][ T9648] should_fail_ex.cold+0x5/0xa [ 426.271836][ T9648] _copy_to_user+0x32/0xd0 [ 426.271858][ T9648] do_sock_getsockopt+0x631/0x6e0 [ 426.271890][ T9648] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 426.271921][ T9648] ? __fget_files+0x34/0x3d0 [ 426.271944][ T9648] ? find_held_lock+0x2b/0x80 [ 426.271976][ T9648] ? __fget_files+0x21f/0x3d0 [ 426.272005][ T9648] __sys_getsockopt+0x148/0x260 [ 426.272035][ T9648] ? __x64_sys_getsockopt+0xbd/0x160 [ 426.272056][ T9648] __x64_sys_getsockopt+0xbd/0x160 [ 426.272077][ T9648] ? do_syscall_64+0xae/0x790 [ 426.272097][ T9648] ? lockdep_hardirqs_on+0x7d/0x110 [ 426.272115][ T9648] do_syscall_64+0x123/0x790 [ 426.272136][ T9648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.272151][ T9648] RIP: 0033:0x7f3061d9e159 [ 426.272164][ T9648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.272177][ T9648] RSP: 002b:00007f3062d0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 426.272192][ T9648] RAX: ffffffffffffffda RBX: 00007f3062025fa0 RCX: 00007f3061d9e159 [ 426.272202][ T9648] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 0000000000000004 [ 426.272210][ T9648] RBP: 00007f3062d0a090 R08: 0000200000000640 R09: 0000000000000000 [ 426.272219][ T9648] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 426.272229][ T9648] R13: 00007f3062026038 R14: 00007f3062025fa0 R15: 00007ffd0b55fa68 [ 426.272251][ T9648] [ 426.470550][ T25] libceph: connect (1)[c::]:6789 error -101 [ 426.470665][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 427.476402][ T9661] C: renamed from veth1_to_team (while UP) [ 427.595032][ T9664] netlink: 'syz.3.1205': attribute type 4 has an invalid length. [ 427.595256][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 427.595287][ T31] audit: type=1400 audit(1789491751.652:524): avc: denied { write } for pid=9658 comm="syz.3.1205" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 427.651464][ T9665] netlink: 'syz.3.1205': attribute type 4 has an invalid length. [ 427.789158][ T9661] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1221'. [ 428.791538][ T9674] binfmt_misc: register: failed to install interpreter ./file0 [ 429.153353][ T25] usb 6-1: USB disconnect, device number 20 [ 429.195672][ T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 429.224034][ T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 429.224606][ T25] keyspan 6-1:1.0: device disconnected [ 430.661568][ T9691] netlink: 'syz.1.1220': attribute type 4 has an invalid length. [ 430.719163][ T9692] netlink: 'syz.1.1220': attribute type 4 has an invalid length. [ 431.857643][ T9699] virtio-fs: tag not found [ 431.899170][ T9699] virtio-fs: tag not found [ 432.782140][ T5698] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 432.918728][ T9705] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (1080055392 ns). Using initial count to start timer. [ 432.942444][ T5698] usb 3-1: Using ep0 maxpacket: 8 [ 432.944734][ T5698] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 432.950201][ T5698] usb 3-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 432.950225][ T5698] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.950247][ T5698] usb 3-1: config 1 has no interface number 0 [ 432.950281][ T5698] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 432.950304][ T5698] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 432.950330][ T5698] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 433.019639][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.019665][ T5698] usb 3-1: Product: syz [ 433.019680][ T5698] usb 3-1: Manufacturer: syz [ 433.019688][ T5698] usb 3-1: SerialNumber: syz [ 433.587183][ T9713] MPI: mpi too large (107144 bits) [ 433.674172][ T9701] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5600] was attempted by ""[9701] [ 433.679249][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.679638][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.721097][ T9701] syz.2.1235 uses obsolete (PF_INET,SOCK_PACKET) [ 433.728891][ T31] audit: type=1400 audit(1789491757.792:525): avc: denied { ioctl } for pid=9700 comm="syz.2.1235" path="socket:[30060]" dev="sockfs" ino=30060 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 433.997761][ T9720] FAULT_INJECTION: forcing a failure. [ 433.997761][ T9720] name failslab, interval 1, probability 0, space 0, times 0 [ 433.997819][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: syz.5.1241 Not tainted syzkaller #0 PREEMPT(full) [ 433.997846][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 433.997859][ T9720] Call Trace: [ 433.997866][ T9720] [ 433.997873][ T9720] dump_stack_lvl+0x100/0x190 [ 433.997901][ T9720] should_fail_ex.cold+0x5/0xa [ 433.997920][ T9720] should_failslab+0xc2/0x120 [ 433.997935][ T9720] kmem_cache_alloc_noprof+0x92/0x6a0 [ 433.997947][ T9720] ? __pfx_map_id_range_down+0x10/0x10 [ 433.997961][ T9720] ? rcu_is_watching+0x13/0xc0 [ 433.997976][ T9720] ? security_inode_alloc+0x3b/0x2c0 [ 433.997990][ T9720] security_inode_alloc+0x3b/0x2c0 [ 433.998002][ T9720] inode_init_always_gfp+0xc6f/0xfb0 [ 433.998020][ T9720] alloc_inode+0x8e/0x250 [ 433.998032][ T9720] sock_alloc+0x44/0x280 [ 433.998046][ T9720] ? security_socket_create+0x7f/0x250 [ 433.998063][ T9720] __sock_create+0xc2/0x860 [ 433.998085][ T9720] __sys_socket+0x14d/0x260 [ 433.998097][ T9720] ? __pfx___sys_socket+0x10/0x10 [ 433.998113][ T9720] __x64_sys_socket+0x72/0xb0 [ 433.998122][ T9720] ? lockdep_hardirqs_on+0x7d/0x110 [ 433.998138][ T9720] do_syscall_64+0x123/0x790 [ 433.998154][ T9720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.998168][ T9720] RIP: 0033:0x7ffbb3b9e159 [ 433.998178][ T9720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.998189][ T9720] RSP: 002b:00007ffbb49e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 433.998201][ T9720] RAX: ffffffffffffffda RBX: 00007ffbb3e26180 RCX: 00007ffbb3b9e159 [ 433.998208][ T9720] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 433.998215][ T9720] RBP: 00007ffbb3c3503b R08: 0000000000000000 R09: 0000000000000000 [ 433.998222][ T9720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.998228][ T9720] R13: 00007ffbb3e26218 R14: 00007ffbb3e26180 R15: 00007ffcf7f0fae8 [ 433.998243][ T9720] [ 433.998340][ T9720] socket: no more sockets [ 434.344627][ T5698] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 434.482478][ T190] usb 3-1: USB disconnect, device number 26 [ 434.497817][ T5698] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 434.515985][ T5698] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 434.516016][ T5698] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 434.516041][ T5698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 434.516066][ T5698] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25953, setting to 1024 [ 434.516105][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.543352][ T9716] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 434.543455][ T9716] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 434.543535][ T9716] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 434.592674][ T5795] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 434.607919][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.607970][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.631792][ T5698] pl2303 4-1:1.0: pl2303 converter detected [ 434.654276][ T5698] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 434.745514][ T5795] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 434.750108][ T5795] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.750153][ T5795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.788233][ T5795] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 434.788423][ T5795] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 434.788481][ T5795] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 434.800495][ T5795] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 434.800566][ T5795] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 434.820016][ T5795] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 434.841929][ T5795] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 434.842002][ T5795] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 434.853780][ T5795] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 434.879383][ T9728] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 434.918151][ T9715] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 434.919232][ T9715] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 434.920305][ T9715] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 434.925054][ T9715] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 434.930210][ T9715] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 435.057029][ T9732] virtio-fs: tag not found [ 435.058059][ T9732] virtio-fs: tag not found [ 435.192000][ T9715] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 435.210707][ T9715] pl2303 ttyUSB0: error sending break = -32 [ 435.220047][ T5698] usb 4-1: USB disconnect, device number 21 [ 435.534532][ T25] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 435.560168][ T9] usb 1-1: USB disconnect, device number 29 [ 435.577090][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 435.579308][ T5698] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 435.603725][ T5698] pl2303 4-1:1.0: device disconnected [ 435.611109][ T9] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 435.620466][ T9] keyspan 1-1:1.0: device disconnected [ 435.691325][ T25] usb 6-1: device descriptor read/64, error -71 [ 436.054129][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 436.231593][ T25] usb 6-1: device descriptor read/64, error -71 [ 436.352990][ T25] usb usb6-port1: attempt power cycle [ 436.851530][ T25] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 436.881413][ T25] usb 6-1: device descriptor read/8, error -71 [ 436.991874][ T9745] FAULT_INJECTION: forcing a failure. [ 436.991874][ T9745] name failslab, interval 1, probability 0, space 0, times 0 [ 437.016128][ T9745] CPU: 1 UID: 0 PID: 9745 Comm: syz.0.1249 Not tainted syzkaller #0 PREEMPT(full) [ 437.016155][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 437.016170][ T9745] Call Trace: [ 437.016176][ T9745] [ 437.016184][ T9745] dump_stack_lvl+0x100/0x190 [ 437.016219][ T9745] should_fail_ex.cold+0x5/0xa [ 437.016248][ T9745] should_failslab+0xc2/0x120 [ 437.016273][ T9745] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 437.016297][ T9745] ? __alloc_skb+0x140/0x710 [ 437.016325][ T9745] __alloc_skb+0x140/0x710 [ 437.016342][ T9745] ? __alloc_skb+0x5b7/0x710 [ 437.016361][ T9745] ? __pfx___alloc_skb+0x10/0x10 [ 437.016388][ T9745] hci_sock_sendmsg+0x1b01/0x2620 [ 437.016419][ T9745] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 437.016442][ T9745] ? selinux_socket_sendmsg+0x198/0x2f0 [ 437.016467][ T9745] sock_write_iter+0x53a/0x5b0 [ 437.016492][ T9745] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 437.016514][ T9745] ? __pfx_sock_write_iter+0x10/0x10 [ 437.016554][ T9745] ? bpf_lsm_file_permission+0x9/0x10 [ 437.016578][ T9745] ? security_file_permission+0x76/0x210 [ 437.016600][ T9745] ? rw_verify_area+0xce/0x6d0 [ 437.016629][ T9745] vfs_write+0x6af/0x1050 [ 437.016648][ T9745] ? __pfx_sock_write_iter+0x10/0x10 [ 437.016677][ T9745] ? __pfx_vfs_write+0x10/0x10 [ 437.016694][ T9745] ? find_held_lock+0x2b/0x80 [ 437.016739][ T9745] ksys_write+0x1f8/0x250 [ 437.016759][ T9745] ? __pfx_ksys_write+0x10/0x10 [ 437.016788][ T9745] do_syscall_64+0x123/0x790 [ 437.016815][ T9745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.016833][ T9745] RIP: 0033:0x7f337819e159 [ 437.016849][ T9745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.016866][ T9745] RSP: 002b:00007f337904f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.016886][ T9745] RAX: ffffffffffffffda RBX: 00007f3378425fa0 RCX: 00007f337819e159 [ 437.016898][ T9745] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004 [ 437.016910][ T9745] RBP: 00007f337904f090 R08: 0000000000000000 R09: 0000000000000000 [ 437.016922][ T9745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.016933][ T9745] R13: 00007f3378426038 R14: 00007f3378425fa0 R15: 00007fff23c5d138 [ 437.016962][ T9745] [ 437.081715][ T31] audit: type=1400 audit(1789491761.142:526): avc: denied { create } for pid=9746 comm="syz.2.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 437.090630][ T31] audit: type=1400 audit(1789491761.152:527): avc: denied { ioctl } for pid=9746 comm="syz.2.1251" path="socket:[30120]" dev="sockfs" ino=30120 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 437.132451][ T9747] syzkaller1: entered promiscuous mode [ 437.132471][ T9747] syzkaller1: entered allmulticast mode [ 437.151479][ T25] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 437.183718][ T25] usb 6-1: device descriptor read/8, error -71 [ 437.200507][ T9747] syzkaller0: entered promiscuous mode [ 437.200527][ T9747] syzkaller0: entered allmulticast mode [ 437.306996][ T25] usb usb6-port1: unable to enumerate USB device [ 437.518234][ T9755] netlink: 'syz.1.1253': attribute type 4 has an invalid length. [ 437.574493][ T9756] netlink: 'syz.1.1253': attribute type 4 has an invalid length. [ 438.516809][ T9761] virtio-fs: tag not found [ 438.523615][ T9761] virtio-fs: tag not found [ 439.412829][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 439.561542][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 439.564935][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 439.568290][ T9] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 439.568315][ T9] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 439.568335][ T9] usb 3-1: config 0 has no interface number 0 [ 439.568369][ T9] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.568392][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 37, changing to 9 [ 439.568417][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 10008, setting to 1024 [ 439.636871][ T9] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 439.636896][ T9] usb 3-1: Product: syz [ 439.636910][ T9] usb 3-1: Manufacturer: syz [ 439.664740][ T9] usb 3-1: config 0 descriptor?? [ 439.692095][ T9766] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 440.499642][ T9766] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 441.671336][ T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 441.821347][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 441.824850][ T25] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 441.829123][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 441.829167][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.874993][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.875019][ T25] usb 2-1: Product: syz [ 441.875034][ T25] usb 2-1: Manufacturer: syz [ 441.875049][ T25] usb 2-1: SerialNumber: syz [ 441.910493][ T25] usb 2-1: config 0 descriptor?? [ 441.921138][ T25] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 441.933000][ T25] usb 2-1: Detected FT232R [ 442.165974][ T9787] netlink: 'syz.2.1264': attribute type 4 has an invalid length. [ 442.222636][ T9789] netlink: 'syz.2.1264': attribute type 4 has an invalid length. [ 442.256788][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 442.591986][ T25] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 442.701359][ T30] usb 2-1: USB disconnect, device number 33 [ 442.866743][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1263'. [ 442.965066][ T31] audit: type=1400 audit(1789491767.032:528): avc: denied { bind } for pid=9790 comm="syz.5.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 442.965316][ T31] audit: type=1400 audit(1789491767.032:529): avc: denied { name_bind } for pid=9790 comm="syz.5.1263" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 443.093150][ T30] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 443.093666][ T30] ftdi_sio 2-1:0.0: device disconnected [ 443.095782][ T31] audit: type=1400 audit(1789491767.162:530): avc: denied { getopt } for pid=9790 comm="syz.5.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 443.759044][ T31] audit: type=1400 audit(1789491767.822:531): avc: denied { cmd } for pid=9800 comm="syz.3.1267" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=io_uring permissive=1 [ 443.914683][ T9805] netlink: 'syz.1.1268': attribute type 4 has an invalid length. [ 443.969460][ T9806] netlink: 'syz.1.1268': attribute type 4 has an invalid length. [ 444.860508][ T9812] netlink: 'syz.3.1270': attribute type 4 has an invalid length. [ 444.893927][ T9812] netlink: 'syz.3.1270': attribute type 4 has an invalid length. [ 446.960734][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.961125][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.457960][ T9823] netlink: 'syz.0.1275': attribute type 4 has an invalid length. [ 447.513546][ T9825] netlink: 'syz.0.1275': attribute type 4 has an invalid length. [ 448.060325][ T9833] FAULT_INJECTION: forcing a failure. [ 448.060325][ T9833] name failslab, interval 1, probability 0, space 0, times 0 [ 448.060357][ T9833] CPU: 1 UID: 0 PID: 9833 Comm: syz.2.1278 Not tainted syzkaller #0 PREEMPT(full) [ 448.060380][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 448.060392][ T9833] Call Trace: [ 448.060399][ T9833] [ 448.060406][ T9833] dump_stack_lvl+0x100/0x190 [ 448.060440][ T9833] should_fail_ex.cold+0x5/0xa [ 448.060471][ T9833] should_failslab+0xc2/0x120 [ 448.060496][ T9833] __kmalloc_noprof+0xfc/0x840 [ 448.060523][ T9833] ? rcu_is_watching+0x13/0xc0 [ 448.060548][ T9833] ? tomoyo_realpath_from_path+0xb6/0x690 [ 448.060579][ T9833] tomoyo_realpath_from_path+0xb6/0x690 [ 448.060609][ T9833] tomoyo_path_number_perm+0x23c/0x580 [ 448.060628][ T9833] ? tomoyo_path_number_perm+0x22e/0x580 [ 448.060650][ T9833] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 448.060682][ T9833] ? __lock_acquire+0x5c0/0x1f40 [ 448.060717][ T9833] ? __fget_files+0x34/0x3d0 [ 448.060742][ T9833] ? find_held_lock+0x2b/0x80 [ 448.060767][ T9833] ? hook_file_ioctl_common+0x140/0x440 [ 448.060799][ T9833] ? __fget_files+0x21f/0x3d0 [ 448.060827][ T9833] security_file_ioctl+0xd3/0x230 [ 448.060850][ T9833] __x64_sys_ioctl+0xb7/0x210 [ 448.060873][ T9833] do_syscall_64+0x123/0x790 [ 448.060902][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.060923][ T9833] RIP: 0033:0x7fef23d9e159 [ 448.060939][ T9833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.060956][ T9833] RSP: 002b:00007fef24cf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.060975][ T9833] RAX: ffffffffffffffda RBX: 00007fef24025fa0 RCX: 00007fef23d9e159 [ 448.060988][ T9833] RDX: 0000200000000000 RSI: 00000000400445a0 RDI: 0000000000000003 [ 448.061000][ T9833] RBP: 00007fef24cf9090 R08: 0000000000000000 R09: 0000000000000000 [ 448.061012][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.061023][ T9833] R13: 00007fef24026038 R14: 00007fef24025fa0 R15: 00007ffe34a5e2f8 [ 448.061051][ T9833] [ 448.142709][ T9833] ERROR: Out of memory at tomoyo_realpath_from_path. [ 449.252052][ T9841] syz_tun: entered allmulticast mode [ 449.411502][ T30] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 449.656335][ T30] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 449.687466][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.687518][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.719823][ T30] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 449.720023][ T30] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 449.720082][ T30] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 449.745889][ T30] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 449.745958][ T30] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 449.748853][ T30] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 449.750321][ T30] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 449.750401][ T30] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 449.793229][ T30] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 449.858835][ T9836] syz_tun: left allmulticast mode [ 450.556910][ T31] audit: type=1400 audit(1789491774.622:532): avc: denied { mounton } for pid=9847 comm="syz.2.1283" path="/237/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 450.633402][ T9850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.633835][ T9850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.735811][ T25] usb 3-1: USB disconnect, device number 27 [ 450.954689][ T30] usb 2-1: USB disconnect, device number 34 [ 450.979410][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 450.994465][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 450.995036][ T30] keyspan 2-1:1.0: device disconnected [ 451.116946][ T9855] virtio-fs: tag not found [ 451.118642][ T9855] virtio-fs: tag not found [ 451.338066][ T31] audit: type=1400 audit(1789491775.402:533): avc: denied { read write } for pid=9859 comm="syz.3.1280" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 451.338214][ T31] audit: type=1400 audit(1789491775.402:534): avc: denied { open } for pid=9859 comm="syz.3.1280" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 451.341122][ T9860] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 451.427517][ T9861] dns_resolver: Unsupported content type (6) [ 451.450047][ T31] audit: type=1400 audit(1789491775.502:535): avc: denied { connect } for pid=9856 comm="syz.0.1285" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 452.446497][ T9880] netlink: 'syz.0.1290': attribute type 4 has an invalid length. [ 452.502583][ T9882] netlink: 'syz.0.1290': attribute type 4 has an invalid length. [ 453.089689][ T9886] FAULT_INJECTION: forcing a failure. [ 453.089689][ T9886] name failslab, interval 1, probability 0, space 0, times 0 [ 453.089720][ T9886] CPU: 1 UID: 0 PID: 9886 Comm: syz.2.1292 Not tainted syzkaller #0 PREEMPT(full) [ 453.089741][ T9886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 453.089752][ T9886] Call Trace: [ 453.089759][ T9886] [ 453.089767][ T9886] dump_stack_lvl+0x100/0x190 [ 453.089800][ T9886] should_fail_ex.cold+0x5/0xa [ 453.089827][ T9886] should_failslab+0xc2/0x120 [ 453.089854][ T9886] kmem_cache_alloc_noprof+0x92/0x6a0 [ 453.089876][ T9886] ? lock_acquire+0x1d1/0x380 [ 453.089896][ T9886] ? dst_alloc+0x99/0x1a0 [ 453.089918][ T9886] ? __pfx_ip6_dst_gc+0x10/0x10 [ 453.089945][ T9886] dst_alloc+0x99/0x1a0 [ 453.089969][ T9886] ip6_pol_route+0x9fd/0x1310 [ 453.089995][ T9886] ? __pfx_ip6_pol_route+0x10/0x10 [ 453.090019][ T9886] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 453.090063][ T9886] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 453.090086][ T9886] fib6_rule_lookup+0x52f/0x720 [ 453.090110][ T9886] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 453.090133][ T9886] ? __pfx_ip6t_do_table+0x10/0x10 [ 453.090157][ T9886] ? nf_nat_ipv6_fn+0xff/0x2d0 [ 453.090185][ T9886] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 453.090219][ T9886] ip6_route_input+0x662/0xc50 [ 453.090246][ T9886] ? __pfx_ip6_route_input+0x10/0x10 [ 453.090278][ T9886] ? find_held_lock+0x2b/0x80 [ 453.090303][ T9886] ? nf_hook.constprop.0+0x2d9/0x750 [ 453.090334][ T9886] ? nf_hook.constprop.0+0x2e3/0x750 [ 453.090356][ T9886] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 453.090382][ T9886] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 453.090411][ T9886] ip6_rcv_finish_core.isra.0+0x1b1/0x1260 [ 453.090445][ T9886] ipv6_rcv+0x1e8/0x3d0 [ 453.090470][ T9886] ? __pfx_ipv6_rcv+0x10/0x10 [ 453.090492][ T9886] __netif_receive_skb_one_core+0x12d/0x1e0 [ 453.090513][ T9886] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 453.090536][ T9886] ? lock_acquire+0x1d1/0x380 [ 453.090562][ T9886] __netif_receive_skb+0x1f/0x120 [ 453.090584][ T9886] netif_receive_skb+0x139/0x7d0 [ 453.090604][ T9886] ? __pfx_netif_receive_skb+0x10/0x10 [ 453.090632][ T9886] tun_rx_batched.isra.0+0x3f6/0x750 [ 453.090655][ T9886] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 453.090682][ T9886] ? tun_get_user+0x1e1e/0x3cc0 [ 453.090708][ T9886] tun_get_user+0x1f53/0x3cc0 [ 453.090742][ T9886] ? __lock_acquire+0x5c0/0x1f40 [ 453.090762][ T9886] ? __pfx_tun_get_user+0x10/0x10 [ 453.090787][ T9886] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 453.090823][ T9886] ? find_held_lock+0x2b/0x80 [ 453.090848][ T9886] ? tun_get+0x191/0x370 [ 453.090867][ T9886] ? tun_get+0x191/0x370 [ 453.090896][ T9886] tun_chr_write_iter+0xdc/0x200 [ 453.090922][ T9886] vfs_write+0x6af/0x1050 [ 453.090944][ T9886] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 453.090970][ T9886] ? __pfx_vfs_write+0x10/0x10 [ 453.090988][ T9886] ? find_held_lock+0x2b/0x80 [ 453.091033][ T9886] ksys_write+0x12a/0x250 [ 453.091060][ T9886] ? __pfx_ksys_write+0x10/0x10 [ 453.091090][ T9886] do_syscall_64+0x123/0x790 [ 453.091119][ T9886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.091140][ T9886] RIP: 0033:0x7fef23d5e98e [ 453.091157][ T9886] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 453.091175][ T9886] RSP: 002b:00007fef24cf8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.091195][ T9886] RAX: ffffffffffffffda RBX: 00007fef24cf96c0 RCX: 00007fef23d5e98e [ 453.091209][ T9886] RDX: 000000000000003e RSI: 0000200000000500 RDI: 00000000000000c8 [ 453.091220][ T9886] RBP: 00007fef24cf9090 R08: 0000000000000000 R09: 0000000000000000 [ 453.091230][ T9886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.091240][ T9886] R13: 00007fef24026038 R14: 00007fef24025fa0 R15: 00007ffe34a5e2f8 [ 453.091265][ T9886] [ 455.647232][ T9916] syz_tun: entered allmulticast mode [ 456.265503][ T9912] syz_tun: left allmulticast mode [ 456.523080][ T9918] netlink: 'syz.2.1304': attribute type 4 has an invalid length. [ 456.576439][ T9922] netlink: 'syz.2.1304': attribute type 4 has an invalid length. [ 457.246340][ T9929] syz_tun: entered allmulticast mode [ 457.662760][ T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 457.814702][ T25] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 457.817375][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.817420][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.841691][ T25] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 457.841885][ T25] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 457.841945][ T25] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 457.849786][ T25] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 457.849856][ T25] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 457.855675][ T25] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 457.877154][ T9926] syz_tun: left allmulticast mode [ 457.975326][ T25] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 457.975399][ T25] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 457.987774][ T25] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 458.101161][ T5795] usb 4-1: USB disconnect, device number 22 [ 458.115389][ T5795] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 458.240811][ T5795] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 458.256582][ T5795] keyspan 4-1:1.0: device disconnected [ 459.574030][ T31] audit: type=1400 audit(1789491783.042:536): avc: denied { listen } for pid=9941 comm="syz.5.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 459.809306][ T9952] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 459.809460][ T9952] block device autoloading is deprecated and will be removed. [ 459.931441][ T5795] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 460.217166][ T9957] syz_tun: entered allmulticast mode [ 460.410042][ T9962] netlink: 'syz.0.1316': attribute type 4 has an invalid length. [ 460.472970][ T9963] netlink: 'syz.0.1316': attribute type 4 has an invalid length. [ 460.780146][ T9954] syz_tun: left allmulticast mode [ 460.832435][ T5795] usb 4-1: Using ep0 maxpacket: 32 [ 460.835578][ T5795] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 460.839487][ T5795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.839515][ T5795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.839549][ T5795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.879588][ T5795] usb 4-1: config 0 descriptor?? [ 460.943380][ T5795] hub 4-1:0.0: USB hub found [ 461.089353][ T5795] hub 4-1:0.0: 1 port detected [ 461.274553][ T9970] bond1: ARP target 9.0.0.0 is already present [ 461.274580][ T9970] bond1: option arp_ip_target: invalid value (9) [ 461.275831][ T9970] bond1 (unregistering): Released all slaves [ 461.341186][ T9974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.362460][ T5795] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 461.414040][ T5795] usbhid 4-1:0.0: can't add hid device: -71 [ 461.414126][ T5795] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 461.447344][ T5795] usb 4-1: USB disconnect, device number 23 [ 463.950430][ T9998] syz_tun: entered allmulticast mode [ 463.970861][ T9998] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1318'. [ 464.558372][ T9995] syz_tun: left allmulticast mode [ 465.030179][T10002] syz_tun: entered allmulticast mode [ 465.611181][ T9999] syz_tun: left allmulticast mode [ 467.044538][T10024] syz_tun: entered allmulticast mode [ 467.646744][T10020] syz_tun: left allmulticast mode [ 467.929975][T10034] syz_tun: entered allmulticast mode [ 467.942959][T10034] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1337'. [ 468.558008][T10028] syz_tun: left allmulticast mode [ 468.590775][T10037] dns_resolver: Unsupported content type (6) [ 469.164771][T10044] netlink: 'syz.5.1328': attribute type 4 has an invalid length. [ 469.453841][T10041] netlink: 'syz.5.1328': attribute type 4 has an invalid length. [ 470.372860][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 470.534160][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 470.535181][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.535225][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.568102][ T9] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 470.568297][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 470.568354][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 470.569519][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 470.576334][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 470.586015][ T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 470.606386][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 470.606457][ T9] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 470.619291][ T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 471.823402][ T5795] usb 1-1: USB disconnect, device number 30 [ 471.830162][ T5795] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 472.222022][ T5795] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 472.222601][ T5795] keyspan 1-1:1.0: device disconnected [ 472.759367][T10075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.102617][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1350'. [ 473.574393][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1350'. [ 473.881671][T10089] syz_tun: entered allmulticast mode [ 474.072607][T10091] syz_tun: entered allmulticast mode [ 474.094715][T10091] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1351'. [ 474.498001][T10083] syz_tun: left allmulticast mode [ 474.502313][T10084] syz_tun: left allmulticast mode [ 474.931795][T10099] netlink: 'syz.5.1353': attribute type 4 has an invalid length. [ 474.934965][T10099] netlink: 'syz.5.1353': attribute type 4 has an invalid length. [ 477.388548][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 477.944586][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 478.738164][T10144] syz_tun: entered allmulticast mode [ 478.812405][T10147] netlink: 'syz.0.1368': attribute type 4 has an invalid length. [ 478.869114][T10149] netlink: 'syz.0.1368': attribute type 4 has an invalid length. [ 479.490191][T10140] syz_tun: left allmulticast mode [ 479.971598][ T5698] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 480.214083][T10163] 9pnet_virtio: no channels available for device 127.0.0.1 [ 480.241314][ T5698] usb 6-1: Using ep0 maxpacket: 32 [ 480.242050][ T5698] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 480.242964][ T5698] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 480.242986][ T5698] usb 6-1: config 0 has no interface number 0 [ 480.244814][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.244836][ T5698] usb 6-1: Product: syz [ 480.244852][ T5698] usb 6-1: Manufacturer: syz [ 480.244867][ T5698] usb 6-1: SerialNumber: syz [ 480.249370][ T5698] usb 6-1: config 0 descriptor?? [ 482.007044][ T5698] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 482.007112][ T5698] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 485.177062][ T5698] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 485.177281][ T5698] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 485.184233][ T5698] usb 6-1: USB disconnect, device number 25 [ 486.683736][T10188] netlink: 'syz.2.1382': attribute type 4 has an invalid length. [ 486.739650][T10190] netlink: 'syz.2.1382': attribute type 4 has an invalid length. [ 488.830789][T10210] 9pnet_virtio: no channels available for device 127.0.0.1 [ 492.361769][T10238] netlink: 'syz.5.1393': attribute type 4 has an invalid length. [ 492.382739][T10238] netlink: 'syz.5.1393': attribute type 4 has an invalid length. [ 493.163148][T10246] FAULT_INJECTION: forcing a failure. [ 493.163148][T10246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.163179][T10246] CPU: 1 UID: 0 PID: 10246 Comm: syz.1.1390 Not tainted syzkaller #0 PREEMPT(full) [ 493.163201][T10246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 493.163214][T10246] Call Trace: [ 493.163221][T10246] [ 493.163229][T10246] dump_stack_lvl+0x100/0x190 [ 493.163261][T10246] should_fail_ex.cold+0x5/0xa [ 493.163289][T10246] _copy_to_user+0x32/0xd0 [ 493.163313][T10246] simple_read_from_buffer+0xcb/0x170 [ 493.163341][T10246] proc_fail_nth_read+0x1af/0x230 [ 493.163367][T10246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.163393][T10246] ? rw_verify_area+0xce/0x6d0 [ 493.163421][T10246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.163445][T10246] vfs_read+0x1e4/0xb40 [ 493.163465][T10246] ? lock_acquire+0x1d1/0x380 [ 493.163485][T10246] ? __fget_files+0x34/0x3d0 [ 493.163508][T10246] ? __pfx_vfs_read+0x10/0x10 [ 493.163525][T10246] ? find_held_lock+0x2b/0x80 [ 493.163551][T10246] ? __fget_files+0x215/0x3d0 [ 493.163580][T10246] ? __fget_files+0x21f/0x3d0 [ 493.163611][T10246] ksys_read+0x12a/0x250 [ 493.163631][T10246] ? __pfx_ksys_read+0x10/0x10 [ 493.163648][T10246] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 493.163675][T10246] ? syscall_user_dispatch+0x76/0x130 [ 493.163707][T10246] do_syscall_64+0x123/0x790 [ 493.163736][T10246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.163755][T10246] RIP: 0033:0x7f3061d5e98e [ 493.163772][T10246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 493.163789][T10246] RSP: 002b:00007f3062d09fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 493.163809][T10246] RAX: ffffffffffffffda RBX: 00007f3062d0a6c0 RCX: 00007f3061d5e98e [ 493.163823][T10246] RDX: 000000000000000f RSI: 00007f3062d0a0a0 RDI: 0000000000000004 [ 493.163835][T10246] RBP: 00007f3062d0a090 R08: 0000000000000000 R09: 0000000000000000 [ 493.163848][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.163859][T10246] R13: 00007f3062026038 R14: 00007f3062025fa0 R15: 00007ffd0b55fa68 [ 493.163889][T10246] [ 494.617540][T10249] xt_CT: No such helper "pptp" [ 494.732376][ T5705] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 494.911466][ T30] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 494.914884][ T5705] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 494.915782][ T5705] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 494.915805][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.915831][ T5705] usb 4-1: config 0 has no interface number 0 [ 494.919033][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.919058][ T5705] usb 4-1: Product: syz [ 494.919073][ T5705] usb 4-1: Manufacturer: syz [ 494.919088][ T5705] usb 4-1: SerialNumber: syz [ 494.986376][ T5705] usb 4-1: config 0 descriptor?? [ 495.004314][ T5705] yurex 4-1:0.50: Could not find endpoints [ 495.072317][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 495.072845][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 495.075482][ T30] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 495.075515][ T30] usb 2-1: can't read configurations, error -61 [ 495.212947][ T30] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 495.434034][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 495.474457][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 495.516255][ T30] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 495.519381][ T30] usb 2-1: can't read configurations, error -61 [ 495.552172][ T30] usb usb2-port1: attempt power cycle [ 495.625255][ T5795] usb 4-1: USB disconnect, device number 24 [ 496.102248][T10271] 9pnet_virtio: no channels available for device 127.0.0.1 [ 496.104282][T10272] dns_resolver: Unsupported content type (6) [ 496.226816][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.226870][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.291363][ T30] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 496.311743][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 496.312413][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 496.313667][ T30] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 496.313700][ T30] usb 2-1: can't read configurations, error -61 [ 496.441404][ T30] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 496.461690][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 496.462213][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 496.463471][ T30] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 496.463502][ T30] usb 2-1: can't read configurations, error -61 [ 496.463825][ T30] usb usb2-port1: unable to enumerate USB device [ 497.744128][T10288] FAULT_INJECTION: forcing a failure. [ 497.744128][T10288] name failslab, interval 1, probability 0, space 0, times 0 [ 497.744169][T10288] CPU: 0 UID: 0 PID: 10288 Comm: syz.5.1407 Not tainted syzkaller #0 PREEMPT(full) [ 497.744200][T10288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 497.744213][T10288] Call Trace: [ 497.744220][T10288] [ 497.744228][T10288] dump_stack_lvl+0x100/0x190 [ 497.744255][T10288] should_fail_ex.cold+0x5/0xa [ 497.744271][T10288] should_failslab+0xc2/0x120 [ 497.744287][T10288] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 497.744302][T10288] ? sock_alloc_inode+0x26/0x2c0 [ 497.744319][T10288] ? __pfx_sock_alloc_inode+0x10/0x10 [ 497.744335][T10288] sock_alloc_inode+0x26/0x2c0 [ 497.744350][T10288] ? __pfx_sock_alloc_inode+0x10/0x10 [ 497.744365][T10288] alloc_inode+0x68/0x250 [ 497.744377][T10288] sock_alloc+0x44/0x280 [ 497.744389][T10288] ? security_socket_create+0x7f/0x250 [ 497.744408][T10288] __sock_create+0xc2/0x860 [ 497.744427][T10288] __sys_socket+0x14d/0x260 [ 497.744438][T10288] ? __pfx___sys_socket+0x10/0x10 [ 497.744455][T10288] __x64_sys_socket+0x72/0xb0 [ 497.744466][T10288] ? lockdep_hardirqs_on+0x7d/0x110 [ 497.744482][T10288] do_syscall_64+0x123/0x790 [ 497.744498][T10288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.744511][T10288] RIP: 0033:0x7ffbb3b9e159 [ 497.744521][T10288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.744531][T10288] RSP: 002b:00007ffbb4a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 497.744542][T10288] RAX: ffffffffffffffda RBX: 00007ffbb3e26090 RCX: 00007ffbb3b9e159 [ 497.744550][T10288] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 497.744557][T10288] RBP: 00007ffbb3c3503b R08: 0000000000000000 R09: 0000000000000000 [ 497.744563][T10288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.744570][T10288] R13: 00007ffbb3e26128 R14: 00007ffbb3e26090 R15: 00007ffcf7f0fae8 [ 497.744585][T10288] [ 497.744625][T10288] socket: no more sockets [ 498.045081][T10292] syz_tun: entered allmulticast mode [ 498.609230][T10286] syz_tun: left allmulticast mode [ 500.381845][ T190] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 500.531270][ T190] usb 4-1: Using ep0 maxpacket: 16 [ 500.533749][ T190] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 500.535058][ T190] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 500.535091][ T190] usb 4-1: can't read configurations, error -61 [ 500.661315][ T190] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 500.832814][ T190] usb 4-1: Using ep0 maxpacket: 16 [ 500.836103][ T190] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 500.838935][ T190] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 500.838967][ T190] usb 4-1: can't read configurations, error -61 [ 500.839227][ T190] usb usb4-port1: attempt power cycle [ 501.171839][ T190] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 501.219169][ T190] usb 4-1: Using ep0 maxpacket: 16 [ 501.225526][ T190] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 501.267619][ T190] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 501.267653][ T190] usb 4-1: can't read configurations, error -61 [ 501.581268][ T190] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 501.613119][ T190] usb 4-1: Using ep0 maxpacket: 16 [ 501.625105][ T190] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 501.759021][ T190] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 501.759056][ T190] usb 4-1: can't read configurations, error -61 [ 501.899815][ T190] usb usb4-port1: unable to enumerate USB device [ 502.346543][T10322] 9pnet_virtio: no channels available for device 127.0.0.1 [ 503.885377][T10342] syz_tun: entered allmulticast mode [ 504.283759][T10336] syz_tun: left allmulticast mode [ 507.292775][T10363] netlink: 'syz.3.1428': attribute type 4 has an invalid length. [ 507.313089][T10363] netlink: 'syz.3.1428': attribute type 4 has an invalid length. [ 507.850807][T10369] 9pnet_virtio: no channels available for device 127.0.0.1 [ 508.582041][ T190] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 509.717531][ T190] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 509.720502][ T190] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 509.720535][ T190] usb 1-1: can't read configurations, error -61 [ 509.852265][ T190] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 510.950389][ T190] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 511.036089][ T190] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 511.036127][ T190] usb 1-1: can't read configurations, error -71 [ 511.036433][ T190] usb usb1-port1: attempt power cycle [ 512.631298][ T190] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 512.781880][T10400] syz_tun: entered allmulticast mode [ 512.794623][T10400] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1436'. [ 512.796877][ T190] usb 6-1: Using ep0 maxpacket: 16 [ 512.799271][ T190] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 512.813240][ T190] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 512.813353][ T190] usb 6-1: can't read configurations, error -61 [ 512.941365][ T190] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 513.091438][ T190] usb 6-1: Using ep0 maxpacket: 16 [ 513.094814][ T190] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 513.100730][ T190] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 513.100830][ T190] usb 6-1: can't read configurations, error -61 [ 513.107533][ T190] usb usb6-port1: attempt power cycle [ 513.404731][T10396] syz_tun: left allmulticast mode [ 513.495898][ T190] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 513.511585][ T31] audit: type=1400 audit(1789491837.582:537): avc: denied { mounton } for pid=10405 comm="syz.1.1441" path="/dev/sequencer2" dev="devtmpfs" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 513.554270][ T190] usb 6-1: Using ep0 maxpacket: 16 [ 513.556118][ T190] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 513.652316][T10413] trusted_key: encrypted_key: insufficient parameters specified [ 514.207999][ T190] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 514.208101][ T190] usb 6-1: can't read configurations, error -61 [ 514.993228][ T190] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 516.093481][ T190] usb 6-1: device descriptor read/8, error -71 [ 516.201594][ T190] usb usb6-port1: unable to enumerate USB device [ 516.258911][T10416] 9pnet_virtio: no channels available for device 127.0.0.1 [ 517.759244][ T190] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 517.891505][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 517.916767][T10431] dns_resolver: Unsupported content type (6) [ 517.927748][ T190] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 517.929465][ T190] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.929494][ T190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.973552][ T190] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 517.980172][ T190] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 517.980610][ T190] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 517.984253][ T190] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 517.991276][ T190] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 517.996314][ T190] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 518.000711][ T190] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 518.000780][ T190] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 518.044883][ T190] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 518.053356][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 518.054232][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.054279][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 518.054316][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.093445][ T9] ax88179_178a 4-1:1.0: probe with driver ax88179_178a failed with error -22 [ 518.505667][ T30] usb 6-1: USB disconnect, device number 30 [ 518.527550][ T30] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 518.548478][ T30] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 518.549045][ T30] keyspan 6-1:1.0: device disconnected [ 520.598857][ T30] usb 4-1: USB disconnect, device number 29 [ 520.776175][T10455] trusted_key: encrypted_key: insufficient parameters specified [ 523.986632][ T5698] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 524.145102][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 524.281471][ T5698] usb 3-1: Using ep0 maxpacket: 16 [ 524.282231][ T5698] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 524.282800][ T5698] usb 3-1: config 0 has no interfaces? [ 524.285559][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.285583][ T5698] usb 3-1: Product: syz [ 524.285597][ T5698] usb 3-1: Manufacturer: syz [ 524.285612][ T5698] usb 3-1: SerialNumber: syz [ 524.335288][ T5698] usb 3-1: config 0 descriptor?? [ 524.492919][ T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 524.493805][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.493848][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.511714][ T9] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 524.511916][ T9] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 524.511974][ T9] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 524.515013][ T9] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 524.515083][ T9] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 524.519844][ T9] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 524.527140][ T9] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 524.527222][ T9] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 524.532466][ T9] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 524.609654][T10481] syz_tun: entered allmulticast mode [ 525.243369][T10478] syz_tun: left allmulticast mode [ 525.276104][ T5698] usb 6-1: USB disconnect, device number 31 [ 525.330139][ T5698] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 525.356132][ T5698] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 525.356676][ T5698] keyspan 6-1:1.0: device disconnected [ 525.477296][ T9] usb 3-1: USB disconnect, device number 28 [ 527.432718][T10507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.469381][ T31] audit: type=1400 audit(1789491851.392:538): avc: denied { write } for pid=10499 comm="syz.2.1471" path="socket:[32469]" dev="sockfs" ino=32469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 527.620488][T10509] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1460'. [ 527.662255][T10498] bond1: ARP target 9.0.0.0 is already present [ 527.662280][T10498] bond1: option arp_ip_target: invalid value (9) [ 527.691435][T10498] bond1 (unregistering): Released all slaves [ 527.757026][T10509] C: entered allmulticast mode [ 528.283050][T10520] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1476'. [ 535.540890][T10550] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1489'. [ 536.018399][T10557] netlink: 'syz.2.1490': attribute type 4 has an invalid length. [ 536.097640][T10557] netlink: 'syz.2.1490': attribute type 4 has an invalid length. [ 537.283007][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 537.438147][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 537.457460][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 537.474243][ T9] usb 4-1: config 0 has no interfaces? [ 537.511800][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.511862][ T9] usb 4-1: Product: syz [ 537.511902][ T9] usb 4-1: Manufacturer: syz [ 537.511940][ T9] usb 4-1: SerialNumber: syz [ 537.771054][ T9] usb 4-1: config 0 descriptor?? [ 538.336957][ T25] usb 4-1: USB disconnect, device number 30 [ 538.723147][T10599] FAULT_INJECTION: forcing a failure. [ 538.723147][T10599] name failslab, interval 1, probability 0, space 0, times 0 [ 538.723197][T10599] CPU: 0 UID: 0 PID: 10599 Comm: syz.0.1500 Not tainted syzkaller #0 PREEMPT(full) [ 538.723226][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 538.723237][T10599] Call Trace: [ 538.723243][T10599] [ 538.723250][T10599] dump_stack_lvl+0x100/0x190 [ 538.723272][T10599] should_fail_ex.cold+0x5/0xa [ 538.723288][T10599] should_failslab+0xc2/0x120 [ 538.723302][T10599] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 538.723316][T10599] ? sock_alloc_inode+0x26/0x2c0 [ 538.723332][T10599] ? __pfx_sock_alloc_inode+0x10/0x10 [ 538.723350][T10599] sock_alloc_inode+0x26/0x2c0 [ 538.723365][T10599] ? __pfx_sock_alloc_inode+0x10/0x10 [ 538.723379][T10599] alloc_inode+0x68/0x250 [ 538.723390][T10599] sock_alloc+0x44/0x280 [ 538.723403][T10599] ? security_socket_create+0x7f/0x250 [ 538.723421][T10599] __sock_create+0xc2/0x860 [ 538.723440][T10599] __sys_socket+0x14d/0x260 [ 538.723451][T10599] ? __pfx___sys_socket+0x10/0x10 [ 538.723466][T10599] __x64_sys_socket+0x72/0xb0 [ 538.723476][T10599] ? lockdep_hardirqs_on+0x7d/0x110 [ 538.723491][T10599] do_syscall_64+0x123/0x790 [ 538.723507][T10599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.723519][T10599] RIP: 0033:0x7f337819e159 [ 538.723529][T10599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.723540][T10599] RSP: 002b:00007f337902e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 538.723552][T10599] RAX: ffffffffffffffda RBX: 00007f3378426090 RCX: 00007f337819e159 [ 538.723559][T10599] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 538.723566][T10599] RBP: 00007f337823503b R08: 0000000000000000 R09: 0000000000000000 [ 538.723572][T10599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.723579][T10599] R13: 00007f3378426128 R14: 00007f3378426090 R15: 00007fff23c5d138 [ 538.723594][T10599] [ 538.723621][T10599] socket: no more sockets [ 540.604789][T10615] syz_tun: entered allmulticast mode [ 541.225581][T10610] syz_tun: left allmulticast mode [ 543.535974][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 543.691847][ T25] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 543.692763][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.692829][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.732506][ T25] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 543.733036][ T25] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 543.733098][ T25] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 543.734306][ T25] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 543.734375][ T25] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 543.737737][ T25] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 543.741183][ T25] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 543.795459][ T25] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 543.811665][ T25] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 543.861304][ T5698] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 544.011826][ T5698] usb 1-1: Using ep0 maxpacket: 16 [ 544.052878][ T5698] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 544.054535][ T5698] usb 1-1: config 0 has no interfaces? [ 544.076727][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.076800][ T5698] usb 1-1: Product: syz [ 544.076847][ T5698] usb 1-1: Manufacturer: syz [ 544.076886][ T5698] usb 1-1: SerialNumber: syz [ 544.116663][ T5698] usb 1-1: config 0 descriptor?? [ 544.374188][ T5795] usb 3-1: USB disconnect, device number 29 [ 544.385993][ T5795] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 544.399944][ T5795] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 544.400522][ T5795] keyspan 3-1:1.0: device disconnected [ 544.571124][T10655] syz_tun: entered allmulticast mode [ 544.677490][ T5795] usb 1-1: USB disconnect, device number 34 [ 545.156033][T10651] syz_tun: left allmulticast mode [ 545.344037][T10663] syz_tun: entered allmulticast mode [ 545.917177][T10656] syz_tun: left allmulticast mode [ 548.224064][T10685] overlayfs: overlapping lowerdir path [ 549.275576][T10701] netlink: 'syz.2.1531': attribute type 4 has an invalid length. [ 549.329461][T10703] netlink: 'syz.2.1531': attribute type 4 has an invalid length. [ 550.344376][ T5698] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 551.206587][ T5698] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 551.208157][ T5698] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.208201][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.244225][ T5698] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 551.248981][ T5698] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 551.249046][ T5698] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 551.279679][ T5698] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 551.279754][ T5698] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 551.306266][ T5698] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 551.322238][ T5698] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 551.322317][ T5698] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 551.347482][ T5698] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 551.907855][ T5698] usb 3-1: USB disconnect, device number 30 [ 552.865431][ T5698] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 552.885241][ T5698] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 552.885799][ T5698] keyspan 3-1:1.0: device disconnected [ 556.660897][T10754] xt_CT: No such helper "pptp" [ 557.484828][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.484882][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.242063][ T5795] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 559.416260][ T5795] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 559.449859][ T5795] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.450831][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.646470][ T5795] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 559.661090][ T5795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 559.661645][ T5795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 559.712882][ T5795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 559.712956][ T5795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 559.790066][ T5795] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 559.802398][ T5795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 559.802473][ T5795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 559.807096][ T5795] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 560.146796][T10786] overlayfs: overlapping lowerdir path [ 561.173540][T10491] usb 2-1: USB disconnect, device number 39 [ 561.178882][T10491] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 561.191397][T10491] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 561.194481][T10491] keyspan 2-1:1.0: device disconnected [ 568.255298][T10850] syz_tun: entered allmulticast mode [ 568.689027][T10848] syz_tun: left allmulticast mode [ 570.799445][T10864] bond1: ARP target 9.0.0.0 is already present [ 570.799477][T10864] bond1: option arp_ip_target: invalid value (9) [ 570.818522][T10864] bond1 (unregistering): Released all slaves [ 570.825055][T10869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.691253][ T30] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 572.853961][ T30] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 572.854989][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.855033][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.892629][ T30] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 572.892745][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 572.893819][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 572.897170][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 572.897229][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 572.942714][ T30] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 572.950476][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 572.950552][ T30] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 572.981718][ T30] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 574.297784][ T5795] usb 6-1: USB disconnect, device number 32 [ 574.306845][ T5795] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 574.311503][ T5795] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 574.312025][ T5795] keyspan 6-1:1.0: device disconnected [ 576.111638][T10924] syz_tun: entered allmulticast mode [ 576.661382][T10919] syz_tun: left allmulticast mode [ 581.277277][T10946] bond1: ARP target 9.0.0.0 is already present [ 581.277303][T10946] bond1: option arp_ip_target: invalid value (9) [ 581.312609][T10946] bond1 (unregistering): Released all slaves [ 581.361563][T10949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.037829][T10970] netlink: 'syz.5.1612': attribute type 4 has an invalid length. [ 583.042527][T10970] netlink: 'syz.5.1612': attribute type 4 has an invalid length. [ 583.152047][T10976] vivid-000: kernel_thread() failed [ 583.905779][T10988] netlink: 'syz.3.1614': attribute type 4 has an invalid length. [ 583.943178][T10988] netlink: 'syz.3.1614': attribute type 4 has an invalid length. [ 584.715716][T10992] FAULT_INJECTION: forcing a failure. [ 584.715716][T10992] name failslab, interval 1, probability 0, space 0, times 0 [ 584.715770][T10992] CPU: 0 UID: 0 PID: 10992 Comm: syz.5.1615 Not tainted syzkaller #0 PREEMPT(full) [ 584.715798][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 584.715811][T10992] Call Trace: [ 584.715818][T10992] [ 584.715826][T10992] dump_stack_lvl+0x100/0x190 [ 584.715852][T10992] should_fail_ex.cold+0x5/0xa [ 584.715869][T10992] should_failslab+0xc2/0x120 [ 584.715884][T10992] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 584.715897][T10992] ? sock_alloc_inode+0x26/0x2c0 [ 584.715914][T10992] ? __pfx_sock_alloc_inode+0x10/0x10 [ 584.715929][T10992] sock_alloc_inode+0x26/0x2c0 [ 584.715945][T10992] ? __pfx_sock_alloc_inode+0x10/0x10 [ 584.715960][T10992] alloc_inode+0x68/0x250 [ 584.715972][T10992] sock_alloc+0x44/0x280 [ 584.715984][T10992] ? security_socket_create+0x7f/0x250 [ 584.716009][T10992] __sock_create+0xc2/0x860 [ 584.716044][T10992] __sys_socket+0x14d/0x260 [ 584.716061][T10992] ? __pfx___sys_socket+0x10/0x10 [ 584.716087][T10992] __x64_sys_socket+0x72/0xb0 [ 584.716106][T10992] ? lockdep_hardirqs_on+0x7d/0x110 [ 584.716133][T10992] do_syscall_64+0x123/0x790 [ 584.716161][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.716179][T10992] RIP: 0033:0x7ffbb3b9e159 [ 584.716195][T10992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.716211][T10992] RSP: 002b:00007ffbb4a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 584.716231][T10992] RAX: ffffffffffffffda RBX: 00007ffbb3e26090 RCX: 00007ffbb3b9e159 [ 584.716254][T10992] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 584.716266][T10992] RBP: 00007ffbb3c3503b R08: 0000000000000000 R09: 0000000000000000 [ 584.716278][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.716288][T10992] R13: 00007ffbb3e26128 R14: 00007ffbb3e26090 R15: 00007ffcf7f0fae8 [ 584.716312][T10992] [ 584.716476][T10992] socket: no more sockets [ 585.507065][T11003] bond1: ARP target 9.0.0.0 is already present [ 585.507092][T11003] bond1: option arp_ip_target: invalid value (9) [ 585.523890][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 585.528629][T11003] bond1 (unregistering): Released all slaves [ 585.591286][T11011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.703307][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 585.707138][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.707350][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.715630][T11017] syz_tun: entered allmulticast mode [ 585.872825][ T10] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 585.878072][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 585.880145][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 586.030083][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 586.030871][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 586.064304][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 586.069415][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 586.069490][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 586.099002][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 586.297042][ T25] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 586.309054][T11006] syz_tun: left allmulticast mode [ 586.454312][ T25] usb 1-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 586.474480][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.475946][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 586.476496][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.477419][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.584217][T10491] usb 2-1: USB disconnect, device number 40 [ 586.640499][T10491] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 586.698082][ T25] ax88179_178a 1-1:1.0: probe with driver ax88179_178a failed with error -22 [ 587.223148][T10491] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 587.263316][T10491] keyspan 2-1:1.0: device disconnected [ 588.256625][T11031] netlink: 'syz.1.1627': attribute type 4 has an invalid length. [ 588.313915][T11033] netlink: 'syz.1.1627': attribute type 4 has an invalid length. [ 589.436303][T11037] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1629'. [ 589.437743][T11037] C: renamed from veth1_to_team (while UP) [ 589.840302][ T5795] usb 1-1: USB disconnect, device number 35 [ 594.997474][T11070] bond1: ARP target 9.0.0.0 is already present [ 594.997499][T11070] bond1: option arp_ip_target: invalid value (9) [ 594.998441][T11070] bond1 (unregistering): Released all slaves [ 595.012222][ T5795] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 595.033204][T11072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.165300][ T5795] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 595.166923][ T5795] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.166967][ T5795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.216563][ T5795] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 595.216765][ T5795] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 595.216827][ T5795] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 595.229251][ T5795] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 595.229330][ T5795] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 595.246795][ T5795] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 595.256754][ T5795] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 595.256831][ T5795] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 595.263929][ T5795] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 596.392296][ T5795] usb 3-1: USB disconnect, device number 31 [ 596.410579][ T5795] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 596.461322][ T5795] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 596.469611][ T5795] keyspan 3-1:1.0: device disconnected [ 597.695706][T11083] netlink: 'syz.2.1643': attribute type 4 has an invalid length. [ 597.751296][T11085] netlink: 'syz.2.1643': attribute type 4 has an invalid length. [ 599.541879][ T5795] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 599.821859][ T5795] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 599.822764][ T5795] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 599.822789][ T5795] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.822809][ T5795] usb 1-1: config 0 has no interface number 0 [ 599.824650][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.824673][ T5795] usb 1-1: Product: syz [ 599.824687][ T5795] usb 1-1: Manufacturer: syz [ 599.824702][ T5795] usb 1-1: SerialNumber: syz [ 599.832095][ T5795] usb 1-1: config 0 descriptor?? [ 599.840727][ T5795] yurex 1-1:0.50: Could not find endpoints [ 599.939307][T11099] syz_tun: entered allmulticast mode [ 600.451655][ T5795] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 600.498969][T11094] syz_tun: left allmulticast mode [ 600.606034][ T5795] usb 6-1: device descriptor read/64, error -71 [ 600.607028][T11106] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1644'. [ 600.630432][ T10] usb 1-1: USB disconnect, device number 36 [ 600.752409][T11110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.758379][T11113] bond1: ARP target 9.0.0.0 is already present [ 600.758395][T11113] bond1: option arp_ip_target: invalid value (9) [ 600.760385][T11113] bond1 (unregistering): Released all slaves [ 600.798024][T11116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.841344][ T5795] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 600.921271][ T190] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 600.971280][ T5795] usb 6-1: device descriptor read/64, error -71 [ 601.081512][ T5795] usb usb6-port1: attempt power cycle [ 601.096940][ T190] usb 2-1: Using ep0 maxpacket: 32 [ 601.102690][ T190] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 601.103587][ T190] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 601.103602][ T190] usb 2-1: config 0 has no interface number 0 [ 601.105320][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.105333][ T190] usb 2-1: Product: syz [ 601.105341][ T190] usb 2-1: Manufacturer: syz [ 601.105350][ T190] usb 2-1: SerialNumber: syz [ 601.107091][ T190] usb 2-1: config 0 descriptor?? [ 601.531103][ T190] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 601.531133][ T190] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 601.551974][ T5795] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 601.582431][ T5795] usb 6-1: device descriptor read/8, error -71 [ 601.671763][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 601.673669][T11127] overlayfs: overlapping lowerdir path [ 601.841281][ T5795] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 601.842730][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 601.844110][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.844156][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.890432][ T5795] usb 6-1: device descriptor read/8, error -71 [ 601.890516][ T10] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 601.890703][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 601.890764][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 601.921464][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 601.921561][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 601.923816][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 601.926887][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 601.926982][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 601.963786][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 601.988483][T11108] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 602.001997][ T5795] usb usb6-port1: unable to enumerate USB device [ 602.002494][ T190] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 602.002703][ T190] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 602.018254][ T190] usb 2-1: USB disconnect, device number 41 [ 602.593122][ T5705] usb 3-1: USB disconnect, device number 32 [ 602.652612][T11135] netlink: 'syz.0.1655': attribute type 4 has an invalid length. [ 602.748052][T11130] netlink: 'syz.0.1655': attribute type 4 has an invalid length. [ 602.800787][ T5705] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 602.823583][ T5705] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 602.824155][ T5705] keyspan 3-1:1.0: device disconnected [ 602.917436][T11139] virtio-fs: tag not found [ 603.528152][T11149] dns_resolver: Unsupported content type (6) [ 603.610704][T11151] bond2: ARP target 9.0.0.0 is already present [ 603.610729][T11151] bond2: option arp_ip_target: invalid value (9) [ 603.623960][ T5705] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 603.713149][T11155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.813042][ T5705] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 603.814038][ T5705] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 603.814054][ T5705] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.814065][ T5705] usb 6-1: config 0 has no interface number 0 [ 603.816565][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.816588][ T5705] usb 6-1: Product: syz [ 603.816603][ T5705] usb 6-1: Manufacturer: syz [ 603.816617][ T5705] usb 6-1: SerialNumber: syz [ 603.950569][ T5705] usb 6-1: config 0 descriptor?? [ 604.001839][T11151] bond2 (unregistering): Released all slaves [ 604.031465][ T5705] yurex 6-1:0.50: Could not find endpoints [ 604.751427][T11161] dns_resolver: Unsupported content type (6) [ 605.556062][ T10] usb 6-1: USB disconnect, device number 37 [ 606.732180][T11169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.752043][T11187] dns_resolver: Unsupported content type (6) [ 608.145716][T11192] virtio-fs: tag not found [ 608.483705][T11199] dns_resolver: Unsupported content type (6) [ 608.915631][ T31] audit: type=1400 audit(1789491932.982:539): avc: denied { load_policy } for pid=11202 comm="syz.0.1673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 608.988379][T11193] FAULT_INJECTION: forcing a failure. [ 608.988379][T11193] name failslab, interval 1, probability 0, space 0, times 0 [ 608.988411][T11193] CPU: 1 UID: 0 PID: 11193 Comm: syz.3.1667 Not tainted syzkaller #0 PREEMPT(full) [ 608.988426][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 608.988434][T11193] Call Trace: [ 608.988439][T11193] [ 608.988444][T11193] dump_stack_lvl+0x100/0x190 [ 608.988469][T11193] should_fail_ex.cold+0x5/0xa [ 608.988486][T11193] should_failslab+0xc2/0x120 [ 608.988500][T11193] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 608.988514][T11193] ? sock_alloc_inode+0x26/0x2c0 [ 608.988532][T11193] ? __pfx_sock_alloc_inode+0x10/0x10 [ 608.988554][T11193] sock_alloc_inode+0x26/0x2c0 [ 608.988570][T11193] ? __pfx_sock_alloc_inode+0x10/0x10 [ 608.988585][T11193] alloc_inode+0x68/0x250 [ 608.988597][T11193] sock_alloc+0x44/0x280 [ 608.988610][T11193] ? security_socket_create+0x7f/0x250 [ 608.988628][T11193] __sock_create+0xc2/0x860 [ 608.988647][T11193] __sys_socket+0x14d/0x260 [ 608.988656][T11193] ? fput+0x7c/0x100 [ 608.988671][T11193] ? __pfx___sys_socket+0x10/0x10 [ 608.988680][T11193] ? ksys_write+0x1ac/0x250 [ 608.988691][T11193] ? __pfx_ksys_write+0x10/0x10 [ 608.988706][T11193] __x64_sys_socket+0x72/0xb0 [ 608.988716][T11193] ? lockdep_hardirqs_on+0x7d/0x110 [ 608.988731][T11193] do_syscall_64+0x123/0x790 [ 608.988747][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.988760][T11193] RIP: 0033:0x7fc52359e159 [ 608.988770][T11193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.988781][T11193] RSP: 002b:00007fc52451a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 608.988793][T11193] RAX: ffffffffffffffda RBX: 00007fc523826090 RCX: 00007fc52359e159 [ 608.988801][T11193] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 608.988807][T11193] RBP: 00007fc52363503b R08: 0000000000000000 R09: 0000000000000000 [ 608.988813][T11193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.988820][T11193] R13: 00007fc523826128 R14: 00007fc523826090 R15: 00007fff09cbb8d8 [ 608.988835][T11193] [ 608.988850][T11193] socket: no more sockets [ 609.126566][ T25] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 609.291570][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 609.292255][ T25] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 609.293299][ T25] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 609.293321][ T25] usb 6-1: config 0 has no interface number 0 [ 609.296836][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.296859][ T25] usb 6-1: Product: syz [ 609.296874][ T25] usb 6-1: Manufacturer: syz [ 609.296942][ T25] usb 6-1: SerialNumber: syz [ 609.304480][ T25] usb 6-1: config 0 descriptor?? [ 610.119683][ T31] audit: type=1400 audit(1789491934.182:540): avc: denied { write } for pid=11210 comm="syz.2.1675" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 610.283570][ T25] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 610.283603][ T25] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 611.315578][ T25] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 611.315794][ T25] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 611.326984][ T25] usb 6-1: USB disconnect, device number 38 [ 611.371265][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 611.486441][ T31] audit: type=1400 audit(1789491935.552:541): avc: denied { read } for pid=11213 comm="syz.0.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 611.534441][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 611.536322][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 611.536352][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 611.536391][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.540901][ T10] usb 1-1: config 0 descriptor?? [ 611.542138][T11217] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 611.764339][ T10] ath6kl: Failed to submit usb control message: -71 [ 611.764368][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 611.764377][ T10] ath6kl: Unable to send get target info: -71 [ 611.775373][ T10] ath6kl: Failed to init ath6kl core: -71 [ 611.806013][ T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 611.833277][ T10] usb 1-1: USB disconnect, device number 37 [ 612.841333][T11231] trusted_key: encrypted_key: insufficient parameters specified [ 613.378670][ T31] audit: type=1400 audit(1789491937.442:542): avc: denied { create } for pid=11237 comm="syz.0.1682" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 613.447460][ T31] audit: type=1400 audit(1789491937.512:543): avc: denied { bind } for pid=11237 comm="syz.0.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 614.368708][ T31] audit: type=1400 audit(1789491938.422:544): avc: denied { unlink } for pid=5598 comm="syz-executor" name="file0" dev="tmpfs" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 615.145566][ T25] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 616.062815][ T25] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 616.063744][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.063788][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.069923][T11256] dns_resolver: Unsupported content type (6) [ 616.069991][ T25] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 616.071471][ T25] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 616.071540][ T25] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 616.072737][ T25] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 616.081283][ T25] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 616.082740][ T25] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 616.084133][ T25] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 616.084201][ T25] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 616.085669][ T25] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 616.160554][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 616.332962][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 616.336217][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.336261][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.370748][ T10] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 616.370935][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 616.371004][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 616.402769][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 616.402849][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 616.409156][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 616.443442][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 616.443645][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 616.483765][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 617.032474][T11263] virtio-fs: tag not found [ 617.246465][ T25] usb 1-1: USB disconnect, device number 38 [ 617.556823][ T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 617.567346][ T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 617.567693][ T25] keyspan 1-1:1.0: device disconnected [ 617.961276][T11261] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] SMP KASAN NOPTI [ 617.973363][T11261] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 617.981755][T11261] CPU: 1 UID: 0 PID: 11261 Comm: syz.1.1686 Not tainted syzkaller #0 PREEMPT(full) [ 617.991114][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 617.991313][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 618.004185][ T31] audit: type=1400 audit(1789491942.072:545): avc: denied { read } for pid=4952 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 618.004228][ T31] audit: type=1400 audit(1789491942.072:546): avc: denied { search } for pid=4952 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.004256][ T31] audit: type=1400 audit(1789491942.072:547): avc: denied { write search } for pid=4952 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.004285][ T31] audit: type=1400 audit(1789491942.072:548): avc: denied { add_name } for pid=4952 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.004312][ T31] audit: type=1400 audit(1789491942.072:549): avc: denied { create } for pid=4952 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 618.004340][ T31] audit: type=1400 audit(1789491942.072:550): avc: denied { append open } for pid=4952 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 618.004368][ T31] audit: type=1400 audit(1789491942.072:551): avc: denied { getattr } for pid=4952 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 618.160568][T11261] RIP: 0010:keyspan_break_ctl+0x8e/0xe0 [ 618.166114][T11261] Code: ff ff ff e8 74 8a 41 fa 83 fb ff 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 9c 00 00 00 0f 94 c3 48 89 fa 0f b6 db 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1d 41 [ 618.185706][T11261] RSP: 0018:ffffc9000e097cb0 EFLAGS: 00010203 [ 618.191755][T11261] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87ca8d0c [ 618.199708][T11261] RDX: 0000000000000013 RSI: 00000000ffffffff RDI: 000000000000009c [ 618.207658][T11261] RBP: ffff88803da10000 R08: 0000000000000005 R09: 00000000ffffffff [ 618.215613][T11261] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 618.223565][T11261] R13: ffff8880347b0020 R14: ffff8880347b00c8 R15: 0000000000000007 [ 618.231518][T11261] FS: 00007f3062ce96c0(0000) GS:ffff888123c59000(0000) knlGS:0000000000000000 [ 618.240428][T11261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.246991][T11261] CR2: 00007f337902dff8 CR3: 0000000073524000 CR4: 00000000003526f0 [ 618.254945][T11261] Call Trace: [ 618.258202][T11261] [ 618.261115][T11261] ? __pfx_keyspan_break_ctl+0x10/0x10 [ 618.266560][T11261] serial_break+0xcb/0x160 [ 618.270964][T11261] send_break+0x2ec/0x370 [ 618.275280][T11261] tty_ioctl+0xa2c/0x1640 [ 618.279592][T11261] ? __pfx_tty_ioctl+0x10/0x10 [ 618.284338][T11261] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 618.290825][T11261] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 618.297661][T11261] ? __fget_files+0x34/0x3d0 [ 618.302245][T11261] ? selinux_file_ioctl+0x13b/0x290 [ 618.307424][T11261] ? selinux_file_ioctl+0xb6/0x290 [ 618.312520][T11261] ? __pfx_tty_ioctl+0x10/0x10 [ 618.317268][T11261] __x64_sys_ioctl+0x18e/0x210 [ 618.322012][T11261] do_syscall_64+0x123/0x790 [ 618.326590][T11261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.332464][T11261] RIP: 0033:0x7f3061d9e159 [ 618.336861][T11261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.356447][T11261] RSP: 002b:00007f3062ce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.364841][T11261] RAX: ffffffffffffffda RBX: 00007f3062026090 RCX: 00007f3061d9e159 [ 618.372791][T11261] RDX: 0000000000000007 RSI: 0000000000005425 RDI: 0000000000000008 [ 618.380740][T11261] RBP: 00007f3061e3503b R08: 0000000000000000 R09: 0000000000000000 [ 618.388696][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.396647][T11261] R13: 00007f3062026128 R14: 00007f3062026090 R15: 00007ffd0b55fa68 [ 618.404607][T11261] [ 618.407619][T11261] Modules linked in: [ 618.412059][T11261] ---[ end trace 0000000000000000 ]--- [ 618.415649][ T190] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 618.426380][T11261] RIP: 0010:keyspan_break_ctl+0x8e/0xe0 [ 618.426409][T11261] Code: ff ff ff e8 74 8a 41 fa 83 fb ff 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 9c 00 00 00 0f 94 c3 48 89 fa 0f b6 db 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1d 41 [ 618.426426][T11261] RSP: 0018:ffffc9000e097cb0 EFLAGS: 00010203 [ 618.426444][T11261] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87ca8d0c [ 618.426457][T11261] RDX: 0000000000000013 RSI: 00000000ffffffff RDI: 000000000000009c [ 618.426470][T11261] RBP: ffff88803da10000 R08: 0000000000000005 R09: 00000000ffffffff [ 618.426483][T11261] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 618.426494][T11261] R13: ffff8880347b0020 R14: ffff8880347b00c8 R15: 0000000000000007 [ 618.426508][T11261] FS: 00007f3062ce96c0(0000) GS:ffff888123c59000(0000) knlGS:0000000000000000 [ 618.426528][T11261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.426540][T11261] CR2: 00007f337902dff8 CR3: 0000000073524000 CR4: 00000000003526f0 [ 618.426555][T11261] Kernel panic - not syncing: Fatal exception [ 618.527096][T11261] Kernel Offset: disabled [ 618.531410][T11261] Rebooting in 86400 seconds..