last executing test programs: 4m39.265280747s ago: executing program 3 (id=342): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000088b5ffffffffffffaaaaaaaaaaaa08004500001c0000e000002f907800001feeae1414aaa0a29cdd1b305117"], 0x2e) 4m39.03521324s ago: executing program 3 (id=345): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 4m38.928250151s ago: executing program 3 (id=347): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsopen(0x0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xa8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x8, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x78, 0x2, {{0x86, 0x8749, 0x1ff, 0x3800000, 0x0, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x96b9, 0x2, 0xffff, 0x94}}, @TCA_NETEM_CORR={0x10, 0x1, {0x100, 0x4c6, 0x2}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3, 0xb}}, @TCA_NETEM_DELAY_DIST={0x14, 0x2, "5a29628b83193bb6c540c5bf5d8463e5"}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x2}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x2, 0xffffffff}}]}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003840)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80000000}]}}]}, 0x38}}, 0x20008050) 4m37.460257144s ago: executing program 3 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, 0x0, &(0x7f0000002000)) r2 = socket$kcm(0x10, 0xd, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000a4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 4m37.23991584s ago: executing program 3 (id=353): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67", 0xce, 0xffffffffffffffff) 4m36.863625729s ago: executing program 3 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000040000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 4m36.513438038s ago: executing program 32 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000040000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 10.791666302s ago: executing program 4 (id=1355): syz_usb_connect(0x5, 0x164, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x48) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f1f}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.703849093s ago: executing program 1 (id=1362): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xe0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1c000}, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x8, 0x0, @fd, 0x7, 0x0, 0xffff7fff, 0x1}) (async) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x4009, 0x2, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000180)={0x4000, r6}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc}) 9.575793599s ago: executing program 1 (id=1363): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x2000000}], 0x400000000000172, 0x4001c00) 8.350062372s ago: executing program 1 (id=1367): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup(r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRES32=r3, @ANYBLOB="0895cfd7"], 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x80d4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRES64, @ANYRES64=r2, @ANYRES64=r4, @ANYRES32, @ANYRESHEX, @ANYRES32=r2], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000640)='xprtrdma_err_chunk\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000640)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r10}, 0x18) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r11 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002, 0xff010000}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r11, 0x0) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) 7.592166994s ago: executing program 4 (id=1374): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000300)=[@ioring_restriction_sqe_op={0x1, 0x2}, @ioring_restriction_sqe_flags_required={0x3, 0x6}], 0x2) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) 7.584562359s ago: executing program 2 (id=1375): socket$alg(0x26, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231356e53f0bec"], 0x0}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r0], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) (fail_nth: 21) 7.174523242s ago: executing program 1 (id=1376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x121a02, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000000000406d041fc7000000000001090224000100000000090400000103000000092100001634543300090581030000060000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r3], 0x120}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000dc0)=""/210, 0xd2}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000180)=""/5, 0x5}, {&(0x7f0000000940)=""/203, 0xcb}, {&(0x7f0000000bc0)=""/210, 0xd2}, {&(0x7f0000000cc0)=""/204, 0xcc}], 0x8, 0x1, 0x7ffffff0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2400000}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.694512689s ago: executing program 2 (id=1377): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) socket$inet6(0xa, 0x80003, 0xff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006c40)={0x0, 0x0, &(0x7f0000000200)={0x18, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0x7}}, 0x0, &(0x7f00000006c0)={0x20, 0x0, 0x5432, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006a80)={0x20, 0x0, 0x0, {0x1000, 0x0, 0x10001, 0xc85}}, &(0x7f0000006b00)={0x130, 0xfffffffffffffff5, 0xf, {0x3, 0x9d, 0x0, '\x00', {0x2, 0xb, 0x6, 0x7, 0x0, 0x0, 0x6000, '\x00', 0x6, 0x9, 0x2, 0x100, {0x2, 0x1e24}, {0x9, 0xfff}, {0x8, 0x40}, {0x5, 0xcadd}, 0x4, 0x800, 0xffff, 0x1}}}}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x22000000, 0x3000000}) 6.160166603s ago: executing program 2 (id=1379): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX], 0x0) 4.32393609s ago: executing program 0 (id=1383): socket$nl_route(0x10, 0x3, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) (async) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) ioctl$TCSETSF(r4, 0x5404, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 4.280840106s ago: executing program 0 (id=1384): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) socket(0xa, 0x3, 0x1003a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socket$netlink(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f00000003c0)={0x19980330, r2}, &(0x7f0000000400)={0x4, 0x14, 0x9, 0x8, 0x2, 0xfffffff7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00250e0000000000c300000c000080080021007a87a1b50b1000"], 0x1c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) 3.506896566s ago: executing program 1 (id=1385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000004001008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3.436235603s ago: executing program 4 (id=1386): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) 3.435677717s ago: executing program 5 (id=1387): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000003140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x20008040) 3.322425157s ago: executing program 0 (id=1388): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x1e) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x10f0}]}, 0x10) 2.777907884s ago: executing program 4 (id=1389): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, 0x0, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(r1, &(0x7f0000000780)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000340)=""/68, 0x44}, {&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f0000000680)=""/99, 0x63}, {&(0x7f0000000580)=""/52, 0x34}], 0x4, &(0x7f0000000740)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x100) syz_open_dev$dri(0x0, 0x0, 0x600) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000140)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff8a, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001425000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) 2.700067791s ago: executing program 2 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001002abd70000002000000000000", @ANYRES32=0x0, @ANYBLOB="0801000000000000140003006e657464657673696d3000000000100008001b000800000014001680100001800c0009"], 0x50}}, 0x800) 2.699778462s ago: executing program 5 (id=1391): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x1, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x21}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x1}}}}]}]}, 0x48}}, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x2, 0x0, 0x63) 2.606732302s ago: executing program 2 (id=1392): socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r2, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) open_tree(r5, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r5, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r6, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 2.519108033s ago: executing program 1 (id=1393): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) flock(r1, 0x8) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1400000010000100000000ef000000000200000a68000000060a0b040000000000000000020000003c000480380001800b00010064796e7365740000280002800800034000000002080004400000001208000940040000010900010073797a31000000000900010073797a30000000000900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r7) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1cf"], 0x0) request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, r5) 2.45618005s ago: executing program 5 (id=1394): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xffffff8c, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 2.426591207s ago: executing program 0 (id=1395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x121a02, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000000000406d041fc7000000000001090224000100000000090400000103000000092100001634543300090581030000060000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r3], 0x120}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000dc0)=""/210, 0xd2}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000180)=""/5, 0x5}, {&(0x7f0000000940)=""/203, 0xcb}, {&(0x7f0000000bc0)=""/210, 0xd2}, {&(0x7f0000000cc0)=""/204, 0xcc}], 0x8, 0x1, 0x7ffffff0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2400000}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.341168157s ago: executing program 5 (id=1396): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x8, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x1494) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550e, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) close(r6) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') r7 = socket$key(0xf, 0x3, 0x2) r8 = syz_io_uring_setup(0x1cbc, &(0x7f0000000200)={0x0, 0x8d4a, 0x400, 0x2, 0x2f4}, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r8, 0x11, &(0x7f0000000300)="81f9cbeebe", 0x5) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 1.752118787s ago: executing program 4 (id=1397): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x1e) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r4, 0x0, 0xe) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000100)={'gre0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0x2}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='cgroup\x00') syz_fuse_handle_req(r6, &(0x7f0000000800)="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", 0x2000, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) 1.532070773s ago: executing program 2 (id=1398): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000380)={0xfffffffffffffffc, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/186, 0xba}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000400)=""/155, 0x9b}], 0x6, &(0x7f0000000540)=""/121, 0x79}, 0x10000) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000040)='P') 603.644439ms ago: executing program 4 (id=1399): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001640)=[{{&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f0000000140)=""/6, 0x6}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x4, &(0x7f0000001540)=""/207, 0xcf}, 0x7}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) mlockall(0x2) r2 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff7000/0x3000)=nil) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d000000000001000000000000000141000000030017"], 0x38}}, 0x0) r5 = socket(0x1e, 0x5, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x7, 0x0, 0x0) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) 521.074916ms ago: executing program 5 (id=1400): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000000ff"], 0x38}, 0x1, 0x86ddffffffffffff}, 0x40084c0) 367.34695ms ago: executing program 5 (id=1401): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet(0x2, 0x3, 0x6) dup3(0xffffffffffffffff, r3, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x8000000000000000}) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e1406029e0000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 195.627239ms ago: executing program 0 (id=1402): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r1, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x2000c094) 0s ago: executing program 0 (id=1403): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) setpriority(0x0, 0xffffffff, 0xef) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_netfilter(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x1c8, 0x6, 0x1, 0x3, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x7}, [@nested={0xc0, 0x11d, 0x0, 0x1, [@generic="8c960d37701bdaa7e77960eb38b5d786522bf29e6bff4f2ddcc5d84ece00f9c8e7db1807911bb8a231f58934519aab58b5b1df9238fdbba938e3306596c7409e17822b5eed3a77bad03408cbe17b1c0e10dfe75523a7be4448f8c3f24cdf6ab5e4732de668bc051c1fa5e65db010db6aee0821ac18ae0b3b2e9315cadd4bc9f9c2f96d7df9fd13dd3b3e1312cf7af9d64d7dbf24d6b1f53837850c675c5eb4bd380b5450d82075be5102c2a3db6c61f002fde2c49d9e279c8fa07cf9"]}, @generic="d4b4d9d1f213275ab467659f0b89729449694ada00a494e80d2fa66f57961a5eee674fc9d3d996836e880515033f989181b0c09090339475541c4647b7c17a6b8ac84b1421344f764411dde2b4b23e1987a95b254f03c6d0c2d7ca7ec04d81949137f0027bc5dd89c29db348197c3f738d680ba4b3d40e8f8f326e0874c4ab91994142a7583bbf61335ae81d6ba8abda6f5cf913141fb1c4a28ba95a7df93c79a26a37e015f90133fc5fcc6ba6b314aaf70bab2a71324be7d0f7be820cfb714aeb354180bdeb844b4ddbbaf8682e9fee3ed5bda1c3336a5bd97db2ae58da24c4e05897b9747591327ca191ff", @nested={0x8, 0xd3, 0x0, 0x1, [@nested={0x4, 0x9c}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x800}, 0x9000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r6, 0x58, &(0x7f0000000400)}, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r7) r8 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, 0x0, 0x0, r11], [0x2b8]}) kernel console output (not intermixed with test programs): 0 has an invalid interface number: 76 but max is 2 [ 300.379182][ T5961] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 300.404482][ T5961] usb 1-1: config 220 has an invalid descriptor of length 235, skipping remainder of the config [ 300.465080][ T5961] usb 1-1: config 220 has no interface number 2 [ 300.477303][ T5961] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 300.492306][ T5961] usb 1-1: config 220 interface 0 has no altsetting 0 [ 300.499144][ T5961] usb 1-1: config 220 interface 76 has no altsetting 0 [ 300.512738][ T5961] usb 1-1: config 220 interface 1 has no altsetting 0 [ 300.533939][ T5961] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 300.550907][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.747337][ T9143] netlink: 'syz.4.840': attribute type 21 has an invalid length. [ 300.755877][ T9143] netlink: 132 bytes leftover after parsing attributes in process `syz.4.840'. [ 301.628054][ T30] audit: type=1400 audit(1756280141.958:398): avc: denied { connect } for pid=9119 comm="syz.4.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.784699][ T5953] r8152-cfgselector 5-1: USB disconnect, device number 22 [ 301.794646][ T5961] usb 1-1: Product: syz [ 301.835495][ T5961] usb 1-1: Manufacturer: syz [ 301.840118][ T5961] usb 1-1: SerialNumber: syz [ 301.867865][ T9151] autofs: Unknown parameter 'fdev/comedi4' [ 301.951815][ T9155] evm: overlay not supported [ 302.072311][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.084116][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.116558][ T9158] netlink: 48 bytes leftover after parsing attributes in process `syz.2.846'. [ 302.150191][ T5961] usb 1-1: selecting invalid altsetting 0 [ 302.157075][ T5961] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 302.164327][ T5961] usb 1-1: No valid video chain found. [ 302.396914][ T5961] usb 1-1: selecting invalid altsetting 0 [ 302.409793][ T5961] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 302.426554][ T5961] usb 1-1: USB disconnect, device number 25 [ 302.496767][ T9165] fuse: Unknown parameter 'grou00000000000000000000' [ 302.512652][ T30] audit: type=1400 audit(1756280143.718:399): avc: denied { read write } for pid=9161 comm="syz.5.850" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 302.633615][ T30] audit: type=1400 audit(1756280143.778:400): avc: denied { open } for pid=9161 comm="syz.5.850" path="/70/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 303.767282][ T30] audit: type=1400 audit(1756280144.978:401): avc: denied { name_connect } for pid=9181 comm="syz.0.858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 303.797100][ T9185] FAULT_INJECTION: forcing a failure. [ 303.797100][ T9185] name failslab, interval 1, probability 0, space 0, times 0 [ 303.831865][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.858'. [ 303.840258][ T9185] CPU: 1 UID: 0 PID: 9185 Comm: syz.4.859 Not tainted syzkaller #0 PREEMPT(full) [ 303.840286][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.840295][ T9185] Call Trace: [ 303.840301][ T9185] [ 303.840307][ T9185] dump_stack_lvl+0x16c/0x1f0 [ 303.840330][ T9185] should_fail_ex+0x512/0x640 [ 303.840347][ T9185] ? __kmalloc_noprof+0xbf/0x510 [ 303.840365][ T9185] ? lsm_blob_alloc+0x68/0x90 [ 303.840380][ T9185] should_failslab+0xc2/0x120 [ 303.840397][ T9185] __kmalloc_noprof+0xd2/0x510 [ 303.840418][ T9185] lsm_blob_alloc+0x68/0x90 [ 303.840434][ T9185] security_prepare_creds+0x30/0x270 [ 303.840460][ T9185] prepare_creds+0x56f/0x7d0 [ 303.840479][ T9185] lookup_user_key+0x399/0x1300 [ 303.840503][ T9185] ? __pfx_lookup_user_key+0x10/0x10 [ 303.840529][ T9185] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 303.840561][ T9185] __do_sys_add_key+0x256/0x470 [ 303.840578][ T9185] ? __pfx___do_sys_add_key+0x10/0x10 [ 303.840593][ T9185] ? ksys_write+0x1ac/0x250 [ 303.840617][ T9185] do_syscall_64+0xcd/0x4c0 [ 303.840636][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.840651][ T9185] RIP: 0033:0x7fd90238ebe9 [ 303.840665][ T9185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.840679][ T9185] RSP: 002b:00007fd9032c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 303.840694][ T9185] RAX: ffffffffffffffda RBX: 00007fd9025b5fa0 RCX: 00007fd90238ebe9 [ 303.840704][ T9185] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000200000000040 [ 303.840713][ T9185] RBP: 00007fd9032c9090 R08: ffffffffffffffff R09: 0000000000000000 [ 303.840723][ T9185] R10: 00000000000000d4 R11: 0000000000000246 R12: 0000000000000001 [ 303.840731][ T9185] R13: 00007fd9025b6038 R14: 00007fd9025b5fa0 R15: 00007fff84b049a8 [ 303.840753][ T9185] [ 304.088441][ T30] audit: type=1400 audit(1756280145.298:402): avc: denied { listen } for pid=9181 comm="syz.0.858" lport=39140 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 304.092060][ T9190] netlink: 84 bytes leftover after parsing attributes in process `syz.4.861'. [ 304.111262][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.182994][ T5961] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 304.269046][ T9197] dns_resolver: Unsupported server list version (184) [ 304.404620][ T9205] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 304.411297][ T9205] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 304.419913][ T9205] vhci_hcd vhci_hcd.0: Device attached [ 304.440436][ T30] audit: type=1400 audit(1756280145.628:403): avc: denied { read write } for pid=9200 comm="syz.1.864" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.461385][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.680539][ T24] vhci_hcd: vhci_device speed not set [ 304.741104][ T5922] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 304.817603][ T30] audit: type=1400 audit(1756280145.788:404): avc: denied { open } for pid=9200 comm="syz.1.864" path="/195/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.845331][ T5961] usb 6-1: Using ep0 maxpacket: 8 [ 304.846299][ T24] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 304.852228][ T5961] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 304.868007][ T5961] usb 6-1: config 0 has no interface number 0 [ 304.881956][ T5961] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 304.914210][ T5961] usb 6-1: config 0 interface 200 has no altsetting 0 [ 304.924179][ T5961] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 304.934067][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.945475][ T5961] usb 6-1: Product: syz [ 304.956601][ T5961] usb 6-1: Manufacturer: syz [ 304.962975][ T5961] usb 6-1: SerialNumber: syz [ 304.982545][ T5961] usb 6-1: config 0 descriptor?? [ 305.112845][ T5922] usb 5-1: config 0 has no interfaces? [ 305.118352][ T5922] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 305.130591][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.161836][ T5922] usb 5-1: config 0 descriptor?? [ 305.249959][ T5961] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input11 [ 305.277562][ T9216] vxcan1 speed is unknown, defaulting to 1000 [ 305.326182][ T5953] usb 5-1: USB disconnect, device number 23 [ 305.469367][ T9206] vhci_hcd: connection reset by peer [ 305.481225][ T8671] vhci_hcd: stop threads [ 305.486190][ T8671] vhci_hcd: release socket [ 305.512070][ T8671] vhci_hcd: disconnect device [ 305.543020][ T9224] fuse: Bad value for 'fd' [ 306.107331][ T5961] usb 6-1: USB disconnect, device number 10 [ 306.257239][ T5922] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 306.326916][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.352937][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.431898][ T5922] usb 2-1: config 0 has no interfaces? [ 306.443888][ T5922] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 306.464669][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.550815][ T5922] usb 2-1: Product: syz [ 306.555091][ T5922] usb 2-1: Manufacturer: syz [ 306.559741][ T5922] usb 2-1: SerialNumber: syz [ 306.670958][ T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 306.729286][ T5922] usb 2-1: config 0 descriptor?? [ 306.780782][ T9236] netlink: 80 bytes leftover after parsing attributes in process `syz.4.869'. [ 306.874136][ T43] usb 6-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5 [ 306.883336][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.068444][ T43] usb 6-1: config 0 descriptor?? [ 307.241378][ T5922] usb 2-1: USB disconnect, device number 20 [ 307.333982][ T9247] loop2: detected capacity change from 0 to 7 [ 307.341010][ T43] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 307.342204][ T9247] Dev loop2: unable to read RDB block 7 [ 307.363725][ T9247] loop2: unable to read partition table [ 307.369577][ T9247] loop2: partition table beyond EOD, truncated [ 307.378283][ T9247] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 307.402791][ T43] asix 6-1:0.0: probe with driver asix failed with error -71 [ 307.449592][ T43] usb 6-1: USB disconnect, device number 11 [ 307.542472][ T9249] netlink: 184 bytes leftover after parsing attributes in process `syz.0.874'. [ 307.950341][ T30] audit: type=1400 audit(1756280149.118:405): avc: denied { setopt } for pid=9250 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 308.330879][ T8938] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 308.411006][ T9265] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.879'. [ 308.526384][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.880'. [ 308.577894][ T8938] usb 1-1: Using ep0 maxpacket: 16 [ 308.579611][ T9271] vlan2: entered promiscuous mode [ 308.606717][ T8938] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 308.609323][ T9271] gretap0: entered promiscuous mode [ 308.619441][ T8938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.638626][ T8938] usb 1-1: config 0 has no interface number 0 [ 308.648095][ T8938] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 308.672532][ T8938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.699530][ T8938] usb 1-1: config 0 descriptor?? [ 308.726958][ T8938] usb 1-1: Found UVC 0.00 device (0bd3:05f4) [ 308.755606][ T8938] usb 1-1: No valid video chain found. [ 308.797326][ T9277] fuse: Unknown parameter 'group_i00000000000000000000' [ 309.288548][ T9289] netlink: 80 bytes leftover after parsing attributes in process `syz.5.886'. [ 309.683343][ T9291] netlink: 'syz.4.883': attribute type 1 has an invalid length. [ 309.692026][ T9291] netlink: 152 bytes leftover after parsing attributes in process `syz.4.883'. [ 309.701201][ T9291] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 310.068428][ T24] vhci_hcd: vhci_device speed not set [ 310.087773][ T5953] usb 1-1: USB disconnect, device number 26 [ 311.379420][ T9308] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 311.650799][ T5961] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 311.985759][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.058863][ T5961] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 312.081676][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.121038][ T5961] usb 2-1: config 0 descriptor?? [ 312.165514][ T9313] program syz.4.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.175284][ T9313] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 312.194249][ T30] audit: type=1326 audit(1756280409.406:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.5.893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c2758ebe9 code=0x0 [ 312.213241][ T5961] usbhid 2-1:0.0: can't add hid device: -22 [ 312.228532][ T5961] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 312.317319][ T9320] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 312.400920][ T30] audit: type=1400 audit(1756280409.616:407): avc: denied { wake_alarm } for pid=9325 comm="syz.4.895" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 312.406220][ T9329] fuse: Unknown parameter 'group_id00000000000000000000' [ 312.421872][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.573135][ T5961] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 312.634319][ T9338] random: crng reseeded on system resumption [ 312.646953][ T30] audit: type=1400 audit(1756280409.846:408): avc: denied { append } for pid=9333 comm="syz.4.897" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 312.750841][ T5961] usb 6-1: device descriptor read/64, error -71 [ 312.841437][ T9340] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 312.962271][ T5922] usb 2-1: USB disconnect, device number 21 [ 313.081689][ T5961] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 313.221087][ T5961] usb 6-1: device descriptor read/64, error -71 [ 313.301304][ T5910] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 313.331374][ T5961] usb usb6-port1: attempt power cycle [ 313.460867][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 313.491485][ T5910] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 313.519410][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.532578][ T5910] usb 1-1: config 0 has no interface number 0 [ 313.539731][ T5910] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 313.566388][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.603100][ T5910] usb 1-1: config 0 descriptor?? [ 313.631683][ T5910] usb 1-1: Found UVC 0.00 device (0bd3:05f4) [ 313.646472][ T5910] usb 1-1: No valid video chain found. [ 313.671170][ T5961] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 313.701356][ T5961] usb 6-1: device descriptor read/8, error -71 [ 313.828559][ T9359] syzkaller1: entered promiscuous mode [ 313.945999][ T9359] syzkaller1: entered allmulticast mode [ 313.956367][ T5922] usb 1-1: USB disconnect, device number 27 [ 313.980887][ T5961] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 314.091545][ T5961] usb 6-1: device descriptor read/8, error -71 [ 314.118859][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.905'. [ 314.131788][ T30] audit: type=1400 audit(1756280411.346:409): avc: denied { connect } for pid=9364 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 314.161126][ T30] audit: type=1400 audit(1756280411.366:410): avc: denied { read } for pid=9364 comm="syz.2.905" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 314.210858][ T5961] usb usb6-port1: unable to enumerate USB device [ 314.800604][ T9380] tmpfs: Bad value for 'mpol' [ 314.825946][ T9380] fuse: Bad value for 'group_id' [ 314.831007][ T9380] fuse: Bad value for 'group_id' [ 315.360052][ T9384] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 315.532720][ T9384] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 316.105081][ T30] audit: type=1400 audit(1756280413.316:411): avc: denied { read } for pid=9388 comm="syz.0.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 316.309435][ T9401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9401 comm=syz.0.914 [ 316.354266][ T9401] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 316.714504][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.900674][ T5922] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 317.085938][ T5922] usb 2-1: device descriptor read/64, error -71 [ 317.225078][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 317.349969][ T9420] tmpfs: Bad value for 'mpol' [ 317.370528][ T9420] fuse: Bad value for 'group_id' [ 317.375512][ T9420] fuse: Bad value for 'group_id' [ 317.860453][ T5922] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 318.030462][ T5922] usb 2-1: device descriptor read/64, error -71 [ 318.143232][ T5922] usb usb2-port1: attempt power cycle [ 318.170488][ T30] audit: type=1400 audit(1756280415.390:412): avc: denied { ioctl } for pid=9429 comm="syz.5.923" path="socket:[24380]" dev="sockfs" ino=24380 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 319.060304][ T5922] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 319.150914][ T5922] usb 2-1: device descriptor read/8, error -71 [ 319.551593][ T30] audit: type=1400 audit(1756280416.680:413): avc: denied { ioctl } for pid=9429 comm="syz.5.923" path="socket:[25089]" dev="sockfs" ino=25089 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 320.080291][ T5922] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 320.399582][ T8938] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 320.409377][ T30] audit: type=1400 audit(1756280417.610:414): avc: denied { read write } for pid=9448 comm="syz.2.928" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 320.433047][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.478616][ T8938] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 320.491592][ T30] audit: type=1400 audit(1756280417.610:415): avc: denied { open } for pid=9448 comm="syz.2.928" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 320.515404][ T8938] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 320.546887][ T8938] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 320.548395][ T9449] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 320.555102][ T8938] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 320.568973][ T8938] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 320.577764][ T8938] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 320.588470][ T9449] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 320.641557][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 320.658324][ T5922] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 320.666528][ T5922] usb 2-1: config 0 has no interface number 1 [ 320.828882][ T8938] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 320.837973][ T9449] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 320.843826][ T5922] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 320.848361][ T8938] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 320.868345][ T9449] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 320.871890][ T5922] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 320.886150][ T5961] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 320.895798][ T8938] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 320.927677][ T9449] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 320.942181][ T8938] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.03 Device [syz1] on syz1 [ 321.024937][ T9449] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 321.040370][ T5922] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 321.049427][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.058272][ T9449] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 321.061555][ T5961] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 321.065568][ T5922] usb 2-1: Product: syz [ 321.077592][ T9449] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 321.090490][ T5922] usb 2-1: Manufacturer: syz [ 321.095142][ T5922] usb 2-1: SerialNumber: syz [ 321.151450][ T9461] tmpfs: Bad value for 'mpol' [ 321.160828][ T9461] fuse: Bad value for 'group_id' [ 321.165797][ T9461] fuse: Bad value for 'group_id' [ 321.507948][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.508446][ T5922] usb 2-1: config 0 descriptor?? [ 321.531207][ T5961] usb 6-1: config 0 descriptor?? [ 321.545019][ T9449] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.602304][ T9449] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 321.606211][ T5922] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 322.057994][ T9467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=9467 comm=syz.1.926 [ 322.466111][ T30] audit: type=1400 audit(1756280419.680:416): avc: denied { setattr } for pid=9465 comm="syz.0.932" path="/dev/snd/pcmC0D0p" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 322.660160][ T5953] hid-generic 00A2:0008:0003.0005: item fetching failed at offset 14/15 [ 322.669901][ T5953] hid-generic 00A2:0008:0003.0005: probe with driver hid-generic failed with error -22 [ 322.742850][ T5961] usbhid 6-1:0.0: can't add hid device: -71 [ 322.768442][ T5961] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 322.787565][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 322.825845][ T5961] usb 6-1: USB disconnect, device number 16 [ 323.641850][ T5922] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 323.653067][ T9481] netlink: 'syz.0.938': attribute type 1 has an invalid length. [ 323.665528][ T9481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.678162][ T5910] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 323.694300][ T5922] usb 2-1: USB disconnect, device number 25 [ 323.720381][ T5922] pvrusb2: Device being rendered inoperable [ 323.753534][ T5922] pvrusb2: Device being rendered inoperable [ 323.822774][ T9488] FAULT_INJECTION: forcing a failure. [ 323.822774][ T9488] name failslab, interval 1, probability 0, space 0, times 0 [ 323.841869][ T9488] CPU: 0 UID: 0 PID: 9488 Comm: syz.1.940 Not tainted syzkaller #0 PREEMPT(full) [ 323.841895][ T9488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.841905][ T9488] Call Trace: [ 323.841911][ T9488] [ 323.841918][ T9488] dump_stack_lvl+0x16c/0x1f0 [ 323.841948][ T9488] should_fail_ex+0x512/0x640 [ 323.841969][ T9488] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 323.841998][ T9488] should_failslab+0xc2/0x120 [ 323.842020][ T9488] __kmalloc_cache_noprof+0x6a/0x3e0 [ 323.842047][ T9488] ? ovs_flow_cmd_new+0x28a/0xe30 [ 323.842069][ T9488] ovs_flow_cmd_new+0x28a/0xe30 [ 323.842091][ T9488] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 323.842118][ T9488] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 323.842134][ T9488] ? __kasan_kmalloc+0xaa/0xb0 [ 323.842149][ T9488] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 323.842173][ T9488] ? genl_family_rcv_msg_doit+0xbf/0x2f0 [ 323.842193][ T9488] ? genl_rcv_msg+0x55c/0x800 [ 323.842215][ T9488] ? netlink_sendmsg+0x8d1/0xdd0 [ 323.842233][ T9488] ? ____sys_sendmsg+0xa98/0xc70 [ 323.842255][ T9488] ? ___sys_sendmsg+0x134/0x1d0 [ 323.842272][ T9488] ? __sys_sendmsg+0x16d/0x220 [ 323.842289][ T9488] ? do_syscall_64+0xcd/0x4c0 [ 323.842354][ T9488] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 323.842379][ T9488] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 323.842410][ T9488] genl_family_rcv_msg_doit+0x206/0x2f0 [ 323.842435][ T9488] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 323.842468][ T9488] ? bpf_lsm_capable+0x9/0x10 [ 323.842492][ T9488] ? security_capable+0x7e/0x260 [ 323.842514][ T9488] ? ns_capable+0xd7/0x110 [ 323.842538][ T9488] genl_rcv_msg+0x55c/0x800 [ 323.842564][ T9488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.842588][ T9488] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 323.842616][ T9488] netlink_rcv_skb+0x155/0x420 [ 323.842635][ T9488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.842660][ T9488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.842692][ T9488] ? netlink_deliver_tap+0x1ae/0xd30 [ 323.842715][ T9488] genl_rcv+0x28/0x40 [ 323.842735][ T9488] netlink_unicast+0x5aa/0x870 [ 323.842760][ T9488] ? __pfx_netlink_unicast+0x10/0x10 [ 323.842780][ T9488] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 323.842808][ T9488] netlink_sendmsg+0x8d1/0xdd0 [ 323.842834][ T9488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.842865][ T9488] ____sys_sendmsg+0xa98/0xc70 [ 323.842889][ T9488] ? copy_msghdr_from_user+0x10a/0x160 [ 323.842909][ T9488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.842951][ T9488] ___sys_sendmsg+0x134/0x1d0 [ 323.842972][ T9488] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.843025][ T9488] __sys_sendmsg+0x16d/0x220 [ 323.843044][ T9488] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.843081][ T9488] do_syscall_64+0xcd/0x4c0 [ 323.843102][ T9488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.843120][ T9488] RIP: 0033:0x7f3f4038ebe9 [ 323.843135][ T9488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.843151][ T9488] RSP: 002b:00007f3f412ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.843168][ T9488] RAX: ffffffffffffffda RBX: 00007f3f405b5fa0 RCX: 00007f3f4038ebe9 [ 323.843179][ T9488] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 323.843190][ T9488] RBP: 00007f3f412ad090 R08: 0000000000000000 R09: 0000000000000000 [ 323.843199][ T9488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.843210][ T9488] R13: 00007f3f405b6038 R14: 00007f3f405b5fa0 R15: 00007ffd176662f8 [ 323.843234][ T9488] [ 324.194287][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.223603][ T9491] netlink: 'syz.2.941': attribute type 1 has an invalid length. [ 324.235647][ T9481] vxcan1 speed is unknown, defaulting to 1000 [ 324.261886][ T9491] netlink: 224 bytes leftover after parsing attributes in process `syz.2.941'. [ 324.284427][ T5910] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 324.294695][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.308152][ T5910] usb 5-1: Product: syz [ 324.312585][ T5910] usb 5-1: Manufacturer: syz [ 324.317194][ T5910] usb 5-1: SerialNumber: syz [ 324.340051][ T5910] usb 5-1: config 0 descriptor?? [ 325.174710][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'. [ 325.278488][ T5910] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 325.537591][ T5922] usb 5-1: USB disconnect, device number 24 [ 326.568572][ T9531] ptrace attach of "./syz-executor exec"[7237] was attempted by "./syz-executor exec"[9531] [ 328.297647][ T9546] mkiss: ax0: crc mode is auto. [ 328.889115][ T9559] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 328.920006][ T9559] team0: Port device batadv1 added [ 329.161082][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 330.014014][ T9576] syzkaller0: entered promiscuous mode [ 330.073725][ T9576] syzkaller0: entered allmulticast mode [ 330.195491][ T9580] netlink: 80 bytes leftover after parsing attributes in process `syz.5.968'. [ 332.700997][ T5922] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 332.861614][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 332.874568][ T5922] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 332.898341][ T5922] usb 1-1: config 0 has no interface number 1 [ 332.916909][ T5922] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 332.947526][ T5922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 332.968659][ T5922] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 332.993234][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.004143][ T5922] usb 1-1: Product: syz [ 333.008500][ T5922] usb 1-1: Manufacturer: syz [ 333.020065][ T5922] usb 1-1: SerialNumber: syz [ 333.036494][ T5922] usb 1-1: config 0 descriptor?? [ 333.078881][ T5922] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 333.482774][ T9615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=9615 comm=syz.0.973 [ 333.616308][ T9606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.519273][ T9607] syz.5.975 (9607): drop_caches: 2 [ 334.937114][ T30] audit: type=1400 audit(1756280432.150:417): avc: denied { create } for pid=9620 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 334.958321][ T30] audit: type=1400 audit(1756280432.170:418): avc: denied { getopt } for pid=9620 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 335.013059][ T9621] SELinux: Context system_u:object_r:klogd_exec_t:s0 is not valid (left unmapped). [ 335.065141][ T5922] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 335.082905][ T5922] usb 1-1: USB disconnect, device number 28 [ 335.089929][ T5922] pvrusb2: Device being rendered inoperable [ 335.099567][ T30] audit: type=1400 audit(1756280432.220:419): avc: denied { relabelfrom } for pid=9620 comm="syz.5.979" name="UNIX" dev="sockfs" ino=25474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 335.142461][ T5922] pvrusb2: Device being rendered inoperable [ 335.155683][ T30] audit: type=1400 audit(1756280432.250:420): avc: denied { relabelto } for pid=9620 comm="syz.5.979" name="UNIX" dev="sockfs" ino=25474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:klogd_exec_t:s0" [ 335.268921][ T9627] netlink: 'syz.2.981': attribute type 12 has an invalid length. [ 335.286910][ T9627] netlink: 'syz.2.981': attribute type 29 has an invalid length. [ 335.295063][ T9627] netlink: 148 bytes leftover after parsing attributes in process `syz.2.981'. [ 335.304584][ T9627] netlink: 'syz.2.981': attribute type 2 has an invalid length. [ 335.312314][ T9627] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 335.321276][ T9627] netlink: 11 bytes leftover after parsing attributes in process `syz.2.981'. [ 335.469220][ T9634] netlink: 830 bytes leftover after parsing attributes in process `syz.2.984'. [ 336.494464][ T5922] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 336.981179][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 336.988170][ T5922] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 336.996979][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.007296][ T5922] usb 1-1: config 0 has no interface number 0 [ 337.013732][ T5922] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 337.022890][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.152686][ T5922] usb 1-1: config 0 descriptor?? [ 337.167218][ T5922] usb 1-1: Found UVC 0.00 device (0bd3:05f4) [ 337.176705][ T5922] usb 1-1: No valid video chain found. [ 338.255070][ T30] audit: type=1400 audit(1756280435.470:421): avc: denied { module_request } for pid=9660 comm="syz.5.990" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 338.539486][ T9662] netlink: 80 bytes leftover after parsing attributes in process `syz.4.989'. [ 338.778390][ T9673] 9pnet_fd: Insufficient options for proto=fd [ 338.939098][ T9678] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 339.080993][ T5922] usb 1-1: USB disconnect, device number 29 [ 339.100297][ T30] audit: type=1400 audit(1756280436.210:422): avc: denied { mount } for pid=9677 comm="syz.2.995" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 339.259136][ T30] audit: type=1400 audit(1756280436.470:423): avc: denied { ioctl } for pid=9689 comm="syz.2.997" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 339.770346][ T5922] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 340.040293][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 340.047573][ T5922] usb 6-1: config 1 has an invalid descriptor of length 89, skipping remainder of the config [ 340.058208][ T5922] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.073393][ T5922] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.082776][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 340.096001][ T5922] usb 6-1: SerialNumber: syz [ 341.255998][ T5922] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 341.269106][ T5922] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 341.276959][ T5922] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 341.300094][ T5922] usb 6-1: USB disconnect, device number 17 [ 341.529821][ T9718] 9pnet_fd: Insufficient options for proto=fd [ 342.000303][ T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 342.180621][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 342.206660][ T43] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 342.215451][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.226696][ T43] usb 5-1: config 0 has no interface number 0 [ 342.241510][ T43] usb 5-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 342.260020][ T9728] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1008'. [ 342.268610][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.287075][ T43] usb 5-1: config 0 descriptor?? [ 342.295553][ T43] usb 5-1: Found UVC 0.00 device (0bd3:05f4) [ 342.306753][ T43] usb 5-1: No valid video chain found. [ 342.732761][ T9746] FAULT_INJECTION: forcing a failure. [ 342.732761][ T9746] name failslab, interval 1, probability 0, space 0, times 0 [ 342.751135][ T9746] CPU: 0 UID: 0 PID: 9746 Comm: syz.0.1015 Not tainted syzkaller #0 PREEMPT(full) [ 342.751162][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.751173][ T9746] Call Trace: [ 342.751179][ T9746] [ 342.751185][ T9746] dump_stack_lvl+0x16c/0x1f0 [ 342.751210][ T9746] should_fail_ex+0x512/0x640 [ 342.751230][ T9746] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 342.751254][ T9746] should_failslab+0xc2/0x120 [ 342.751275][ T9746] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 342.751294][ T9746] ? __pfx_ovs_key_from_nlattrs+0x10/0x10 [ 342.751317][ T9746] ? ovs_nla_get_match+0x589/0x1700 [ 342.751344][ T9746] kmemdup_noprof+0x29/0x60 [ 342.751363][ T9746] ovs_nla_get_match+0x589/0x1700 [ 342.751390][ T9746] ? genl_rcv+0x28/0x40 [ 342.751411][ T9746] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 342.751432][ T9746] ? ___sys_sendmsg+0x134/0x1d0 [ 342.751449][ T9746] ? __sys_sendmsg+0x16d/0x220 [ 342.751465][ T9746] ? do_syscall_64+0xcd/0x4c0 [ 342.751515][ T9746] ? __asan_memset+0x23/0x50 [ 342.751545][ T9746] ovs_flow_cmd_new+0x305/0xe30 [ 342.751567][ T9746] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 342.751593][ T9746] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 342.751608][ T9746] ? __kasan_kmalloc+0xaa/0xb0 [ 342.751624][ T9746] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 342.751647][ T9746] ? genl_family_rcv_msg_doit+0xbf/0x2f0 [ 342.751668][ T9746] ? genl_rcv_msg+0x55c/0x800 [ 342.751691][ T9746] ? netlink_sendmsg+0x8d1/0xdd0 [ 342.751709][ T9746] ? ____sys_sendmsg+0xa98/0xc70 [ 342.751730][ T9746] ? ___sys_sendmsg+0x134/0x1d0 [ 342.751745][ T9746] ? __sys_sendmsg+0x16d/0x220 [ 342.751762][ T9746] ? do_syscall_64+0xcd/0x4c0 [ 342.751826][ T9746] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 342.751849][ T9746] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 342.751879][ T9746] genl_family_rcv_msg_doit+0x206/0x2f0 [ 342.751905][ T9746] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 342.751942][ T9746] ? bpf_lsm_capable+0x9/0x10 [ 342.751966][ T9746] ? security_capable+0x7e/0x260 [ 342.751988][ T9746] ? ns_capable+0xd7/0x110 [ 342.752012][ T9746] genl_rcv_msg+0x55c/0x800 [ 342.752037][ T9746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.752061][ T9746] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 342.752087][ T9746] netlink_rcv_skb+0x155/0x420 [ 342.752106][ T9746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.752130][ T9746] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.752161][ T9746] ? netlink_deliver_tap+0x1ae/0xd30 [ 342.752184][ T9746] genl_rcv+0x28/0x40 [ 342.752204][ T9746] netlink_unicast+0x5aa/0x870 [ 342.752227][ T9746] ? __pfx_netlink_unicast+0x10/0x10 [ 342.752248][ T9746] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 342.752276][ T9746] netlink_sendmsg+0x8d1/0xdd0 [ 342.752301][ T9746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.752332][ T9746] ____sys_sendmsg+0xa98/0xc70 [ 342.752355][ T9746] ? copy_msghdr_from_user+0x10a/0x160 [ 342.752373][ T9746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.752409][ T9746] ___sys_sendmsg+0x134/0x1d0 [ 342.752429][ T9746] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.752482][ T9746] __sys_sendmsg+0x16d/0x220 [ 342.752501][ T9746] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.752538][ T9746] do_syscall_64+0xcd/0x4c0 [ 342.752559][ T9746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.752577][ T9746] RIP: 0033:0x7f2b6db8ebe9 [ 342.752591][ T9746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.752608][ T9746] RSP: 002b:00007f2b6e9f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.752625][ T9746] RAX: ffffffffffffffda RBX: 00007f2b6ddb5fa0 RCX: 00007f2b6db8ebe9 [ 342.752637][ T9746] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 342.752648][ T9746] RBP: 00007f2b6e9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 342.752658][ T9746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.752668][ T9746] R13: 00007f2b6ddb6038 R14: 00007f2b6ddb5fa0 R15: 00007ffc3166e7a8 [ 342.752692][ T9746] [ 343.590326][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 343.650115][ T9751] tipc: Enabling of bearer rejected, already enabled [ 343.685099][ T9753] FAULT_INJECTION: forcing a failure. [ 343.685099][ T9753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.701958][ T9753] CPU: 0 UID: 0 PID: 9753 Comm: syz.1.1018 Not tainted syzkaller #0 PREEMPT(full) [ 343.701983][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.701993][ T9753] Call Trace: [ 343.701999][ T9753] [ 343.702006][ T9753] dump_stack_lvl+0x16c/0x1f0 [ 343.702033][ T9753] should_fail_ex+0x512/0x640 [ 343.702058][ T9753] _copy_from_iter+0x29f/0x1720 [ 343.702084][ T9753] ? __asan_memset+0x23/0x50 [ 343.702112][ T9753] ? __pfx__copy_from_iter+0x10/0x10 [ 343.702135][ T9753] ? __alloc_skb+0x200/0x380 [ 343.702153][ T9753] ? __pfx___alloc_skb+0x10/0x10 [ 343.702170][ T9753] ? __pfx___mutex_lock+0x10/0x10 [ 343.702203][ T9753] skb_copy_datagram_from_iter+0x124/0x740 [ 343.702242][ T9753] tun_get_user+0x185c/0x3ce0 [ 343.702283][ T9753] ? __pfx_tun_get_user+0x10/0x10 [ 343.702309][ T9753] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 343.702341][ T9753] ? find_held_lock+0x2b/0x80 [ 343.702364][ T9753] ? tun_get+0x191/0x370 [ 343.702394][ T9753] tun_chr_write_iter+0xdc/0x210 [ 343.702420][ T9753] vfs_write+0x7d0/0x11d0 [ 343.702440][ T9753] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 343.702468][ T9753] ? __pfx_vfs_write+0x10/0x10 [ 343.702484][ T9753] ? find_held_lock+0x2b/0x80 [ 343.702526][ T9753] ksys_write+0x12a/0x250 [ 343.702544][ T9753] ? __pfx_ksys_write+0x10/0x10 [ 343.702573][ T9753] do_syscall_64+0xcd/0x4c0 [ 343.702595][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.702613][ T9753] RIP: 0033:0x7f3f4038ebe9 [ 343.702627][ T9753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.702644][ T9753] RSP: 002b:00007f3f412ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.702661][ T9753] RAX: ffffffffffffffda RBX: 00007f3f405b5fa0 RCX: 00007f3f4038ebe9 [ 343.702672][ T9753] RDX: 000000000000002e RSI: 00002000000002c0 RDI: 0000000000000003 [ 343.702683][ T9753] RBP: 00007f3f412ad090 R08: 0000000000000000 R09: 0000000000000000 [ 343.702693][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.702703][ T9753] R13: 00007f3f405b6038 R14: 00007f3f405b5fa0 R15: 00007ffd176662f8 [ 343.702727][ T9753] [ 344.026280][ T9757] loop2: detected capacity change from 0 to 7 [ 344.054697][ T5849] Dev loop2: unable to read RDB block 7 [ 344.063703][ T5849] loop2: unable to read partition table [ 344.069529][ T5849] loop2: partition table beyond EOD, truncated [ 344.079741][ T9757] Dev loop2: unable to read RDB block 7 [ 344.088234][ T9757] loop2: unable to read partition table [ 344.094575][ T9757] loop2: partition table beyond EOD, truncated [ 344.102070][ T9757] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 344.290120][ T9764] netlink: 'syz.0.1019': attribute type 1 has an invalid length. [ 344.298110][ T9764] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1019'. [ 344.307253][ T9764] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 345.036152][ T5880] usb 5-1: USB disconnect, device number 25 [ 345.455198][ T9774] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1023'. [ 345.464501][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1023'. [ 345.474243][ T9774] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1023'. [ 345.483351][ T9774] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1023'. [ 345.492530][ T9774] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1023'. [ 345.910851][ T8938] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 346.080246][ T8938] usb 2-1: Using ep0 maxpacket: 8 [ 346.112355][ T8938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.140764][ T8938] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 346.149834][ T8938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.390447][ T8938] usb 2-1: config 0 descriptor?? [ 346.524140][ T5880] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 346.565276][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1030'. [ 346.585244][ T9791] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 346.701105][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 346.709620][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.759848][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.772523][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.799713][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.863783][ T5880] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 346.881075][ T8938] usbhid 2-1:0.0: can't add hid device: -71 [ 346.978848][ T8938] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 347.098779][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.124005][ T8938] usb 2-1: USB disconnect, device number 26 [ 347.164088][ T5880] usb 1-1: config 0 descriptor?? [ 347.506981][ T2335] pvrusb2: request_firmware fatal error with code=-110 [ 347.555843][ T2335] pvrusb2: Failure uploading firmware1 [ 347.561986][ T2335] pvrusb2: Device initialization was not successful. [ 347.568818][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 347.578998][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 347.614191][ T2335] pvrusb2: Failed to submit write-control URB status=-19 [ 347.626718][ T1207] pvrusb2: Device being rendered inoperable [ 347.645130][ T2335] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 347.678616][ T2335] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 347.697297][ T5880] hid_parser_main: 74 callbacks suppressed [ 347.697315][ T5880] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 347.916453][ T5880] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 347.931707][ T5880] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 347.943628][ T5880] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 347.952694][ T5880] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 348.021584][ T5880] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 348.029291][ T5880] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 348.151271][ T5880] usb 1-1: USB disconnect, device number 30 [ 348.171732][ T9820] bridge0: port 3(gretap0) entered blocking state [ 348.228953][ T9820] bridge0: port 3(gretap0) entered disabled state [ 348.241712][ T9820] gretap0: entered allmulticast mode [ 348.324979][ T9820] bridge0: port 3(gretap0) entered blocking state [ 348.331746][ T9820] bridge0: port 3(gretap0) entered forwarding state [ 348.423687][ T9821] gretap0: left allmulticast mode [ 348.446685][ T9821] bridge0: port 3(gretap0) entered disabled state [ 348.613092][ T30] audit: type=1400 audit(1756280445.830:424): avc: denied { bind } for pid=9827 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 348.922945][ T30] audit: type=1400 audit(1756280446.140:425): avc: denied { append } for pid=9843 comm="syz.5.1044" dev="9p" ino=131074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 348.976172][ T30] audit: type=1400 audit(1756280446.160:426): avc: denied { mounton } for pid=9843 comm="syz.5.1044" path="/110/file0" dev="9p" ino=131074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 349.001068][ T5910] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 349.018628][ T30] audit: type=1400 audit(1756280446.170:427): avc: denied { mounton } for pid=9843 comm="syz.5.1044" path="/110/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 349.171049][ T5910] usb 1-1: device descriptor read/64, error -71 [ 349.421046][ T5910] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 349.996358][ T5910] usb 1-1: device descriptor read/64, error -71 [ 350.124468][ T9858] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1047'. [ 350.133847][ T9858] tipc: Invalid UDP bearer configuration [ 350.133877][ T9858] tipc: Enabling of bearer rejected, failed to enable media [ 350.241283][ T5910] usb usb1-port1: attempt power cycle [ 350.620688][ T5910] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 350.834536][ T9879] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1053'. [ 350.844233][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 350.853790][ T9879] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1053'. [ 350.863614][ T9879] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1053'. [ 350.873338][ T9879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1053'. [ 350.916825][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'. [ 350.929642][ T9880] IPVS: Error joining to the multicast group [ 351.334706][ T5910] usb 1-1: device descriptor read/8, error -71 [ 351.601319][ T5910] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 351.670131][ T5910] usb 1-1: device descriptor read/8, error -71 [ 351.782022][ T5880] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 351.801028][ T5910] usb usb1-port1: unable to enumerate USB device [ 351.942402][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 351.949073][ T5880] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 351.958018][ T5880] usb 6-1: config 0 has no interface number 0 [ 351.967544][ T5880] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 352.045264][ T5880] usb 6-1: config 0 interface 200 has no altsetting 0 [ 352.174983][ T5880] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 352.311113][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.324975][ T5880] usb 6-1: Product: syz [ 352.388835][ T5880] usb 6-1: Manufacturer: syz [ 352.586953][ T5880] usb 6-1: SerialNumber: syz [ 352.786201][ T5880] usb 6-1: config 0 descriptor?? [ 353.003385][ T5880] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input12 [ 353.140382][ T5880] usb 6-1: USB disconnect, device number 18 [ 353.243065][ T9903] vlan0: entered promiscuous mode [ 353.975825][ T9906] fuse: Bad value for 'fd' [ 354.133379][ T9912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9912 comm=syz.4.1063 [ 354.184452][ T9912] netlink: 'syz.4.1063': attribute type 1 has an invalid length. [ 354.215511][ T30] audit: type=1400 audit(1756280451.430:428): avc: denied { mount } for pid=9913 comm="syz.0.1064" name="/" dev="hugetlbfs" ino=26285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 354.555386][ T9923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9923 comm=syz.5.1066 [ 354.842124][ T5910] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 354.868620][ T30] audit: type=1400 audit(1756280452.080:429): avc: denied { watch watch_reads } for pid=9933 comm="syz.2.1071" path="/211/file1" dev="tmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 354.961100][ T9936] vlan0: entered promiscuous mode [ 355.397435][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 355.407376][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1071'. [ 355.560861][ T5910] usb 5-1: device descriptor read/64, error -71 [ 355.762908][ T7268] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.775265][ T7268] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.787347][ T7268] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.857801][ T7268] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.871062][ T5910] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 356.041053][ T5910] usb 5-1: device descriptor read/64, error -71 [ 356.129824][ T30] audit: type=1400 audit(1756280453.340:430): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 356.151031][ T5910] usb usb5-port1: attempt power cycle [ 356.219821][ T9949] 9pnet_fd: Insufficient options for proto=fd [ 356.357998][ T30] audit: type=1400 audit(1756280453.570:431): avc: denied { mounton } for pid=9950 comm="syz.2.1075" path="/proc/696/task" dev="proc" ino=27177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 356.490934][ T5910] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 356.512473][ T5910] usb 5-1: device descriptor read/8, error -71 [ 356.700554][ T5922] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 356.806025][ T5910] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 356.844171][ T5910] usb 5-1: device descriptor read/8, error -71 [ 356.857778][ T9968] netlink: 'syz.5.1079': attribute type 10 has an invalid length. [ 356.873580][ T5922] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 356.903267][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.944284][ T5922] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 356.953629][ T5922] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 356.960678][ T5910] usb usb5-port1: unable to enumerate USB device [ 356.962039][ T5922] usb 1-1: Manufacturer: syz [ 356.982026][ T5922] usb 1-1: config 0 descriptor?? [ 356.992837][ T5922] igorplugusb 1-1:0.0: incorrect number of endpoints [ 357.413168][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 359.222628][ T9992] netlink: 'syz.5.1087': attribute type 10 has an invalid length. [ 359.495705][ T9992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.719440][ T9992] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 359.762343][ T9998] netlink: 'syz.5.1087': attribute type 10 has an invalid length. [ 360.070805][ T9998] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1087'. [ 360.097890][ T9998] batadv0: entered promiscuous mode [ 360.104558][ T9998] batadv0: entered allmulticast mode [ 360.115566][ T9998] bond0: (slave batadv0): Releasing backup interface [ 360.118188][ T5922] usb 1-1: USB disconnect, device number 35 [ 360.139818][ T9998] bridge0: port 3(batadv0) entered blocking state [ 360.156956][ T9998] bridge0: port 3(batadv0) entered disabled state [ 360.300432][ T8671] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 360.310424][ T8671] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 361.130846][ T5910] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 361.140761][ T8938] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 361.281171][ T8938] usb 1-1: device descriptor read/64, error -71 [ 361.296469][T10021] FAULT_INJECTION: forcing a failure. [ 361.296469][T10021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.310071][T10021] CPU: 1 UID: 0 PID: 10021 Comm: syz.1.1097 Not tainted syzkaller #0 PREEMPT(full) [ 361.310087][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.310093][T10021] Call Trace: [ 361.310097][T10021] [ 361.310101][T10021] dump_stack_lvl+0x16c/0x1f0 [ 361.310119][T10021] should_fail_ex+0x512/0x640 [ 361.310135][T10021] _copy_from_iter+0x29f/0x1720 [ 361.310150][T10021] ? __alloc_skb+0x200/0x380 [ 361.310162][T10021] ? __pfx__copy_from_iter+0x10/0x10 [ 361.310193][T10021] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 361.310220][T10021] netlink_sendmsg+0x829/0xdd0 [ 361.310244][T10021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.310274][T10021] ____sys_sendmsg+0xa98/0xc70 [ 361.310298][T10021] ? copy_msghdr_from_user+0x10a/0x160 [ 361.310317][T10021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.310352][T10021] ___sys_sendmsg+0x134/0x1d0 [ 361.310373][T10021] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.310422][T10021] __sys_sendmsg+0x16d/0x220 [ 361.310442][T10021] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.310478][T10021] do_syscall_64+0xcd/0x4c0 [ 361.310501][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.310518][T10021] RIP: 0033:0x7f3f4038ebe9 [ 361.310532][T10021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.310547][T10021] RSP: 002b:00007f3f412ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.310563][T10021] RAX: ffffffffffffffda RBX: 00007f3f405b5fa0 RCX: 00007f3f4038ebe9 [ 361.310575][T10021] RDX: 0000000000000000 RSI: 0000200000002c80 RDI: 0000000000000003 [ 361.310586][T10021] RBP: 00007f3f412ad090 R08: 0000000000000000 R09: 0000000000000000 [ 361.310596][T10021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.310607][T10021] R13: 00007f3f405b6038 R14: 00007f3f405b5fa0 R15: 00007ffd176662f8 [ 361.310631][T10021] [ 361.320999][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 361.535500][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0 [ 361.545501][ T5910] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 361.555202][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.564858][ T5910] usb 5-1: Product: syz [ 361.569112][ T5910] usb 5-1: Manufacturer: syz [ 361.573837][ T5910] usb 5-1: SerialNumber: syz [ 361.583000][ T5910] usb 5-1: config 0 descriptor?? [ 361.650828][ T8938] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 361.757595][T10028] tmpfs: Bad value for 'mpol' [ 361.764474][T10028] fuse: Bad value for 'group_id' [ 361.769443][T10028] fuse: Bad value for 'group_id' [ 361.791068][ T8938] usb 1-1: device descriptor read/64, error -71 [ 361.912413][ T8938] usb usb1-port1: attempt power cycle [ 362.020998][ T5910] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 362.028044][ T5910] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 362.240409][ T5846] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 362.270579][ T8938] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 362.291074][ T8938] usb 1-1: device descriptor read/8, error -71 [ 362.400805][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 362.407641][ T5846] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 362.416317][ T5846] usb 2-1: config 0 has no interface number 1 [ 362.422891][ T5846] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 362.434438][ T5846] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 362.447977][ T5846] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 362.457953][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.466500][ T5846] usb 2-1: Product: syz [ 362.471654][ T5846] usb 2-1: Manufacturer: syz [ 362.476255][ T5846] usb 2-1: SerialNumber: syz [ 362.485907][ T5846] usb 2-1: config 0 descriptor?? [ 362.493052][ T5846] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 362.530703][ T8938] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 362.551518][ T8938] usb 1-1: device descriptor read/8, error -71 [ 362.661305][ T8938] usb usb1-port1: unable to enumerate USB device [ 362.931027][T10033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10033 comm=syz.1.1100 [ 363.481575][ T8938] usb 5-1: USB disconnect, device number 30 [ 363.584760][T10039] loop2: detected capacity change from 0 to 7 [ 363.593858][T10039] Dev loop2: unable to read RDB block 7 [ 363.599480][T10039] loop2: unable to read partition table [ 363.611486][T10039] loop2: partition table beyond EOD, truncated [ 363.621647][T10039] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 363.771035][ T5880] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 363.942434][ T5880] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 363.978562][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.993068][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 364.071549][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 364.145114][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.178683][ T5880] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.197861][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.257715][ T5880] usb 6-1: config 0 descriptor?? [ 364.264604][T10035] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 364.848429][ T5880] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 364.921934][ T5880] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 364.959511][ T5217] udevd[5217]: worker [6117] terminated by signal 33 (Unknown signal 33) [ 364.987939][ T5217] udevd[5217]: worker [6117] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:047F:FFFF.0007/hidraw/hidraw0' [ 365.070028][ T5846] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 365.140862][ T5846] usb 2-1: USB disconnect, device number 27 [ 365.148249][ T5846] pvrusb2: Device being rendered inoperable [ 365.172273][ T5846] pvrusb2: Device being rendered inoperable [ 365.286249][ T5880] usb 6-1: USB disconnect, device number 19 [ 365.298399][T10068] tmpfs: Bad value for 'mpol' [ 365.305017][T10068] fuse: Bad value for 'group_id' [ 365.309961][T10068] fuse: Bad value for 'group_id' [ 365.665147][T10072] qnx6: unable to read the first superblock [ 365.768106][T10073] futex_wake_op: syz.2.1112 tries to shift op by 144; fix this program [ 366.112690][ T5846] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 366.452514][T10081] macvlan2: entered promiscuous mode [ 366.457918][T10081] bridge0: entered promiscuous mode [ 366.506649][T10082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.759032][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 366.798351][ T5846] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 366.855828][ T5846] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 366.898983][ T5846] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 366.937360][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.965958][T10088] syzkaller1: entered promiscuous mode [ 366.971672][T10088] syzkaller1: entered allmulticast mode [ 366.982853][T10088] FAULT_INJECTION: forcing a failure. [ 366.982853][T10088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.002361][T10088] CPU: 1 UID: 0 PID: 10088 Comm: syz.4.1117 Not tainted syzkaller #0 PREEMPT(full) [ 367.002384][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.002394][T10088] Call Trace: [ 367.002400][T10088] [ 367.002407][T10088] dump_stack_lvl+0x16c/0x1f0 [ 367.002431][T10088] should_fail_ex+0x512/0x640 [ 367.002455][T10088] _copy_from_iter+0x29f/0x1720 [ 367.002485][T10088] ? __pfx__copy_from_iter+0x10/0x10 [ 367.002506][T10088] ? __lock_acquire+0xb97/0x1ce0 [ 367.002532][T10088] ? _parse_integer_limit+0x17f/0x1d0 [ 367.002553][T10088] ? _kstrtoull+0x145/0x200 [ 367.002570][T10088] ? __pfx__kstrtoull+0x10/0x10 [ 367.002587][T10088] tun_get_user+0x3d3/0x3ce0 [ 367.002623][T10088] ? __pfx_tun_get_user+0x10/0x10 [ 367.002648][T10088] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 367.002677][T10088] ? find_held_lock+0x2b/0x80 [ 367.002699][T10088] ? tun_get+0x191/0x370 [ 367.002727][T10088] tun_chr_write_iter+0xdc/0x210 [ 367.002753][T10088] vfs_write+0x7d0/0x11d0 [ 367.002773][T10088] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 367.002799][T10088] ? __pfx_vfs_write+0x10/0x10 [ 367.002815][T10088] ? find_held_lock+0x2b/0x80 [ 367.002850][T10088] ksys_write+0x12a/0x250 [ 367.002867][T10088] ? __pfx_ksys_write+0x10/0x10 [ 367.002892][T10088] do_syscall_64+0xcd/0x4c0 [ 367.002914][T10088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.002932][T10088] RIP: 0033:0x7fd90238ebe9 [ 367.002947][T10088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.002964][T10088] RSP: 002b:00007fd9032c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 367.002981][T10088] RAX: ffffffffffffffda RBX: 00007fd9025b5fa0 RCX: 00007fd90238ebe9 [ 367.002993][T10088] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 367.003004][T10088] RBP: 00007fd9032c9090 R08: 0000000000000000 R09: 0000000000000000 [ 367.003014][T10088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.003024][T10088] R13: 00007fd9025b6038 R14: 00007fd9025b5fa0 R15: 00007fff84b049a8 [ 367.003048][T10088] [ 367.209866][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.435486][ T30] audit: type=1400 audit(1756280464.650:432): avc: denied { setopt } for pid=10091 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 367.538742][ T5846] usb 2-1: string descriptor 0 read error: -71 [ 367.582990][ T5846] hub 2-1:32.0: USB hub found [ 367.634310][ T5846] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 367.840324][T10101] overlayfs: missing 'workdir' [ 367.940503][T10104] overlayfs: failed to resolve './file1': -2 [ 368.260475][ T5846] usb 2-1: USB disconnect, device number 28 [ 368.281031][T10106] SELinux: Context system_u:object_r:userio_device_t:s0 is not valid (left unmapped). [ 369.026226][ T30] audit: type=1400 audit(1756280465.830:433): avc: denied { relabelto } for pid=10094 comm="syz.2.1121" name="file1" dev="tmpfs" ino=1169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 369.052948][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.559524][T10113] tmpfs: Bad value for 'mpol' [ 369.566157][T10113] fuse: Bad value for 'group_id' [ 369.571731][T10113] fuse: Bad value for 'group_id' [ 369.769887][ T30] audit: type=1400 audit(1756280465.830:434): avc: denied { associate } for pid=10094 comm="syz.2.1121" name="file1" dev="tmpfs" ino=1169 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:userio_device_t:s0" [ 370.000245][ T30] audit: type=1400 audit(1756280467.210:435): avc: denied { rmdir } for pid=5840 comm="syz-executor" name="file1" dev="tmpfs" ino=1169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 371.624378][T10119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.822099][ T30] audit: type=1400 audit(1756280469.040:436): avc: denied { read } for pid=10114 comm="syz.1.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 371.855917][ T30] audit: type=1400 audit(1756280469.070:437): avc: denied { map } for pid=10140 comm="syz.5.1131" path="socket:[28716]" dev="sockfs" ino=28716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 372.124436][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 372.410860][ T5910] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 372.695007][T10162] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1134'. [ 372.753729][ T5910] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 372.763355][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.842190][ T5910] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 372.863694][T10144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.004439][ T5910] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 373.225876][ T5910] usb 2-1: Manufacturer: syz [ 373.234709][ T5910] usb 2-1: config 0 descriptor?? [ 374.256760][ T5910] usb 2-1: can't set config #0, error -71 [ 374.270493][ T5910] usb 2-1: USB disconnect, device number 29 [ 374.627452][T10185] 9pnet_fd: Insufficient options for proto=fd [ 374.670610][ T5961] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 374.810614][ T30] audit: type=1400 audit(2000000000.020:438): avc: denied { getopt } for pid=10182 comm="syz.4.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 374.855564][ T5961] usb 6-1: Using ep0 maxpacket: 32 [ 374.872493][ T5961] usb 6-1: unable to get BOS descriptor or descriptor too short [ 374.892047][ T5961] usb 6-1: no configurations [ 374.896672][ T5961] usb 6-1: can't read configurations, error -22 [ 375.053803][ T5961] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 375.413254][ T5961] usb 6-1: Using ep0 maxpacket: 32 [ 375.543780][ T5961] usb 6-1: unable to get BOS descriptor or descriptor too short [ 375.552160][ T5961] usb 6-1: no configurations [ 375.564109][ T5961] usb 6-1: can't read configurations, error -22 [ 375.577518][ T5961] usb usb6-port1: attempt power cycle [ 375.810281][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 375.930885][ T5961] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 375.972517][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.998252][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 376.011203][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.011363][ T5961] usb 6-1: Using ep0 maxpacket: 32 [ 376.036267][ T24] usb 1-1: config 0 descriptor?? [ 376.062823][ T5961] usb 6-1: unable to get BOS descriptor or descriptor too short [ 376.082069][ T5961] usb 6-1: no configurations [ 376.087871][ T5961] usb 6-1: can't read configurations, error -22 [ 376.255193][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 376.260101][ T5961] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 376.280694][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 376.291194][ T5961] usb 6-1: Using ep0 maxpacket: 32 [ 376.298088][ T5961] usb 6-1: unable to get BOS descriptor or descriptor too short [ 376.306598][ T5961] usb 6-1: no configurations [ 376.316379][ T5961] usb 6-1: can't read configurations, error -22 [ 376.337005][ T5961] usb usb6-port1: unable to enumerate USB device [ 376.400825][ T24] usb 1-1: USB disconnect, device number 40 [ 376.891219][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 377.270263][ T24] usb 1-1: device descriptor read/64, error -71 [ 377.471057][T10217] netlink: 'syz.1.1151': attribute type 10 has an invalid length. [ 377.588812][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 377.618882][T10217] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 377.733406][T10225] 9pnet_fd: Insufficient options for proto=fd [ 377.809091][ T24] usb 1-1: device descriptor read/64, error -71 [ 377.920641][ T24] usb usb1-port1: attempt power cycle [ 378.163504][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.303744][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 378.330701][ T24] usb 1-1: device descriptor read/8, error -71 [ 380.197006][ T30] audit: type=1400 audit(2000000005.470:439): avc: denied { mount } for pid=10235 comm="syz.1.1157" name="/" dev="pstore" ino=3028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 380.235830][T10241] overlayfs: conflicting lowerdir path [ 380.241582][ T30] audit: type=1400 audit(2000000005.510:440): avc: denied { mounton } for pid=10235 comm="syz.1.1157" path="/" dev="pstore" ino=3028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 380.453019][ T30] audit: type=1400 audit(2000000005.730:441): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 380.586327][T10267] syz_tun: entered allmulticast mode [ 380.607823][T10266] syz_tun: left allmulticast mode [ 380.621339][T10269] netlink: 'syz.1.1165': attribute type 1 has an invalid length. [ 380.722649][T10269] bond4: (slave geneve2): making interface the new active one [ 380.772578][T10269] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 380.812374][ T7737] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 380.917303][T10276] FAULT_INJECTION: forcing a failure. [ 380.917303][T10276] name failslab, interval 1, probability 0, space 0, times 0 [ 380.938516][T10276] CPU: 1 UID: 0 PID: 10276 Comm: syz.2.1168 Not tainted syzkaller #0 PREEMPT(full) [ 380.938544][T10276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.938555][T10276] Call Trace: [ 380.938561][T10276] [ 380.938568][T10276] dump_stack_lvl+0x16c/0x1f0 [ 380.938593][T10276] should_fail_ex+0x512/0x640 [ 380.938613][T10276] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 380.938636][T10276] should_failslab+0xc2/0x120 [ 380.938657][T10276] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 380.938675][T10276] ? __alloc_skb+0x2b2/0x380 [ 380.938699][T10276] __alloc_skb+0x2b2/0x380 [ 380.938717][T10276] ? __pfx___alloc_skb+0x10/0x10 [ 380.938737][T10276] ? avc_has_perm_noaudit+0x149/0x3b0 [ 380.938762][T10276] __tipc_nl_compat_doit+0xa1/0x3d0 [ 380.938789][T10276] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 380.938824][T10276] ? bpf_lsm_capable+0x9/0x10 [ 380.938850][T10276] ? security_capable+0x7e/0x260 [ 380.938874][T10276] tipc_nl_compat_doit+0x11e/0x290 [ 380.938905][T10276] tipc_nl_compat_recv+0x741/0xc50 [ 380.938928][T10276] ? bpf_ksym_find+0x127/0x1c0 [ 380.938951][T10276] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 380.938974][T10276] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 380.938994][T10276] ? __pfx_tipc_nl_compat_net_set+0x10/0x10 [ 380.939021][T10276] ? __pfx___mutex_trylock_common+0x10/0x10 [ 380.939055][T10276] ? rcu_is_watching+0x12/0xc0 [ 380.939077][T10276] ? trace_contention_end+0xdd/0x130 [ 380.939092][T10276] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 380.939123][T10276] genl_family_rcv_msg_doit+0x206/0x2f0 [ 380.939149][T10276] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 380.939173][T10276] ? genl_get_cmd+0x194/0x580 [ 380.939202][T10276] ? netlink_alloc_large_skb+0x69/0x130 [ 380.939221][T10276] ? netlink_sendmsg+0x6a1/0xdd0 [ 380.939240][T10276] ? __radix_tree_lookup+0x21f/0x2c0 [ 380.939262][T10276] genl_rcv_msg+0x55c/0x800 [ 380.939289][T10276] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.939313][T10276] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 380.939341][T10276] ? __lock_acquire+0x62e/0x1ce0 [ 380.939373][T10276] netlink_rcv_skb+0x155/0x420 [ 380.939394][T10276] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.939418][T10276] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.939451][T10276] ? netlink_deliver_tap+0x1ae/0xd30 [ 380.939469][T10276] ? selinux_netlink_send+0x578/0x830 [ 380.939491][T10276] ? is_vmalloc_addr+0x86/0xa0 [ 380.939511][T10276] genl_rcv+0x28/0x40 [ 380.939531][T10276] netlink_unicast+0x5aa/0x870 [ 380.939556][T10276] ? __pfx_netlink_unicast+0x10/0x10 [ 380.939577][T10276] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 380.939606][T10276] netlink_sendmsg+0x8d1/0xdd0 [ 380.939632][T10276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.939664][T10276] ____sys_sendmsg+0xa98/0xc70 [ 380.939689][T10276] ? copy_msghdr_from_user+0x10a/0x160 [ 380.939708][T10276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.939745][T10276] ___sys_sendmsg+0x134/0x1d0 [ 380.939767][T10276] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.939820][T10276] __sys_sendmsg+0x16d/0x220 [ 380.939841][T10276] ? __pfx___sys_sendmsg+0x10/0x10 [ 380.939884][T10276] do_syscall_64+0xcd/0x4c0 [ 380.939907][T10276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.939925][T10276] RIP: 0033:0x7f68bd78ebe9 [ 380.939940][T10276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.939957][T10276] RSP: 002b:00007f68be660038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.939975][T10276] RAX: ffffffffffffffda RBX: 00007f68bd9b5fa0 RCX: 00007f68bd78ebe9 [ 380.939986][T10276] RDX: 0000000000000000 RSI: 0000200000002c80 RDI: 0000000000000003 [ 380.939996][T10276] RBP: 00007f68be660090 R08: 0000000000000000 R09: 0000000000000000 [ 380.940007][T10276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.940017][T10276] R13: 00007f68bd9b6038 R14: 00007f68bd9b5fa0 R15: 00007ffe9f9f9658 [ 380.940041][T10276] [ 381.317989][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.361667][ T7737] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.900337][ T7737] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.911106][T10278] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 382.915582][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 382.988123][T10300] veth1: entered promiscuous mode [ 383.064884][T10300] netlink: 'syz.1.1172': attribute type 8 has an invalid length. [ 383.098758][T10300] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 383.116179][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 383.290264][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 383.297097][ T24] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 383.306089][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.359950][ T24] usb 5-1: config 0 has no interface number 0 [ 383.380035][ T24] usb 5-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 383.486325][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.497430][ T24] usb 5-1: config 0 descriptor?? [ 383.523671][ T24] usb 5-1: Found UVC 0.00 device (0bd3:05f4) [ 383.532395][ T24] usb 5-1: No valid video chain found. [ 384.204541][T10322] fuse: Bad value for 'fd' [ 384.266459][T10324] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 384.307038][T10324] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1180'. [ 385.572729][T10346] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 385.705442][T10348] tmpfs: Bad value for 'mpol' [ 385.718551][T10348] fuse: Bad value for 'group_id' [ 385.723594][T10348] fuse: Bad value for 'group_id' [ 386.115849][ T5922] usb 5-1: USB disconnect, device number 31 [ 386.190283][ T5846] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 386.366215][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.399439][ T5846] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 386.430762][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.466293][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 386.488806][ T5846] usb 6-1: config 0 descriptor?? [ 386.496690][ T5846] usbhid 6-1:0.0: can't add hid device: -22 [ 386.502785][ T5846] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 386.767892][ T5846] usb 6-1: USB disconnect, device number 24 [ 387.034242][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'. [ 387.124268][ T30] audit: type=1400 audit(2000000012.310:442): avc: denied { create } for pid=10363 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 387.470277][ T5961] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 387.645941][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.661416][T10372] ptrace attach of "./syz-executor exec"[7237] was attempted by "./syz-executor exec"[10372] [ 387.680246][ T5961] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 387.689301][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.727294][ T5961] usb 2-1: config 0 descriptor?? [ 388.177012][T10359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.186042][T10359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.484146][ T5961] logitech-djreceiver 0003:046D:C52F.0008: item fetching failed at offset 0/6 [ 388.522947][ T5961] logitech-djreceiver 0003:046D:C52F.0008: logi_dj_probe: parse failed [ 388.537584][ T5961] logitech-djreceiver 0003:046D:C52F.0008: probe with driver logitech-djreceiver failed with error -22 [ 388.911195][ T5961] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 389.320865][ T5910] usb 2-1: USB disconnect, device number 30 [ 389.572641][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 389.647779][ T5961] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 389.710726][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.721985][ T5961] usb 1-1: config 0 descriptor?? [ 389.814050][ T5961] usb 1-1: interface 1 not found [ 389.864995][T10393] fuse: Unknown parameter 'rootmode4000 0000000000000040000' [ 390.017181][T10382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.033337][T10382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.049386][T10382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.058402][T10394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.061171][T10382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.123715][T10394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.136250][ T5953] usb 1-1: USB disconnect, device number 45 [ 391.264527][T10409] macvtap2: entered allmulticast mode [ 391.620340][T10413] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1203'. [ 391.655636][ T30] audit: type=1400 audit(2000000016.930:443): avc: denied { ioctl } for pid=10422 comm="syz.0.1207" path="socket:[29293]" dev="sockfs" ino=29293 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 392.211604][T10428] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 392.807665][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 392.816953][T10438] IPVS: Error joining to the multicast group [ 393.135440][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'. [ 393.182059][T10440] bond0: (slave bond_slave_0): Releasing backup interface [ 394.704674][T10459] netlink: 'syz.1.1217': attribute type 12 has an invalid length. [ 395.058286][T10459] netlink: 'syz.1.1217': attribute type 29 has an invalid length. [ 395.160911][T10459] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1217'. [ 395.240337][T10459] netlink: 'syz.1.1217': attribute type 2 has an invalid length. [ 395.448686][T10469] tmpfs: Bad value for 'mpol' [ 395.462483][T10469] fuse: Bad value for 'group_id' [ 395.467472][T10469] fuse: Bad value for 'group_id' [ 395.875783][T10459] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 395.885949][T10459] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1217'. [ 396.921647][T10470] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 396.931142][T10470] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 396.940789][T10470] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 397.502789][T10483] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[10483] [ 398.657841][ T30] audit: type=1400 audit(2000000023.930:444): avc: denied { read write } for pid=10489 comm="syz.2.1226" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 398.684152][ T30] audit: type=1400 audit(2000000023.930:445): avc: denied { open } for pid=10489 comm="syz.2.1226" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 399.217698][T10508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 399.228685][T10508] netlink: 'syz.2.1230': attribute type 7 has an invalid length. [ 399.293086][T10508] netlink: 'syz.2.1230': attribute type 8 has an invalid length. [ 399.302680][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 399.400560][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 399.442922][T10508] team0: entered promiscuous mode [ 399.485519][T10508] C: entered promiscuous mode [ 399.496225][T10508] team_slave_1: entered promiscuous mode [ 399.503224][T10508] batadv1: entered promiscuous mode [ 399.508617][T10508] batadv2: entered promiscuous mode [ 399.518117][T10508] bond0: entered promiscuous mode [ 399.527371][T10508] bond_slave_1: entered promiscuous mode [ 399.661081][T10508] team0: left promiscuous mode [ 399.670463][T10508] C: left promiscuous mode [ 399.675182][T10508] team_slave_1: left promiscuous mode [ 399.687669][T10508] batadv1: left promiscuous mode [ 399.786792][T10516] tmpfs: Bad value for 'mpol' [ 399.798550][T10516] fuse: Bad value for 'group_id' [ 399.803591][T10516] fuse: Bad value for 'group_id' [ 400.170635][T10508] batadv2: left promiscuous mode [ 400.292627][T10517] netlink: 'syz.1.1228': attribute type 10 has an invalid length. [ 400.350360][T10508] bond0: left promiscuous mode [ 400.518968][T10508] bond_slave_1: left promiscuous mode [ 400.609981][T10517] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.617370][T10517] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.651740][T10521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1234'. [ 400.656359][T10519] fuse: Bad value for 'fd' [ 400.739514][T10517] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.746699][T10517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.754196][T10517] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.761340][T10517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.086985][T10525] netlink: 'syz.4.1234': attribute type 10 has an invalid length. [ 401.108588][T10517] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 401.164795][T10525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.239902][T10525] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 402.098506][T10523] netlink: 'syz.4.1234': attribute type 10 has an invalid length. [ 402.106417][T10523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1234'. [ 402.115418][T10523] batadv0: entered promiscuous mode [ 402.121444][T10523] bond0: (slave batadv0): Releasing backup interface [ 402.129605][T10523] bridge0: port 3(batadv0) entered blocking state [ 402.136154][T10523] bridge0: port 3(batadv0) entered disabled state [ 402.374879][ T8671] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 402.384464][ T8671] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 402.501512][ T5910] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 402.543151][T10548] xt_socket: unknown flags 0xe4 [ 402.660230][ T5961] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 402.669196][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.692960][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.710468][ T5910] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 402.723165][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.735546][ T5910] usb 6-1: config 0 descriptor?? [ 402.912367][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.930296][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.950430][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 403.014611][ T5961] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.023763][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.037049][ T5961] usb 1-1: config 0 descriptor?? [ 403.221320][T10555] tmpfs: Bad value for 'mpol' [ 403.227090][T10555] fuse: Bad value for 'group_id' [ 403.232291][T10555] fuse: Bad value for 'group_id' [ 403.475853][T10560] fuse: Bad value for 'fd' [ 403.656579][T10541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.676969][T10541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.702574][ T5961] usbhid 1-1:0.0: can't add hid device: -71 [ 403.709444][T10570] FAULT_INJECTION: forcing a failure. [ 403.709444][T10570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.717485][ T5961] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 403.725747][ T30] audit: type=1400 audit(2000000028.980:446): avc: denied { append } for pid=10540 comm="syz.0.1240" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 403.760345][T10570] CPU: 0 UID: 0 PID: 10570 Comm: syz.1.1249 Not tainted syzkaller #0 PREEMPT(full) [ 403.760371][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 403.760382][T10570] Call Trace: [ 403.760387][T10570] [ 403.760394][T10570] dump_stack_lvl+0x16c/0x1f0 [ 403.760420][T10570] should_fail_ex+0x512/0x640 [ 403.760446][T10570] _copy_from_user+0x2e/0xd0 [ 403.760469][T10570] kstrtouint_from_user+0xd6/0x1d0 [ 403.760487][T10570] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 403.760503][T10570] ? __lock_acquire+0xb97/0x1ce0 [ 403.760543][T10570] proc_fail_nth_write+0x83/0x220 [ 403.760565][T10570] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 403.760590][T10570] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 403.760609][T10570] vfs_write+0x29d/0x11d0 [ 403.760631][T10570] ? __pfx___mutex_lock+0x10/0x10 [ 403.760652][T10570] ? __pfx_vfs_write+0x10/0x10 [ 403.760678][T10570] ? __fget_files+0x20e/0x3c0 [ 403.760706][T10570] ksys_write+0x12a/0x250 [ 403.760723][T10570] ? __pfx_ksys_write+0x10/0x10 [ 403.760748][T10570] do_syscall_64+0xcd/0x4c0 [ 403.760769][T10570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.760785][T10570] RIP: 0033:0x7f3f4038d69f [ 403.760800][T10570] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 403.760815][T10570] RSP: 002b:00007f3f412ad030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 403.760831][T10570] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3f4038d69f [ 403.760842][T10570] RDX: 0000000000000001 RSI: 00007f3f412ad0a0 RDI: 0000000000000003 [ 403.760852][T10570] RBP: 00007f3f412ad090 R08: 0000000000000000 R09: 0000000000000000 [ 403.760861][T10570] R10: 00000000000000d4 R11: 0000000000000293 R12: 0000000000000002 [ 403.760870][T10570] R13: 00007f3f405b6038 R14: 00007f3f405b5fa0 R15: 00007ffd176662f8 [ 403.760892][T10570] [ 403.986584][ T5961] usb 1-1: USB disconnect, device number 46 [ 404.018389][ T5910] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #100: -71 [ 404.030222][ T5910] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 404.047395][ T5910] uclogic 0003:256C:006D.0009: failed probing pen v1 parameters: -71 [ 404.056928][ T5910] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 404.064986][ T5910] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 404.075962][ T5910] usb 6-1: USB disconnect, device number 25 [ 404.224581][T10574] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1250'. [ 404.302835][T10576] FAULT_INJECTION: forcing a failure. [ 404.302835][T10576] name failslab, interval 1, probability 0, space 0, times 0 [ 404.340219][T10576] CPU: 1 UID: 0 PID: 10576 Comm: syz.1.1251 Not tainted syzkaller #0 PREEMPT(full) [ 404.340245][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.340256][T10576] Call Trace: [ 404.340262][T10576] [ 404.340269][T10576] dump_stack_lvl+0x16c/0x1f0 [ 404.340294][T10576] should_fail_ex+0x512/0x640 [ 404.340313][T10576] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 404.340334][T10576] should_failslab+0xc2/0x120 [ 404.340354][T10576] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 404.340372][T10576] ? alloc_empty_file+0x55/0x1e0 [ 404.340400][T10576] alloc_empty_file+0x55/0x1e0 [ 404.340424][T10576] path_openat+0xda/0x2cb0 [ 404.340442][T10576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.340470][T10576] ? __pfx_path_openat+0x10/0x10 [ 404.340495][T10576] do_filp_open+0x20b/0x470 [ 404.340515][T10576] ? __pfx_do_filp_open+0x10/0x10 [ 404.340551][T10576] ? alloc_fd+0x471/0x7d0 [ 404.340577][T10576] do_sys_openat2+0x11b/0x1d0 [ 404.340600][T10576] ? __pfx_do_sys_openat2+0x10/0x10 [ 404.340626][T10576] ? __fget_files+0x20e/0x3c0 [ 404.340650][T10576] __x64_sys_openat+0x174/0x210 [ 404.340674][T10576] ? __pfx___x64_sys_openat+0x10/0x10 [ 404.340697][T10576] ? ksys_write+0x1ac/0x250 [ 404.340723][T10576] do_syscall_64+0xcd/0x4c0 [ 404.340745][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.340772][T10576] RIP: 0033:0x7f3f4038ebe9 [ 404.340786][T10576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.340802][T10576] RSP: 002b:00007f3f412ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 404.340820][T10576] RAX: ffffffffffffffda RBX: 00007f3f405b5fa0 RCX: 00007f3f4038ebe9 [ 404.340831][T10576] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 404.340842][T10576] RBP: 00007f3f412ad090 R08: 0000000000000000 R09: 0000000000000000 [ 404.340852][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.340862][T10576] R13: 00007f3f405b6038 R14: 00007f3f405b5fa0 R15: 00007ffd176662f8 [ 404.340886][T10576] [ 405.840631][ T30] audit: type=1400 audit(2000000031.120:447): avc: denied { connect } for pid=10586 comm="syz.5.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 406.001657][T10600] tipc: Enabling of bearer rejected, already enabled [ 406.910631][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 407.220258][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 407.258195][ T24] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 407.296678][ T24] usb 1-1: config 0 has no interface number 1 [ 407.317023][ T24] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 407.381054][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 407.644735][T10621] lo speed is unknown, defaulting to 1000 [ 407.651331][T10621] lo speed is unknown, defaulting to 1000 [ 407.663644][T10621] lo speed is unknown, defaulting to 1000 [ 407.689760][T10621] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 407.742791][T10621] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 407.865740][ T30] audit: type=1400 audit(2000000032.900:448): avc: denied { append } for pid=10618 comm="syz.2.1263" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 407.913393][T10621] lo speed is unknown, defaulting to 1000 [ 407.921294][T10621] lo speed is unknown, defaulting to 1000 [ 407.928362][T10621] lo speed is unknown, defaulting to 1000 [ 407.934780][T10621] lo speed is unknown, defaulting to 1000 [ 407.941183][T10621] lo speed is unknown, defaulting to 1000 [ 408.001348][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 408.015652][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.024905][ T24] usb 1-1: Product: syz [ 408.029374][ T24] usb 1-1: Manufacturer: syz [ 408.034158][ T24] usb 1-1: SerialNumber: syz [ 408.057930][ T24] usb 1-1: config 0 descriptor?? [ 408.088590][ T24] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 408.618756][T10607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10607 comm=syz.0.1260 [ 408.664337][ T24] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 408.699749][ T24] usb 1-1: USB disconnect, device number 47 [ 408.726662][ T24] pvrusb2: Device being rendered inoperable [ 408.778064][ T24] pvrusb2: Device being rendered inoperable [ 408.897873][ T2335] pvrusb2: request_firmware fatal error with code=-110 [ 409.056687][T10641] tmpfs: Bad value for 'mpol' [ 409.062652][T10641] fuse: Bad value for 'group_id' [ 409.067590][T10641] fuse: Bad value for 'group_id' [ 409.190603][T10644] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 409.615784][ T2335] pvrusb2: Failure uploading firmware1 [ 409.668546][ T2335] pvrusb2: Device initialization was not successful. [ 409.980226][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 409.982542][T10647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1270'. [ 410.010213][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 410.029820][ T1207] pvrusb2: Device being rendered inoperable [ 410.688140][T10658] block nbd1: Attempted send on invalid socket [ 410.694533][T10658] I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 410.704168][T10658] gfs2: error -5 reading superblock [ 410.860241][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 411.240393][ T24] usb 3-1: device descriptor read/64, error -71 [ 411.420550][ T5922] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 411.985955][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 412.020332][ T30] audit: type=1400 audit(2000000037.280:449): avc: denied { listen } for pid=10680 comm="syz.1.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 412.225125][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.246427][ T5922] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 412.256258][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.523781][ T5922] usb 6-1: config 0 descriptor?? [ 413.167218][T10695] 9pnet_fd: Insufficient options for proto=fd [ 413.179674][ T24] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 413.244718][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.272563][ T24] usb 3-1: Product: syz [ 413.276787][ T24] usb 3-1: Manufacturer: syz [ 413.293696][ T24] usb 3-1: SerialNumber: syz [ 413.343734][ T24] usb 3-1: config 0 descriptor?? [ 413.478879][ T24] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 414.091692][ T5922] hid_mf 0003:0079:1846.000A: unknown main item tag 0x1 [ 414.107252][ T5922] hid_mf 0003:0079:1846.000A: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.5-1/input0 [ 414.119645][ T5922] hid_mf 0003:0079:1846.000A: Invalid report, this should never happen! [ 414.128170][ T5922] hid_mf 0003:0079:1846.000A: Force feedback init failed. [ 414.307869][ T24] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 414.307895][ T1207] usb 6-1: USB disconnect, device number 26 [ 414.332900][ T24] sq905c 3-1:0.0: Get version command failed [ 414.362554][T10709] vxcan1 speed is unknown, defaulting to 1000 [ 414.444608][T10709] lo speed is unknown, defaulting to 1000 [ 414.473878][ T24] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 414.483225][ T24] usb 3-1: USB disconnect, device number 18 [ 415.550802][T10726] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1287'. [ 415.747209][T10730] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 415.797604][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1293'. [ 415.824630][T10730] kvm: pic: level sensitive irq not supported [ 415.824701][T10730] kvm: pic: non byte read [ 415.830604][T10739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10739 comm=syz.5.1293 [ 415.860446][T10730] kvm: pic: level sensitive irq not supported [ 415.860514][T10730] kvm: pic: non byte read [ 416.455207][T10730] kvm: pic: level sensitive irq not supported [ 416.455266][T10730] kvm: pic: non byte read [ 416.765947][T10746] mkiss: ax0: crc mode is auto. [ 416.803052][ T30] audit: type=1400 audit(2000000042.060:450): avc: denied { listen } for pid=10737 comm="syz.4.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 417.305033][T10758] vxcan1 speed is unknown, defaulting to 1000 [ 417.490271][ T2156] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 417.531231][T10765] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 417.557170][T10765] kvm: pic: level sensitive irq not supported [ 417.557278][T10765] kvm: pic: non byte read [ 417.628512][T10765] kvm: pic: level sensitive irq not supported [ 417.628561][T10765] kvm: pic: non byte read [ 417.696902][ T2156] usb 6-1: config 0 has no interfaces? [ 417.718322][ T2156] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 417.761117][T10765] kvm: pic: level sensitive irq not supported [ 417.762084][T10765] kvm: pic: non byte read [ 417.800012][ T2156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.856091][ T2156] usb 6-1: Product: syz [ 417.866289][T10765] kvm: pic: level sensitive irq not supported [ 417.866343][T10765] kvm: pic: non byte read [ 417.885287][ T2156] usb 6-1: Manufacturer: syz [ 417.890960][T10769] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 417.917332][T10765] kvm: pic: level sensitive irq not supported [ 417.917388][T10765] kvm: pic: non byte read [ 418.000227][ T2156] usb 6-1: SerialNumber: syz [ 418.051421][ T2156] usb 6-1: config 0 descriptor?? [ 418.246266][T10758] lo speed is unknown, defaulting to 1000 [ 418.737675][T10779] block nbd4: Attempted send on invalid socket [ 418.753595][T10779] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 418.764440][T10779] SQUASHFS error: Failed to read block 0x0: -5 [ 418.776503][T10779] unable to read squashfs_super_block [ 418.889108][ T5910] usb 6-1: USB disconnect, device number 27 [ 419.010220][ T1207] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 419.271734][ T1207] usb 2-1: Using ep0 maxpacket: 32 [ 419.278269][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.291284][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.302971][ T1207] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 419.831384][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.918361][ T1207] usb 2-1: config 0 descriptor?? [ 419.925710][ T1207] hub 2-1:0.0: USB hub found [ 420.151416][ T1207] hub 2-1:0.0: 1 port detected [ 421.154645][ T1207] hub 2-1:0.0: activate --> -90 [ 421.576477][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1312'. [ 421.725052][ T5922] usb 2-1: USB disconnect, device number 31 [ 421.961385][ T30] audit: type=1400 audit(2000000047.240:451): avc: denied { connect } for pid=10819 comm="syz.5.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 422.801996][T10825] libceph: resolve '4' (ret=-3): failed [ 422.969011][T10839] netlink: 'syz.1.1318': attribute type 10 has an invalid length. [ 423.877494][T10858] vlan0: entered promiscuous mode [ 424.187211][T10868] bridge1: entered promiscuous mode [ 424.249736][ T30] audit: type=1400 audit(2000000049.490:452): avc: denied { read write } for pid=10860 comm="syz.5.1325" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 424.284667][ T30] audit: type=1400 audit(2000000049.490:453): avc: denied { open } for pid=10860 comm="syz.5.1325" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 425.548612][T10882] FAULT_INJECTION: forcing a failure. [ 425.548612][T10882] name failslab, interval 1, probability 0, space 0, times 0 [ 425.580055][T10882] CPU: 0 UID: 0 PID: 10882 Comm: syz.2.1331 Not tainted syzkaller #0 PREEMPT(full) [ 425.580079][T10882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.580086][T10882] Call Trace: [ 425.580090][T10882] [ 425.580095][T10882] dump_stack_lvl+0x16c/0x1f0 [ 425.580113][T10882] should_fail_ex+0x512/0x640 [ 425.580129][T10882] ? __kmalloc_noprof+0xbf/0x510 [ 425.580148][T10882] ? __tipc_nl_compat_doit+0xe4/0x3d0 [ 425.580168][T10882] should_failslab+0xc2/0x120 [ 425.580187][T10882] __kmalloc_noprof+0xd2/0x510 [ 425.580202][T10882] ? avc_has_perm_noaudit+0x149/0x3b0 [ 425.580227][T10882] __tipc_nl_compat_doit+0xe4/0x3d0 [ 425.580251][T10882] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 425.580287][T10882] ? bpf_lsm_capable+0x9/0x10 [ 425.580309][T10882] ? security_capable+0x7e/0x260 [ 425.580331][T10882] tipc_nl_compat_doit+0x11e/0x290 [ 425.580355][T10882] tipc_nl_compat_recv+0x741/0xc50 [ 425.580377][T10882] ? bpf_ksym_find+0x127/0x1c0 [ 425.580398][T10882] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 425.580420][T10882] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 425.580438][T10882] ? __pfx_tipc_nl_compat_net_set+0x10/0x10 [ 425.580464][T10882] ? __pfx___mutex_trylock_common+0x10/0x10 [ 425.580496][T10882] ? rcu_is_watching+0x12/0xc0 [ 425.580518][T10882] ? trace_contention_end+0xdd/0x130 [ 425.580532][T10882] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 425.580564][T10882] genl_family_rcv_msg_doit+0x206/0x2f0 [ 425.580589][T10882] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 425.580613][T10882] ? genl_get_cmd+0x194/0x580 [ 425.580641][T10882] ? netlink_alloc_large_skb+0x69/0x130 [ 425.580661][T10882] ? netlink_sendmsg+0x6a1/0xdd0 [ 425.580679][T10882] ? __radix_tree_lookup+0x21f/0x2c0 [ 425.580701][T10882] genl_rcv_msg+0x55c/0x800 [ 425.580728][T10882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 425.580750][T10882] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 425.580776][T10882] ? __lock_acquire+0x62e/0x1ce0 [ 425.580807][T10882] netlink_rcv_skb+0x155/0x420 [ 425.580826][T10882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 425.580849][T10882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.580879][T10882] ? netlink_deliver_tap+0x1ae/0xd30 [ 425.580897][T10882] ? selinux_netlink_send+0x578/0x830 [ 425.580920][T10882] ? is_vmalloc_addr+0x86/0xa0 [ 425.580941][T10882] genl_rcv+0x28/0x40 [ 425.580961][T10882] netlink_unicast+0x5aa/0x870 [ 425.580984][T10882] ? __pfx_netlink_unicast+0x10/0x10 [ 425.581010][T10882] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 425.581046][T10882] netlink_sendmsg+0x8d1/0xdd0 [ 425.581071][T10882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.581103][T10882] ____sys_sendmsg+0xa98/0xc70 [ 425.581127][T10882] ? copy_msghdr_from_user+0x10a/0x160 [ 425.581147][T10882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.581183][T10882] ___sys_sendmsg+0x134/0x1d0 [ 425.581204][T10882] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.581258][T10882] __sys_sendmsg+0x16d/0x220 [ 425.581277][T10882] ? __pfx___sys_sendmsg+0x10/0x10 [ 425.581314][T10882] do_syscall_64+0xcd/0x4c0 [ 425.581336][T10882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.581355][T10882] RIP: 0033:0x7f68bd78ebe9 [ 425.581370][T10882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.581387][T10882] RSP: 002b:00007f68be660038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.581404][T10882] RAX: ffffffffffffffda RBX: 00007f68bd9b5fa0 RCX: 00007f68bd78ebe9 [ 425.581416][T10882] RDX: 0000000000000000 RSI: 0000200000002c80 RDI: 0000000000000003 [ 425.581426][T10882] RBP: 00007f68be660090 R08: 0000000000000000 R09: 0000000000000000 [ 425.581437][T10882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.581447][T10882] R13: 00007f68bd9b6038 R14: 00007f68bd9b5fa0 R15: 00007ffe9f9f9658 [ 425.581472][T10882] [ 425.948805][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.045748][T10878] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 426.342874][ T7757] Bluetooth: hci5: Frame reassembly failed (-84) [ 426.393578][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 426.405262][T10889] netlink: 'syz.2.1332': attribute type 8 has an invalid length. [ 426.444004][T10889] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 426.840453][ T1207] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 426.990287][ T1207] usb 6-1: device descriptor read/64, error -71 [ 427.380630][ T1207] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 427.543269][ T1207] usb 6-1: device descriptor read/64, error -71 [ 427.650789][ T1207] usb usb6-port1: attempt power cycle [ 428.060384][ T1207] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 428.207421][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 428.213800][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 428.262736][ T1207] usb 6-1: device descriptor read/8, error -71 [ 428.370258][ T5961] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 428.383462][T10920] vxcan1 speed is unknown, defaulting to 1000 [ 429.134626][T10924] netlink: 'syz.0.1342': attribute type 1 has an invalid length. [ 429.145109][T10924] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1342'. [ 429.221843][ T1207] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 429.229458][ T5961] usb 5-1: Using ep0 maxpacket: 32 [ 429.255164][ T5961] usb 5-1: config 0 interface 0 has no altsetting 0 [ 429.262503][ T1207] usb 6-1: device descriptor read/8, error -71 [ 429.270075][ T5961] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 429.334522][T10920] lo speed is unknown, defaulting to 1000 [ 429.343216][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.361632][ T5961] usb 5-1: Product: syz [ 429.366150][ T5961] usb 5-1: Manufacturer: syz [ 429.376686][ T1207] usb usb6-port1: unable to enumerate USB device [ 429.385369][ T5961] usb 5-1: SerialNumber: syz [ 429.401219][ T5961] usb 5-1: config 0 descriptor?? [ 429.894525][ T2156] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 430.153828][ T5961] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 430.164590][ T5961] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 430.270724][ T2156] usb 2-1: Using ep0 maxpacket: 8 [ 430.279189][ T2156] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 430.370475][ T2156] usb 2-1: config 0 has no interface number 1 [ 430.383953][ T2156] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 430.397471][ T2156] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 430.436658][ T2156] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 430.453887][ T2156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.462952][ T2156] usb 2-1: Product: syz [ 430.467117][ T2156] usb 2-1: Manufacturer: syz [ 430.472143][ T2156] usb 2-1: SerialNumber: syz [ 430.488178][ T2156] usb 2-1: config 0 descriptor?? [ 430.509574][ T2156] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 430.575469][ T30] audit: type=1400 audit(2000000055.840:454): avc: denied { map } for pid=10939 comm="syz.0.1347" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 430.577868][T10942] binder: 10939:10942 ioctl c0306201 2000000001c0 returned -14 [ 430.606305][ T30] audit: type=1400 audit(2000000055.840:455): avc: denied { execute } for pid=10939 comm="syz.0.1347" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 430.637954][ T30] audit: type=1400 audit(2000000055.850:456): avc: denied { bind } for pid=10939 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.703023][ T30] audit: type=1400 audit(2000000055.850:457): avc: denied { accept } for pid=10939 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.830208][ T30] audit: type=1400 audit(2000000055.850:458): avc: denied { listen } for pid=10939 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.966657][T10949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10949 comm=syz.1.1343 [ 431.237456][T10954] policy can only be matched on NF_INET_PRE_ROUTING [ 431.237467][T10954] unable to load match [ 431.448678][T10955] netlink: 'syz.2.1350': attribute type 17 has an invalid length. [ 431.469229][T10955] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1350'. [ 431.516507][T10955] macvtap0: entered allmulticast mode [ 431.588105][T10955] veth0_macvtap: entered allmulticast mode [ 431.650016][T10955] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 432.075586][ T5961] usb 5-1: USB disconnect, device number 32 [ 432.740505][ T2335] pvrusb2: Invalid read control endpoint [ 432.746402][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 432.758457][ T2156] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 432.767911][ T2335] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 432.800254][ T2335] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 432.819556][ T2156] usb 2-1: USB disconnect, device number 32 [ 432.847393][ T5910] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 433.403535][ T5910] usb 6-1: device descriptor read/64, error -71 [ 433.416317][ T24] usb 5-1: device descriptor read/64, error -71 [ 433.681305][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 433.695155][ T5910] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 433.860216][ T24] usb 5-1: device descriptor read/64, error -71 [ 434.013892][ T5910] usb 6-1: device descriptor read/64, error -71 [ 434.021479][ T24] usb usb5-port1: attempt power cycle [ 434.182483][ T5910] usb usb6-port1: attempt power cycle [ 434.530578][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 434.568425][ T24] usb 5-1: device descriptor read/8, error -71 [ 434.600340][ T5910] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 434.622312][ T5910] usb 6-1: device descriptor read/8, error -71 [ 434.830451][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 434.860302][ T5910] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 434.888378][ T24] usb 5-1: device descriptor read/8, error -71 [ 434.998394][ T5910] usb 6-1: device descriptor read/8, error -71 [ 435.164550][ T5910] usb usb6-port1: unable to enumerate USB device [ 435.166006][ T24] usb usb5-port1: unable to enumerate USB device [ 435.666292][T11030] FAULT_INJECTION: forcing a failure. [ 435.666292][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 435.680586][T11030] CPU: 0 UID: 0 PID: 11030 Comm: syz.2.1375 Not tainted syzkaller #0 PREEMPT(full) [ 435.680611][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.680622][T11030] Call Trace: [ 435.680629][T11030] [ 435.680636][T11030] dump_stack_lvl+0x16c/0x1f0 [ 435.680662][T11030] should_fail_ex+0x512/0x640 [ 435.680681][T11030] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 435.680722][T11030] should_failslab+0xc2/0x120 [ 435.680743][T11030] __kmalloc_cache_noprof+0x6a/0x3e0 [ 435.680770][T11030] ? p9_fd_create+0x163/0x490 [ 435.680798][T11030] p9_fd_create+0x163/0x490 [ 435.680822][T11030] ? __pfx_p9_fd_create+0x10/0x10 [ 435.680848][T11030] ? p9_client_create+0x7a9/0x11c0 [ 435.680873][T11030] p9_client_create+0x80f/0x11c0 [ 435.680899][T11030] ? __pfx_p9_client_create+0x10/0x10 [ 435.680925][T11030] ? rcu_is_watching+0x12/0xc0 [ 435.680953][T11030] ? lockdep_init_map_type+0x5c/0x280 [ 435.680970][T11030] ? __raw_spin_lock_init+0x3a/0x110 [ 435.680993][T11030] v9fs_session_init+0x1f7/0x1a80 [ 435.681031][T11030] ? __pfx_v9fs_session_init+0x10/0x10 [ 435.681074][T11030] v9fs_mount+0xc5/0xa90 [ 435.681092][T11030] ? __pfx_v9fs_mount+0x10/0x10 [ 435.681113][T11030] ? cap_capable+0xb3/0x250 [ 435.681136][T11030] ? __pfx_v9fs_mount+0x10/0x10 [ 435.681154][T11030] legacy_get_tree+0x109/0x220 [ 435.681179][T11030] vfs_get_tree+0x8b/0x340 [ 435.681206][T11030] path_mount+0x1513/0x2000 [ 435.681234][T11030] ? __pfx_path_mount+0x10/0x10 [ 435.681258][T11030] ? kmem_cache_free+0x2d1/0x4d0 [ 435.681274][T11030] ? putname+0x154/0x1a0 [ 435.681301][T11030] ? putname+0x154/0x1a0 [ 435.681326][T11030] ? __x64_sys_mount+0x28d/0x310 [ 435.681347][T11030] __x64_sys_mount+0x28d/0x310 [ 435.681370][T11030] ? __pfx___x64_sys_mount+0x10/0x10 [ 435.681400][T11030] do_syscall_64+0xcd/0x4c0 [ 435.681423][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.681441][T11030] RIP: 0033:0x7f68bd78ebe9 [ 435.681457][T11030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.681474][T11030] RSP: 002b:00007f68be660038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 435.681493][T11030] RAX: ffffffffffffffda RBX: 00007f68bd9b5fa0 RCX: 00007f68bd78ebe9 [ 435.681505][T11030] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 435.681515][T11030] RBP: 00007f68be660090 R08: 0000200000000200 R09: 0000000000000000 [ 435.681525][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.681535][T11030] R13: 00007f68bd9b6038 R14: 00007f68bd9b5fa0 R15: 00007ffe9f9f9658 [ 435.681560][T11030] [ 435.945709][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.960059][ T5910] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 436.140279][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 436.448654][T11034] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 436.505020][ T5910] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 436.513664][ T5910] usb 1-1: config 0 has no interface number 1 [ 436.520410][ T5910] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 436.531310][ T5910] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 436.543080][ T5910] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 436.552553][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.563580][ T5910] usb 1-1: Product: syz [ 436.567778][ T5910] usb 1-1: Manufacturer: syz [ 436.572417][ T5910] usb 1-1: SerialNumber: syz [ 436.587986][ T5910] usb 1-1: config 0 descriptor?? [ 436.879265][ T5910] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 437.120878][T11046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=11046 comm=syz.0.1371 [ 437.330205][ T1207] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 437.500259][ T1207] usb 3-1: device descriptor read/64, error -71 [ 437.740320][ T1207] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 437.920234][ T1207] usb 3-1: device descriptor read/64, error -71 [ 438.527175][ T1207] usb usb3-port1: attempt power cycle [ 438.644112][ T5910] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 438.683550][ T5910] usb 1-1: USB disconnect, device number 48 [ 438.700817][ T5910] pvrusb2: Device being rendered inoperable [ 438.724934][ T5910] pvrusb2: Device being rendered inoperable [ 438.990416][ T1207] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 439.592961][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.705103][ T1207] usb 3-1: device descriptor read/8, error -71 [ 440.061463][ T1207] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 440.237013][T11076] batman_adv: batadv0: Adding interface: macvtap2 [ 440.382655][T11076] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.425545][T11076] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 440.444337][ T1207] usb 3-1: device descriptor read/8, error -71 [ 440.515968][T11084] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 440.525799][T11084] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 440.600481][ T1207] usb usb3-port1: unable to enumerate USB device [ 440.621763][ T30] audit: type=1400 audit(2000000065.900:459): avc: denied { setopt } for pid=11082 comm="syz.5.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 440.776182][ T30] audit: type=1400 audit(2000000066.050:460): avc: denied { lock } for pid=11087 comm="syz.1.1393" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 440.811700][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'. [ 440.851711][T11091] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 440.877033][T11091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.902684][T11095] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 441.210420][ T1207] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 441.381932][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.408131][ T1207] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 441.458002][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.472048][ T1207] usb 1-1: config 0 descriptor?? [ 441.494959][ T1207] usbhid 1-1:0.0: can't add hid device: -22 [ 441.510046][ T1207] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 441.753842][ T30] audit: type=1400 audit(2000000067.030:461): avc: denied { read } for pid=11106 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 442.231266][ T5922] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 442.423431][ T1207] usb 1-1: USB disconnect, device number 49 [ 442.602936][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 442.609472][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.625685][ T5922] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 442.639087][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.667773][ T5922] usb 3-1: config 0 descriptor?? [ 442.697503][ T30] audit: type=1400 audit(2000000067.970:462): avc: denied { getopt } for pid=11111 comm="syz.4.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 443.029083][T11121] netlink: 'syz.5.1401': attribute type 10 has an invalid length. [ 443.150460][ T5922] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 443.339582][ C1] ================================================================== [ 443.347673][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0xf94/0x1030 [ 443.355577][ C1] Read of size 1 at addr ffff88804738bfff by task kworker/1:4/5922 [ 443.363456][ C1] [ 443.365777][ C1] CPU: 1 UID: 0 PID: 5922 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 443.365803][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 443.365818][ C1] Workqueue: usb_hub_wq hub_event [ 443.365846][ C1] Call Trace: [ 443.365854][ C1] [ 443.365862][ C1] dump_stack_lvl+0x116/0x1f0 [ 443.365889][ C1] print_report+0xcd/0x630 [ 443.365912][ C1] ? __virt_addr_valid+0x81/0x610 [ 443.365939][ C1] ? __phys_addr+0xe8/0x180 [ 443.365968][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 443.365994][ C1] kasan_report+0xe0/0x110 [ 443.366017][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 443.366051][ C1] mcp2221_raw_event+0xf94/0x1030 [ 443.366077][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 443.366099][ C1] __hid_input_report.constprop.0+0x311/0x450 [ 443.366121][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 443.366150][ C1] hid_irq_in+0x35e/0x870 [ 443.366179][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 443.366211][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 443.366242][ C1] dummy_timer+0x1814/0x3a30 [ 443.366277][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 443.366297][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 443.366317][ C1] ? mark_held_locks+0x49/0x80 [ 443.366347][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 443.366368][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 443.366387][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 443.366415][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 443.366439][ C1] ? read_tsc+0x9/0x20 [ 443.366469][ C1] hrtimer_run_softirq+0x17d/0x350 [ 443.366494][ C1] handle_softirqs+0x216/0x8e0 [ 443.366522][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 443.366550][ C1] __irq_exit_rcu+0x109/0x170 [ 443.366574][ C1] irq_exit_rcu+0x9/0x30 [ 443.366597][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 443.366618][ C1] [ 443.366625][ C1] [ 443.366632][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 443.366655][ C1] RIP: 0010:__rcu_read_lock+0xa3/0xf0 [ 443.366681][ C1] Code: 84 d2 75 61 48 b8 00 00 00 00 00 fc ff df 89 9d 44 04 00 00 65 48 8b 1d 43 d2 35 12 48 8d bb 44 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1f 8b [ 443.366701][ C1] RSP: 0018:ffffc900044ee150 EFLAGS: 00000a07 [ 443.366717][ C1] RAX: dffffc0000000000 RBX: ffff888027588000 RCX: ffffc900044ee12c [ 443.366731][ C1] RDX: 1ffff11004eb1088 RSI: ffffffff87422270 RDI: ffff888027588444 [ 443.366745][ C1] RBP: ffff888027588000 R08: 0000000000000001 R09: 0000000000000000 [ 443.366758][ C1] R10: 0000000000000007 R11: 000000000007ea78 R12: ffffffff81a6db90 [ 443.366771][ C1] R13: ffffc900044ee1d8 R14: 0000000000000000 R15: ffff888027588000 [ 443.366785][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 443.366817][ C1] ? usb_probe_interface+0x300/0xa40 [ 443.366848][ C1] unwind_next_frame+0xae/0x20a0 [ 443.366870][ C1] ? usb_probe_interface+0x300/0xa40 [ 443.366899][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 443.366929][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 443.366957][ C1] arch_stack_walk+0x94/0x100 [ 443.366983][ C1] ? usb_probe_interface+0x300/0xa40 [ 443.367013][ C1] stack_trace_save+0x8e/0xc0 [ 443.367044][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 443.367072][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 443.367091][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.367112][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 443.367132][ C1] kasan_save_stack+0x33/0x60 [ 443.367152][ C1] ? kasan_save_stack+0x33/0x60 [ 443.367171][ C1] ? kasan_save_track+0x14/0x30 [ 443.367190][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 443.367210][ C1] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 443.367235][ C1] ? kstrdup+0x53/0x100 [ 443.367255][ C1] ? kstrdup_const+0x63/0x80 [ 443.367274][ C1] ? __kernfs_new_node+0x9b/0x8e0 [ 443.367300][ C1] ? kernfs_new_node+0x13c/0x1e0 [ 443.367329][ C1] ? kernfs_create_link+0xcc/0x240 [ 443.367350][ C1] ? sysfs_do_create_link_sd+0x90/0x140 [ 443.367376][ C1] ? sysfs_create_link+0x61/0xc0 [ 443.367401][ C1] ? device_add+0x62c/0x1aa0 [ 443.367426][ C1] ? cdev_device_add+0xc2/0x1e0 [ 443.367450][ C1] ? i2cdev_attach_adapter+0x359/0x4c0 [ 443.367480][ C1] ? i2cdev_notifier_call+0x65/0x80 [ 443.367509][ C1] ? notifier_call_chain+0xbc/0x410 [ 443.367538][ C1] ? blocking_notifier_call_chain+0x69/0xa0 [ 443.367568][ C1] ? bus_notify+0x56/0x70 [ 443.367585][ C1] ? device_add+0x10d3/0x1aa0 [ 443.367610][ C1] ? i2c_register_adapter+0x39e/0x1370 [ 443.367630][ C1] ? i2c_add_adapter+0x10a/0x1b0 [ 443.367648][ C1] ? devm_i2c_add_adapter+0x1b/0x90 [ 443.367667][ C1] ? mcp2221_probe+0x5f1/0xc50 [ 443.367692][ C1] ? hid_device_probe+0x360/0x720 [ 443.367711][ C1] ? really_probe+0x23e/0xa90 [ 443.367731][ C1] ? __driver_probe_device+0x1de/0x440 [ 443.367753][ C1] ? driver_probe_device+0x4c/0x1b0 [ 443.367774][ C1] ? __device_attach_driver+0x1df/0x310 [ 443.367796][ C1] ? bus_for_each_drv+0x156/0x1e0 [ 443.367824][ C1] ? __device_attach+0x1e4/0x4b0 [ 443.367845][ C1] ? bus_probe_device+0x17f/0x1c0 [ 443.367862][ C1] ? device_add+0x1148/0x1aa0 [ 443.367886][ C1] ? hid_add_device+0x373/0xa60 [ 443.367914][ C1] ? usbhid_probe+0xd38/0x13f0 [ 443.367937][ C1] ? usb_probe_interface+0x300/0xa40 [ 443.367975][ C1] kasan_save_track+0x14/0x30 [ 443.367994][ C1] __kasan_kmalloc+0xaa/0xb0 [ 443.368015][ C1] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 443.368044][ C1] ? kstrdup_const+0x63/0x80 [ 443.368067][ C1] kstrdup+0x53/0x100 [ 443.368089][ C1] kstrdup_const+0x63/0x80 [ 443.368109][ C1] __kernfs_new_node+0x9b/0x8e0 [ 443.368137][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 443.368169][ C1] ? find_held_lock+0x2b/0x80 [ 443.368195][ C1] ? kernfs_root+0xee/0x2a0 [ 443.368224][ C1] kernfs_new_node+0x13c/0x1e0 [ 443.368256][ C1] kernfs_create_link+0xcc/0x240 [ 443.368279][ C1] sysfs_do_create_link_sd+0x90/0x140 [ 443.368307][ C1] sysfs_create_link+0x61/0xc0 [ 443.368333][ C1] device_add+0x62c/0x1aa0 [ 443.368358][ C1] ? __pfx_device_add+0x10/0x10 [ 443.368378][ C1] ? __pfx_exact_lock+0x10/0x10 [ 443.368399][ C1] ? kobject_get+0xbb/0x150 [ 443.368420][ C1] cdev_device_add+0xc2/0x1e0 [ 443.368441][ C1] i2cdev_attach_adapter+0x359/0x4c0 [ 443.368468][ C1] i2cdev_notifier_call+0x65/0x80 [ 443.368493][ C1] notifier_call_chain+0xbc/0x410 [ 443.368518][ C1] ? __pfx_i2cdev_notifier_call+0x10/0x10 [ 443.368549][ C1] blocking_notifier_call_chain+0x69/0xa0 [ 443.368579][ C1] bus_notify+0x56/0x70 [ 443.368595][ C1] device_add+0x10d3/0x1aa0 [ 443.368620][ C1] ? __pfx_device_add+0x10/0x10 [ 443.368645][ C1] ? find_held_lock+0x2b/0x80 [ 443.368670][ C1] ? mark_held_locks+0x49/0x80 [ 443.368698][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 443.368719][ C1] i2c_register_adapter+0x39e/0x1370 [ 443.368742][ C1] i2c_add_adapter+0x10a/0x1b0 [ 443.368761][ C1] devm_i2c_add_adapter+0x1b/0x90 [ 443.368780][ C1] mcp2221_probe+0x5f1/0xc50 [ 443.368807][ C1] ? __pfx_mcp2221_probe+0x10/0x10 [ 443.368832][ C1] hid_device_probe+0x360/0x720 [ 443.368852][ C1] ? __pfx_hid_device_probe+0x10/0x10 [ 443.368872][ C1] really_probe+0x23e/0xa90 [ 443.368894][ C1] __driver_probe_device+0x1de/0x440 [ 443.368918][ C1] driver_probe_device+0x4c/0x1b0 [ 443.368940][ C1] __device_attach_driver+0x1df/0x310 [ 443.368964][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 443.368986][ C1] bus_for_each_drv+0x156/0x1e0 [ 443.369015][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 443.369051][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.369071][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 443.369092][ C1] __device_attach+0x1e4/0x4b0 [ 443.369114][ C1] ? __pfx___device_attach+0x10/0x10 [ 443.369137][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 443.369161][ C1] bus_probe_device+0x17f/0x1c0 [ 443.369181][ C1] device_add+0x1148/0x1aa0 [ 443.369206][ C1] ? __pfx_device_add+0x10/0x10 [ 443.369233][ C1] ? debugfs_create_file_full+0x41/0x60 [ 443.369262][ C1] hid_add_device+0x373/0xa60 [ 443.369293][ C1] ? __pfx_hid_add_device+0x10/0x10 [ 443.369322][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 443.369342][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 443.369363][ C1] usbhid_probe+0xd38/0x13f0 [ 443.369391][ C1] usb_probe_interface+0x300/0xa40 [ 443.369421][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 443.369451][ C1] really_probe+0x23e/0xa90 [ 443.369481][ C1] __driver_probe_device+0x1de/0x440 [ 443.369505][ C1] driver_probe_device+0x4c/0x1b0 [ 443.369527][ C1] __device_attach_driver+0x1df/0x310 [ 443.369550][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 443.369572][ C1] bus_for_each_drv+0x156/0x1e0 [ 443.369602][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 443.369633][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.369654][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 443.369691][ C1] __device_attach+0x1e4/0x4b0 [ 443.369713][ C1] ? __pfx___device_attach+0x10/0x10 [ 443.369735][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 443.369759][ C1] bus_probe_device+0x17f/0x1c0 [ 443.369778][ C1] device_add+0x1148/0x1aa0 [ 443.369804][ C1] ? __pfx_device_add+0x10/0x10 [ 443.369828][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 443.369861][ C1] usb_set_configuration+0x1187/0x1e20 [ 443.369895][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 443.369916][ C1] usb_generic_driver_probe+0xb1/0x110 [ 443.369938][ C1] usb_probe_device+0xef/0x3e0 [ 443.369963][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 443.369988][ C1] really_probe+0x23e/0xa90 [ 443.370010][ C1] __driver_probe_device+0x1de/0x440 [ 443.370036][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 443.370066][ C1] driver_probe_device+0x4c/0x1b0 [ 443.370089][ C1] __device_attach_driver+0x1df/0x310 [ 443.370112][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 443.370129][ C1] bus_for_each_drv+0x156/0x1e0 [ 443.370151][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 443.370175][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.370193][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 443.370211][ C1] __device_attach+0x1e4/0x4b0 [ 443.370234][ C1] ? __pfx___device_attach+0x10/0x10 [ 443.370256][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 443.370281][ C1] bus_probe_device+0x17f/0x1c0 [ 443.370301][ C1] device_add+0x1148/0x1aa0 [ 443.370328][ C1] ? __pfx_device_add+0x10/0x10 [ 443.370353][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 443.370377][ C1] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 443.370402][ C1] usb_new_device+0xd07/0x1a60 [ 443.370424][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 443.370442][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 443.370460][ C1] ? mark_held_locks+0x49/0x80 [ 443.370490][ C1] hub_event+0x2f34/0x4fe0 [ 443.370528][ C1] ? __pfx_hub_event+0x10/0x10 [ 443.370551][ C1] ? rcu_is_watching+0x12/0xc0 [ 443.370576][ C1] ? irqentry_exit+0x3b/0x90 [ 443.370601][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 443.370632][ C1] process_one_work+0x9cf/0x1b70 [ 443.370659][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 443.370686][ C1] ? __pfx_process_one_work+0x10/0x10 [ 443.370712][ C1] ? assign_work+0x1a0/0x250 [ 443.370733][ C1] worker_thread+0x6c8/0xf10 [ 443.370759][ C1] ? __kthread_parkme+0x19e/0x250 [ 443.370786][ C1] ? __pfx_worker_thread+0x10/0x10 [ 443.370808][ C1] kthread+0x3c5/0x780 [ 443.370828][ C1] ? __pfx_kthread+0x10/0x10 [ 443.370848][ C1] ? rcu_is_watching+0x12/0xc0 [ 443.370872][ C1] ? __pfx_kthread+0x10/0x10 [ 443.370893][ C1] ret_from_fork+0x5d7/0x6f0 [ 443.370912][ C1] ? __pfx_kthread+0x10/0x10 [ 443.370931][ C1] ret_from_fork_asm+0x1a/0x30 [ 443.370962][ C1] [ 443.370970][ C1] [ 443.540209][ T1207] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 443.545755][ C1] Allocated by task 5841: [ 443.545769][ C1] kasan_save_stack+0x33/0x60 [ 443.545792][ C1] kasan_save_track+0x14/0x30 [ 443.545810][ C1] __kasan_slab_alloc+0x89/0x90 [ 444.517602][ C1] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 444.523473][ C1] kmalloc_reserve+0x18b/0x2c0 [ 444.528208][ C1] __alloc_skb+0x166/0x380 [ 444.532598][ C1] napi_alloc_skb+0x3fa/0x830 [ 444.537241][ C1] page_to_skb+0x184/0xcc0 [ 444.541628][ C1] receive_buf+0x789/0x4460 [ 444.546097][ C1] virtnet_poll+0x10d4/0x3c10 [ 444.550744][ C1] __napi_poll.constprop.0+0xba/0x550 [ 444.556089][ C1] net_rx_action+0xa9f/0xfe0 [ 444.560652][ C1] handle_softirqs+0x216/0x8e0 [ 444.565389][ C1] __irq_exit_rcu+0x109/0x170 [ 444.570037][ C1] irq_exit_rcu+0x9/0x30 [ 444.574265][ C1] common_interrupt+0xbf/0xe0 [ 444.578915][ C1] asm_common_interrupt+0x26/0x40 [ 444.583910][ C1] [ 444.586202][ C1] Freed by task 5841: [ 444.590151][ C1] kasan_save_stack+0x33/0x60 [ 444.594809][ C1] kasan_save_track+0x14/0x30 [ 444.599459][ C1] kasan_save_free_info+0x3b/0x60 [ 444.604465][ C1] __kasan_slab_free+0x60/0x70 [ 444.609195][ C1] kmem_cache_free+0x2d1/0x4d0 [ 444.613929][ C1] skb_free_head+0x1b7/0x210 [ 444.618502][ C1] skb_release_data+0x795/0x9e0 [ 444.623326][ C1] __kfree_skb+0x4f/0x70 [ 444.627544][ C1] tcp_rcv_established+0xdb1/0x23f0 [ 444.632727][ C1] tcp_v4_do_rcv+0x5ca/0xa90 [ 444.637294][ C1] tcp_v4_rcv+0x2ee1/0x4640 [ 444.641768][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 444.647109][ C1] ip_local_deliver_finish+0x3f2/0x720 [ 444.652535][ C1] ip_local_deliver+0x18e/0x1f0 [ 444.657357][ C1] ip_sublist_rcv_finish+0x2ce/0x660 [ 444.662618][ C1] ip_list_rcv_finish+0x552/0x720 [ 444.667610][ C1] ip_list_rcv+0x335/0x450 [ 444.672001][ C1] __netif_receive_skb_list_core+0x752/0x950 [ 444.677956][ C1] netif_receive_skb_list_internal+0x752/0xdb0 [ 444.684086][ C1] napi_complete_done+0x23f/0x970 [ 444.689087][ C1] virtnet_poll+0x1cf0/0x3c10 [ 444.693738][ C1] __napi_poll.constprop.0+0xba/0x550 [ 444.699085][ C1] net_rx_action+0xa9f/0xfe0 [ 444.703646][ C1] handle_softirqs+0x216/0x8e0 [ 444.708382][ C1] __irq_exit_rcu+0x109/0x170 [ 444.713117][ C1] irq_exit_rcu+0x9/0x30 [ 444.717335][ C1] common_interrupt+0xbf/0xe0 [ 444.721984][ C1] asm_common_interrupt+0x26/0x40 [ 444.726980][ C1] [ 444.729274][ C1] The buggy address belongs to the object at ffff88804738ba80 [ 444.729274][ C1] which belongs to the cache skbuff_small_head of size 704 [ 444.743813][ C1] The buggy address is located 703 bytes to the right of [ 444.743813][ C1] allocated 704-byte region [ffff88804738ba80, ffff88804738bd40) [ 444.758449][ C1] [ 444.760751][ C1] The buggy address belongs to the physical page: [ 444.767139][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47388 [ 444.775867][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 444.784338][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 444.791862][ C1] page_type: f5(slab) [ 444.795814][ C1] raw: 00fff00000000040 ffff888140affc80 ffffea00010b2f00 dead000000000002 [ 444.804365][ C1] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 444.812932][ C1] head: 00fff00000000040 ffff888140affc80 ffffea00010b2f00 dead000000000002 [ 444.821572][ C1] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 444.830209][ C1] head: 00fff00000000002 ffffea00011ce201 00000000ffffffff 00000000ffffffff [ 444.838854][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 444.847489][ C1] page dumped because: kasan: bad access detected [ 444.853955][ C1] page_owner tracks the page as allocated [ 444.859634][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9302, tgid 9296 (syz.1.888), ts 310739887343, free_ts 310290856017 [ 444.880350][ C1] post_alloc_hook+0x1c0/0x230 [ 444.885104][ C1] get_page_from_freelist+0x132b/0x38e0 [ 444.890625][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 444.896487][ C1] alloc_pages_mpol+0x1fb/0x550 [ 444.901317][ C1] new_slab+0x247/0x330 [ 444.905446][ C1] ___slab_alloc+0xcf2/0x1740 [ 444.910098][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 444.915454][ C1] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 444.921236][ C1] kmalloc_reserve+0x18b/0x2c0 [ 444.925978][ C1] __alloc_skb+0x166/0x380 [ 444.930367][ C1] skb_copy+0x1c9/0x3a0 [ 444.934488][ C1] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb6e/0x13c0 [ 444.941134][ C1] mac80211_hwsim_tx_frame+0x1f1/0x2a0 [ 444.946564][ C1] mac80211_hwsim_beacon_tx+0x592/0xa40 [ 444.952086][ C1] __iterate_interfaces+0x2e5/0x650 [ 444.957251][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 444.964243][ C1] page last free pid 9301 tgid 9295 stack trace: [ 444.970551][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 444.975739][ C1] btrfs_free_fs_context+0x74/0x140 [ 444.981096][ C1] put_fs_context+0x155/0x600 [ 444.985757][ C1] btrfs_get_tree+0x1576/0x26f0 [ 444.990583][ C1] vfs_get_tree+0x8b/0x340 [ 444.994980][ C1] path_mount+0x1513/0x2000 [ 444.999458][ C1] __x64_sys_mount+0x28d/0x310 [ 445.004212][ C1] do_syscall_64+0xcd/0x4c0 [ 445.008700][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.014563][ C1] [ 445.016857][ C1] Memory state around the buggy address: [ 445.022454][ C1] ffff88804738be80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 445.030483][ C1] ffff88804738bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 445.038524][ C1] >ffff88804738bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 445.046560][ C1] ^ [ 445.054501][ C1] ffff88804738c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.062529][ C1] ffff88804738c080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 445.070564][ C1] ================================================================== [ 445.079040][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 445.086205][ C1] CPU: 1 UID: 0 PID: 5922 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 445.095548][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.105589][ C1] Workqueue: usb_hub_wq hub_event [ 445.110596][ C1] Call Trace: [ 445.113849][ C1] [ 445.116666][ C1] dump_stack_lvl+0x3d/0x1f0 [ 445.121251][ C1] vpanic+0x6e8/0x7a0 [ 445.125210][ C1] ? __pfx_vpanic+0x10/0x10 [ 445.129705][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 445.134708][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 445.139879][ C1] panic+0xca/0xd0 [ 445.143575][ C1] ? __pfx_panic+0x10/0x10 [ 445.147966][ C1] ? end_report+0x4c/0x170 [ 445.152351][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.157092][ C1] ? lock_release+0x201/0x2f0 [ 445.161932][ C1] check_panic_on_warn+0xab/0xb0 [ 445.166837][ C1] end_report+0x107/0x170 [ 445.171136][ C1] kasan_report+0xee/0x110 [ 445.175520][ C1] ? mcp2221_raw_event+0xf94/0x1030 [ 445.180696][ C1] mcp2221_raw_event+0xf94/0x1030 [ 445.185695][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 445.191474][ C1] __hid_input_report.constprop.0+0x311/0x450 [ 445.197513][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 445.203057][ C1] hid_irq_in+0x35e/0x870 [ 445.207360][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 445.212714][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 445.217897][ C1] dummy_timer+0x1814/0x3a30 [ 445.222474][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 445.227390][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 445.232309][ C1] ? mark_held_locks+0x49/0x80 [ 445.237060][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 445.242840][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 445.247752][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 445.252937][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 445.258629][ C1] ? read_tsc+0x9/0x20 [ 445.262672][ C1] hrtimer_run_softirq+0x17d/0x350 [ 445.267756][ C1] handle_softirqs+0x216/0x8e0 [ 445.272502][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 445.277767][ C1] __irq_exit_rcu+0x109/0x170 [ 445.282413][ C1] irq_exit_rcu+0x9/0x30 [ 445.286625][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 445.292229][ C1] [ 445.295133][ C1] [ 445.298052][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.304006][ C1] RIP: 0010:__rcu_read_lock+0xa3/0xf0 [ 445.309350][ C1] Code: 84 d2 75 61 48 b8 00 00 00 00 00 fc ff df 89 9d 44 04 00 00 65 48 8b 1d 43 d2 35 12 48 8d bb 44 04 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1f 8b [ 445.328928][ C1] RSP: 0018:ffffc900044ee150 EFLAGS: 00000a07 [ 445.334964][ C1] RAX: dffffc0000000000 RBX: ffff888027588000 RCX: ffffc900044ee12c [ 445.342915][ C1] RDX: 1ffff11004eb1088 RSI: ffffffff87422270 RDI: ffff888027588444 [ 445.350856][ C1] RBP: ffff888027588000 R08: 0000000000000001 R09: 0000000000000000 [ 445.358804][ C1] R10: 0000000000000007 R11: 000000000007ea78 R12: ffffffff81a6db90 [ 445.366743][ C1] R13: ffffc900044ee1d8 R14: 0000000000000000 R15: ffff888027588000 [ 445.374694][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 445.380836][ C1] ? usb_probe_interface+0x300/0xa40 [ 445.386096][ C1] unwind_next_frame+0xae/0x20a0 [ 445.391006][ C1] ? usb_probe_interface+0x300/0xa40 [ 445.396265][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 445.401178][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 445.407307][ C1] arch_stack_walk+0x94/0x100 [ 445.411955][ C1] ? usb_probe_interface+0x300/0xa40 [ 445.417213][ C1] stack_trace_save+0x8e/0xc0 [ 445.421860][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 445.427213][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 445.433006][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 445.438191][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 445.444008][ C1] kasan_save_stack+0x33/0x60 [ 445.448666][ C1] ? kasan_save_stack+0x33/0x60 [ 445.453483][ C1] ? kasan_save_track+0x14/0x30 [ 445.458302][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 445.463032][ C1] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 445.469590][ C1] ? kstrdup+0x53/0x100 [ 445.473715][ C1] ? kstrdup_const+0x63/0x80 [ 445.478282][ C1] ? __kernfs_new_node+0x9b/0x8e0 [ 445.483276][ C1] ? kernfs_new_node+0x13c/0x1e0 [ 445.488187][ C1] ? kernfs_create_link+0xcc/0x240 [ 445.493268][ C1] ? sysfs_do_create_link_sd+0x90/0x140 [ 445.498803][ C1] ? sysfs_create_link+0x61/0xc0 [ 445.503716][ C1] ? device_add+0x62c/0x1aa0 [ 445.508277][ C1] ? cdev_device_add+0xc2/0x1e0 [ 445.513104][ C1] ? i2cdev_attach_adapter+0x359/0x4c0 [ 445.518542][ C1] ? i2cdev_notifier_call+0x65/0x80 [ 445.523714][ C1] ? notifier_call_chain+0xbc/0x410 [ 445.528888][ C1] ? blocking_notifier_call_chain+0x69/0xa0 [ 445.534753][ C1] ? bus_notify+0x56/0x70 [ 445.539053][ C1] ? device_add+0x10d3/0x1aa0 [ 445.543709][ C1] ? i2c_register_adapter+0x39e/0x1370 [ 445.549136][ C1] ? i2c_add_adapter+0x10a/0x1b0 [ 445.554039][ C1] ? devm_i2c_add_adapter+0x1b/0x90 [ 445.559204][ C1] ? mcp2221_probe+0x5f1/0xc50 [ 445.563937][ C1] ? hid_device_probe+0x360/0x720 [ 445.568936][ C1] ? really_probe+0x23e/0xa90 [ 445.573591][ C1] ? __driver_probe_device+0x1de/0x440 [ 445.579020][ C1] ? driver_probe_device+0x4c/0x1b0 [ 445.584185][ C1] ? __device_attach_driver+0x1df/0x310 [ 445.589711][ C1] ? bus_for_each_drv+0x156/0x1e0 [ 445.594737][ C1] ? __device_attach+0x1e4/0x4b0 [ 445.599643][ C1] ? bus_probe_device+0x17f/0x1c0 [ 445.604633][ C1] ? device_add+0x1148/0x1aa0 [ 445.609285][ C1] ? hid_add_device+0x373/0xa60 [ 445.614195][ C1] ? usbhid_probe+0xd38/0x13f0 [ 445.618936][ C1] ? usb_probe_interface+0x300/0xa40 [ 445.624200][ C1] kasan_save_track+0x14/0x30 [ 445.628857][ C1] __kasan_kmalloc+0xaa/0xb0 [ 445.633414][ C1] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 445.639798][ C1] ? kstrdup_const+0x63/0x80 [ 445.644357][ C1] kstrdup+0x53/0x100 [ 445.648318][ C1] kstrdup_const+0x63/0x80 [ 445.652704][ C1] __kernfs_new_node+0x9b/0x8e0 [ 445.657528][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 445.662961][ C1] ? find_held_lock+0x2b/0x80 [ 445.667612][ C1] ? kernfs_root+0xee/0x2a0 [ 445.672097][ C1] kernfs_new_node+0x13c/0x1e0 [ 445.676838][ C1] kernfs_create_link+0xcc/0x240 [ 445.681752][ C1] sysfs_do_create_link_sd+0x90/0x140 [ 445.687097][ C1] sysfs_create_link+0x61/0xc0 [ 445.691832][ C1] device_add+0x62c/0x1aa0 [ 445.696221][ C1] ? __pfx_device_add+0x10/0x10 [ 445.701059][ C1] ? __pfx_exact_lock+0x10/0x10 [ 445.705883][ C1] ? kobject_get+0xbb/0x150 [ 445.710368][ C1] cdev_device_add+0xc2/0x1e0 [ 445.715017][ C1] i2cdev_attach_adapter+0x359/0x4c0 [ 445.720281][ C1] i2cdev_notifier_call+0x65/0x80 [ 445.725286][ C1] notifier_call_chain+0xbc/0x410 [ 445.730283][ C1] ? __pfx_i2cdev_notifier_call+0x10/0x10 [ 445.735976][ C1] blocking_notifier_call_chain+0x69/0xa0 [ 445.741668][ C1] bus_notify+0x56/0x70 [ 445.745793][ C1] device_add+0x10d3/0x1aa0 [ 445.750268][ C1] ? __pfx_device_add+0x10/0x10 [ 445.755096][ C1] ? find_held_lock+0x2b/0x80 [ 445.759746][ C1] ? mark_held_locks+0x49/0x80 [ 445.764483][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 445.770260][ C1] i2c_register_adapter+0x39e/0x1370 [ 445.775514][ C1] i2c_add_adapter+0x10a/0x1b0 [ 445.780246][ C1] devm_i2c_add_adapter+0x1b/0x90 [ 445.785239][ C1] mcp2221_probe+0x5f1/0xc50 [ 445.789800][ C1] ? __pfx_mcp2221_probe+0x10/0x10 [ 445.794890][ C1] hid_device_probe+0x360/0x720 [ 445.799710][ C1] ? __pfx_hid_device_probe+0x10/0x10 [ 445.805051][ C1] really_probe+0x23e/0xa90 [ 445.809527][ C1] __driver_probe_device+0x1de/0x440 [ 445.814793][ C1] driver_probe_device+0x4c/0x1b0 [ 445.819786][ C1] __device_attach_driver+0x1df/0x310 [ 445.825126][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 445.830989][ C1] bus_for_each_drv+0x156/0x1e0 [ 445.835812][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 445.841155][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 445.846329][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 445.852103][ C1] __device_attach+0x1e4/0x4b0 [ 445.856845][ C1] ? __pfx___device_attach+0x10/0x10 [ 445.862097][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 445.867266][ C1] bus_probe_device+0x17f/0x1c0 [ 445.872091][ C1] device_add+0x1148/0x1aa0 [ 445.876580][ C1] ? __pfx_device_add+0x10/0x10 [ 445.881408][ C1] ? debugfs_create_file_full+0x41/0x60 [ 445.886926][ C1] hid_add_device+0x373/0xa60 [ 445.891588][ C1] ? __pfx_hid_add_device+0x10/0x10 [ 445.896757][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 445.902096][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 445.907436][ C1] usbhid_probe+0xd38/0x13f0 [ 445.912011][ C1] usb_probe_interface+0x300/0xa40 [ 445.917106][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 445.922728][ C1] really_probe+0x23e/0xa90 [ 445.927204][ C1] __driver_probe_device+0x1de/0x440 [ 445.932457][ C1] driver_probe_device+0x4c/0x1b0 [ 445.937450][ C1] __device_attach_driver+0x1df/0x310 [ 445.942792][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 445.948653][ C1] bus_for_each_drv+0x156/0x1e0 [ 445.953478][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 445.958824][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 445.963992][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 445.969767][ C1] __device_attach+0x1e4/0x4b0 [ 445.974499][ C1] ? __pfx___device_attach+0x10/0x10 [ 445.979753][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 445.984929][ C1] bus_probe_device+0x17f/0x1c0 [ 445.989757][ C1] device_add+0x1148/0x1aa0 [ 445.994235][ C1] ? __pfx_device_add+0x10/0x10 [ 445.999055][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 446.004411][ C1] usb_set_configuration+0x1187/0x1e20 [ 446.009845][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 446.015889][ C1] usb_generic_driver_probe+0xb1/0x110 [ 446.021329][ C1] usb_probe_device+0xef/0x3e0 [ 446.026066][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 446.031418][ C1] really_probe+0x23e/0xa90 [ 446.035893][ C1] __driver_probe_device+0x1de/0x440 [ 446.041159][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 446.046591][ C1] driver_probe_device+0x4c/0x1b0 [ 446.051594][ C1] __device_attach_driver+0x1df/0x310 [ 446.056935][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 446.062799][ C1] bus_for_each_drv+0x156/0x1e0 [ 446.067623][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 446.072972][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.078146][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 446.083921][ C1] __device_attach+0x1e4/0x4b0 [ 446.088655][ C1] ? __pfx___device_attach+0x10/0x10 [ 446.093907][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 446.099075][ C1] bus_probe_device+0x17f/0x1c0 [ 446.103893][ C1] device_add+0x1148/0x1aa0 [ 446.108367][ C1] ? __pfx_device_add+0x10/0x10 [ 446.113193][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 446.118904][ C1] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 446.124786][ C1] usb_new_device+0xd07/0x1a60 [ 446.129546][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 446.134544][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 446.139845][ C1] ? mark_held_locks+0x49/0x80 [ 446.144661][ C1] hub_event+0x2f34/0x4fe0 [ 446.149070][ C1] ? __pfx_hub_event+0x10/0x10 [ 446.153821][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.158574][ C1] ? irqentry_exit+0x3b/0x90 [ 446.163152][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 446.168510][ C1] process_one_work+0x9cf/0x1b70 [ 446.173433][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 446.178702][ C1] ? __pfx_process_one_work+0x10/0x10 [ 446.184046][ C1] ? assign_work+0x1a0/0x250 [ 446.188609][ C1] worker_thread+0x6c8/0xf10 [ 446.193184][ C1] ? __kthread_parkme+0x19e/0x250 [ 446.198194][ C1] ? __pfx_worker_thread+0x10/0x10 [ 446.203276][ C1] kthread+0x3c5/0x780 [ 446.207318][ C1] ? __pfx_kthread+0x10/0x10 [ 446.211879][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.216617][ C1] ? __pfx_kthread+0x10/0x10 [ 446.221182][ C1] ret_from_fork+0x5d7/0x6f0 [ 446.225755][ C1] ? __pfx_kthread+0x10/0x10 [ 446.230327][ C1] ret_from_fork_asm+0x1a/0x30 [ 446.235066][ C1] [ 446.238253][ C1] Kernel Offset: disabled [ 446.242551][ C1] Rebooting in 86400 seconds..