last executing test programs: 27.712342238s ago: executing program 0 (id=1058): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000580)="b9ff03316844268cb89e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r6, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1000, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r8}, 0xc) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000140)={0x28, 0x0, r5, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000001c0)}) r10 = memfd_secret(0x80000) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r9, @ANYRESOCT=r9, @ANYRESOCT=r9, @ANYRES32, @ANYRES64=r10, @ANYRES16, @ANYRESHEX=r9], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 19.415948378s ago: executing program 0 (id=1071): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000015980)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) 19.137739837s ago: executing program 3 (id=1074): mkdirat(0xffffffffffffff9c, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x29, 0x1, 0x10000000, 0x2, {0xf, 0x3}}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000000)=@file={0x1, './debug\x00'}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x68, 0x24000010}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f0000000540)='ntfs3\x00', 0x221000d, 0x0) syz_open_dev$evdev(&(0x7f0000000580), 0x80000002, 0x88440) r4 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000600)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f0000000680)}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) socket$igmp(0x2, 0x3, 0x2) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0), 0x42, 0x0) write$dsp(r5, &(0x7f0000000700)="5cba91a4", 0xffffffd9) syz_open_dev$sndctrl(&(0x7f0000000740), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./debug\x00', &(0x7f0000000800)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./debug/tracing/options/context-info\x00', 0x800, 0x0) read(r6, 0x0, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000008c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000900)={0x1, 0x1, 0xffff4f11, 0xfffd, 0x6, 0x20000000000000b, 0x1, 0x200, 0x46, 0x28, 0x80000005, 0x2}) 18.208347734s ago: executing program 2 (id=1075): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, 0x0) r1 = userfaultfd(0x80001) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000005c0)={0xaa, 0x79}) socket(0xa, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'macsec0\x00', &(0x7f0000000380)=@ethtool_stats}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0x80000001, 0x2, 0x4, 0x6}, {0x6, 0x6, 0x7, 0x80000000, 0x2}]}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r1, &(0x7f0000000640)=""/145, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x103a42, 0x32) ftruncate(r6, 0x6000000) r7 = syz_open_procfs$pagemap(0x0, &(0x7f00000004c0)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000500)={0x60, 0x3, &(0x7f0000a47000/0x4000)=nil, &(0x7f0000afb000/0x4000)=nil, 0x100000000, &(0x7f0000000580)=[{0x4, 0x9, 0x8}], 0x1, 0x0, 0xa, 0x4, 0x8, 0x73}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 18.086131105s ago: executing program 1 (id=1077): io_uring_setup(0x3d7b, &(0x7f0000000480)={0x0, 0x6bcf, 0x8000, 0x0, 0x3c0}) r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x800003, 0x10000051}, &(0x7f0000000200), &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x0, @can, @ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, @hci={0x1f, 0x4, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)='veth0\x00', 0x291, 0xe}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd589, 0x80, 0x2, 0x1e1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x1, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48080) syz_io_uring_submit(r4, r1, r2, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x100000001, 0x0, 0x82}], 0x1, 0x0, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00', 0x0, 0x60ff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_usb_connect(0x3, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r8 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r7, 0x1, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x40, &(0x7f0000000500)="900100"/64) munmap$IORING_OFF_SQ_RING(r5, 0x2) ioctl$sock_SIOCOUTQNSD(r8, 0x4010618c, &(0x7f0000000540)) io_uring_enter(r0, 0x64ec, 0xfffffffd, 0x6a, 0x0, 0x0) 17.187884097s ago: executing program 3 (id=1078): socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='2', 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="110025bd7000ffdbdf258200000008000300", @ANYRES32, @ANYBLOB="11a618d2e891dc211fcbd63613b406000000000000005769dec77549b34c927eeb38afeb7957e88ed2ceaf57648af5bb8003f157d5e5122e3fac0717bf8b6016ad62e91bdbc1456148b202a9d9b45bf168568862"], 0x1c}, 0x1, 0x0, 0x0, 0x404c0c4}, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141102) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x34b8, 0x0, 0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000840)={0x40000000, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[], 0x10}}, 0x0) bind$inet(r5, &(0x7f0000000900)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000940)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000980)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x7, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r5, &(0x7f0000000a80), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2b, &(0x7f0000000e80)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) 15.065502809s ago: executing program 1 (id=1080): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000015980)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000002e980)=0x7) futex(0x0, 0xd, 0x20000002, 0x0, 0x0, 0x400000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) 14.012653172s ago: executing program 1 (id=1082): prlimit64(0x0, 0xa, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = fanotify_init(0x200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000000020605000000000000fffffff600ffff0c000780080008000000008900000000060000000500050002000000050004000000000009e8010073797a310000000011000300686173683a69702c6d61726b00000000"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) fanotify_mark(r0, 0x441, 0x5800001a, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000200)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x600}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) write$P9_RSETATTR(r4, 0x0, 0x0) 13.414194478s ago: executing program 0 (id=1083): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc4b2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$sndctrl(&(0x7f0000000380), 0xffffffffffffff1b, 0x200000) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000200)={0x0, 0x1, 0x5, &(0x7f0000000240)={0x6, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) 13.125760947s ago: executing program 3 (id=1084): socket$nl_route(0x10, 0x3, 0x0) (async) syz_io_uring_setup(0x46b7, &(0x7f0000000000)={0x0, 0xe9c0, 0x1000, 0x2, 0x3ac}, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) (async) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/anycast6\x00') pread64(r1, &(0x7f0000000300)=""/132, 0x84, 0x3ffffffffffffffc) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x5, 0x400, 0x10000, 0x6, 0x6, r0}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) rt_sigqueueinfo(r0, 0x3f, &(0x7f00000001c0)={0x40, 0xe0b0, 0x1}) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000000680)=""/102392, 0x18ff8) (async) mkdir(&(0x7f0000019680)='dir0\x00', 0x80) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in6=@mcast1, 0x0, 0xff}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x532}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x89}}, 0xf0}}, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000019740)='reno\x00', 0x5) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000019780)={0x0, 0x0, &(0x7f00000197c0)={&(0x7f0000019800)=ANY=[@ANYBLOB="1400e8ff04080102"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) bind$unix(0xffffffffffffffff, &(0x7f0000019840)=@file={0x1}, 0x6e) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000198c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000019900)=0x3) 12.410208263s ago: executing program 3 (id=1085): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) getpgid(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r4, 0x80108906, &(0x7f0000000040)={'sit0\x00', {0x2, 0x4e22, @empty}}) 12.40177614s ago: executing program 4 (id=1086): mkdirat(0xffffffffffffff9c, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x29, 0x1, 0x10000000, 0x2, {0xf, 0x3}}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f0000000540)='ntfs3\x00', 0x221000d, 0x0) syz_open_dev$evdev(&(0x7f0000000580), 0x80000002, 0x88440) r3 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000600)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f0000000680)}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) socket$igmp(0x2, 0x3, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0), 0x42, 0x0) write$dsp(r4, &(0x7f0000000700)="5cba91a4", 0xffffffd9) syz_open_dev$sndctrl(&(0x7f0000000740), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./debug\x00', &(0x7f0000000800)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./debug/tracing/options/context-info\x00', 0x800, 0x0) read(r5, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000008c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000900)={0x1, 0x1, 0xffff4f11, 0xfffd, 0x6, 0x20000000000000b, 0x1, 0x200, 0x46, 0x28, 0x80000005, 0x2}) 11.31778893s ago: executing program 3 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019780)=0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000197c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000019800)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000019840)={{r6, 0xffffffffffffffff}, &(0x7f0000019880), &(0x7f00000198c0)=r5}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000019900)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000019940)={0x6, 0x4, &(0x7f0000019a00)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f0000019a40)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r9, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019a80)={r10, r9, 0x25, 0x2, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000019ac0)={{r7}, &(0x7f0000019b00), &(0x7f0000019b40)=r4}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r11 = syz_clone(0x4084111, 0x0, 0x1d, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r11, 0x1, &(0x7f0000019b80)={0x14, 0x1, 0xfee9}) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r12) 11.316836705s ago: executing program 4 (id=1088): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020008}, 0xc, &(0x7f0000000a40)={&(0x7f00000005c0)=@newtfilter={0x448, 0x2c, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb9d96b1e4b8bd37d, 0xfff2}, {0x7, 0xb}, {0xd, 0xd}}, [@f_rsvp6={{0xa}, {0x418, 0x2, [@TCA_RSVP_POLICE={0x414, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x6, 0x6d3, 0x685f, 0xa6c, 0x10001, 0x2, 0x5, 0x5, 0x2618, 0xbd, 0x6, 0x9, 0x74, 0x9, 0x7000, 0x4, 0xc5, 0x808, 0x5, 0xd3d, 0x7, 0x2, 0x80000001, 0x9c2, 0xc, 0x400, 0x8, 0x31, 0x3, 0x8, 0x5, 0x7, 0x7, 0x5f9, 0xfff, 0x7fff, 0x1ff, 0x7f, 0x5, 0x5d, 0x9, 0x4b, 0x8, 0x200, 0x8, 0x6, 0xff, 0xfffffff5, 0x9, 0x8, 0x800, 0x1, 0x1000, 0x5, 0x2, 0x33, 0x800, 0xffffffff, 0x3, 0x0, 0x3fffc00, 0x5, 0x3, 0x3, 0x9e, 0x7ff, 0x0, 0x101, 0x4, 0x3, 0x1, 0xd655, 0x73c, 0xb, 0x40, 0x1, 0x7f, 0x1, 0x1, 0x4, 0x8fe, 0x7, 0xf7, 0x9, 0xa391, 0x9, 0xff, 0x3, 0x400, 0xb, 0x4, 0x0, 0x1, 0x8, 0x2, 0x2, 0x80, 0x5, 0x8000, 0x1, 0x4, 0x10, 0x639d76e0, 0x3ff, 0x4, 0x5e, 0xfffffff7, 0x6, 0x6, 0x9, 0x2, 0x1ff, 0x8, 0x9, 0xfffffffc, 0x0, 0xce3, 0x8, 0x9, 0xf6, 0x5d6, 0x4, 0x7, 0xfffffffe, 0x9, 0x1, 0x2000000, 0x2, 0x8000, 0x5, 0x76d, 0x9, 0x3, 0x6, 0x3, 0x80000000, 0x5, 0x5, 0x6, 0x4, 0x8, 0x3, 0x8, 0xa8, 0x1, 0x1, 0x5, 0x9, 0x7, 0x5, 0x6b9, 0x7, 0x7, 0x2, 0x0, 0x3, 0x1, 0x0, 0x6, 0x800, 0xe89, 0x2f, 0x6, 0x0, 0x7, 0x1, 0x9, 0x0, 0x8, 0x8e, 0x4, 0x3000000, 0x5, 0x5, 0x7fffffff, 0x7, 0xc4, 0x837, 0xfffffffb, 0x8, 0x7, 0x1, 0x9, 0x7, 0x9, 0x3, 0x7, 0x7, 0x8, 0x3, 0x10000, 0xffff, 0x9, 0x0, 0xe86, 0x9, 0x3, 0x1, 0x9, 0xa, 0xffffffe3, 0x4, 0x10000, 0x670f, 0x3ff, 0x8, 0x7, 0x4d56ff28, 0x9, 0x9, 0x80, 0x8, 0x46f, 0x1, 0xb12f, 0xfffffbff, 0xffff0001, 0x4, 0x6, 0xc5, 0x1, 0xb, 0x1, 0xe, 0x2, 0x1ff, 0x800, 0x6, 0xc9, 0x100, 0xfff, 0x1, 0x2, 0x101, 0xfffffffc, 0x8, 0xfffffff9, 0x5, 0x41a1, 0x2, 0xa00, 0x9, 0x3, 0x3, 0xffff, 0x1, 0x30, 0x5, 0x97, 0x3, 0x1, 0x1, 0xffff, 0x82e4]}]}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x2}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x107441, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x68, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) socket(0x1a, 0x80000, 0x3) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x0, 0x18b, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) 11.254135975s ago: executing program 2 (id=1089): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_clone(0x5b80aa11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x56d, 0x3}, 0x50) bind(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000009c0)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000019a00)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000019bc0)={0x0, 0x0, &(0x7f0000019c00), &(0x7f0000019c40), 0x1000, r1}, 0x38) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019c80)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000019d00)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000004c0)={{0x5, 0x2, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0xfffffffffffffff7, 0x0, 0x8, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x3, 0x2, 0x9, 0x0, 0xfffffffffeffffff, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0xaa, 0xfffffffffffffffa, 0x0, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x8000000002, 0x10000, 0x1000000000e, 0x5, 0x7, 0x88, 0x2, 0x2, 0x4, 0x100000002, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x10001, 0x1, 0xfffffffbfffff800, 0x242, 0x1, 0x20, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x0, 0x42, 0x7, 0x4000000000000000, 0x3, 0x7ff, 0x4, 0x400000000007, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x1000, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x803, 0x7, 0x8, 0x201, 0xfffffffffffffffe, 0x6, 0x3, 0x5, 0x1, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x2ad, 0x80000001, 0xfffffffffeffffff, 0x7]}) 10.614961295s ago: executing program 2 (id=1090): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) rename(&(0x7f00000001c0)='./file0/file0\x00', 0x0) r2 = socket(0x15, 0x5, 0x0) connect$unix(r2, &(0x7f0000002840)=@abs={0xa}, 0x6e) getsockname(r2, 0x0, &(0x7f00000028c0)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) add_key(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000700), 0x407f, r4, 0x4}, 0x38) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r0, r0, 0x2f, 0x0, @void}, 0x10) mq_open(&(0x7f0000000040)='#]#*\x00', 0x40, 0x2, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000740)={0x9, [0x200, 0x8, 0x7f, 0x6, 0x5, 0x8, 0x40, 0x7ff, 0x8001]}, 0x16) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x900, 0x0, 0x0, &(0x7f00000000c0)={0x1f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000002900)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000002940)={@private0, 0xffa4, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000002980)={@initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x800, 0x1, 0xff, 0x2, 0x0, 0x100}, 0x20) ioctl(r7, 0x3b8f, &(0x7f0000000700)='(\x00\x00') bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r0, 0x4, r0}, 0x10) 10.413776917s ago: executing program 4 (id=1091): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) syz_usb_connect(0x0, 0x2e, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r0 = getpgrp(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000002780)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f000001b780)=0x7) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f000001b7c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) 9.635141715s ago: executing program 0 (id=1092): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000015980)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000002e980)=0x7) futex(0x0, 0xd, 0x20000002, 0x0, 0x0, 0x400000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) 9.624616202s ago: executing program 1 (id=1093): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000240)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000019240)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000019280)=0x5, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000192c0)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000193c0)=[{0x0}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000019440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x25a5, 0x0) add_key(&(0x7f0000019480)='encrypted\x00', &(0x7f00000194c0), &(0x7f0000019500)="f1bc7bc7084596637054e9ea669b86b12a1bd56dcee29eca00b1dd", 0x1b, 0xfffffffffffffffe) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) 8.659997036s ago: executing program 4 (id=1094): landlock_create_ruleset(&(0x7f00000000c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@deltfilter={0x10e4, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0xf}, {0x6, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x10b0, 0x2, [@TCA_FW_ACT={0x404, 0x4, [@m_xt={0x2d8, 0x4, 0x0, 0x0, {{0x7}, {0x274, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x11f, 0x6, {0x0, 'raw\x00', 0x0, 0xb, "deea4572b9823faadbdcff29ae2d16d4572613e5d26f6a2b5d4dfcc412394e937488d5d6cf5e233f4b437d159590d83132adb59acf5018529188ce48653dbe6fe9c9df1ddbd771891daf95cac585382e852a520f804a854943494dfdb8bd101df93414dec0d923ef793f055cac35ddac2412645e65f493b3c5e393ea4c22fc9dcf6263abdaa212f075c8df1f84c9b991f9d3214a353062d5591fb0ebb53b85ed71e0a1162c19399ce78a02a907608147e9452ea6334d04bfcfd8e0eb496b2593b40b109628aa0cfbe064d3c713cf99039209e586dc2ea626a6d8cbb3134fef92dacd77229f60af48402884ab9735bc76f4977d83bb"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xae, 0x6, {0x5, 'security\x00', 0x4, 0x1, "5f028c50e506c3ac37e3fde83040c1964c1f7fcc1bc224b5998ada12026bc84b535ed61886d15c73668168466db948aa3271546da3a81aa3367fce2fda734f68ac4a063ac9099d37f50f4725b3b3d514a4210fd2ae528d2e873911c1e492dd7f6997632eb0eee72538230ec2b5dab38bbf70b04e7990336bc3f5a45fc3e028a26ef745f0"}}, @TCA_IPT_TARG={0x90, 0x6, {0x0, 'mangle\x00', 0x7, 0xc, "8205206278a51d1d218b522f2d58e1078c060692498483fa9768b75e3dde95c203eaa714251a7c518adc6365b54dee3fe22afc234606b1543ea9e14f57cd5a9ec8ea6601e3169d72534d6190aef2edae281ef6bbe73c9e9098b63c29f16db2ea2ebcbe9515ae"}}]}, {0x3e, 0x6, "b3874abd2db64091a51d954a284f28fc13519a6a23d7e4132af96364eab5645efba6f1e892a0835ed246b7bfdfa7dfa9cdc95c1a1f38b8f44f57"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x6c, 0x4, 0x0, 0x0, {{0xa}, {0x4}, {0x3f, 0x6, "ceb3e7f4e78768258fc1c8a10a1902b4293362cfacaa07bf49ceb77adc06ca163614e15f87da814b42c3b55fdac874401e3f163e5bacbafbddfbae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0xbc, 0x14, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x883e}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x7fffffff, 0x7, 0x7, 0x4e58}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}]}, {0x52, 0x6, "aa19b1e33dbc9867b6b24da8501d805e8b6d9ebba126077942ac3b22c23914ccab75cb1da46e112d517c58ca6f99e6a31420a03c92bada79fc6471bcad508183580dd51e155652c68398c11714fb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FW_POLICE={0x458, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x9, 0x7f, 0x7, {0x3, 0x0, 0x40, 0xfff7, 0x200, 0x3}, {0x8, 0x0, 0x7f58, 0x3, 0x3df, 0x7}, 0xe729, 0xf, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x101, 0x6, 0x40, 0x2, 0xb4, 0x7, 0x1, 0xa00, 0x5, 0xd, 0x7, 0x9, 0xff, 0x0, 0x5, 0x10000, 0x6, 0x1, 0xfffffffa, 0x80000001, 0x1000, 0x517, 0x0, 0x9, 0x5, 0xf, 0x864b, 0x10, 0x80000001, 0x9dd, 0x3, 0x5, 0x8ab, 0x2, 0x1000, 0x1, 0x5, 0x0, 0x7c, 0x7, 0x3, 0x101, 0x26cc, 0x7, 0xfffffe96, 0x1, 0x7fff, 0x5, 0xfff, 0x2, 0x101, 0x1, 0x4, 0x0, 0x3, 0x0, 0x8, 0xfffffffe, 0x1, 0x7fff, 0x100, 0x4, 0xffff, 0x1000, 0x7fff, 0xfffffff7, 0x4, 0x2a9, 0x1, 0x401, 0x80, 0xc0, 0xffffff2b, 0xfffff000, 0x80, 0x9c, 0x94bb, 0xfffffffa, 0xa1, 0x4, 0x3, 0x6c9f, 0x9, 0x7, 0x100, 0xd686, 0x3, 0x9ebd, 0x8, 0xc0000000, 0x3ff, 0x6, 0x8, 0x0, 0x8, 0x7, 0x81, 0x7, 0xc40, 0x9, 0xee23, 0x10000, 0x4, 0xf7, 0x5, 0x8, 0x5, 0xfffffff7, 0x0, 0x6, 0x4, 0x1b8, 0x9, 0x7, 0x10001, 0xcd63, 0xffff, 0x5, 0x5, 0x10001, 0x81, 0x4, 0x0, 0x31d, 0x6, 0x0, 0xffff, 0x6, 0x60a, 0x1, 0x6, 0xe, 0x8, 0x1, 0x0, 0x6cc, 0x7f, 0x2, 0x2, 0x0, 0x667e, 0x3, 0x7, 0xfffffffd, 0x800, 0x6, 0x1, 0x9, 0x1, 0x5, 0xcbee, 0x5, 0x4, 0x40, 0x5, 0x3, 0xffffffff, 0x2c84, 0xb9, 0x3ff, 0x8, 0x6, 0x2, 0x101, 0x0, 0x2, 0x0, 0x7, 0x9, 0x3c6, 0x5af6, 0xc, 0x3a1800, 0x4, 0x3, 0x2, 0x81, 0x7, 0x8, 0x7, 0x7fff, 0x80000000, 0x40, 0x9, 0xa41d, 0x6, 0x4, 0x8, 0x3, 0x100, 0xf, 0x10001, 0x1ff, 0x400, 0x2, 0x2, 0x9, 0x3, 0x0, 0x6, 0x3, 0x80, 0x10000, 0x8, 0x7, 0x6, 0x5, 0xeb, 0x2, 0x9, 0x1, 0x100, 0x4, 0x4, 0x10, 0x6, 0x3, 0x77e2, 0x9f9, 0x6, 0xb4d, 0xb22, 0x3, 0x9, 0xde, 0x2, 0x4, 0x5, 0x3, 0x10077, 0x9, 0x40, 0x0, 0x6, 0x1ff, 0x4000000, 0x1, 0x7, 0xf0, 0xb6d, 0x135, 0x7fffffff, 0x400, 0x10, 0x6, 0x10001, 0x0, 0x9, 0x0, 0xfffffffc, 0x9, 0x0, 0x8, 0x3, 0x1ff]}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x63}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_FW_POLICE={0x818, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xffffffff, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x0, 0xa, 0x9, 0x1ff, 0x6, 0x1000, 0x7, 0x2, 0x400, 0x1, 0x3f75d2e9, 0xf, 0x5, 0x200, 0xc6c, 0x6, 0x7f, 0x2, 0x400, 0x7, 0x101, 0x9, 0x8001, 0x5, 0x9, 0xfffff801, 0xcbb8, 0x3, 0x10, 0x0, 0x11f, 0x9874, 0x80000001, 0x5, 0x10, 0x47, 0xc, 0x92f8, 0x7, 0x7, 0x7fffffff, 0x80000001, 0x8, 0x8, 0x5, 0x4, 0x101, 0x3, 0x7fffffff, 0x5, 0x5, 0x1, 0x38f8, 0x6, 0x9, 0x101, 0x9, 0xffffffff, 0x5, 0xb7, 0x0, 0x7, 0x400000, 0x6, 0x44f7, 0x10, 0x4, 0xd31, 0x7fffffff, 0x3, 0x3, 0x5e2, 0xb5, 0x84d, 0x7ec, 0xa, 0xc0, 0x8, 0x97b, 0xa846, 0x3, 0x80, 0x9, 0x5fbd, 0x9, 0x3, 0x9, 0x1, 0x40, 0x0, 0x0, 0x5, 0x6, 0x7, 0x1, 0x7fe, 0x2, 0x40, 0x2, 0x57da, 0x6, 0x8, 0x5, 0x9, 0x8, 0x3, 0x40, 0x4, 0x9, 0x6, 0xb, 0x5000, 0xffffffff, 0x3, 0x3, 0xf424, 0x2, 0xf67d, 0x7, 0xfffffff9, 0x9, 0x1, 0xa, 0x100, 0x3, 0x85, 0x403b31ce, 0x33a6, 0x3, 0xb8d, 0x7, 0x4, 0x9, 0x3, 0x1, 0x4, 0xfffffffd, 0x7fffffff, 0x2, 0x10001, 0x3, 0xce, 0x0, 0x8, 0x7, 0x7, 0x2, 0x8000, 0x3, 0x5, 0x8, 0x6, 0x1, 0x80, 0x9, 0x3, 0x382c000, 0x3, 0xe, 0x6, 0x81, 0x46a, 0xfc, 0x10000, 0x7fff, 0xfffffff7, 0x3, 0xe, 0x7, 0x9, 0x1, 0x5, 0x3, 0x9, 0x1, 0x81, 0xcdf, 0x9, 0x7, 0xe, 0x9, 0xfff, 0x7, 0xdb3, 0xce, 0x6, 0x10, 0x9, 0xffffffff, 0x4, 0x8000, 0x80000001, 0x8, 0x8, 0xa, 0x9, 0x9, 0x8000, 0x7, 0x36, 0x2, 0xda2, 0x9, 0x8, 0x9, 0xfffffc01, 0x8001, 0xc, 0x3, 0x5, 0xffff76a5, 0x7fffffff, 0x7f, 0x9, 0x8, 0x4, 0x5, 0x3, 0x7f, 0x3, 0x5, 0x81, 0x0, 0x1, 0x7, 0x0, 0x7, 0x800, 0x9, 0x5, 0x0, 0x7ff, 0x80000000, 0x10, 0xb2c9, 0x0, 0x63e1, 0x7f, 0x800, 0xffffc705, 0xfff, 0x9, 0xbf, 0x658, 0xfff, 0x800, 0x0, 0x5, 0xc]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6b75}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x7, 0x2, 0xff, 0x9, 0xa4c, 0x6, 0xf, 0xe05a, 0x3, 0x9, 0xfffffffc, 0x1, 0xf, 0x3, 0x0, 0x8, 0x5000, 0x6, 0x7, 0x1, 0x6, 0x1, 0xa9, 0x60f0, 0x2, 0x8e4, 0x2, 0x1, 0x1, 0xbb21, 0x7a, 0x2, 0x4, 0x8, 0x94, 0x10, 0x1, 0x9, 0xf3d5, 0x1, 0x8, 0x0, 0x8, 0x8, 0x0, 0x1, 0x9, 0x8, 0x2, 0x8, 0x1, 0x0, 0x4, 0x0, 0x10001, 0xfffffff8, 0x1, 0x7ff, 0x1, 0xe5e, 0x80, 0x7, 0x3, 0x7, 0x3, 0x0, 0x10000, 0x8, 0x9d6, 0x81, 0x3, 0x6, 0x6, 0x81, 0x5918, 0x2, 0x88b7, 0x4, 0x2, 0x1, 0x6, 0xffff, 0x5, 0x9, 0x8, 0xca7, 0xac31, 0x3, 0x80000001, 0x8, 0x9b2, 0x6, 0x1, 0x4, 0xff, 0x7, 0x80000001, 0x7, 0x3, 0x50b5, 0x6, 0x2, 0xb, 0x6, 0x1427, 0x5, 0x6, 0x0, 0x1, 0xf36, 0x520, 0x8, 0x1, 0x6, 0x6, 0xfffffff0, 0x7b9, 0x4, 0x6, 0x63, 0x7, 0x0, 0x41, 0x10001, 0x4, 0x337c, 0x0, 0x1, 0x9, 0x4, 0x6, 0x0, 0x7, 0x2, 0x9, 0x8, 0x0, 0x9703, 0x681dff34, 0xb902d0f5, 0x95c2, 0x9, 0x6, 0xfffffffa, 0x7fff, 0x2, 0x6, 0x2, 0x2, 0x7f, 0x95a3, 0x8, 0x0, 0x80, 0x0, 0x3, 0x9, 0x7, 0x7, 0x0, 0x8, 0x3, 0x2, 0xc3, 0x1, 0xd3a9, 0x7, 0x5, 0x7, 0x3, 0x3, 0x10000, 0x8, 0x5, 0x6, 0xc, 0x21, 0xfffffffa, 0x2, 0x4, 0xfac, 0xcc8, 0x0, 0x1, 0x2922, 0x3ff, 0x8a, 0x1, 0xf59d, 0x0, 0xfff, 0x6, 0x1ff, 0x2, 0x3, 0x8, 0x3, 0x0, 0x1, 0xffff, 0x7, 0x8, 0xc484, 0x6, 0x3, 0x7, 0x0, 0x4e, 0x1, 0xb, 0xb3f1, 0x401, 0x1, 0x0, 0x4, 0x15a, 0x5, 0x156, 0x7, 0x8, 0x6, 0x8, 0x20c, 0x7fff, 0xffffffff, 0x34b3, 0x0, 0x5, 0x4, 0x5, 0x4a9f, 0x3, 0x6, 0x0, 0xa5, 0x4, 0x4, 0x3, 0x5, 0xfffffffb, 0xffffffd4, 0xff, 0x4, 0x0, 0xb5c, 0x80000000, 0x0, 0x2, 0x2, 0x8, 0x81e, 0x7, 0x8000, 0x1]}]}, @TCA_FW_MASK={0x8}, @TCA_FW_MASK={0x8, 0x5, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x10e4}}, 0x4800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x8000000000000000, 0x0) read$msr(r5, &(0x7f0000000440)=""/54, 0x36) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000400)={0x77359400}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\b\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r6, &(0x7f00000008c0)="306663353a313232373a4c180577b4d2fcb867666c646c96bb89aaa16a2d77d33a17eb732591387d12fbae453deb2f4630fd1a7b722c", 0x36) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000780), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000007c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) 8.600606057s ago: executing program 0 (id=1095): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) r0 = epoll_create1(0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000040)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0)="0000000000000002ff690000000000010000001300000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da888c7a56843a85f3a078c97d542ed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b0009446100"/212, 0xd4, 0xffffffffffffffff) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001580), 0x400, 0x0) r3 = landlock_create_ruleset(&(0x7f0000005980)={0x7f6e}, 0x18, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x4000010, r2, 0x489fc000) landlock_restrict_self(r3, 0xe) bind$unix(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 7.677868242s ago: executing program 1 (id=1096): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000140)='\x00', 0x202000, &(0x7f0000000180)={@align=0x8, {0x8, 0x2, 0x8, 0x200}}, 0x0, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x9}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x8, 0x9, {{0x8, 0x4, 0x1, 0xe, 0x20, 0x68, 0x0, 0xc, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@end, @ssrr={0x89, 0xb, 0x18, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}]}]}}}}}) r2 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00000003c0)) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.149172169s ago: executing program 2 (id=1097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000140)="000000000000004063656c6c00000002000000440000000600bfffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000004", 0x54, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000340)='n', 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000380)) socket(0x15, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000400)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f0000000480)}, 0x96000}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000500)="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"/297, 0x3accf8d5) vmsplice(r6, &(0x7f0000000640)=[{&(0x7f0000000680)='7', 0x1}], 0x1, 0x100000000000000) close(r5) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000700)={r7, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0x8, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000406000000000000"], &(0x7f0000000900)=""/4110, 0x1c, 0x100e, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'syzkaller0\x00'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x4, 0x100000, 0x1000, &(0x7f0000fa2000/0x1000)=nil}) 4.503041478s ago: executing program 3 (id=1098): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) getpgid(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r4, 0x80108906, &(0x7f0000000040)={'sit0\x00', {0x2, 0x4e22, @empty}}) 3.184169279s ago: executing program 2 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) syz_usb_connect(0x0, 0x2e, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r0 = getpgrp(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000002780)=""/102392, 0x18ff8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) 3.134619215s ago: executing program 4 (id=1100): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r4, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000580)="b9ff03316844268cb89e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r6, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1000, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r8}, 0xc) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000140)={0x28, 0x0, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000001c0)}) r10 = memfd_secret(0x80000) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r9, @ANYRESOCT=r9, @ANYRESOCT=r9, @ANYRES32=r4, @ANYRES64=r10, @ANYRES16, @ANYRESHEX=r9], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 1.409717941s ago: executing program 1 (id=1101): socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='2', 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="110025bd7000ffdbdf258200000008000300", @ANYRES32, @ANYBLOB="11a618d2e891dc211fcbd63613b406000000000000005769dec77549b34c927eeb38afeb7957e88ed2ceaf57648af5bb8003f157d5e5122e3fac0717bf8b6016ad62e91bdbc1456148b202a9d9b45bf168568862"], 0x1c}, 0x1, 0x0, 0x0, 0x404c0c4}, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141102) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x34b8, 0x0, 0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000840)={0x40000000, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[], 0x10}}, 0x0) bind$inet(r5, &(0x7f0000000900)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000940)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000980)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x7, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r5, &(0x7f0000000a80), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2b, &(0x7f0000000e80)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) 1.380156549s ago: executing program 0 (id=1102): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc4b2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x2703) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$sndctrl(&(0x7f0000000380), 0xffffffffffffff1b, 0x200000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0x1, 0x5, &(0x7f0000000240)={0x6, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) 203.970581ms ago: executing program 4 (id=1103): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000480)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0x20002014}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000840), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000940)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x24004084) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x2003cb1, 0x400, 0xa, 0x20002fb}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000a80)={0x1, &(0x7f0000000ac0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000b00)={0x3, 0x660b, 0x8, 0x4, 0x18, "ad683117f988a209"}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f0000000280)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=ANY=[@ANYBLOB="0500000028add2562a35da7100000000e6c295dc61ab08009939b0e784cf7c7014fc170baf54f4b163ef6868c1ecc3c172ea5f756f48bcec5145d5a4bd213563d532f1e93e18ac361cd67e5075de23f6070cd493b14346d44a640640391f0f5c47a24b2e953ae15e0fa722d78230def8ff534f528852a5f1ffb72802d08c66bf4cfe1695", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r8, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x24044000}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000010010000060a0104000000000000000005000000d40007402f1a670349df176016a7fbd59e264cdd6f33e4620760dc18954504e3a53cb511f1547884e32ee24e13153a44356f76ffa713e697104faf5c4004f352e0", @ANYRES8=r6, @ANYBLOB="110beb81fbd185e0be6e6947ee1e5e6f243a852609ee64487d6629407b80d839623c0e114210b359f8bba19d863a5998cd73058178c47cd7b242156fb233dbe874f8cb8b0694cb54e21ed8a108ea3ae3fda13aae82e1e7fe15c1", @ANYRESHEX=r7, @ANYRES32, @ANYRESHEX=r5, @ANYRESHEX=r9, @ANYRES32=r8, @ANYRESDEC=r11], 0x184}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 0s ago: executing program 2 (id=1104): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000240)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000019240)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000019280)=0x5, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000192c0)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000193c0)=[{0x0}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000019440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x25a5, 0x0) add_key(&(0x7f0000019480)='encrypted\x00', &(0x7f00000194c0), &(0x7f0000019500)="f1bc7bc7084596637054e9ea669b86b12a1bd56dcee29eca00b1dd", 0x1b, 0xfffffffffffffffe) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) kernel console output (not intermixed with test programs): [ T9387] [ 565.508412][ T9387] ERROR: Out of memory at tomoyo_realpath_from_path. [ 565.892133][ T30] audit: type=1400 audit(1792904849.818:1814): avc: denied { unmount } for pid=5626 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 566.165171][ T9393] netlink: 56 bytes leftover after parsing attributes in process `syz.0.812'. [ 566.510565][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.575762][ T9396] netlink: 'syz.2.818': attribute type 49 has an invalid length. [ 567.130006][ T9402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.536171][ T30] audit: type=1400 audit(1792904851.038:1815): avc: denied { read write } for pid=9400 comm="syz.1.819" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 567.536214][ T30] audit: type=1400 audit(1792904851.038:1816): avc: denied { open } for pid=9400 comm="syz.1.819" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 567.560552][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.603399][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.611558][ T1515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.617666][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.618355][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.672413][ T5355] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 567.739084][ T9411] netlink: 2 bytes leftover after parsing attributes in process `syz.4.813'. [ 567.803986][ T5751] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 567.842448][ T992] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 567.992567][ T992] usb 2-1: Using ep0 maxpacket: 32 [ 567.995174][ T992] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 567.998689][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.998947][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.999142][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.094367][ T992] usb 2-1: config 0 descriptor?? [ 568.136960][ T992] hub 2-1:0.0: USB hub found [ 568.283537][ T1670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.284276][ T5355] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 568.285166][ T5355] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.285204][ T5355] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 568.285227][ T5355] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 568.285261][ T5355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.359029][ T5751] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 568.362899][ T5751] usb 4-1: config 2 has an invalid interface number: 79 but max is 0 [ 568.362920][ T5751] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 568.362953][ T5751] usb 4-1: config 2 has no interface number 0 [ 568.362974][ T5751] usb 4-1: config 2 interface 79 has no altsetting 0 [ 568.365624][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.365643][ T5751] usb 4-1: Product: syz [ 568.365655][ T5751] usb 4-1: Manufacturer: syz [ 568.365667][ T5751] usb 4-1: SerialNumber: syz [ 568.409732][ T992] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 568.452190][ T992] usbhid 2-1:0.0: can't add hid device: -71 [ 568.452279][ T992] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 568.483095][ T992] usb 2-1: USB disconnect, device number 36 [ 568.670326][ T30] audit: type=1400 audit(1792904852.598:1817): avc: denied { create } for pid=9414 comm="syz.0.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 568.692174][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.708251][ T5355] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 568.708275][ T5355] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 568.708288][ T5355] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 568.712766][ T5355] cxacru 3-1:1.0: probe with driver cxacru failed with error -71 [ 568.718234][ T30] audit: type=1400 audit(1792904852.638:1818): avc: denied { sys_admin } for pid=9414 comm="syz.0.822" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 568.737965][ T5355] usb 3-1: USB disconnect, device number 25 [ 569.504429][ T9423] jffs2: notice: (9423) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 569.591315][ T30] audit: type=1400 audit(1792904853.518:1819): avc: denied { mount } for pid=9404 comm="syz.3.820" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 569.615948][ T30] audit: type=1400 audit(1792904853.518:1820): avc: denied { write } for pid=9404 comm="syz.3.820" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 569.615994][ T30] audit: type=1400 audit(1792904853.518:1821): avc: denied { add_name } for pid=9404 comm="syz.3.820" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 569.616028][ T30] audit: type=1400 audit(1792904853.518:1822): avc: denied { create } for pid=9404 comm="syz.3.820" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 569.702740][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.870406][ T30] audit: type=1400 audit(1792904853.798:1823): avc: denied { write } for pid=9404 comm="syz.3.820" name="mnt" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 569.935991][ T9427] random: crng reseeded on system resumption [ 572.006080][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.006397][ T8301] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 572.009047][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.182376][ T8301] usb 1-1: Using ep0 maxpacket: 8 [ 572.189198][ T8301] usb 1-1: unable to get BOS descriptor or descriptor too short [ 572.189238][ T8301] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 572.190266][ T8301] usb 1-1: config 3 has an invalid interface number: 171 but max is 0 [ 572.190287][ T8301] usb 1-1: config 3 has no interface number 0 [ 572.192194][ T8301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.192215][ T8301] usb 1-1: Product: syz [ 572.192229][ T8301] usb 1-1: Manufacturer: syz [ 572.192241][ T8301] usb 1-1: SerialNumber: syz [ 572.360635][ T5751] usb 4-1: USB disconnect, device number 22 [ 572.540688][ T8301] (null): radio-mr800 - initialization failed [ 572.544673][ T8301] radio-mr800 1-1:3.171: probe with driver radio-mr800 failed with error -22 [ 572.545773][ T8301] usbhid 1-1:3.171: couldn't find an input interrupt endpoint [ 572.578304][ T8301] usb 1-1: USB disconnect, device number 29 [ 572.580114][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 572.580130][ T30] audit: type=1400 audit(1792904856.508:1831): avc: denied { unmount } for pid=5625 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 572.872905][ T5751] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 573.074510][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.594977][ T5751] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 573.664490][ T5751] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.664652][ T5751] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.664680][ T5751] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 573.664708][ T5751] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 573.671638][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.671668][ T5751] usb 4-1: Product: syz [ 573.671704][ T5751] usb 4-1: Manufacturer: syz [ 573.671767][ T5751] usb 4-1: SerialNumber: syz [ 573.694280][ T30] audit: type=1400 audit(1792904857.438:1832): avc: denied { prog_run } for pid=9451 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=bpf permissive=1 [ 573.694435][ T30] audit: type=1400 audit(1792904857.448:1833): avc: denied { write } for pid=9451 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 574.127540][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.144165][ T5751] usb 4-1: Not enough endpoints found in device, aborting! [ 574.865246][ T992] usb 4-1: USB disconnect, device number 23 [ 574.894049][ T30] audit: type=1400 audit(1792904858.828:1834): avc: denied { map } for pid=9458 comm="syz.2.834" path="socket:[20134]" dev="sockfs" ino=20134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 574.894252][ T30] audit: type=1400 audit(1792904858.828:1835): avc: denied { accept } for pid=9458 comm="syz.2.834" path="socket:[20134]" dev="sockfs" ino=20134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 574.931218][ T9467] netlink: 'syz.0.837': attribute type 49 has an invalid length. [ 575.782086][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.786484][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.823946][ T9465] erofs (device loop4): cannot find valid erofs superblock [ 575.912607][ T8301] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 576.094255][ T8301] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 576.104873][ T8301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.105950][ T8301] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 576.106002][ T8301] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 576.106071][ T8301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.523836][ T8783] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 576.677299][ T8783] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 576.704911][ T8783] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.704979][ T8783] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 576.705049][ T8783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.823707][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.924875][ T8301] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 576.924957][ T8301] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 576.924997][ T8301] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 577.261073][ T8783] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 577.491074][ T8301] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 577.671510][ T8301] usb 1-1: USB disconnect, device number 30 [ 578.216789][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.217365][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.224184][ T9483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=9483 comm=syz.3.841 [ 578.224951][ T30] audit: type=1400 audit(1792904862.158:1836): avc: denied { ioctl } for pid=9482 comm="syz.3.841" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 578.433135][ T9492] netlink: 2 bytes leftover after parsing attributes in process `syz.4.844'. [ 578.906127][ T9495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.283057][ T5828] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 579.284754][ T5355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.305410][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.493002][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 579.590170][ T5751] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 579.670630][ T5828] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 579.681878][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 579.681918][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.698414][ T5828] usb 4-1: config 0 descriptor?? [ 579.784205][ T8845] usb 2-1: USB disconnect, device number 37 [ 579.788059][ T8845] idmouse 2-1:1.0: disconnected [ 579.822563][ T5751] usb 1-1: Using ep0 maxpacket: 32 [ 579.823273][ T5751] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 579.824360][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.824376][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.824394][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.825737][ T5751] usb 1-1: config 0 descriptor?? [ 579.827718][ T5751] hub 1-1:0.0: USB hub found [ 579.939114][ T5828] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 580.490107][ T9507] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 580.894737][ T5751] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 580.905684][ T5751] usbhid 1-1:0.0: can't add hid device: -71 [ 580.905752][ T5751] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 580.924879][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.932923][ T5751] usb 1-1: USB disconnect, device number 31 [ 581.202426][ T8845] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 583.008861][ T5828] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 583.034977][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.049463][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.086958][ T5741] usb 4-1: USB disconnect, device number 24 [ 583.182443][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 583.187352][ T5828] usb 5-1: unable to get BOS descriptor or descriptor too short [ 583.187387][ T5828] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 583.191505][ T5828] usb 5-1: config 3 has an invalid interface number: 171 but max is 0 [ 583.191526][ T5828] usb 5-1: config 3 has no interface number 0 [ 583.195252][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.195270][ T5828] usb 5-1: Product: syz [ 583.195282][ T5828] usb 5-1: Manufacturer: syz [ 583.195293][ T5828] usb 5-1: SerialNumber: syz [ 584.219022][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.301192][ T5828] (null): radio-mr800 - initialization failed [ 584.301353][ T5828] radio-mr800 5-1:3.171: probe with driver radio-mr800 failed with error -22 [ 584.301598][ T5828] usbhid 5-1:3.171: couldn't find an input interrupt endpoint [ 584.308331][ T5828] usb 5-1: USB disconnect, device number 27 [ 585.402362][ T30] audit: type=1400 audit(1792904869.328:1837): avc: denied { mounton } for pid=9527 comm="syz.4.852" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 585.404677][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 585.404795][ T9533] netlink: 'syz.4.852': attribute type 11 has an invalid length. [ 585.404816][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 585.498341][ T30] audit: type=1400 audit(1792904869.428:1838): avc: denied { read } for pid=9529 comm="syz.2.849" name="event2" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 585.498387][ T30] audit: type=1400 audit(1792904869.428:1839): avc: denied { open } for pid=9529 comm="syz.2.849" path="/dev/input/event2" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 585.517127][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.592171][ T30] audit: type=1400 audit(1792904869.518:1840): avc: denied { write } for pid=9529 comm="syz.2.849" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 585.592217][ T30] audit: type=1400 audit(1792904869.518:1841): avc: denied { open } for pid=9529 comm="syz.2.849" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 585.614843][ T30] audit: type=1400 audit(1792904869.548:1842): avc: denied { ioctl } for pid=9529 comm="syz.2.849" path="/dev/input/event2" dev="devtmpfs" ino=946 ioctlcmd=0x80104592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 586.082494][ T5741] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 586.116801][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.131290][ T30] audit: type=1400 audit(1792904870.058:1843): avc: denied { unlink } for pid=9537 comm="syz.3.851" name="#7" dev="tmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 586.232466][ T5741] usb 2-1: Using ep0 maxpacket: 32 [ 586.235094][ T5741] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 586.242219][ T5741] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.258216][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.258248][ T5741] usb 2-1: Product: syz [ 586.258287][ T5741] usb 2-1: Manufacturer: syz [ 586.258354][ T5741] usb 2-1: SerialNumber: syz [ 586.325236][ T5741] usb 2-1: config 0 descriptor?? [ 586.354346][ T5741] cdc_ether 2-1:0.0: missing cdc header descriptor [ 586.354955][ T5741] usb 2-1: unsupported MDLM descriptors [ 586.399346][ T30] audit: type=1400 audit(1792904870.328:1844): avc: denied { write } for pid=9534 comm="syz.0.847" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 586.644341][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.764270][ T9548] netlink: 52 bytes leftover after parsing attributes in process `syz.3.855'. [ 586.792864][ T30] audit: type=1400 audit(1792904870.688:1845): avc: denied { create } for pid=9542 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 587.203767][ T8301] usb 2-1: USB disconnect, device number 39 [ 587.756682][ T9556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.129294][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.144964][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.774098][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.792498][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.842418][ T8845] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 589.961597][ T9566] overlayfs: missing 'workdir' [ 590.017066][ T8845] usb 5-1: Using ep0 maxpacket: 32 [ 590.018788][ T8845] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 590.020508][ T8845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.020540][ T8845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.020649][ T8845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.093209][ T8845] usb 5-1: config 0 descriptor?? [ 590.134302][ T8845] hub 5-1:0.0: USB hub found [ 590.347965][ T8845] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 590.434333][ T8845] usbhid 5-1:0.0: can't add hid device: -71 [ 590.437369][ T8845] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 590.554350][ T8845] usb 5-1: USB disconnect, device number 28 [ 590.822657][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.455727][ T9577] netlink: 4100 bytes leftover after parsing attributes in process `syz.0.866'. [ 591.657989][ T9583] FAULT_INJECTION: forcing a failure. [ 591.657989][ T9583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.658019][ T9583] CPU: 0 UID: 0 PID: 9583 Comm: syz.1.867 Tainted: G Y syzkaller #0 PREEMPT(full) [ 591.658042][ T9583] Tainted: [Y]=FORCED_BIND [ 591.658049][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 591.658059][ T9583] Call Trace: [ 591.658065][ T9583] [ 591.658072][ T9583] dump_stack_lvl+0x100/0x190 [ 591.658101][ T9583] should_fail_ex.cold+0x5/0xa [ 591.658127][ T9583] _copy_from_user+0x2e/0xd0 [ 591.658148][ T9583] copy_msghdr_from_user+0x9f/0x4c0 [ 591.658172][ T9583] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 591.658201][ T9583] ? lock_acquire+0x1d1/0x380 [ 591.658221][ T9583] ? get_pid_task+0x2a/0x250 [ 591.658249][ T9583] ___sys_sendmsg+0x106/0x1e0 [ 591.658272][ T9583] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.658299][ T9583] ? get_pid_task+0x106/0x250 [ 591.658334][ T9583] ? find_held_lock+0x2b/0x80 [ 591.658376][ T9583] __sys_sendmsg+0x160/0x210 [ 591.658403][ T9583] ? __pfx___sys_sendmsg+0x10/0x10 [ 591.658443][ T9583] do_syscall_64+0x123/0x790 [ 591.658471][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.658489][ T9583] RIP: 0033:0x7efe4359f559 [ 591.658504][ T9583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.658520][ T9583] RSP: 002b:00007efe44464028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.658539][ T9583] RAX: ffffffffffffffda RBX: 00007efe43825fa0 RCX: 00007efe4359f559 [ 591.658551][ T9583] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 591.658562][ T9583] RBP: 00007efe44464090 R08: 0000000000000000 R09: 0000000000000000 [ 591.658572][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.658583][ T9583] R13: 00007efe43826038 R14: 00007efe43825fa0 R15: 00007ffc2f644f48 [ 591.658608][ T9583] [ 592.218803][ T9584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.592020][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.654611][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.869'. [ 593.614199][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.625861][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.742405][ T5751] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 593.838020][ T9595] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=9595 comm=syz.4.864 [ 593.892353][ T5751] usb 3-1: Using ep0 maxpacket: 32 [ 593.892956][ T5751] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 593.894009][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.894036][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.894068][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.897407][ T5751] usb 3-1: config 0 descriptor?? [ 593.899366][ T5751] hub 3-1:0.0: USB hub found [ 594.051067][ T9602] FAULT_INJECTION: forcing a failure. [ 594.051067][ T9602] name failslab, interval 1, probability 0, space 0, times 0 [ 594.051102][ T9602] CPU: 1 UID: 0 PID: 9602 Comm: syz.4.874 Tainted: G Y syzkaller #0 PREEMPT(full) [ 594.051132][ T9602] Tainted: [Y]=FORCED_BIND [ 594.051140][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 594.051152][ T9602] Call Trace: [ 594.051159][ T9602] [ 594.051168][ T9602] dump_stack_lvl+0x100/0x190 [ 594.051203][ T9602] should_fail_ex.cold+0x5/0xa [ 594.051240][ T9602] should_failslab+0xc2/0x120 [ 594.051268][ T9602] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 594.051296][ T9602] ? kstrdup_const+0x63/0x80 [ 594.051331][ T9602] kstrdup+0x51/0xe0 [ 594.051363][ T9602] kstrdup_const+0x63/0x80 [ 594.051392][ T9602] kvasprintf_const+0x10f/0x1a0 [ 594.051417][ T9602] kobject_set_name_vargs+0x5a/0x140 [ 594.051441][ T9602] dev_set_name+0xc7/0x100 [ 594.051467][ T9602] ? __pfx_dev_set_name+0x10/0x10 [ 594.051493][ T9602] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 594.051525][ T9602] ? lockdep_init_map_type+0x5c/0x250 [ 594.051551][ T9602] ? __init_waitqueue_head+0xca/0x150 [ 594.051582][ T9602] netdev_register_kobject+0xc5/0x410 [ 594.051614][ T9602] register_netdevice+0x1313/0x26b0 [ 594.051643][ T9602] ? __pfx_register_netdevice+0x10/0x10 [ 594.051671][ T9602] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 594.051702][ T9602] batadv_meshif_newlink+0x8f/0xc0 [ 594.051730][ T9602] rtnl_newlink+0x1697/0x2620 [ 594.051763][ T9602] ? __pfx_rtnl_newlink+0x10/0x10 [ 594.051783][ T9602] ? avc_has_perm_noaudit+0x56/0x470 [ 594.051807][ T9602] ? find_held_lock+0x2b/0x80 [ 594.051836][ T9602] ? avc_has_perm_noaudit+0x11e/0x470 [ 594.051857][ T9602] ? avc_has_perm_noaudit+0x11e/0x470 [ 594.051906][ T9602] ? lock_acquire+0x1d1/0x380 [ 594.051929][ T9602] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 594.051951][ T9602] ? find_held_lock+0x2b/0x80 [ 594.051978][ T9602] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 594.051999][ T9602] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 594.052023][ T9602] ? __pfx_rtnl_newlink+0x10/0x10 [ 594.052046][ T9602] rtnetlink_rcv_msg+0x95e/0xe90 [ 594.052070][ T9602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 594.052106][ T9602] netlink_rcv_skb+0x159/0x420 [ 594.052126][ T9602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 594.052150][ T9602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 594.052169][ T9602] ? __asan_memcpy+0x3c/0x60 [ 594.052198][ T9602] ? netlink_deliver_tap+0x1ae/0xb50 [ 594.052241][ T9602] netlink_unicast+0x668/0x950 [ 594.052264][ T9602] ? __pfx_netlink_unicast+0x10/0x10 [ 594.052293][ T9602] netlink_sendmsg+0x9ac/0x10c0 [ 594.052320][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.052348][ T9602] ? selinux_socket_sendmsg+0x198/0x2f0 [ 594.052378][ T9602] ? ____sys_sendmsg+0xa99/0xc30 [ 594.052399][ T9602] ____sys_sendmsg+0xa99/0xc30 [ 594.052420][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.052442][ T9602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.052472][ T9602] ? plist_check_list+0x1b8/0x280 [ 594.052496][ T9602] ? plist_del+0x308/0x510 [ 594.052522][ T9602] ___sys_sendmsg+0x190/0x1e0 [ 594.052547][ T9602] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.052571][ T9602] ? futex_wake+0x220/0x5e0 [ 594.052606][ T9602] ? find_held_lock+0x2b/0x80 [ 594.052652][ T9602] __sys_sendmsg+0x160/0x210 [ 594.052682][ T9602] ? __pfx___sys_sendmsg+0x10/0x10 [ 594.052737][ T9602] do_syscall_64+0x123/0x790 [ 594.052767][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.052787][ T9602] RIP: 0033:0x7f6b4af9f559 [ 594.052805][ T9602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.052822][ T9602] RSP: 002b:00007f6b4be69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.052841][ T9602] RAX: ffffffffffffffda RBX: 00007f6b4b225fa0 RCX: 00007f6b4af9f559 [ 594.052854][ T9602] RDX: 0000000020000840 RSI: 0000200000000480 RDI: 0000000000000007 [ 594.052867][ T9602] RBP: 00007f6b4b036b20 R08: 0000000000000000 R09: 0000000000000000 [ 594.052879][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.052890][ T9602] R13: 00007f6b4b226038 R14: 00007f6b4b225fa0 R15: 00007ffd7435aa48 [ 594.052916][ T9602] [ 594.153558][ T5751] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 594.998996][ T5751] usbhid 3-1:0.0: can't add hid device: -71 [ 594.999080][ T5751] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 595.032943][ T5751] usb 3-1: USB disconnect, device number 26 [ 595.123789][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.244103][ T9590] overlayfs: failed to resolve './file2': -2 [ 596.182647][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.313442][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.333915][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.510565][ T30] audit: type=1400 audit(1792904881.438:1846): avc: denied { create } for pid=9616 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 597.612573][ T5741] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 597.694689][ T30] audit: type=1400 audit(1792904881.628:1847): avc: denied { write } for pid=9616 comm="syz.4.877" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 597.702499][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.759045][ T9619] loop7: detected capacity change from 0 to 7 [ 597.777742][ T5741] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 597.778733][ T5741] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 597.778771][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.965993][ T9619] Dev loop7: unable to read RDB block 7 [ 597.966053][ T9619] loop7: unable to read partition table [ 597.966253][ T9619] loop7: partition table beyond EOD, truncated [ 597.966288][ T9619] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 598.500774][ T9624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 599.082650][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.119159][ T9620] Invalid logical block size (1475) [ 599.146769][ T5741] lg-g15 0003:046D:C222.0003: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 599.325651][ T30] audit: type=1400 audit(1792904883.258:1848): avc: denied { watch watch_reads } for pid=9614 comm="syz.0.879" path="/190/file1" dev="tmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 599.357053][ T30] audit: type=1400 audit(1792904883.288:1849): avc: denied { read write } for pid=9614 comm="syz.0.879" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 599.386270][ T30] audit: type=1400 audit(1792904883.318:1850): avc: denied { open } for pid=9614 comm="syz.0.879" path="/190/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 599.416087][ T30] audit: type=1400 audit(1792904883.348:1851): avc: denied { ioctl } for pid=9614 comm="syz.0.879" path="/190/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x400c4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 599.416307][ T9615] size and base must be multiples of 4 kiB [ 599.416325][ T9615] CPU: 1 UID: 0 PID: 9615 Comm: syz.0.879 Tainted: G Y syzkaller #0 PREEMPT(full) [ 599.416354][ T9615] Tainted: [Y]=FORCED_BIND [ 599.416362][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 599.416374][ T9615] Call Trace: [ 599.416381][ T9615] [ 599.416391][ T9615] dump_stack_lvl+0x100/0x190 [ 599.416424][ T9615] mtrr_add.cold+0x74/0x87 [ 599.416447][ T9615] mtrr_ioctl+0x25a/0xcf0 [ 599.416471][ T9615] ? __pfx_mtrr_ioctl+0x10/0x10 [ 599.416489][ T9615] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 599.416525][ T9615] ? __fget_files+0x34/0x3d0 [ 599.416565][ T9615] ? __pfx_mtrr_ioctl+0x10/0x10 [ 599.416586][ T9615] proc_reg_unlocked_ioctl+0x229/0x320 [ 599.416610][ T9615] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 599.416636][ T9615] __x64_sys_ioctl+0x18e/0x210 [ 599.416661][ T9615] do_syscall_64+0x123/0x790 [ 599.416691][ T9615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.416711][ T9615] RIP: 0033:0x7f2aa419f559 [ 599.416728][ T9615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.416746][ T9615] RSP: 002b:00007f2aa4f85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.416767][ T9615] RAX: ffffffffffffffda RBX: 00007f2aa4425fa0 RCX: 00007f2aa419f559 [ 599.416786][ T9615] RDX: 0000200000000100 RSI: 00000000400c4d01 RDI: 0000000000000004 [ 599.416798][ T9615] RBP: 00007f2aa4236b20 R08: 0000000000000000 R09: 0000000000000000 [ 599.416811][ T9615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.416823][ T9615] R13: 00007f2aa4426038 R14: 00007f2aa4425fa0 R15: 00007ffd109fdfa8 [ 599.416851][ T9615] [ 599.614157][ T5741] lg-g15 0003:046D:C222.0003: Error getting LED brightness: -71 [ 599.694512][ T5741] lg-g15 0003:046D:C222.0003: probe with driver lg-g15 failed with error -71 [ 599.700302][ T5741] usb 1-1: USB disconnect, device number 32 [ 600.119897][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.009784][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.018482][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.194065][ T9641] netlink: 48 bytes leftover after parsing attributes in process `syz.0.883'. [ 602.311653][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.311693][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 602.331076][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.331117][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 602.331131][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.331155][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 602.331165][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.331188][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 602.331198][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.331229][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 602.331238][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.331263][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 602.773435][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.773471][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 602.773483][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.773508][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 602.773517][ C1] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.773541][ C1] Buffer I/O error on dev loop7, logical block 3, async page read [ 602.773550][ C1] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 602.773574][ C1] Buffer I/O error on dev loop7, logical block 4, async page read [ 602.778786][ T4989] ldm_validate_partition_table(): Disk read failed. [ 602.792904][ T4989] Dev loop7: unable to read RDB block 0 [ 602.797657][ T4989] loop7: unable to read partition table [ 602.797803][ T4989] loop7: partition table beyond EOD, truncated [ 603.613827][ T30] audit: type=1400 audit(1792904887.008:1852): avc: denied { getopt } for pid=9645 comm="syz.4.885" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 603.613873][ T30] audit: type=1400 audit(1792904887.008:1853): avc: denied { create } for pid=9645 comm="syz.4.885" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 603.614117][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.677995][ T30] audit: type=1400 audit(1792904887.608:1854): avc: denied { unlink } for pid=5625 comm="syz-executor" name="file0" dev="tmpfs" ino=1042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 603.708242][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.796088][ T9650] netlink: 'syz.0.886': attribute type 49 has an invalid length. [ 604.007427][ T9655] netlink: 56 bytes leftover after parsing attributes in process `syz.3.888'. [ 604.031319][ T9638] overlayfs: failed to resolve './file2': -2 [ 604.054417][ T8301] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 604.204209][ T8301] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 604.206357][ T8301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.206393][ T8301] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 604.206415][ T8301] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 604.206446][ T8301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.359848][ T30] audit: type=1400 audit(1792904888.288:1855): avc: denied { read append } for pid=9658 comm="syz.1.889" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 604.360181][ T30] audit: type=1400 audit(1792904888.288:1856): avc: denied { open } for pid=9658 comm="syz.1.889" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 604.384331][ T30] audit: type=1400 audit(1792904888.288:1857): avc: denied { map } for pid=9658 comm="syz.1.889" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 604.384379][ T30] audit: type=1400 audit(1792904888.288:1858): avc: denied { write execute } for pid=9658 comm="syz.1.889" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 605.028434][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.052261][ T8301] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 605.052448][ T8301] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 605.052485][ T8301] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 605.062886][ T8301] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 605.069261][ T8301] usb 1-1: USB disconnect, device number 33 [ 605.075525][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.088014][ T30] audit: type=1400 audit(1792904889.538:1859): avc: denied { create } for pid=9669 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 606.088065][ T30] audit: type=1400 audit(1792904889.538:1860): avc: denied { setopt } for pid=9669 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 606.139472][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.193050][ T1515] IPVS: starting estimator thread 0... [ 606.202921][ T9676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.282387][ T9677] IPVS: using max 44 ests per chain, 105600 per kthread [ 607.144940][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.342438][ T5828] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 607.496034][ T5828] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 607.516077][ T5828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.516111][ T5828] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 607.516175][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.757038][ T5828] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 608.103674][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.192624][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.355261][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.511247][ T5741] usb 3-1: USB disconnect, device number 27 [ 609.544783][ T5741] idmouse 3-1:1.0: disconnected [ 609.610698][ T9692] 9pnet_fd: Insufficient options for proto=fd [ 610.813913][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.942852][ T5741] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 611.006985][ T9706] ipt_REJECT: TCP_RESET invalid for non-tcp [ 611.112512][ T5741] usb 3-1: Using ep0 maxpacket: 16 [ 611.114210][ T5741] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 611.117757][ T5741] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 611.117829][ T5741] usb 3-1: config 0 has no interface number 0 [ 611.117950][ T5741] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 611.117979][ T5741] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 611.142732][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.200461][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.200524][ T5741] usb 3-1: Product: syz [ 611.200567][ T5741] usb 3-1: Manufacturer: syz [ 611.200611][ T5741] usb 3-1: SerialNumber: syz [ 611.252621][ T5741] usb 3-1: config 0 descriptor?? [ 611.254975][ T9698] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 611.255395][ T9698] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 611.304571][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 611.304673][ T9710] netlink: 'syz.3.895': attribute type 11 has an invalid length. [ 611.304704][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 611.593821][ T9698] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 611.594120][ T9698] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 611.819918][ T5741] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 611.861103][ T30] audit: type=1400 audit(1792904895.778:1861): avc: denied { create } for pid=9711 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 611.861153][ T30] audit: type=1400 audit(1792904895.788:1862): avc: denied { setopt } for pid=9711 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 611.865017][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.923421][ T30] audit: type=1400 audit(1792904895.858:1863): avc: denied { write } for pid=9711 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 613.499151][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.504220][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.519657][ T8783] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 613.595640][ T5741] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 613.595661][ T5741] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 613.618972][ T5741] asix 3-1:0.34: probe with driver asix failed with error -71 [ 613.630231][ T5741] usb 3-1: USB disconnect, device number 28 [ 613.632428][ T5751] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 613.646046][ T8783] usb 2-1: device descriptor read/64, error -71 [ 613.707401][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.782971][ T5751] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 613.877565][ T5751] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.877614][ T5751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 613.877640][ T5751] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 613.877676][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.922370][ T8783] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 614.062476][ T8783] usb 2-1: device descriptor read/64, error -71 [ 614.173517][ T8783] usb usb2-port1: attempt power cycle [ 614.512554][ T8783] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 614.533478][ T8783] usb 2-1: device descriptor read/8, error -71 [ 614.631353][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.651831][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.700445][ T5751] cxacru 1-1:1.0: invalid response length to cm 0x90: 32 [ 614.776161][ T9735] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 614.802517][ T8783] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 614.823517][ T8783] usb 2-1: device descriptor read/8, error -71 [ 614.933372][ T8783] usb usb2-port1: unable to enumerate USB device [ 615.743742][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.795650][ T8845] usb 1-1: USB disconnect, device number 34 [ 616.851700][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.979490][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.993582][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.181646][ T30] audit: type=1400 audit(1792904902.108:1864): avc: denied { create } for pid=9757 comm="syz.0.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 619.014096][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.014141][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.014540][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.478513][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.064933][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.662947][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.220406][ T9779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.632485][ T30] audit: type=1400 audit(1792904906.128:1865): avc: denied { append } for pid=9777 comm="syz.0.924" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 622.632532][ T30] audit: type=1400 audit(1792904906.128:1866): avc: denied { ioctl } for pid=9777 comm="syz.0.924" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0xc0481273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 622.743132][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.540624][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.553655][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.553758][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.553951][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.606862][ T9790] FAULT_INJECTION: forcing a failure. [ 624.606862][ T9790] name failslab, interval 1, probability 0, space 0, times 0 [ 624.606892][ T9790] CPU: 0 UID: 0 PID: 9790 Comm: syz.3.927 Tainted: G Y syzkaller #0 PREEMPT(full) [ 624.606917][ T9790] Tainted: [Y]=FORCED_BIND [ 624.606924][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 624.606935][ T9790] Call Trace: [ 624.606942][ T9790] [ 624.606950][ T9790] dump_stack_lvl+0x100/0x190 [ 624.606981][ T9790] should_fail_ex.cold+0x5/0xa [ 624.607009][ T9790] should_failslab+0xc2/0x120 [ 624.607035][ T9790] __kmalloc_cache_noprof+0x91/0x6d0 [ 624.607064][ T9790] ? nfnetlink_rcv_batch+0x780/0x2880 [ 624.607093][ T9790] nfnetlink_rcv_batch+0x780/0x2880 [ 624.607132][ T9790] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 624.607160][ T9790] ? lock_acquire+0x1d1/0x380 [ 624.607183][ T9790] ? avc_has_perm_noaudit+0x56/0x470 [ 624.607215][ T9790] ? avc_has_perm_noaudit+0x145/0x470 [ 624.607262][ T9790] ? __nla_parse+0x40/0x60 [ 624.607285][ T9790] nfnetlink_rcv+0x3bd/0x440 [ 624.607309][ T9790] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 624.607347][ T9790] netlink_unicast+0x668/0x950 [ 624.607371][ T9790] ? __pfx_netlink_unicast+0x10/0x10 [ 624.607397][ T9790] netlink_sendmsg+0x9ac/0x10c0 [ 624.607420][ T9790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.607445][ T9790] ? selinux_socket_sendmsg+0x198/0x2f0 [ 624.607480][ T9790] ? ____sys_sendmsg+0xa99/0xc30 [ 624.607501][ T9790] ____sys_sendmsg+0xa99/0xc30 [ 624.607521][ T9790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.607543][ T9790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.607571][ T9790] ? lock_acquire+0x1d1/0x380 [ 624.607591][ T9790] ? get_pid_task+0x2a/0x250 [ 624.607620][ T9790] ___sys_sendmsg+0x190/0x1e0 [ 624.607644][ T9790] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.607668][ T9790] ? get_pid_task+0x106/0x250 [ 624.607704][ T9790] ? find_held_lock+0x2b/0x80 [ 624.607750][ T9790] __sys_sendmsg+0x160/0x210 [ 624.607782][ T9790] ? __pfx___sys_sendmsg+0x10/0x10 [ 624.607825][ T9790] do_syscall_64+0x123/0x790 [ 624.607852][ T9790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.607871][ T9790] RIP: 0033:0x7fc8b299f559 [ 624.607887][ T9790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.607905][ T9790] RSP: 002b:00007fc8b381e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.607924][ T9790] RAX: ffffffffffffffda RBX: 00007fc8b2c25fa0 RCX: 00007fc8b299f559 [ 624.607937][ T9790] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 624.607949][ T9790] RBP: 00007fc8b381e090 R08: 0000000000000000 R09: 0000000000000000 [ 624.607961][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.607972][ T9790] R13: 00007fc8b2c26038 R14: 00007fc8b2c25fa0 R15: 00007ffe0f29a788 [ 624.607999][ T9790] [ 624.943318][ T9798] tipc: Invalid UDP bearer configuration [ 624.943375][ T9798] tipc: Enabling of bearer rejected, failed to enable media [ 624.987832][ T9797] netlink: 'syz.4.923': attribute type 49 has an invalid length. [ 625.008734][ T30] audit: type=1400 audit(1792904908.938:1867): avc: denied { listen } for pid=9794 comm="syz.3.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 625.046495][ T9798] overlayfs: failed to clone upperpath [ 625.285899][ T8845] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 625.477619][ T8845] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 625.485823][ T8845] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.485864][ T8845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 625.485887][ T8845] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 625.485919][ T8845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.549798][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.816852][ T5828] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 625.973886][ T5828] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 625.976438][ T5828] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.976498][ T5828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 625.976535][ T5828] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 625.976643][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.160796][ T8845] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 626.160848][ T8845] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 626.160862][ T8845] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 626.187728][ T30] audit: type=1400 audit(1792904910.098:1868): avc: denied { getattr } for pid=9810 comm="syz.3.932" name="/" dev="failfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 626.189372][ T8845] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 626.233198][ T8845] usb 5-1: USB disconnect, device number 29 [ 626.516761][ T5850] IPVS: starting estimator thread 0... [ 626.583204][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.602498][ T9816] IPVS: using max 42 ests per chain, 100800 per kthread [ 626.877940][ T5828] cxacru 3-1:1.0: invalid response length to cm 0x90: 32 [ 626.905652][ T9818] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 627.074458][ T8845] usb 3-1: USB disconnect, device number 29 [ 627.723640][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.723785][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.056949][ T30] audit: type=1400 audit(1792904911.988:1869): avc: denied { write } for pid=9828 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 628.174426][ T9834] FAULT_INJECTION: forcing a failure. [ 628.174426][ T9834] name failslab, interval 1, probability 0, space 0, times 0 [ 628.174720][ T9834] CPU: 0 UID: 0 PID: 9834 Comm: syz.0.936 Tainted: G Y syzkaller #0 PREEMPT(full) [ 628.174746][ T9834] Tainted: [Y]=FORCED_BIND [ 628.174753][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 628.174764][ T9834] Call Trace: [ 628.174771][ T9834] [ 628.174779][ T9834] dump_stack_lvl+0x100/0x190 [ 628.174819][ T9834] should_fail_ex.cold+0x5/0xa [ 628.174848][ T9834] should_failslab+0xc2/0x120 [ 628.174873][ T9834] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 628.174898][ T9834] ? __alloc_skb+0x140/0x710 [ 628.174930][ T9834] __alloc_skb+0x140/0x710 [ 628.174959][ T9834] ? __alloc_skb+0x5b7/0x710 [ 628.174986][ T9834] ? __pfx___alloc_skb+0x10/0x10 [ 628.175013][ T9834] ? genl_rcv_msg+0x4be/0x800 [ 628.175043][ T9834] netlink_ack+0x117/0xba0 [ 628.175071][ T9834] netlink_rcv_skb+0x333/0x420 [ 628.175090][ T9834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.175114][ T9834] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.175132][ T9834] ? rcu_is_watching+0x13/0xc0 [ 628.175170][ T9834] ? __rcu_read_unlock+0x26a/0x5a0 [ 628.175194][ T9834] ? rcu_is_watching+0x13/0xc0 [ 628.175228][ T9834] genl_rcv+0x28/0x40 [ 628.175247][ T9834] netlink_unicast+0x668/0x950 [ 628.175271][ T9834] ? __pfx_netlink_unicast+0x10/0x10 [ 628.175299][ T9834] netlink_sendmsg+0x9ac/0x10c0 [ 628.175323][ T9834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.175350][ T9834] ? selinux_socket_sendmsg+0x198/0x2f0 [ 628.175379][ T9834] ? ____sys_sendmsg+0xa99/0xc30 [ 628.175401][ T9834] ____sys_sendmsg+0xa99/0xc30 [ 628.175422][ T9834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.175444][ T9834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.175473][ T9834] ? ____sys_sendmsg+0xb/0xc30 [ 628.175500][ T9834] ___sys_sendmsg+0x190/0x1e0 [ 628.175525][ T9834] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.175549][ T9834] ? get_pid_task+0x106/0x250 [ 628.175586][ T9834] ? find_held_lock+0x2b/0x80 [ 628.175632][ T9834] __sys_sendmsg+0x160/0x210 [ 628.175662][ T9834] ? __pfx___sys_sendmsg+0x10/0x10 [ 628.175706][ T9834] do_syscall_64+0x123/0x790 [ 628.175734][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.175754][ T9834] RIP: 0033:0x7f2aa419f559 [ 628.175770][ T9834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.175788][ T9834] RSP: 002b:00007f2aa4f85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.175812][ T9834] RAX: ffffffffffffffda RBX: 00007f2aa4425fa0 RCX: 00007f2aa419f559 [ 628.175825][ T9834] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 628.175837][ T9834] RBP: 00007f2aa4f85090 R08: 0000000000000000 R09: 0000000000000000 [ 628.175848][ T9834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.175859][ T9834] R13: 00007f2aa4426038 R14: 00007f2aa4425fa0 R15: 00007ffd109fdfa8 [ 628.175885][ T9834] [ 628.742657][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.363895][ T9839] input: syz1 as /devices/virtual/input/input10 [ 629.795539][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.769998][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.854190][ T9848] TC_ACT_REPEAT abuse ? [ 630.862504][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.690199][ T9857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 632.154356][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.224143][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.327780][ T9864] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=9864 comm=syz.3.948 [ 633.563441][ T8783] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 634.155661][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.167370][ T8783] usb 4-1: Using ep0 maxpacket: 8 [ 634.169106][ T8783] usb 4-1: unable to get BOS descriptor or descriptor too short [ 634.169136][ T8783] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 634.212558][ T8783] usb 4-1: config 3 has an invalid interface number: 171 but max is 0 [ 634.212581][ T8783] usb 4-1: config 3 has no interface number 0 [ 634.214578][ T8783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.214598][ T8783] usb 4-1: Product: syz [ 634.214610][ T8783] usb 4-1: Manufacturer: syz [ 634.214622][ T8783] usb 4-1: SerialNumber: syz [ 634.249183][ T30] audit: type=1400 audit(1792904918.168:1870): avc: denied { create } for pid=9865 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 634.258121][ T30] audit: type=1400 audit(1792904918.188:1871): avc: denied { connect } for pid=9865 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 634.310985][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.311011][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.135923][ T9876] fuse: Bad value for 'fd' [ 635.182194][ T8783] (null): radio-mr800 - initialization failed [ 635.182470][ T8783] radio-mr800 4-1:3.171: probe with driver radio-mr800 failed with error -22 [ 635.182716][ T8783] usbhid 4-1:3.171: couldn't find an input interrupt endpoint [ 635.189492][ T8783] usb 4-1: USB disconnect, device number 25 [ 635.284664][ T9881] veth0_vlan: left promiscuous mode [ 635.286466][ T9880] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 635.383482][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.461422][ T30] audit: type=1400 audit(1792904919.388:1872): avc: denied { write } for pid=9883 comm="syz.2.952" path="socket:[21892]" dev="sockfs" ino=21892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 635.498367][ T30] audit: type=1400 audit(1792904919.428:1873): avc: denied { read } for pid=9883 comm="syz.2.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 635.620545][ T30] audit: type=1400 audit(1792904919.548:1874): avc: denied { write } for pid=9887 comm="syz.0.953" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 635.698645][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 635.698842][ T9889] netlink: 'syz.1.947': attribute type 11 has an invalid length. [ 635.698866][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 637.798632][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.822900][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.922254][ T260] rpcbind: server 127.0.0.1 not responding, timed out [ 637.960185][ T9888] br_netfilter no longer supported in user namespaces [ 638.289111][ T9888] rxe_eth0 speed is unknown, defaulting to 1000 [ 639.972067][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.000704][ T30] audit: type=1400 audit(1792904923.928:1875): avc: denied { mount } for pid=9902 comm="syz.1.957" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 640.866746][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.882276][ T9903] FAULT_INJECTION: forcing a failure. [ 640.882276][ T9903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.882359][ T9903] CPU: 1 UID: 0 PID: 9903 Comm: syz.1.957 Tainted: G Y syzkaller #0 PREEMPT(full) [ 640.882384][ T9903] Tainted: [Y]=FORCED_BIND [ 640.882389][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 640.882395][ T9903] Call Trace: [ 640.882401][ T9903] [ 640.882405][ T9903] dump_stack_lvl+0x100/0x190 [ 640.882425][ T9903] should_fail_ex.cold+0x5/0xa [ 640.882441][ T9903] copy_fpstate_to_sigframe+0x871/0xb60 [ 640.882462][ T9903] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 640.882482][ T9903] ? posixtimer_deliver_signal+0x1a0/0x6e0 [ 640.882495][ T9903] ? x86_task_fpu+0x5f/0x90 [ 640.882511][ T9903] get_sigframe+0x3fb/0x940 [ 640.882529][ T9903] ? __pfx_get_sigframe+0x10/0x10 [ 640.882544][ T9903] ? rcu_is_watching+0x13/0xc0 [ 640.882562][ T9903] ? siginfo_layout+0x156/0x290 [ 640.882582][ T9903] x64_setup_rt_frame+0x12f/0xce0 [ 640.882601][ T9903] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 640.882618][ T9903] ? __fget_files+0x34/0x3d0 [ 640.882633][ T9903] ? __pfx_vfs_read+0x10/0x10 [ 640.882645][ T9903] ? find_held_lock+0x2b/0x80 [ 640.882665][ T9903] arch_do_signal_or_restart+0x5ee/0x7e0 [ 640.882683][ T9903] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 640.882702][ T9903] ? fput+0x7c/0x100 [ 640.882720][ T9903] exit_to_user_mode_loop+0x139/0x700 [ 640.882736][ T9903] ? rcu_is_watching+0x13/0xc0 [ 640.882754][ T9903] do_syscall_64+0x661/0x790 [ 640.882771][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.882784][ T9903] RIP: 0033:0x7efe4359f557 [ 640.882794][ T9903] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 640.882804][ T9903] RSP: 002b:00007efe44464028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 640.882816][ T9903] RAX: 0000000000000000 RBX: 00007efe43825fa0 RCX: 00007efe4359f559 [ 640.882823][ T9903] RDX: 0000000000002020 RSI: 0000200000019640 RDI: 0000000000000003 [ 640.882830][ T9903] RBP: 00007efe44464090 R08: 0000000000000000 R09: 0000000000000000 [ 640.882836][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.882843][ T9903] R13: 00007efe43826038 R14: 00007efe43825fa0 R15: 00007ffc2f644f48 [ 640.882856][ T9903] [ 640.987599][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.465117][ T30] audit: type=1400 audit(1792904925.398:1876): avc: denied { unmount } for pid=5627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 641.590109][ T30] audit: type=1326 audit(1792904925.518:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.1.960" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4359f559 code=0x7ffc0000 [ 641.590159][ T30] audit: type=1326 audit(1792904925.518:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.1.960" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4359f559 code=0x7ffc0000 [ 641.672575][ T30] audit: type=1326 audit(1792904925.598:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.1.960" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efe4359f559 code=0x7ffc0000 [ 641.673940][ T30] audit: type=1326 audit(1792904925.608:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.1.960" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4359f559 code=0x7ffc0000 [ 641.673977][ T30] audit: type=1326 audit(1792904925.608:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.1.960" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4359f559 code=0x7ffc0000 [ 641.711597][ T30] audit: type=1326 audit(1792904925.638:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.1.960" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe4359f559 code=0x7ffc0000 [ 641.711640][ T30] audit: type=1326 audit(1792904925.638:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.1.960" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4359f559 code=0x7ffc0000 [ 641.711674][ T30] audit: type=1326 audit(1792904925.638:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.1.960" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4359f559 code=0x7ffc0000 [ 641.950234][ T9915] FAULT_INJECTION: forcing a failure. [ 641.950234][ T9915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.950266][ T9915] CPU: 0 UID: 0 PID: 9915 Comm: syz.0.961 Tainted: G Y syzkaller #0 PREEMPT(full) [ 641.950291][ T9915] Tainted: [Y]=FORCED_BIND [ 641.950298][ T9915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 641.950309][ T9915] Call Trace: [ 641.950316][ T9915] [ 641.950324][ T9915] dump_stack_lvl+0x100/0x190 [ 641.950353][ T9915] should_fail_ex.cold+0x5/0xa [ 641.950380][ T9915] _copy_from_iter+0x1f4/0x1690 [ 641.950403][ T9915] ? __asan_memset+0x23/0x50 [ 641.950425][ T9915] ? __pfx__copy_from_iter+0x10/0x10 [ 641.950445][ T9915] ? __pfx___alloc_skb+0x10/0x10 [ 641.950483][ T9915] netlink_sendmsg+0x8f5/0x10c0 [ 641.950508][ T9915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.950533][ T9915] ? selinux_socket_sendmsg+0x198/0x2f0 [ 641.950561][ T9915] ? ____sys_sendmsg+0xa99/0xc30 [ 641.950581][ T9915] ____sys_sendmsg+0xa99/0xc30 [ 641.950601][ T9915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.950621][ T9915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.950657][ T9915] ? lock_acquire+0x1d1/0x380 [ 641.950679][ T9915] ? get_pid_task+0x2a/0x250 [ 641.950707][ T9915] ___sys_sendmsg+0x190/0x1e0 [ 641.950732][ T9915] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.950755][ T9915] ? get_pid_task+0x106/0x250 [ 641.950790][ T9915] ? find_held_lock+0x2b/0x80 [ 641.950834][ T9915] __sys_sendmsg+0x160/0x210 [ 641.950862][ T9915] ? __pfx___sys_sendmsg+0x10/0x10 [ 641.950904][ T9915] do_syscall_64+0x123/0x790 [ 641.950933][ T9915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.950953][ T9915] RIP: 0033:0x7f2aa419f559 [ 641.950969][ T9915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.950987][ T9915] RSP: 002b:00007f2aa4f85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.951009][ T9915] RAX: ffffffffffffffda RBX: 00007f2aa4425fa0 RCX: 00007f2aa419f559 [ 641.951021][ T9915] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 641.951032][ T9915] RBP: 00007f2aa4f85090 R08: 0000000000000000 R09: 0000000000000000 [ 641.951043][ T9915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.951055][ T9915] R13: 00007f2aa4426038 R14: 00007f2aa4425fa0 R15: 00007ffd109fdfa8 [ 641.951080][ T9915] [ 642.023190][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.082399][ T5741] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 642.234744][ T9918] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 642.562613][ T5741] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 642.720392][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.720420][ T5741] usb 2-1: Product: syz [ 642.720434][ T5741] usb 2-1: Manufacturer: syz [ 642.720449][ T5741] usb 2-1: SerialNumber: syz [ 643.035353][ T5741] usb 2-1: config 0 descriptor?? [ 643.063931][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.796172][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.796375][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.796665][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.952184][ T5741] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 644.952213][ T5741] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 644.955342][ T5741] usb 2-1: USB disconnect, device number 44 [ 645.863403][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.624185][ T9950] netlink: 'syz.2.969': attribute type 49 has an invalid length. [ 646.872475][ T5741] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 646.905365][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.028106][ T5741] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 647.030915][ T5741] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.030952][ T5741] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 647.030973][ T5741] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 647.031004][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.102258][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 647.102274][ T30] audit: type=1400 audit(1792904931.028:1923): avc: denied { append } for pid=9957 comm="syz.0.973" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 647.185654][ T9962] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 648.616895][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.620069][ T1670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.922260][ T5741] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 648.922357][ T5741] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 648.922370][ T5741] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 648.955131][ T5741] cxacru 3-1:1.0: probe with driver cxacru failed with error -71 [ 648.983298][ T5741] usb 3-1: USB disconnect, device number 30 [ 649.628362][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.032489][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.104588][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.112230][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.898539][ T9990] ip_tables: iptables: counters copy to user failed while replacing table [ 652.933369][ T30] audit: type=1400 audit(1792904936.858:1924): avc: denied { setopt } for pid=9988 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 652.940182][ T9994] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 652.943441][ T30] audit: type=1400 audit(1792904936.878:1925): avc: denied { ioctl } for pid=9988 comm="syz.2.981" path="socket:[22035]" dev="sockfs" ino=22035 ioctlcmd=0x40309439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 652.943882][ T30] audit: type=1400 audit(1792904936.878:1926): avc: denied { getopt } for pid=9988 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 653.037624][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'. [ 653.167988][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.560431][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'. [ 653.618777][ T8783] bridge0: entered promiscuous mode [ 653.711458][ T30] audit: type=1400 audit(1792904937.638:1927): avc: denied { ioctl } for pid=10004 comm="syz.1.984" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0xc0106407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 653.740327][T10015] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 653.809437][T10006] could not allocate digest TFM handle sha3-256-ce [ 654.032627][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.233658][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.722375][ T8783] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 655.169343][ T1670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.290429][ T8783] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 655.302757][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.398603][ T8783] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 655.398631][ T8783] usb 3-1: config 0 has no interface number 0 [ 655.398665][ T8783] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 655.398690][ T8783] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 655.398734][ T8783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.719631][ T8783] usb 3-1: config 0 descriptor?? [ 655.720881][T10013] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 655.955400][ T8783] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 655.959427][T10007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.959782][T10007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.968565][T10007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.968856][T10007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.969678][ T5741] usb 3-1: USB disconnect, device number 31 [ 656.342617][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.011123][ T5741] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 657.152685][ T5741] usb 2-1: Using ep0 maxpacket: 8 [ 657.204559][ T5741] usb 2-1: unable to get BOS descriptor or descriptor too short [ 657.204587][ T5741] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 657.206806][ T5741] usb 2-1: config 3 has an invalid interface number: 171 but max is 0 [ 657.206821][ T5741] usb 2-1: config 3 has no interface number 0 [ 657.210106][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.210126][ T5741] usb 2-1: Product: syz [ 657.210139][ T5741] usb 2-1: Manufacturer: syz [ 657.210152][ T5741] usb 2-1: SerialNumber: syz [ 657.382716][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.182973][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.422747][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.547062][ T5741] (null): radio-mr800 - initialization failed [ 658.547144][ T5741] radio-mr800 2-1:3.171: probe with driver radio-mr800 failed with error -22 [ 658.547271][ T5741] usbhid 2-1:3.171: couldn't find an input interrupt endpoint [ 658.553131][ T5741] usb 2-1: USB disconnect, device number 45 [ 658.721666][T10044] netlink: 56 bytes leftover after parsing attributes in process `syz.2.993'. [ 659.072075][ T30] audit: type=1400 audit(1792904942.998:1928): avc: denied { create } for pid=10050 comm="syz.1.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 659.142060][ T30] audit: type=1400 audit(1792904943.068:1929): avc: denied { map } for pid=10050 comm="syz.1.996" path="socket:[22264]" dev="sockfs" ino=22264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 659.462756][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.806899][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 659.807000][T10062] netlink: 'syz.2.997': attribute type 11 has an invalid length. [ 659.807077][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 660.504430][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.943763][T10065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 661.855121][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.855194][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.881662][ T362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.897969][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.899765][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.855129][T10079] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 662.902831][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.358534][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.358563][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.607624][T10090] cgroup: fork rejected by pids controller in /syz3 [ 665.856275][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.890683][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.903644][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.889003][ T5741] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 668.440522][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.835767][T10142] FAULT_INJECTION: forcing a failure. [ 668.835767][T10142] name failslab, interval 1, probability 0, space 0, times 0 [ 668.835794][T10142] CPU: 1 UID: 0 PID: 10142 Comm: syz.0.1009 Tainted: G Y syzkaller #0 PREEMPT(full) [ 668.835811][T10142] Tainted: [Y]=FORCED_BIND [ 668.835815][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 668.835822][T10142] Call Trace: [ 668.835827][T10142] [ 668.835831][T10142] dump_stack_lvl+0x100/0x190 [ 668.835851][T10142] should_fail_ex.cold+0x5/0xa [ 668.835867][T10142] should_failslab+0xc2/0x120 [ 668.835883][T10142] __kmalloc_cache_noprof+0x91/0x6d0 [ 668.835900][T10142] ? nf_tables_newtable+0xd0a/0x1a90 [ 668.835919][T10142] nf_tables_newtable+0xd0a/0x1a90 [ 668.835937][T10142] ? __pfx_nf_tables_newtable+0x10/0x10 [ 668.835951][T10142] ? net_generic+0x25/0x2a0 [ 668.835968][T10142] ? __nla_parse+0x40/0x60 [ 668.835981][T10142] nfnetlink_rcv_batch+0x1410/0x2880 [ 668.836003][T10142] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 668.836021][T10142] ? lock_acquire+0x1d1/0x380 [ 668.836033][T10142] ? avc_has_perm_noaudit+0x56/0x470 [ 668.836051][T10142] ? avc_has_perm_noaudit+0x145/0x470 [ 668.836076][T10142] ? __nla_parse+0x40/0x60 [ 668.836089][T10142] nfnetlink_rcv+0x3bd/0x440 [ 668.836103][T10142] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 668.836121][T10142] netlink_unicast+0x668/0x950 [ 668.836135][T10142] ? __pfx_netlink_unicast+0x10/0x10 [ 668.836150][T10142] netlink_sendmsg+0x9ac/0x10c0 [ 668.836163][T10142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.836178][T10142] ? selinux_socket_sendmsg+0x198/0x2f0 [ 668.836193][T10142] ? ____sys_sendmsg+0xa99/0xc30 [ 668.836206][T10142] ____sys_sendmsg+0xa99/0xc30 [ 668.836218][T10142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.836231][T10142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.836247][T10142] ? lock_acquire+0x1d1/0x380 [ 668.836259][T10142] ? get_pid_task+0x2a/0x250 [ 668.836277][T10142] ___sys_sendmsg+0x190/0x1e0 [ 668.836293][T10142] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.836307][T10142] ? get_pid_task+0x106/0x250 [ 668.836327][T10142] ? find_held_lock+0x2b/0x80 [ 668.836352][T10142] __sys_sendmsg+0x160/0x210 [ 668.836370][T10142] ? __pfx___sys_sendmsg+0x10/0x10 [ 668.836394][T10142] do_syscall_64+0x123/0x790 [ 668.836411][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.836423][T10142] RIP: 0033:0x7f2aa419f559 [ 668.836432][T10142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.836447][T10142] RSP: 002b:00007f2aa4f85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.836465][T10142] RAX: ffffffffffffffda RBX: 00007f2aa4425fa0 RCX: 00007f2aa419f559 [ 668.836477][T10142] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 668.836487][T10142] RBP: 00007f2aa4f85090 R08: 0000000000000000 R09: 0000000000000000 [ 668.836498][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.836509][T10142] R13: 00007f2aa4426038 R14: 00007f2aa4425fa0 R15: 00007ffd109fdfa8 [ 668.836534][T10142] [ 669.168132][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.481990][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.898439][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 669.898561][T10155] netlink: 'syz.3.1011': attribute type 11 has an invalid length. [ 669.898575][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 670.012654][ T8845] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 670.162428][ T8845] usb 3-1: Using ep0 maxpacket: 32 [ 670.164603][ T8845] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 670.167151][ T8845] usb 3-1: config 123 interface 0 has no altsetting 0 [ 670.221672][ T8845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.221735][ T8845] usb 3-1: Product: syz [ 670.221774][ T8845] usb 3-1: Manufacturer: syz [ 670.221787][ T8845] usb 3-1: SerialNumber: syz [ 670.502538][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.559944][ T8845] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 671.564318][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.585332][ T8845] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 671.585609][ T8845] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 671.585633][ T8845] usb 3-1: media controller created [ 672.582757][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.587645][ T30] audit: type=1400 audit(1792904956.058:1930): avc: denied { create } for pid=10157 comm="syz.0.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 672.587690][ T30] audit: type=1400 audit(1792904956.178:1931): avc: denied { write } for pid=10157 comm="syz.0.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 672.694553][ T8845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 672.698041][ T1670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.925902][ T8845] set interface failed [ 672.925923][ T8845] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 672.925941][ T8845] error writing reg: 0xff, val: 0x00 [ 673.863891][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.925656][ T8845] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 673.945922][ T8845] usb 3-1: USB disconnect, device number 32 [ 673.948557][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.742442][ T5741] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 674.892781][ T5741] usb 1-1: Using ep0 maxpacket: 16 [ 674.895262][ T5741] usb 1-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 674.896118][ T5741] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 174, changing to 11 [ 674.896143][ T5741] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 674.924925][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.928879][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.928901][ T5741] usb 1-1: Product: syz [ 674.928914][ T5741] usb 1-1: Manufacturer: syz [ 674.928925][ T5741] usb 1-1: SerialNumber: syz [ 674.935254][T10176] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 675.451153][ T30] audit: type=1400 audit(1792904959.378:1932): avc: denied { bind } for pid=10172 comm="syz.0.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 675.473316][ T30] audit: type=1400 audit(1792904959.408:1933): avc: denied { node_bind } for pid=10172 comm="syz.0.1016" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 675.539844][ T30] audit: type=1400 audit(1792904959.468:1934): avc: denied { connect } for pid=10172 comm="syz.0.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 675.629532][ T5741] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 675.755406][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.879809][ T5741] usb 1-1: USB disconnect, device number 36 [ 675.946544][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.987798][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 676.053526][T10185] Cannot find add_set index 0 as target [ 676.319908][T10186] udevd[10186]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 676.829101][T10200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1018'. [ 677.310769][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.726234][ T5741] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 677.962362][ T5741] usb 3-1: Using ep0 maxpacket: 8 [ 678.016368][ T5741] usb 3-1: unable to get BOS descriptor or descriptor too short [ 678.016412][ T5741] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 678.019070][ T5741] usb 3-1: config 3 has an invalid interface number: 171 but max is 0 [ 678.019087][ T5741] usb 3-1: config 3 has no interface number 0 [ 678.050093][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.050116][ T5741] usb 3-1: Product: syz [ 678.050129][ T5741] usb 3-1: Manufacturer: syz [ 678.050141][ T5741] usb 3-1: SerialNumber: syz [ 678.371120][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.602986][ T5741] (null): radio-mr800 - initialization failed [ 678.603143][ T5741] radio-mr800 3-1:3.171: probe with driver radio-mr800 failed with error -22 [ 678.603380][ T5741] usbhid 3-1:3.171: couldn't find an input interrupt endpoint [ 678.618026][ T5741] usb 3-1: USB disconnect, device number 33 [ 678.922377][ T992] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 679.176403][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.488435][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.014241][T10222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.404780][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.404829][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 682.010169][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.010419][ T992] usb 5-1: device descriptor read/64, error -71 [ 682.132695][ T5828] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 682.184496][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.283838][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 682.285908][ T5828] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 682.287036][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.287059][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.287086][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.296111][ T5828] usb 2-1: config 0 descriptor?? [ 682.304747][ T5828] hub 2-1:0.0: USB hub found [ 683.286242][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.296181][ T5828] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 683.303260][ T5828] usbhid 2-1:0.0: can't add hid device: -71 [ 683.303353][ T5828] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 683.323247][ T5828] usb 2-1: USB disconnect, device number 46 [ 683.335335][ T30] audit: type=1400 audit(1792904967.268:1935): avc: denied { bind } for pid=10230 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 683.463690][ T1670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.464305][ T7667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.464622][ T1670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.466146][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.079138][T10233] FAULT_INJECTION: forcing a failure. [ 684.079138][T10233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.079175][T10233] CPU: 1 UID: 0 PID: 10233 Comm: syz.2.1030 Tainted: G Y syzkaller #0 PREEMPT(full) [ 684.079205][T10233] Tainted: [Y]=FORCED_BIND [ 684.079213][T10233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 684.079225][T10233] Call Trace: [ 684.079233][T10233] [ 684.079242][T10233] dump_stack_lvl+0x100/0x190 [ 684.079275][T10233] should_fail_ex.cold+0x5/0xa [ 684.079304][T10233] copy_fpstate_to_sigframe+0x871/0xb60 [ 684.079339][T10233] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 684.079374][T10233] ? posixtimer_deliver_signal+0x1a0/0x6e0 [ 684.079396][T10233] ? x86_task_fpu+0x5f/0x90 [ 684.079424][T10233] get_sigframe+0x3fb/0x940 [ 684.079458][T10233] ? __pfx_get_sigframe+0x10/0x10 [ 684.079485][T10233] ? rcu_is_watching+0x13/0xc0 [ 684.079517][T10233] ? siginfo_layout+0x156/0x290 [ 684.079552][T10233] x64_setup_rt_frame+0x12f/0xce0 [ 684.079587][T10233] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 684.079622][T10233] arch_do_signal_or_restart+0x5ee/0x7e0 [ 684.079652][T10233] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 684.079691][T10233] exit_to_user_mode_loop+0x139/0x700 [ 684.079718][T10233] ? rcu_is_watching+0x13/0xc0 [ 684.079749][T10233] do_syscall_64+0x661/0x790 [ 684.079778][T10233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.079798][T10233] RIP: 0033:0x7f78e059f557 [ 684.079822][T10233] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 684.079842][T10233] RSP: 002b:00007f78e1414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.079863][T10233] RAX: 000000000000002e RBX: 00007f78e0826090 RCX: 00007f78e059f559 [ 684.079877][T10233] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000005 [ 684.079890][T10233] RBP: 00007f78e0636b20 R08: 0000000000000000 R09: 0000000000000000 [ 684.079902][T10233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.079913][T10233] R13: 00007f78e0826128 R14: 00007f78e0826090 R15: 00007ffcb9dfcf48 [ 684.079938][T10233] [ 684.342991][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.234930][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.383331][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.406707][T10246] netlink: 'syz.0.1029': attribute type 49 has an invalid length. [ 686.435619][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.492417][ T5741] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 686.563081][ T1418] Bluetooth: hci5: Frame reassembly failed (-84) [ 686.642937][ T5741] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 686.643792][ T5741] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.643834][ T5741] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 686.643860][ T5741] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 686.643897][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.345361][ T5741] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 687.345381][ T5741] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 687.345389][ T5741] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 687.346228][ T5741] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 688.813040][ T5634] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 688.847772][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.848188][ T5741] usb 1-1: USB disconnect, device number 37 [ 688.848813][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.962387][ C1] blk_print_req_error: 80 callbacks suppressed [ 688.962407][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 688.962487][ C1] buffer_io_error: 80 callbacks suppressed [ 688.962500][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 688.962572][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 688.962633][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 688.962650][ C1] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 688.962705][ C1] Buffer I/O error on dev loop7, logical block 3, async page read [ 688.962722][ C1] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 688.962776][ C1] Buffer I/O error on dev loop7, logical block 4, async page read [ 688.962793][ C1] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 688.962846][ C1] Buffer I/O error on dev loop7, logical block 5, async page read [ 688.962864][ C1] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 688.962919][ C1] Buffer I/O error on dev loop7, logical block 6, async page read [ 689.024844][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.024894][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 689.024907][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.024954][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 689.024971][ C1] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.025039][ C1] Buffer I/O error on dev loop7, logical block 3, async page read [ 689.025058][ C1] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.025091][ C1] Buffer I/O error on dev loop7, logical block 4, async page read [ 689.033450][ T4989] ldm_validate_partition_table(): Disk read failed. [ 689.041051][ T4989] Dev loop7: unable to read RDB block 0 [ 689.043495][ T4989] loop7: unable to read partition table [ 689.043640][ T4989] loop7: partition table beyond EOD, truncated [ 689.696523][ T5828] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 689.882249][ T5828] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 689.887187][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.915018][ T5828] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.915082][ T5828] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 689.915238][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.211596][ T5828] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 691.105412][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.600556][ T5828] usb 4-1: USB disconnect, device number 26 [ 691.624947][ T5828] idmouse 4-1:1.0: disconnected [ 691.864812][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.970285][ T30] audit: type=1400 audit(1792904975.898:1936): avc: denied { mount } for pid=10272 comm="syz.1.1034" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 691.999929][ T5637] Bluetooth: hci4: Unknown advertising packet type: 0x33 [ 691.999953][ T5637] Bluetooth: hci4: Unknown advertising packet type: 0x39 [ 691.999965][ T5637] Bluetooth: hci4: Unknown advertising packet type: 0x3f [ 691.999979][ T5637] Bluetooth: hci4: Malformed LE Event: 0x0d [ 692.110802][T10276] netlink: 'syz.2.1037': attribute type 49 has an invalid length. [ 692.132717][T10265] FAULT_INJECTION: forcing a failure. [ 692.132717][T10265] name failslab, interval 1, probability 0, space 0, times 0 [ 692.132750][T10265] CPU: 1 UID: 0 PID: 10265 Comm: syz.0.1039 Tainted: G Y syzkaller #0 PREEMPT(full) [ 692.132776][T10265] Tainted: [Y]=FORCED_BIND [ 692.132784][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 692.132793][T10265] Call Trace: [ 692.132800][T10265] [ 692.132808][T10265] dump_stack_lvl+0x100/0x190 [ 692.132837][T10265] should_fail_ex.cold+0x5/0xa [ 692.132864][T10265] should_failslab+0xc2/0x120 [ 692.132891][T10265] kmem_cache_alloc_noprof+0x92/0x6a0 [ 692.132912][T10265] ? __asan_memcpy+0x3c/0x60 [ 692.132931][T10265] ? __kernfs_new_node+0xd2/0xa10 [ 692.132958][T10265] __kernfs_new_node+0xd2/0xa10 [ 692.132979][T10265] ? stack_trace_save+0x8e/0xc0 [ 692.133000][T10265] ? __pfx_stack_trace_save+0x10/0x10 [ 692.133020][T10265] ? __pfx___kernfs_new_node+0x10/0x10 [ 692.133044][T10265] ? lock_acquire+0x1d1/0x380 [ 692.133065][T10265] ? kernfs_root+0x23/0x2a0 [ 692.133084][T10265] ? find_held_lock+0x2b/0x80 [ 692.133112][T10265] ? kernfs_root+0xee/0x2a0 [ 692.133128][T10265] ? kernfs_root+0xee/0x2a0 [ 692.133153][T10265] kernfs_create_dir_ns+0xa4/0x2b0 [ 692.133181][T10265] sysfs_create_dir_ns+0x13a/0x2b0 [ 692.133201][T10265] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 692.133219][T10265] ? find_held_lock+0x2b/0x80 [ 692.133247][T10265] ? kobject_add_internal+0x25f/0x930 [ 692.133268][T10265] ? kobject_add_internal+0x25f/0x930 [ 692.133291][T10265] ? do_raw_spin_unlock+0x145/0x1e0 [ 692.133322][T10265] kobject_add_internal+0x2c8/0x930 [ 692.133344][T10265] ? lock_acquire+0x111/0x380 [ 692.133369][T10265] kobject_add+0x16a/0x1e0 [ 692.133390][T10265] ? __pfx_kobject_add+0x10/0x10 [ 692.133415][T10265] ? kobject_put+0xb9/0x640 [ 692.133431][T10265] ? _raw_spin_unlock+0x28/0x50 [ 692.133454][T10265] ? bus_get_dev_root+0x5e/0x80 [ 692.133493][T10265] device_add+0x294/0x1970 [ 692.133519][T10265] ? __pfx_device_add+0x10/0x10 [ 692.133543][T10265] ? kobject_get+0xbb/0x150 [ 692.133561][T10265] ? __pfx_software_node_get+0x10/0x10 [ 692.133589][T10265] ? software_node_get+0x68/0x90 [ 692.133615][T10265] ? fwnode_handle_get+0x97/0xd0 [ 692.133639][T10265] iommu_mock_device_add+0x7c/0xb0 [ 692.133670][T10265] iommufd_test+0x3041/0x65f0 [ 692.133697][T10265] ? __lock_acquire+0x5c0/0x1f40 [ 692.133721][T10265] ? __lock_acquire+0x5c0/0x1f40 [ 692.133744][T10265] ? __pfx_iommufd_test+0x10/0x10 [ 692.133768][T10265] ? tomoyo_path_number_perm+0x188/0x580 [ 692.133802][T10265] ? lock_acquire+0x1d1/0x380 [ 692.133824][T10265] ? __might_fault+0xc5/0x140 [ 692.133854][T10265] ? find_held_lock+0x2b/0x80 [ 692.133883][T10265] ? __might_fault+0xc5/0x140 [ 692.133923][T10265] iommufd_fops_ioctl+0x358/0x520 [ 692.133951][T10265] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 692.133975][T10265] ? __fget_files+0x34/0x3d0 [ 692.134010][T10265] ? selinux_file_ioctl+0x1e0/0x290 [ 692.134037][T10265] ? selinux_file_ioctl+0x1e7/0x290 [ 692.134063][T10265] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 692.134088][T10265] __x64_sys_ioctl+0x18e/0x210 [ 692.134110][T10265] do_syscall_64+0x123/0x790 [ 692.134139][T10265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.134159][T10265] RIP: 0033:0x7f2aa419f559 [ 692.134177][T10265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.134195][T10265] RSP: 002b:00007f2aa4f85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 692.134214][T10265] RAX: ffffffffffffffda RBX: 00007f2aa4425fa0 RCX: 00007f2aa419f559 [ 692.134227][T10265] RDX: 0000200000000700 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 692.134239][T10265] RBP: 00007f2aa4236b20 R08: 0000000000000000 R09: 0000000000000000 [ 692.134249][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.134260][T10265] R13: 00007f2aa4426038 R14: 00007f2aa4425fa0 R15: 00007ffd109fdfa8 [ 692.134286][T10265] [ 692.134310][T10265] kobject: kobject_add_internal failed for iommufd_mock0 (error: -12 parent: devices) [ 692.577305][T10279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 692.950462][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.126885][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.177714][T10284] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 693.199869][T10285] netlink: 'syz.0.1039': attribute type 19 has an invalid length. [ 693.219460][ T8783] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 693.384979][ T8783] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 693.385808][ T8783] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.385843][ T8783] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 693.385864][ T8783] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 693.385894][ T8783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.604336][ T5828] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 693.752739][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 693.753454][ T5828] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 693.771257][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.771409][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.771526][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.122390][ T992] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 694.616063][ T5828] usb 5-1: config 0 descriptor?? [ 694.640089][ T5828] hub 5-1:0.0: USB hub found [ 694.682135][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.682819][ T992] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 694.682934][ T8783] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 694.682950][ T8783] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 694.682961][ T8783] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 694.684559][ T8783] cxacru 3-1:1.0: probe with driver cxacru failed with error -71 [ 694.688313][ T992] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.688334][ T992] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 694.688363][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.690489][ T8783] usb 3-1: USB disconnect, device number 34 [ 694.702122][ T992] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 694.827040][ T5828] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 694.840949][ T5828] usbhid 5-1:0.0: can't add hid device: -71 [ 694.841039][ T5828] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 694.873058][ T5828] usb 5-1: USB disconnect, device number 32 [ 694.902801][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.974322][ T8845] usb 2-1: USB disconnect, device number 47 [ 694.982051][ T8845] idmouse 2-1:1.0: disconnected [ 695.027944][T10294] rxe_eth0 speed is unknown, defaulting to 1000 [ 695.711636][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.036744][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.066852][ T30] audit: type=1400 audit(1792904980.998:1937): avc: denied { append } for pid=10310 comm="syz.3.1050" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 697.100046][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.100189][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.100402][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.279021][ T30] audit: type=1400 audit(1792904981.208:1938): avc: denied { create } for pid=10310 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 697.482061][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.482222][T10306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.942586][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.103355][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.148194][T10320] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 698.256345][T10319] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 698.413741][ T30] audit: type=1400 audit(1792904982.348:1939): avc: denied { mount } for pid=10308 comm="syz.0.1051" name="/" dev="hugetlbfs" ino=23217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 698.419793][ T30] audit: type=1400 audit(1792904982.348:1940): avc: denied { mounton } for pid=10308 comm="syz.0.1051" path="/232/file0" dev="hugetlbfs" ino=23217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 698.421279][T10309] overlayfs: failed to clone lowerpath [ 698.631387][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 698.631532][T10328] netlink: 'syz.1.1053': attribute type 11 has an invalid length. [ 698.631574][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 699.805053][ T30] audit: type=1400 audit(1792904983.738:1941): avc: denied { read append } for pid=10333 comm="syz.1.1056" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 699.889490][T10338] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 699.964290][T10335] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 699.964373][T10335] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 699.998260][T10335] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 699.998331][T10335] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 700.024165][T10335] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 700.694396][T10335] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 700.712789][ T362] net_ratelimit: 1 callbacks suppressed [ 700.712808][ T362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.735594][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.756590][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.791281][T10335] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 700.791342][T10335] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 701.024066][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.024700][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.025131][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.782756][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.022787][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 702.022796][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 702.102350][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 702.222474][ T8845] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 702.372657][ T8845] usb 5-1: Using ep0 maxpacket: 32 [ 702.375036][ T8845] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 702.410628][ T8845] usb 5-1: config 123 interface 0 has no altsetting 0 [ 702.443552][ T8845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.443614][ T8845] usb 5-1: Product: syz [ 702.443832][ T8845] usb 5-1: Manufacturer: syz [ 702.444068][ T8845] usb 5-1: SerialNumber: syz [ 702.679855][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.682377][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.754459][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.822868][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 703.054508][ T8845] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 703.137071][ T8845] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 703.137367][ T8845] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 703.137404][ T8845] usb 5-1: media controller created [ 703.208381][ T8845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 703.261765][ T8845] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 703.261789][ T8845] error writing reg: 0xff, val: 0x00 [ 703.327192][ T8845] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 703.448189][ T30] audit: type=1400 audit(1792904987.328:1942): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 703.497754][ T30] audit: type=1400 audit(1792904987.438:1943): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 704.061114][T10361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.061454][T10361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.071674][ T5637] block nbd2: Receive control failed (result -32) [ 704.099085][T10365] block nbd2: shutting down sockets [ 704.104475][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 704.127711][ T8845] usb 5-1: USB disconnect, device number 33 [ 704.128578][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 704.200794][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 704.698711][T10374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.093986][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 705.772721][ T5828] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 705.832689][ T8783] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 706.256321][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 706.319683][ T5828] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 706.526443][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.526482][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.526548][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.088321][ T8783] usb 3-1: Using ep0 maxpacket: 32 [ 707.142731][ T8301] net_ratelimit: 4 callbacks suppressed [ 707.142751][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.302409][ T5637] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 707.313500][ T8783] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 707.456554][ T1670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.470551][ T5634] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 707.721042][ T8783] usb 3-1: config 123 interface 0 has no altsetting 0 [ 708.258794][ T5828] usb 1-1: config 0 descriptor?? [ 708.259457][ T5828] usb 1-1: can't set config #0, error -71 [ 708.274362][ T5828] usb 1-1: USB disconnect, device number 38 [ 708.276774][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.351095][ T8783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.351113][ T8783] usb 3-1: Product: syz [ 708.357261][ T8783] usb 3-1: can't set config #123, error -71 [ 708.363768][ T8783] usb 3-1: USB disconnect, device number 35 [ 708.442567][T10394] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 709.307821][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.541311][T10403] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 710.028151][T10405] netlink: 'syz.1.1077': attribute type 49 has an invalid length. [ 710.302535][ T5828] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 710.343209][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.486132][ T5828] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 710.503742][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.507673][ T5828] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.508139][ T5828] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 710.508173][ T5828] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 710.508944][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.243865][ T5828] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 711.243929][ T5828] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 711.243974][ T5828] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 711.365162][ T5828] cxacru 2-1:1.0: probe with driver cxacru failed with error -71 [ 711.468929][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.491842][ T5828] usb 2-1: USB disconnect, device number 48 [ 712.445342][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.502538][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.502922][ T8845] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 713.053955][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 713.463188][ T8845] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 713.464195][ T8845] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.464218][ T8845] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 713.464249][ T8845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.541375][ T8845] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 713.546907][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.568834][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.681406][ T5828] usb 4-1: USB disconnect, device number 27 [ 713.698963][ T5828] idmouse 4-1:1.0: disconnected [ 714.382552][ T8783] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 714.503713][T10425] overlayfs: failed to resolve './file2': -2 [ 714.595326][ T8301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.595587][ T8783] usb 1-1: Using ep0 maxpacket: 32 [ 714.596259][ T8783] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 714.597135][ T8783] usb 1-1: config 123 interface 0 has no altsetting 0 [ 714.628658][ T8783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.629910][ T8783] usb 1-1: Product: syz [ 714.629926][ T8783] usb 1-1: Manufacturer: syz [ 714.629939][ T8783] usb 1-1: SerialNumber: syz [ 714.676651][ T30] audit: type=1400 audit(1792904998.578:1944): avc: denied { write } for pid=10429 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 714.676690][ T30] audit: type=1400 audit(1792904998.578:1945): avc: denied { nlmsg_write } for pid=10429 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 715.030408][ T8783] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 715.046370][ T8783] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 715.046654][ T8783] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 715.046691][ T8783] usb 1-1: media controller created [ 715.085594][ T8783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 715.230466][ T8783] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 715.230490][ T8783] error writing reg: 0xff, val: 0x00 [ 715.271832][ T8783] dvb_usb_mxl111sf 1-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 715.299983][T10444] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 715.832173][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.279603][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.280733][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.316817][ T8845] usb 1-1: USB disconnect, device number 39 [ 716.354113][T10448] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1082'. [ 716.392250][T10450] ipip0: entered promiscuous mode [ 716.392357][T10450] ipip0: entered allmulticast mode [ 716.919744][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.923057][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.952953][T10450] team0: Port device ipip0 added [ 717.943183][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.894939][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 719.182726][T10469] trusted_key: encrypted_key: insufficient parameters specified [ 719.851800][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.952773][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.907301][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.053346][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.055549][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.062842][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.283705][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.078235][ T30] audit: type=1400 audit(1792905009.008:1946): avc: denied { ioctl } for pid=10496 comm="syz.1.1096" path="socket:[24022]" dev="sockfs" ino=24022 ioctlcmd=0xc0385868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 725.954069][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.059821][T10494] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 726.060010][T10494] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 726.060191][T10494] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 726.080246][T10494] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 726.104326][ T284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.104819][ T8845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.105201][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.212553][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 726.395201][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 726.398725][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 726.409223][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.409264][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.409331][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.497286][ T10] usb 5-1: config 0 descriptor?? [ 726.534731][ T10] hub 5-1:0.0: USB hub found [ 726.604865][ T8845] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 726.623612][ T5828] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 726.728377][ T10] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 726.772399][ T8845] usb 1-1: Using ep0 maxpacket: 32 [ 726.775305][ T8845] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 726.804451][ T5828] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 726.805945][ T5828] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.805977][ T5828] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 726.806045][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.848482][ T8845] usb 1-1: config 123 interface 0 has no altsetting 0 [ 726.907901][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 726.908217][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 726.942396][ T8845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.942432][ T8845] usb 1-1: Product: syz [ 726.942468][ T8845] usb 1-1: Manufacturer: syz [ 726.942506][ T8845] usb 1-1: SerialNumber: syz [ 726.997744][ T284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.998629][ T8783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.057488][ T10] usb 5-1: USB disconnect, device number 34 [ 727.177620][ T5828] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 727.533795][ T8845] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 727.953239][ T8845] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 727.973363][ T8845] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 727.974168][ T8845] usb 1-1: media controller created [ 728.083585][T10519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.112358][ T5634] Bluetooth: hci4: command 0x0405 tx timeout [ 728.112393][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 728.112415][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 728.112438][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 728.114879][T10519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.279275][T10519] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 728.291368][T10519] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 728.299777][T10519] CPU: 0 UID: 0 PID: 10519 Comm: syz.0.1102 Tainted: G Y syzkaller #0 PREEMPT(full) [ 728.310801][T10519] Tainted: [Y]=FORCED_BIND [ 728.315199][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 728.325244][T10519] RIP: 0010:__mutex_lock+0x158/0x1c10 [ 728.330626][T10519] Code: 08 84 d2 0f 85 a8 14 00 00 44 8b 0d 42 57 dc 10 45 85 c9 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8e 14 00 00 48 3b 5b 58 0f 85 88 07 00 00 bf 01 [ 728.350253][T10519] RSP: 0000:ffffc9000df574b0 EFLAGS: 00010206 [ 728.356321][T10519] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000001 [ 728.364285][T10519] RDX: 0000000000000018 RSI: ffffffff8e5eca86 RDI: 00000000000000c0 [ 728.372246][T10519] RBP: ffffc9000df57620 R08: ffffffff884fe6f5 R09: 0000000000000000 [ 728.380206][T10519] R10: ffffc9000df57638 R11: 0000000000000000 R12: 0000000000000000 [ 728.388167][T10519] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 728.396134][T10519] FS: 00007f2aa23f66c0(0000) GS:ffff8881224ba000(0000) knlGS:0000000000000000 [ 728.405060][T10519] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.411638][T10519] CR2: 000056053c325c58 CR3: 00000000772c7000 CR4: 00000000003526f0 [ 728.419602][T10519] Call Trace: [ 728.422895][T10519] [ 728.425820][T10519] ? dvb_usbv2_generic_write+0x25/0x50 [ 728.431289][T10519] ? __mutex_lock+0x267/0x1c10 [ 728.436058][T10519] ? mxl111sf_ctrl_msg+0xb8/0x2b0 [ 728.441083][T10519] ? __lock_acquire+0x5c0/0x1f40 [ 728.446018][T10519] ? __pfx___mutex_lock+0x10/0x10 [ 728.451050][T10519] ? __pfx___mutex_lock+0x10/0x10 [ 728.456077][T10519] ? mxl111sf_i2c_xfer+0x157/0x3240 [ 728.461285][T10519] ? dvb_usbv2_generic_write+0x25/0x50 [ 728.466749][T10519] dvb_usbv2_generic_write+0x25/0x50 [ 728.472039][T10519] mxl111sf_ctrl_msg+0x179/0x2b0 [ 728.476968][T10519] mxl111sf_write_reg+0x96/0x130 [ 728.481885][T10519] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 728.487405][T10519] ? rcu_is_watching+0x13/0xc0 [ 728.492158][T10519] ? trace_sched_exit_tp+0x120/0x160 [ 728.497420][T10519] ? __schedule+0x1270/0x6990 [ 728.502072][T10519] mxl111sf_i2c_start+0x6e/0x220 [ 728.506987][T10519] mxl111sf_i2c_xfer+0x178e/0x3240 [ 728.512080][T10519] ? i2c_smbus_xfer_emulated+0xa14/0x1110 [ 728.517784][T10519] ? i2cdev_ioctl_smbus+0x233/0xac0 [ 728.522957][T10519] ? i2cdev_ioctl+0x3cf/0x830 [ 728.527609][T10519] ? do_syscall_64+0x123/0x790 [ 728.532360][T10519] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 728.537793][T10519] ? irqentry_exit+0x202/0xab0 [ 728.542533][T10519] ? lockdep_hardirqs_on+0x7d/0x110 [ 728.547716][T10519] ? irqentry_exit+0x202/0xab0 [ 728.552468][T10519] ? __i2c_transfer+0x49e/0x1740 [ 728.557386][T10519] __i2c_transfer+0x5d4/0x1740 [ 728.562121][T10519] ? __pfx___i2c_transfer+0x10/0x10 [ 728.567290][T10519] i2c_smbus_xfer_emulated+0x235/0x1110 [ 728.572809][T10519] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 728.578778][T10519] ? irqentry_exit+0x202/0xab0 [ 728.583528][T10519] __i2c_smbus_xfer+0x612/0x10f0 [ 728.588440][T10519] ? mark_held_locks+0x40/0x70 [ 728.593177][T10519] ? lockdep_hardirqs_on+0x7d/0x110 [ 728.598364][T10519] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 728.603728][T10519] ? rt_mutex_slowtrylock+0x93/0x100 [ 728.608996][T10519] i2c_smbus_xfer+0x17e/0x3c0 [ 728.613660][T10519] i2cdev_ioctl_smbus+0x233/0xac0 [ 728.618670][T10519] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 728.624190][T10519] ? __might_fault+0xc5/0x140 [ 728.628869][T10519] ? __might_fault+0xc5/0x140 [ 728.633523][T10519] i2cdev_ioctl+0x3cf/0x830 [ 728.638004][T10519] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 728.643008][T10519] ? selinux_file_ioctl+0x1e7/0x290 [ 728.648187][T10519] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 728.653197][T10519] __x64_sys_ioctl+0x18e/0x210 [ 728.657955][T10519] do_syscall_64+0x123/0x790 [ 728.662531][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.668408][T10519] RIP: 0033:0x7f2aa419f559 [ 728.672799][T10519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.692402][T10519] RSP: 002b:00007f2aa23f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.700800][T10519] RAX: ffffffffffffffda RBX: 00007f2aa4426090 RCX: 00007f2aa419f559 [ 728.708767][T10519] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000006 [ 728.716731][T10519] RBP: 00007f2aa4236b20 R08: 0000000000000000 R09: 0000000000000000 [ 728.724799][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.732745][T10519] R13: 00007f2aa4426128 R14: 00007f2aa4426090 R15: 00007ffd109fdfa8 [ 728.740694][T10519] [ 728.743688][T10519] Modules linked in: [ 728.748025][T10519] ---[ end trace 0000000000000000 ]--- [ 728.756107][ T8845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 728.776494][ T5741] net_ratelimit: 1 callbacks suppressed [ 728.776509][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.796603][ T30] audit: type=1400 audit(1792905012.728:1947): avc: denied { read } for pid=4971 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 728.819087][ T30] audit: type=1400 audit(1792905012.758:1948): avc: denied { search } for pid=4971 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.819319][ T30] audit: type=1400 audit(1792905012.758:1949): avc: denied { write search } for pid=4971 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.863253][ T30] audit: type=1400 audit(1792905012.798:1950): avc: denied { add_name } for pid=4971 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.886264][ T30] audit: type=1400 audit(1792905012.798:1951): avc: denied { create } for pid=4971 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 728.886289][ T30] audit: type=1400 audit(1792905012.798:1952): avc: denied { append open } for pid=4971 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 728.886305][ T30] audit: type=1400 audit(1792905012.798:1953): avc: denied { getattr } for pid=4971 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext= ** replaying previous printk message ** [ 728.886305][ T30] audit: type=1400 audit(1792905012.798:1953): avc: denied { getattr } for pid=4971 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 728.955137][T10519] RIP: 0010:__mutex_lock+0x158/0x1c10 [ 728.955173][T10519] Code: 08 84 d2 0f 85 a8 14 00 00 44 8b 0d 42 57 dc 10 45 85 c9 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8e 14 00 00 48 3b 5b 58 0f 85 88 07 00 00 bf 01 [ 728.955189][T10519] RSP: 0000:ffffc9000df574b0 EFLAGS: 00010206 [ 728.955216][T10519] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000001 [ 728.955227][T10519] RDX: 0000000000000018 RSI: ffffffff8e5eca86 RDI: 00000000000000c0 [ 728.955238][T10519] RBP: ffffc9000df57620 R08: ffffffff884fe6f5 R09: 0000000000000000 [ 728.955249][T10519] R10: ffffc9000df57638 R11: 0000000000000000 R12: 0000000000000000 [ 728.955259][T10519] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 728.955270][T10519] FS: 00007f2aa23f66c0(0000) GS:ffff8881225ba000(0000) knlGS:0000000000000000 [ 728.955286][T10519] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.955297][T10519] CR2: 000056053c59c438 CR3: 00000000772c7000 CR4: 00000000003526f0 [ 728.955310][T10519] Kernel panic - not syncing: Fatal exception [ 729.082576][T10519] Kernel Offset: disabled [ 729.086880][T10519] Rebooting in 86400 seconds..