last executing test programs: 9.237731928s ago: executing program 3 (id=552): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x4}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002215000000"], 0x0}, 0x0) (async) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x2, 0x7, 0x4) 8.053577559s ago: executing program 1 (id=564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000300000000000100000304000480080002000100000008000100000000000400088058010c"], 0x184}}, 0x0) 8.017618606s ago: executing program 1 (id=565): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000200)="579a9d80204f9bdaaeea95a85a9d3f85a779f1a79e6150a5f740860877ed1cf010a69692d0adc0f16288873e091eec7e18d9fd2d9500fe41585b207c32179310a4a8c85312d301558814ad249a35acf0935b965c", 0x54}], 0x2) syz_usb_disconnect(r1) socket(0x8000000010, 0x2, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file2\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x40448c5, &(0x7f0000000140)={0xa, 0x4ea3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x3}, &(0x7f00000002c0)=0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f00000001c0)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 7.390019811s ago: executing program 3 (id=570): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x2, 0x2, 0xfffffff9, 0xfffffff8, 0x6, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7, 0xffffffff, 0x4, 0xa, 0x401}}]}}}]}, 0x84}}, 0x44080) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0xfffffffc, 0x10003, "944022f7f4b75e74cb2490b1ab438f7dd0e5aacfe65b9167", {0x7fffffff, 0x7}, 0x7f}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) prlimit64(0x0, 0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007112c4000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.237642219s ago: executing program 3 (id=572): r0 = socket$inet6(0xa, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x1082, 0x404000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859891d875397bab22d0000b420a9c81f40f45f819e01177d3d458dac00000000000000000000003b00", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x10005, 0x58002) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xf, 0x4, 0x0, 0x0, 0x20007, 0xd, "fee8a2ab78fc179fd1f8a0e91dda000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be00000000000000000000000000000900", [0x400000001000000, 0x2]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x400, 0xfffffffe}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) poll(&(0x7f0000000240)=[{r8, 0x620}], 0x1, 0x848e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x41, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x1, 0x1, 0x0, 0x6}, 0x20) 5.213762112s ago: executing program 2 (id=576): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014"], 0xfc}}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffff03000000bbbbbbbbbbbb0800450000140000000000899078000000000db7ffff"], 0x0) set_robust_list(&(0x7f00000006c0)={&(0x7f0000000600), 0x5}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) 5.188522263s ago: executing program 1 (id=578): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0xda, 0x0, 0x7b}, {0x1, 0x7e, 0x3b, 0x7}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100387ace0404d1f03a889dd01020301090212000106f180090904930d0077f25ff8"], &(0x7f0000000980)={0x0, 0x0, 0x5, &(0x7f0000000880)={0x5, 0xf, 0x5}}) 5.18192349s ago: executing program 3 (id=579): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000044c000/0x2000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 4.741180573s ago: executing program 4 (id=581): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = open(&(0x7f0000000240)='./file0\x00', 0x80140, 0x1c8) fcntl$setlease(r2, 0x400, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f00000002c0)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) mq_timedreceive(r3, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000900, &(0x7f0000000100)={0x77359400}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xe3f3) 4.613260447s ago: executing program 2 (id=582): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0, 0x2a, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) (async) write$binfmt_elf32(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) (async) close(r0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0, 0x2a, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value}, 0x28) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) (async) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) 3.560605147s ago: executing program 4 (id=584): r0 = syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000100)=0x2) socket$pppoe(0x18, 0x1, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xc, @sdr={0x33524742, 0x1bceada8}}) 3.552605363s ago: executing program 2 (id=585): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x9}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803"], 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x10080, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newroute={0x1b, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0xfffffff3}, 0x1, 0x0, 0x0, 0xc000}, 0x48880) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x2000)=nil) write$uinput_user_dev(r3, &(0x7f0000000500)={'syz1\x00', {0x7fff, 0x2, 0x7b, 0x6}, 0x18, [0x8, 0xffffffff, 0xff, 0x2c0000, 0xff, 0x3, 0x200, 0x7, 0xd, 0x101, 0x1, 0x8b3, 0x3, 0x8, 0x8001, 0x3, 0x3, 0xe9, 0x4, 0x2, 0x2, 0x7f, 0x6, 0x7, 0x9, 0x80000005, 0x100, 0xd, 0x9, 0x2, 0x4, 0x5, 0xe0af, 0x7, 0x3, 0x4, 0x4, 0xff4, 0x0, 0x7ff, 0x1000, 0x3, 0x202, 0x0, 0x8, 0x7, 0x0, 0x200, 0x2, 0x7fffffff, 0x7, 0x2d11, 0xc, 0xae8f, 0x76a8, 0xdab7, 0x3, 0x81, 0x3, 0x9, 0x81, 0x8, 0xffffffff, 0x3d], [0x73, 0x6, 0x401, 0x80000000, 0x3, 0x2, 0xf8f4, 0x40, 0xd, 0x6, 0x100, 0x3, 0x9, 0x1, 0x6, 0x1, 0x1, 0x70000000, 0xfffffff8, 0xfffffeff, 0x8000, 0x3, 0x8, 0x8001, 0x1, 0x0, 0xb, 0x1, 0xc, 0x81, 0x40000000, 0x1, 0x820000, 0x7f, 0x6, 0x9, 0x40, 0x95f2, 0x7fff, 0x9, 0x2, 0x9, 0x5, 0x3, 0x7, 0x9, 0x0, 0x9, 0x4, 0x3, 0xa, 0x1, 0x9, 0x8, 0x3, 0x9, 0x4, 0x2, 0xffffff6d, 0x802, 0x9, 0x5, 0x8, 0x5], [0x7f, 0x10001, 0x5, 0x4, 0x9, 0x3, 0x7fff, 0x401, 0x1, 0x7, 0xb3, 0x8, 0x7, 0x693, 0x0, 0xfffff001, 0xfffff60b, 0x3, 0x4000000, 0xfffffff8, 0xffa, 0x7, 0xc, 0x0, 0x1, 0x400, 0x7, 0x2c, 0x4, 0x76d, 0xfff, 0xbf7, 0x3, 0x1, 0x6, 0x1, 0x1, 0x0, 0x3ff, 0x5, 0xf37fe37e, 0x9, 0xffff, 0x6b, 0x4f2, 0x800, 0x0, 0x3, 0x81, 0xffffffff, 0x0, 0x8, 0x1, 0xff, 0x8, 0xd6, 0x4, 0xc, 0x9, 0x800, 0x800, 0x5, 0x74, 0x69c1], [0x0, 0x7, 0x2, 0x7, 0x200, 0x1000, 0x6, 0x800, 0x3ff, 0xf, 0x10c68d29, 0x2, 0x9, 0xfffff800, 0x0, 0x1, 0x400, 0x8001, 0x7, 0x0, 0x9, 0x3, 0x9, 0x3, 0x804, 0x9, 0x1, 0x1, 0x3, 0x8ef9, 0x2, 0x8, 0xfffffff8, 0x5, 0x7, 0x0, 0x7, 0x1, 0x43, 0x3, 0x3, 0xfffff19d, 0x5, 0x7ff, 0x4, 0x55860f9f, 0x0, 0x9, 0x1, 0x46, 0x1ff, 0x9, 0x6, 0x2, 0x8, 0x2, 0x6, 0x5, 0xd, 0x6, 0x1, 0x4b2c, 0x7, 0xf]}, 0x45c) r4 = openat$procfs(0xffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$hiddev(r4, &(0x7f0000000500)=""/221, 0xdd) 3.425906771s ago: executing program 4 (id=586): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000", 0x2b}], 0x1}, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x218100, 0x0) (rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xa) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = socket$kcm(0x29, 0x1, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4600000006010000000000000002003e0000000000030000000000000040000000000000009801000000000000000000000000210001000000020000000300000000000000ffffffffffffff7f0000020000000000070000004000000004000000000000000000000006b24b00000000feffffffffffffffb4c9585d6887ef0fbddad38eb0704de7af55e1cc28641a1a07ae54c235014e11fd0d8118cdbd126a9e2a4f174116a6c15eb21b13cf555660a1f40e25f26a3d44af"], 0x78) (async, rerun: 64) r6 = io_uring_setup(0x21, &(0x7f0000000180)={0x0, 0xfffffffc, 0x0, 0xb733, 0xffffffbe}) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r8, &(0x7f0000000740), 0xff67) (async) sendfile(r7, r8, &(0x7f0000000000), 0xfffb) (async) fcntl$addseals(r8, 0x409, 0x8) (async) ftruncate(r8, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) close(r5) (async, rerun: 64) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000200)=0xb363) (async, rerun: 64) pipe(&(0x7f0000000280)) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000001c0)=0x40) (async) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r9, 0x400, 0x0) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r10, 0x400, 0x0) fcntl$setlease(r10, 0x400, 0x2) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) (rerun: 64) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYRES16], 0x0) 3.345756344s ago: executing program 0 (id=587): r0 = syz_open_dev$vcsu(0x0, 0xd, 0x14800) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x48101, 0x0) close_range(r2, r0, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r2) close_range(r0, r2, 0x2) syz_open_dev$radio(&(0x7f0000000440), 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x74, r4, 0x1, 0x70bd2b, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5, 0x3, 0xfc}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x74}}, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x4d0b7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWCHAIN={0x88, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4e, 0xc, "971811fe99e8cca6423b7fff39ac245be1c51f4df1b8cb56aae7c760e4caecf9685f47123907cc8c34a485c7b4a180a1ee583357a0b16a55bd081acb8f48f708abb490034b2848c686ba"}]}], {0x14}}, 0xb0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, 0x0) write$vhost_msg_v2(r2, 0x0, 0x0) r7 = openat(r0, 0x0, 0x4000, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x7fff) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd) 3.318083029s ago: executing program 4 (id=588): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="34ac0000", @ANYRES16=0x0, @ANYBLOB="010028bd7000f9dbdf2505000000200001800d0001007564703a73797a32000000000c0002800800030004"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500183d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) 3.28544709s ago: executing program 0 (id=589): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000200)="579a9d80204f9bdaaeea95a85a9d3f85a779f1a79e6150a5f740860877ed1cf010a69692d0adc0f16288873e091eec7e18d9fd2d9500fe41585b207c32179310a4a8c85312d301558814ad249a35acf0935b965c", 0x54}], 0x2) syz_usb_disconnect(r1) socket(0x8000000010, 0x2, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file2\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x40448c5, &(0x7f0000000140)={0xa, 0x4ea3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x3}, &(0x7f00000002c0)=0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='overlay\x00', &(0x7f00000003c0)='!/\x00', 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 3.173625472s ago: executing program 4 (id=590): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000380)={0x0, 0x5887, 0x0, 0x2, 0x10000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af00, &(0x7f0000000600)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() (async) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r5) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000000c001a800800058004000780"], 0x2c}}, 0x0) (async) r9 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885, 0x20000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r12 = getpid() sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r13, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000004e40)=[{{&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="fae1e45b46179997c0ca06", 0xb}, {&(0x7f0000000480)="9dfe8564b66204dbba90a0204ecfc37108e08aef71dd49d4493015e76066ffae078b82a8ec42449baa99cf84dbdf37649d29a4b410dae8adb259049d2d70dc32463946e82836974efbbc60e85e9d16b83b14b570309960b7e060938fb3d21ebf938955f0427b37b009c56ea156ed4a82203ad2293a5866c2d1ac01e26156e49f30635d243bbdb21cfc7cf1fb7267437c0d62d76db05811fe7649436c109437abb1d85e5de6611f2eccb721e86644f0", 0xaf}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r14, @ANYRES32=r8, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r14, @ANYRES32=r8, @ANYRES32=r13, @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="1c0000000020d10001a2be0002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x804}}, {{&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000f80)=[{&(0x7f00000012c0)="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", 0x1000}], 0x1, 0x0, 0x0, 0xc890}}, {{&(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000001040)="0331c9244d696bb76ecf83603392ace13f7c0dc90b4f3cf39fc81359662306290bffa3223e6951f0856e15d742dfcb39f2f56064a59fa5f1a068c3cc1677a6f50956ffe0654c97a2ff00d8622564d3d18dd172e97a904945e57fc7e97e1a746e841f4914732a508efe4ad0e08d0938c53468f300447172b558c6b5343a5a23169dad44a47995024c3872e19aba857aaec13d1820b93a2d1def41198295de361987912a2abce04b99ec44ebe4ffc52c6f0a6f7a7f7da6acd40af32d8331ad187ee7a14289be8dc4138720c3676325acb041bcc60bca6184ecde3b59", 0xdb}, {&(0x7f0000001140)="67ecd19706ca13d520c09396cccea7eae875c361fc952112f93493f9cbcee474cb35e3ccfce32fbdc8acad4bb2c2c1ea310662e88fcb95d5dd225dafa1f176271f44b564bfb27747cd1b6dabf5e476cb11434be3d37602a69e5bc5b15374e35abd882ac1d1c85735f66bea75c02d8349d7b4719249ef6c7339319c02673b7e8a398a673d8e9cbe9c321a91810b094d3d0538b2b9ae1e8f0f5324a5fef5c4cb2ecd492af655272f4e2e2b0003fe2c5cf320fe12e73f1799e008cef7cad1d761faa8457bd490530bba80f98ddf98ef66260d81cfe8487c315f0f6e78ff8f77c483ed15567057fe7cbc94432cc3f886", 0xee}, {&(0x7f00000022c0)="842d0f682652bc42769ad4804a703046a12502471ecc9ddd5008fd851450d6d4dca9990d53fd6ed7d87347426900613b89f40e608240f663b13fdddfbfc68476bccfbb6d4b41b905f5ca3951a5e4d600a2ae683d9285e3d0aaebd4de9825f62ba604a354a37099eef7d213cfb5e9258759e7e64038f44e5eb1a62cf255f7574ec1fb6c0ee1e5f15dbe53f1", 0x8b}, {&(0x7f0000001240)="f324dbe63bb69759d7", 0x9}, {&(0x7f0000002380)}, {&(0x7f00000023c0)="ce2b6c7806750799ebfb8fd2e3a4db722c5367113755dcec87e0ffd992bbd638a49768c03f8b5bfbc6d53fcf93c4cf14a403e92a5512c7a464308208cfd02df63b34cc3516eebd0be354ff667855c81709da9492a018fcbca682ed0db948e01d80fc48227d49719c70ee72ed0ae1f833e18c6b283272b4e2bb55097ae97b6f3bd0ebde08de3d220158fabacc9221801bf387ef5b6ed4c4ca3348", 0x9a}, {&(0x7f0000002480)="5e2b412f2cd145f96e8edd28ecca6da46d60116cdf025d5d12452bd9", 0x1c}, {&(0x7f00000024c0)="168da1b5ca9087425e757307f30acfafe645be13878ce3fc3e0b6e6878915a818e9fe1779fd19a4abae47b614aee83f2aa72fad7c9c38d328df8503e9fad9e0a0906b45edb3afa87c375064c6c36fa8857a210dac1ed7022ddc6287fe0b816fd7dd989513d3e96b2f40bcbde93253bc58ae62fb992621f92811053b231bc402a4454f1535e7cb85abd9e0234", 0x8c}], 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYBLOB="379e2f2e3d8c98e9a719310001e042"], 0x28, 0x84}}, {{&(0x7f0000002640)=@file={0x0, './file2\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000026c0)="ce7f78c5fb48cc0bbc09fd0c3791a30b6876d61c3b8578152480ada1c13008a30440e57be97324d91a5b263d6b11bcf6eecaff022334431d564cb64a8adb7d82289af00a1df9570effb9feeafb4c0fad86c08d086da00d294715d3ea2c6da9d23577c21ab636d18c307060955ce1a45090af351f099a8a9c74f7d0efdf866ce9ed1b8117d8c818f357642c8f6357daa5480f713f4c3a5b748147687b4c", 0x9d}, {&(0x7f0000002780)="628553561f3d27754040f65c", 0xc}, {&(0x7f00000027c0)="0f79cd38778c3e5a6bd7505eb6cec304fba4aa31d2e7d3afc26be2f9a91fa329784c19db34f71f08c203b28cfee182094497bdcdcf260d216dc3ce3a509221da88ba24a2a524563c7b7ff1b0d7f16442164d7d75d6343d216fbd7f1c189c3f36ce9dc6a38b1247ddd51f3cf5019c7b0328146504d9f59eef8f8b0449fbe63147ef5f4ff8012266b107534d57739a01889fb353fdb7af4c40fd63c7a4db8f16a63fddc2543db371db362d872a6148206ed7f158a2439594969e5102d1490d7d95d9", 0xc1}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f00000038c0)="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", 0x1000}, {&(0x7f0000000540)="bbc2538d64a0bf473c927274e1c8e52c2ec8396f8a3c15e0c445eca41ded8243e4b6cd73a78d3629005f0b3a545f2e47f34276de61f5bb1c48df2c17d5321749ab9333fafc60a160399045c643569445e1eb8a028234db321a65e61bfd25503ad152137aeff8fe3240ab0671402801c2d32f2f52e261b5bb113b28635b1a854d0d", 0x81}, {&(0x7f0000000680)="37abe3b1da1b11964f651bf2ecb14c08f166580abcbb30dad8bcc1b072562f57c0b90a17a886640d81607cfaf2bdde7d7d812c86ced596851e499306073d76eba5799470f3a9163ab2", 0x49}, {&(0x7f0000000700)="c1df2fd662796b8aaa0f3acc3cf9ce0646f409a2909a87888b20d9d742a78cae5ca9274c3bbda5d7fec60d15be14ba14bddcb9d87dc05043920a10093de28a904d7c30265db211ae296f4960bc658be3eb8035509f13d951c92c5afac6d27d8dcd4b3ea5a4a89ca7dce68b5181f5eaad517baddb439c8864c899dc9040cade6e18ea9cba31f5c72654c3298131fab081071733066af369a426c317f6cc50b4723b289a38761eff9772c25d7a1ea5c5", 0xaf}, {&(0x7f0000000300)="e9f2ed8662b2facca98c9b252739", 0xe}, {&(0x7f0000000940)="e46476106750e522ddb44a82c97325b8c25665d5c3c97471b4fc1c0b164d112d4774384baedc25a2bddef5c228a2700f116eb3588dd11d5f4e2148843847575cc04a067e4b641af48d286f45cfe729bdbb6c23fd564a97a1760230de936f9bb7e599b61f6c0e14", 0x67}], 0xa, &(0x7f0000004940)=[@cred={{0x1c}}], 0x20, 0x8000}}, {{&(0x7f0000004980)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004a00)="376e4cdf7ae403", 0x7}, {&(0x7f0000004a40)="d5701490c75609425e5bd159f9f014e848d43e3354ad93a5d8def98872b81bbde155f5644c243a14e6b96d21459c7c17f58eaf814ae03772ada5182bc11358948dae45b041a47f7575915c559df37d16cb3b19b47251a796a37de29b0ecf90b15be18e2f8d60128d513fcf6b2ac8db4a48daf6ec46e19e1c97c0153d1157b7559b0f22df326530ea5ba7a1ef7dd551202df20fc199c46fc1e343bbaaa2b33fc7297c21f5f019dcf84a7f6348fe52c478dd5960333ab058f321af401fe51787c3facd7e71d6c487cc7d7b83ae094c2d", 0xcf}, {&(0x7f0000004b40)="e8a65f3ae8851667aaede13c66ea3c8cf15b5e01731ef36a57242d33226ac3f9da508f0be8d3f45ccff423879e5c5c8cd972d6aa387bd0a384c858005ae04de7a869b58357bf72f2fa6b1e53a771420b97a97e0338d4037f30566af4b37a1b1b8e98a26ca320dfb134690e1594b7eb96d5001b9be0b9962944b6c69e57663efc9e48b8113c13fac16756e0fd98aa68bfd4541fa9eff29c288efb0d6a9543c8be87d53726f87fa59567ef8bf81259852372cf66", 0xb3}, {&(0x7f0000004c00)="352252dfad257e047bc45b208322f1cd5698d08da43b44d29ac45c8871bf165f7c6502e1ee548599db2a4cd3c3e7e14dd9b2f7326492718e8bafaa65d32fdeb7b14a7849ec7b6c49208d3943fd7a6acab96a1a70dc995f2c264309414ee29e4d94424b69fe7409a6f6d53fe2b3208f7f6de246e2c6e8e3f76b436db9c995e1716708d952804c312d3d6e5787fd2beac15df37677ee69153937421253c33106ced33321bd815b9eb3e4cd04b84e03ee517954399882d2341bd11927c1b77c75c78657602b013eea250ca2228207530a2c99100e48b06c6e2cd6528c659fc2539a6ecc1b6047f5", 0xe6}, {&(0x7f0000004d00)="a6f32801b24ec7d095b000b329287799be22d3f9713ade3912b7ac8b071007e835a5bcaf9da9548b4d4e14f206b90bb3c0759dc50298665fb3ee6e802252100db379cfda1855badd5f0111b07e06e07b695ad934d675328da81e21fb3fdcb969829bf147724b7678c7878aa0a4d00859426d6ca92e65c5725a5a98452db98c", 0x7f}], 0x5, &(0x7f0000004e00)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r5], 0x20, 0x40}}], 0x5, 0x4000090) (async) recvmmsg(r13, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) fallocate(r5, 0x3, 0x3, 0x8) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) 3.161568416s ago: executing program 4 (id=591): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x803e) 2.93647021s ago: executing program 3 (id=592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x1000) read$FUSE(r1, &(0x7f0000001580)={0x2020}, 0x2020) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r8 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r8}, &(0x7f0000bbdffc)) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$TIOCL_SETSEL(r4, 0x4b2f, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x20000890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.657769765s ago: executing program 1 (id=593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.695196836s ago: executing program 0 (id=594): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = open(&(0x7f0000000240)='./file0\x00', 0x80140, 0x1c8) fcntl$setlease(r2, 0x400, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f00000002c0)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) mq_timedreceive(r3, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000900, &(0x7f0000000100)={0x77359400}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xe3f3) 1.659844399s ago: executing program 1 (id=595): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', &(0x7f0000003600)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x1, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x6, "8000"}, 0x0, 0x2, {}, 0x20800, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) socket$inet6(0xa, 0x0, 0x400) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000)={0x1d, r5}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b', @ANYRES32], 0x64}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) read$msr(r3, &(0x7f0000000040)=""/122, 0x7a) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$can_bcm(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x1d, r8}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0xc, 0x4a5, {0x0, 0xea60}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x1a, 0x3, 0x0, 0x0, "047c8967f479d290927907842f64971f9ae05d0e28903594b243149bd7bf177937c5c65046788d81342cef13f68a3f9d61468171af7e4beeaed7ece11998659f"}}, 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 1.465374234s ago: executing program 2 (id=596): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005001400000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x40c0}, 0x80) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$vim2m(&(0x7f0000000080), 0x7fff, 0x2) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) 1.434883833s ago: executing program 1 (id=597): syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000"], 0x138) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0xfffffffc) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) socket$alg(0x26, 0x5, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) modify_ldt$read(0x0, 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000440)={r1, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$TIOCGPGRP(r8, 0x4c08, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) 1.341724079s ago: executing program 0 (id=598): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x7000000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) 1.281637169s ago: executing program 2 (id=599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001280)={@rand_addr, @local}, &(0x7f00000012c0)=0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x20, 0x0, 0xa, 0x0, 0x10, 0x87}, {0x4000000000021, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x27}, {0x0, 0x0, 0x80, 0x9}, 0xffffffc5, 0x1, 0x1, 0x0, 0x0, 0x3}, {{@in6=@local, 0x4d5, 0x2b}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3503, 0x2, 0x0, 0xb7, 0x1, 0x81}}, 0xe4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[r9], &(0x7f0000000040), 0x0, 0x300}) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000980)=0x1, 0x47) 1.050788466s ago: executing program 0 (id=600): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x922ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)=0x8268, 0x8, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x3}, 0xe) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.006473386s ago: executing program 3 (id=601): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000046c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000004c0)=0x1) 11.546947ms ago: executing program 2 (id=602): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400000000000000000200000024000480200001800b00010064796e7365740000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000001400000000000000000000000a00000000000000"], 0x78}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_disconnect(r1) syz_emit_ethernet(0x22, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x1, 0x14, 0x64, 0x0, 0x4, 0x89, 0x0, @rand_addr=0x64010102, @multicast1}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011000138e99ae440e0647a0a975279c21cee338b96ba3c84aab8cae5f626c7dfbd1058e76195c4bb018d7e86f39fff69a797c1fbc76cbf98fac749bc9d655459f73bf9f8c56ff1def043bd4bf66348a5966022e42e4f218ec1e0d368025db7ea3c6d50537c8333c7768f4e612a09812701892b6a64925c2b2099051010ef"], 0x7c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000007140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001040)={0x1f, 0x4}, 0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='contention_end\x00', r5}, 0x18) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f00000003c0)) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000400bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=603): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r1, 0x0}) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, r1, r2, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000240)={r4, r2, 0xc, 0xfffffffb, 0x2}) write$uinput_user_dev(r0, &(0x7f0000000280)={'syz0\x00', {0xb, 0x0, 0xa, 0x2}, 0x37, [0x6, 0x7, 0xff, 0x1, 0xc5c, 0x1, 0x1, 0x8001, 0x0, 0xf, 0x5, 0x2, 0x9, 0x2, 0x3, 0x80000001, 0x6, 0x5, 0x40, 0x0, 0x6, 0xfff, 0x7, 0x10001, 0x0, 0x3, 0x6, 0x80, 0x200, 0x2, 0xaac521d, 0x9, 0x6, 0x33, 0x7, 0xd, 0x80000001, 0x7, 0x4fe, 0x9, 0xfffff9e1, 0x3ff, 0x3, 0x80000000, 0x0, 0x80000000, 0xeb3c, 0x5, 0x1, 0x7, 0x8, 0x6, 0x6, 0x6, 0xb, 0x7, 0x44f2, 0x10001, 0xffffffff, 0x9, 0x10001, 0x7fffffff, 0x40, 0x495], [0x3, 0x2, 0x7, 0x1, 0x5, 0x9, 0x6, 0x9, 0x31f, 0x8, 0x9, 0xffffff3f, 0x2, 0x8, 0x2, 0x5, 0x8, 0x6, 0x1, 0x1, 0x3, 0x80000000, 0x3, 0x8000000, 0x3, 0x5, 0xfffffffe, 0x917e, 0x3, 0x9, 0x2, 0x2, 0x3, 0x10, 0x6, 0x4, 0x2, 0x3, 0x4, 0x6, 0x1, 0x634, 0x0, 0x9, 0x80000000, 0x10001, 0x5, 0x3, 0x1, 0x28000, 0x3, 0xf7, 0x0, 0x3ff, 0x4a7, 0x9, 0xd1c6, 0x294, 0x7ff, 0x5, 0x4, 0x0, 0x9, 0x75], [0x4, 0xc9d4, 0x9, 0x4e33, 0xfffffffe, 0x9, 0x0, 0x80, 0x9, 0x5, 0x7bce, 0x10001, 0x6, 0x8001, 0x40, 0x8, 0x8, 0x7, 0x9, 0xfffffff7, 0x276, 0x9, 0x2, 0x1, 0x0, 0xbcb7, 0x3, 0x7fff, 0x2e, 0xc, 0xd, 0x2, 0x7aa, 0x6, 0x9, 0xf7, 0x9aa, 0x3, 0x4, 0x2, 0x0, 0x7, 0x30000000, 0x1, 0x4, 0x0, 0x24a, 0xfffffe00, 0x8000, 0x6, 0x0, 0x200, 0xfffffff8, 0x5, 0x3, 0x7f, 0x4, 0x1ff, 0x8, 0xfffffffc, 0x38b2fe7e, 0x8, 0x2, 0x251], [0xe15, 0x1, 0x0, 0x800, 0x9, 0x0, 0x9abf, 0x2a44, 0x7, 0x80, 0xb9, 0x4, 0x8, 0x71, 0x7, 0x976, 0x8, 0xf7c, 0x1, 0x6, 0x8, 0x8, 0x1000, 0x1, 0x80000001, 0x100, 0x7df, 0x6, 0xffff, 0x4, 0x2, 0x2, 0x3, 0x80, 0x5, 0x9, 0x6, 0xff, 0x1, 0x519c, 0x3, 0xfffffff9, 0x6, 0x7ff, 0x10000000, 0xffffffff, 0x4, 0x0, 0x5, 0x7, 0x0, 0x100, 0x14, 0x0, 0x100, 0xb87f, 0x52e, 0x3a8ce265, 0x3ff, 0xa5c1, 0x0, 0xfffffffe, 0x10001, 0x3]}, 0x45c) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000780)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000980)={{r6, 0x40, 0x4, 0x3, 0x6, 0x401, 0xb, 0x4, 0x0, 0x802, 0x8, 0x5, 0xd, 0x6, 0xd}}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000001980), 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r5, {0xee00, 0x0}}, './file0\x00'}) stat(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = geteuid() mount$fuse(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x60000, &(0x7f0000001b40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7f}}], [{@dont_appraise}, {@fowner_gt={'fowner>', r12}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz0\x00'}}, {@obj_type={'obj_type', 0x3d, ':(^{\\%}+\xf1({'}}, {@flag='ro'}, {@permit_directio}, {@fsname={'fsname', 0x3d, '^&.'}}]}}) mount$cgroup(0x0, &(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0), 0x5041, &(0x7f0000001d00)={[{@release_agent={'release_agent', 0x3d, './file0'}}], [{@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '\'(\xa0'}}]}) syz_open_dev$video4linux(&(0x7f0000001d40), 0x0, 0x8e99e06a0e41fc13) syz_open_dev$sndpcmp(&(0x7f0000001d80), 0xf9, 0x2) unshare(0x10000000) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000001e00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001dc0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000001e40)={0xa, 0x4, 0xfa00, {r13}}, 0xc) lstat(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0), 0x8000, &(0x7f0000001fc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r14}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@audit}, {@uid_lt={'uid<', r9}}, {@fsname={'fsname', 0x3d, '^%}&'}}, {@subj_type={'subj_type', 0x3d, '/dev/v4l-subdev#\x00'}}, {@appraise}]}}) r15 = accept4$unix(r8, &(0x7f0000002140)=@abs, &(0x7f00000021c0)=0x6e, 0x80000) connect$unix(r15, &(0x7f0000002200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000022c0)={0x0, @broadcast, @broadcast}, &(0x7f0000002300)=0xc) sendmsg$nl_route_sched_retired(r8, &(0x7f0000003540)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003500)={&(0x7f0000002340)=@deltfilter={0x11c0, 0x2d, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {0xc, 0x8}, {0x3, 0xf}, {0xfff3, 0x6}}, [@f_rsvp6={{0xa}, {0x1190, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}}, @TCA_RSVP_POLICE={0x88, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x649d7e67, 0x0, 0x0, 0x6, 0x7, {0x6, 0x2, 0x8, 0x8, 0x1173, 0x3}, {0x7, 0x1, 0x400, 0x0, 0x1, 0xffff}, 0x8, 0x0, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x4, 0xfffffff7}, {0x7, 0x34000, 0xffffffff}, 0x11, 0x3, 0x2}}, @TCA_RSVP_ACT={0x3ac, 0x6, [@m_ctinfo={0x178, 0x1e, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xff, 0x5, 0x5, 0x9, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3ff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80dd}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x0, 0x4, 0x9, 0x4}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0xe1, 0x6, "5964321436691eb478d2269902ca158c8140871563d281662378dcdd08de64b77ef88fe666dce0f5d8c2c5287d6ba4d25f0c3adaae4c8307a0433f25c1efab52ba03a181a69e3e385d34c6c87c7e877932c01f326ed188b0252cac748cbd665031a160e4bb6d978e0a1d68eccdbe0ffff9e27edaa616014d115cde33b6053b5379233e00dab40b586b5576ff11e3fe74354d5f335b6c5bf1cc3afe7ddebb456d7d96ee56f0b3e871c9a20705c19f7dbfb493e6e5f383eed14add43c750ae2b4ce180523b0a8efe89e46164e58e278a47d12ca8da544616ca5fd60ef471"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x19c, 0x19, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x6, 0x7, 0x9d}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x0, 0x7, 0x7}, 0xfff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x6, 0x5, 0x1}, 0xfffe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x8, 0xffffffffffffffff, 0xfffffff9, 0xfffffff9}, 0x5e1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x4, 0x5, 0x62}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa8d, 0x7, 0x2, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x8, 0x10000000, 0xc, 0xe}, 0x7fff}}]}, {0xa7, 0x6, "bb7effe6d8dd3c69315c433e9af13512801c577635f5d5bbf381ab5ef05db06081dbcb3bccaa7178bc66f659b4124cf4a9ba6a3a656777e471f16135f37fbf8e377e64f6e1183b34c039fa6e497bd1f2803bd15d1d81fddfc988cfb6ac6807294b61b0b77bafc76c17563d6a962d49830eefe7470047ce9d875543c75b5b0a257a7471b39a9f33321da2c995c3800def4048a1b219709b984b84019e5e900238c4119e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x94, 0x10, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfff, 0x4, 0x10000000, 0x3, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000000, 0x2, 0x1, 0x8, 0x4}}]}, {0x38, 0x6, "bafd4683e740622cb12b673e5f0bbf2ca0b1389903043722028f66920b731941495ad8c513e8ad4a8d675f12945027098746807a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x81, 0x9}, {0x7, 0x2, 0x4}, 0x29, 0x7, 0xfa}}, @TCA_RSVP_POLICE={0x7c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3610a8fd3e0555aa, 0x8, 0x7, 0x4, {0x2, 0x2, 0x8, 0x6, 0x0, 0x1}, {0xd1, 0x0, 0x1901, 0xe, 0x32bf, 0x8}, 0xc, 0x6, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x4, 0x9, 0x7, 0xfffffffc, {0x73, 0x2, 0x2, 0x8, 0x1e, 0x3}, {0xaf, 0x0, 0x2, 0x4, 0x9, 0x80000000}, 0x9, 0x100, 0x7}}]}, @TCA_RSVP_SRC={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x38}}, @TCA_RSVP_POLICE={0xc4c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0x0, 0x2, 0x9, 0x1ff, 0x3, 0xd6b, 0xd, 0x2, 0x2, 0x1000, 0x5, 0x3, 0x188, 0x1, 0x401, 0x6, 0x100, 0x7, 0x6, 0x6, 0x8001, 0x10001, 0x81, 0x9888, 0x0, 0x1, 0x4, 0x6, 0x3, 0x3, 0x1, 0xfffff801, 0x3, 0x4, 0x1, 0xab7, 0x7f, 0x4, 0x4, 0xb6, 0x1, 0x4, 0x0, 0x9, 0xffffffff, 0x800, 0x7390, 0x4, 0xc0eb, 0x18000, 0xf, 0x1000, 0x2, 0x400, 0x6, 0x80000000, 0xffffffff, 0x1, 0xffffffff, 0x9, 0x101, 0xb9d, 0x2, 0x1, 0x3, 0x8, 0x2, 0xc, 0xffff, 0x90e, 0x9, 0x0, 0xff, 0xfff, 0x7, 0xffff, 0x4, 0x6, 0x6, 0x3ff, 0x1, 0x9, 0x2, 0x4, 0x2, 0x6, 0x9, 0xbb3, 0xa8, 0xc, 0x7, 0xfffffffd, 0x3, 0x3, 0x6, 0xc1e, 0x6d3, 0x2, 0x9, 0x4, 0x7f, 0x6, 0x101, 0x2, 0x3, 0x80000001, 0x2, 0x3, 0x1ff, 0x9, 0x2, 0x6, 0x8, 0xffffff81, 0x0, 0xb, 0xffffffff, 0x3197cd43, 0x8, 0x2, 0x1, 0x7, 0x3, 0x8, 0xffff, 0x5, 0x2, 0x8, 0x81, 0x2, 0x0, 0x7, 0x9d322b2, 0x9f1, 0xb1d, 0x2989, 0x80000001, 0x9, 0x5, 0x4, 0x9, 0x5, 0x9, 0xd0d, 0x8, 0xb963, 0x2, 0x5, 0x5, 0x2, 0x6, 0x80000001, 0x6, 0x7, 0x0, 0x2, 0x8, 0x6, 0x7, 0x1, 0x3, 0x10, 0x3, 0x7, 0x8, 0x8, 0xcc4668ce, 0xbd54, 0x7fffffff, 0xe0e2, 0x7fff, 0x2, 0xd5, 0x6, 0x8, 0x7fff, 0x3, 0x930, 0x7fffffff, 0x0, 0x9, 0x800, 0x8, 0x9, 0x4, 0x5, 0xd99, 0x9d88, 0xf10f, 0xdc5, 0x0, 0xfdc7, 0x800, 0x2, 0x0, 0x1d0, 0x0, 0x8753, 0xfa9e, 0x7fff, 0x22, 0x4, 0x1, 0x8, 0x7, 0x100, 0x293, 0x0, 0x3, 0x3, 0x49, 0x1ff, 0xd, 0xfe2, 0x4, 0x6, 0x1, 0x4, 0x1, 0x3, 0xaef, 0xb0, 0x400, 0x4, 0x7fffffff, 0x9, 0x2, 0x3, 0x9, 0x9, 0x8, 0x4, 0x5, 0xfffffffc, 0x100, 0x1, 0xfffffff7, 0x9, 0x5, 0x4, 0x0, 0x79c, 0xfffffff7, 0x3, 0xffffb3cb, 0xba5, 0x3, 0x3, 0x10001, 0xfffffffe, 0x8, 0xdeb3, 0x4, 0xe]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0x4, 0xfffffffe, 0x3, 0x7, 0xd, 0x1, 0x3, 0x1b, 0x4, 0x4, 0xfff, 0x4, 0xa, 0x7, 0xfa6, 0x3, 0x1, 0x9, 0x6, 0x6, 0xfffffff7, 0x5, 0xa6, 0x1, 0x10, 0x6, 0x6, 0x3, 0x4, 0x0, 0x2, 0x7, 0x1000, 0x7fff, 0x6, 0x7, 0x4, 0x0, 0x6, 0x7ff, 0x8, 0xd9b, 0x6, 0xfffffffe, 0x7, 0x4, 0x101, 0x10000, 0x1000, 0x7e, 0xffffffff, 0x5, 0xffffffff, 0x1ff, 0x6, 0x7cc, 0x800, 0x5, 0x9, 0xc, 0x2, 0x6, 0x800000, 0x80000001, 0x8, 0x0, 0x9, 0x4469, 0x2, 0x6, 0x800, 0x8001, 0xc, 0x9, 0x7fffffff, 0x10000, 0x42e, 0x6, 0xbae, 0x8, 0xcf, 0x9d9, 0x2, 0x7f, 0x6, 0x5, 0xffffffff, 0x5, 0x4, 0x7689, 0x9, 0x5, 0x52, 0x0, 0x8, 0x8, 0x45b5, 0x6, 0x7, 0x8000, 0x8, 0x1, 0xebd, 0x2, 0xffffffff, 0x0, 0x5, 0xffffffff, 0x2, 0x8, 0x5, 0x5, 0x7ff, 0x5, 0x2, 0x4, 0x8001, 0x1431, 0xca, 0xbd34, 0x5, 0xffffff00, 0x383, 0x7, 0x7f, 0x1ff, 0xb, 0x5, 0x3, 0x9, 0x0, 0x0, 0x9, 0x1ff, 0xfff, 0x7, 0x6, 0x8000, 0x4, 0x4, 0x4, 0x6, 0x7bb, 0x3, 0x4, 0xa57, 0x6, 0x81, 0x7, 0x10000, 0x80200000, 0x1, 0x9, 0x1000, 0x8, 0xa, 0x8, 0xff, 0x4, 0x7, 0x7fff, 0x1, 0x9, 0x0, 0xfffffffe, 0x3, 0x6, 0xb, 0x3, 0x1, 0x6, 0x2, 0x8, 0x2, 0xfff, 0x7fff, 0x0, 0xafac, 0x4, 0x8e2, 0x5, 0x8, 0x9, 0x5, 0xff, 0x6, 0x40, 0x0, 0x8, 0xf, 0x6, 0x2, 0x4, 0x40, 0x1, 0x2, 0x9, 0xff, 0x2, 0x7, 0x3, 0x6, 0x2, 0x8, 0x5, 0x7, 0x14e8, 0x373, 0x8, 0x3ff, 0x10000, 0x2, 0x2, 0xd, 0x9, 0x8, 0x80000000, 0xe, 0x3, 0x80, 0x9, 0x81, 0x3, 0xf, 0x5, 0x80000001, 0xffffff01, 0x2, 0x0, 0x9, 0x2, 0xd, 0x4, 0x0, 0x93f2, 0xffff, 0x7a, 0x6, 0xffffffff, 0x5, 0x7, 0x10, 0x6, 0x8, 0x4, 0x7, 0x1, 0x4, 0x7f, 0x101, 0x0, 0xdf2c, 0x3, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0xffffffffffffffff, 0x5, 0xf0dc, 0x212, {0x0, 0x2, 0xe51, 0x3ff, 0x8, 0x5}, {0x78, 0x0, 0x8, 0xff7f, 0x0, 0x5512}, 0xe4f, 0x8b1}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x5, 0x5, 0x3ff, 0x4, 0x6, 0xe, 0xff, 0x3, 0x9, 0x0, 0x3, 0x55, 0xbd, 0x7, 0x3, 0x4, 0x5, 0x9, 0x1, 0xff, 0x1, 0xfffffffd, 0x2, 0x4, 0x10000, 0xffffffff, 0x6, 0x8, 0x9078, 0xa9e, 0x7, 0x1d04, 0x0, 0x4, 0x0, 0x101, 0x3, 0xc7, 0x9, 0x106dec4f, 0x7, 0x2, 0x8, 0x2, 0x0, 0xff, 0x7bf, 0xfffffffa, 0x5, 0x31dca9c0, 0x9, 0x101, 0x4, 0x4, 0x1, 0x8, 0x8, 0x6, 0x6, 0x8000, 0xe4, 0x7, 0x800, 0x6bfd, 0x1ff, 0x8, 0x4, 0xd484, 0x6, 0x34, 0x2, 0x10001, 0xd, 0xfffffff8, 0x0, 0x401, 0x10000, 0x9, 0x2, 0x3, 0xd233, 0xfffffffb, 0x8, 0x6, 0xfffffeff, 0x9, 0x5, 0x8, 0x180000, 0xd40c, 0x3, 0xffffffff, 0x3, 0x100, 0x80, 0x0, 0xffff0000, 0x7, 0xe, 0xa3f9, 0x4, 0x8, 0x5, 0x3c8bfe1d, 0x7fffffff, 0x8, 0x0, 0x6, 0x9, 0x7, 0x5, 0xe, 0x1000, 0x8, 0x4481, 0x4, 0x1, 0x2, 0x4, 0x9ea, 0x9, 0x2, 0x4c, 0x3, 0x4, 0x7fffffff, 0x7, 0x1edc, 0x100, 0x2, 0x6, 0x100, 0x3, 0x8bd4, 0xe0, 0x80000000, 0x4, 0x1, 0x6, 0x5, 0x6, 0x2, 0xfffffff8, 0x5, 0x5, 0xe7, 0x7fff, 0x5, 0x8, 0x1, 0xab, 0x1, 0x3, 0x7ab, 0x80, 0x3, 0x7, 0x3, 0x2, 0x9, 0x3, 0xb, 0x1cf6, 0x3, 0x4, 0x6, 0x9, 0x5, 0x6, 0x10, 0x1ff, 0xaf91, 0xfffffffa, 0xfff, 0x2, 0x7, 0xcda, 0x9, 0x100, 0x0, 0x5, 0x9, 0x0, 0xc7a, 0x10, 0x7fff, 0x9, 0x63, 0x4, 0x80000001, 0xf1f, 0x3000, 0x55db, 0x0, 0x7, 0x0, 0xfffffe01, 0x0, 0x13, 0x4, 0x1, 0xc, 0xe, 0x1, 0x9, 0x0, 0xfffff001, 0x1, 0x0, 0x7, 0xa, 0x9, 0x7c, 0x10, 0x3e12, 0x40, 0x0, 0x0, 0x7, 0x0, 0x9, 0x2, 0x91, 0x5, 0x40, 0x8, 0x3, 0xff, 0x10001, 0x5, 0xb6, 0x8, 0x200, 0xddd, 0xfffffffa, 0x10, 0x51, 0x4, 0x5, 0x5, 0x3, 0x9, 0xcd3, 0x6e72d9bf, 0x4, 0x9, 0x8, 0xb5, 0x0, 0xfffffffc, 0x3ff, 0x5, 0x200, 0x0, 0x8d44]}]}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_RSVP_SRC={0x14, 0x3, @empty}]}}]}, 0x11c0}}, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000003580)=0xc5, 0x0, 0x4) kernel console output (not intermixed with test programs): pid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.517949][ T9] usb 2-1: Product: syz [ 95.527758][ T30] audit: type=1400 audit(1742587972.914:313): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2792 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.568446][ T9] usb 2-1: Manufacturer: syz [ 95.574450][ T9] usb 2-1: SerialNumber: syz [ 95.596316][ T9] usb 2-1: config 0 descriptor?? [ 95.761641][ T6474] netlink: 260 bytes leftover after parsing attributes in process `syz.4.172'. [ 95.775484][ T30] audit: type=1400 audit(1742587973.734:314): avc: denied { append } for pid=6471 comm="syz.2.171" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 95.799720][ T6473] netlink: 'syz.2.171': attribute type 9 has an invalid length. [ 95.807564][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 95.822532][ T6473] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.171'. [ 95.833115][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'. [ 95.874917][ T30] audit: type=1400 audit(1742587973.834:315): avc: denied { write } for pid=6471 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 95.876992][ T26] usb 2-1: USB disconnect, device number 6 [ 95.902359][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.171'. [ 96.951466][ T30] audit: type=1400 audit(1742587974.884:316): avc: denied { setopt } for pid=6490 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.991303][ T30] audit: type=1400 audit(1742587974.954:317): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.647327][ T30] audit: type=1400 audit(1742587975.604:318): avc: denied { read } for pid=6505 comm="syz.1.179" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.715311][ T30] audit: type=1400 audit(1742587975.604:319): avc: denied { open } for pid=6505 comm="syz.1.179" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.740422][ T30] audit: type=1400 audit(1742587975.644:320): avc: denied { ioctl } for pid=6505 comm="syz.1.179" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.773673][ T6489] sctp: [Deprecated]: syz.4.176 (pid 6489) Use of int in max_burst socket option deprecated. [ 97.773673][ T6489] Use struct sctp_assoc_value instead [ 98.340405][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.523359][ T6503] Set syz1 is full, maxelem 65536 reached [ 98.650979][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 98.738986][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 98.805184][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 100.322267][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.381281][ T26] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 100.417749][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.428195][ T26] usb 2-1: Product: syz [ 100.471993][ T26] usb 2-1: Manufacturer: syz [ 100.476636][ T26] usb 2-1: SerialNumber: syz [ 100.495474][ T26] usb 2-1: config 0 descriptor?? [ 100.633059][ T26] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected [ 100.653549][ T26] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 100.685735][ T26] usb 2-1: USB disconnect, device number 7 [ 101.245947][ T26] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 101.341482][ T26] kobil_sct 2-1:0.0: device disconnected [ 101.345919][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 101.345933][ T30] audit: type=1400 audit(1742587979.304:327): avc: denied { create } for pid=6531 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.411999][ T6539] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 101.455129][ T30] audit: type=1400 audit(1742587979.334:328): avc: denied { wake_alarm } for pid=6531 comm="syz.3.186" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.458437][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.187'. [ 101.485978][ T6543] xt_TCPMSS: Only works on TCP SYN packets [ 101.494390][ T30] audit: type=1400 audit(1742587979.414:329): avc: denied { setopt } for pid=6537 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.611054][ T30] audit: type=1400 audit(1742587979.564:330): avc: denied { create } for pid=6537 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.762027][ T30] audit: type=1400 audit(1742587980.724:331): avc: denied { write } for pid=6559 comm="syz.1.195" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.093188][ T6560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.421712][ T6560] bond0: (slave bond1): Enslaving as an active interface with an up link [ 103.539515][ T6557] Set syz1 is full, maxelem 65536 reached [ 104.853290][ T6576] 9pnet_fd: Insufficient options for proto=fd [ 104.860619][ T6576] capability: warning: `syz.0.199' uses deprecated v2 capabilities in a way that may be insecure [ 104.934687][ T30] audit: type=1400 audit(1742587982.894:332): avc: denied { create } for pid=6583 comm="syz.4.203" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.048605][ T30] audit: type=1400 audit(1742587982.994:333): avc: denied { mounton } for pid=6583 comm="syz.4.203" path="/31/file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.073819][ T6586] gfs2: gfs2 mount does not exist [ 105.150510][ T971] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.391908][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 105.401862][ T971] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 105.415179][ T971] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 105.428341][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.436771][ T971] usb 2-1: Product: syz [ 105.441404][ T971] usb 2-1: Manufacturer: syz [ 105.446719][ T971] usb 2-1: SerialNumber: syz [ 105.455991][ T971] usb 2-1: config 0 descriptor?? [ 105.463406][ T971] aircable 2-1:0.0: aircable converter detected [ 105.476811][ T971] usb 2-1: aircable converter now attached to ttyUSB0 [ 105.670641][ T971] usb 2-1: USB disconnect, device number 8 [ 105.683619][ T971] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 105.715131][ T971] aircable 2-1:0.0: device disconnected [ 105.789625][ T30] audit: type=1400 audit(1742587983.744:334): avc: denied { unlink } for pid=5829 comm="syz-executor" name="file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.998289][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.180504][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 106.210315][ T9] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 106.334045][ T9] usb 3-1: config 0 has no interface number 0 [ 106.435193][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 106.543101][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.575500][ T9] usb 3-1: Product: syz [ 106.587813][ T9] usb 3-1: Manufacturer: syz [ 106.608928][ T9] usb 3-1: SerialNumber: syz [ 106.775861][ T9] usb 3-1: config 0 descriptor?? [ 106.897157][ T6618] netlink: 80 bytes leftover after parsing attributes in process `syz.1.212'. [ 108.001810][ T6595] xt_TCPMSS: Only works on TCP SYN packets [ 108.090524][ T9] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 108.110385][ T9] usb 3-1: No streaming interface found for terminal 6. [ 108.161321][ T9] usb 3-1: USB disconnect, device number 6 [ 108.600540][ T26] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 109.207679][ T6647] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 109.220508][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 109.233820][ T26] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 109.251719][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.284797][ T26] usb 4-1: Product: syz [ 109.289020][ T26] usb 4-1: Manufacturer: syz [ 109.327255][ T26] usb 4-1: SerialNumber: syz [ 109.369241][ T6656] program syz.2.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.376204][ T26] usb 4-1: config 0 descriptor?? [ 109.424135][ T30] audit: type=1400 audit(1742587987.374:335): avc: denied { ioctl } for pid=6655 comm="syz.2.225" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.503097][ T6660] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 109.516761][ T6660] batman_adv: batadv0: Adding interface: gretap1 [ 109.544325][ T30] audit: type=1400 audit(1742587987.494:336): avc: denied { write } for pid=6655 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.575983][ T6660] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.641395][ T6660] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 109.694781][ T26] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 109.952108][ T30] audit: type=1326 audit(1742588243.911:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9e78d169 code=0x7fc00000 [ 110.030594][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 110.050128][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.318364][ T30] audit: type=1326 audit(1742588244.261:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c9e78d169 code=0x7fc00000 [ 110.348814][ T30] audit: type=1326 audit(1742588244.261:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9e78d169 code=0x7fc00000 [ 110.393270][ T30] audit: type=1326 audit(1742588244.261:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9e78d169 code=0x7fc00000 [ 110.475668][ T30] audit: type=1326 audit(1742588244.261:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9e78d169 code=0x7fc00000 [ 110.580034][ T30] audit: type=1326 audit(1742588244.261:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9e78d169 code=0x7fc00000 [ 110.670393][ T30] audit: type=1326 audit(1742588244.261:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9e78d169 code=0x7fc00000 [ 110.740661][ T30] audit: type=1326 audit(1742588244.261:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9e78d169 code=0x7fc00000 [ 111.060765][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.163247][ T6680] netlink: 68 bytes leftover after parsing attributes in process `syz.4.230'. [ 112.100795][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.125567][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.428052][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.459554][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.549225][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.597495][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.633065][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.701318][ T26] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 112.733902][ T26] usb 4-1: USB disconnect, device number 7 [ 113.012118][ T6702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.177005][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'. [ 114.113834][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.164593][ T6725] SELinux: ebitmap: truncated map [ 114.228160][ T6725] SELinux: failed to load policy [ 114.341468][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 114.356361][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.396732][ T9] usb 3-1: config 0 descriptor?? [ 114.641128][ T9] usb 3-1: USB disconnect, device number 7 [ 114.780650][ T5867] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.962670][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 115.023538][ T5867] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 115.101442][ T5867] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 115.140603][ T9] net_ratelimit: 2 callbacks suppressed [ 115.140624][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.151609][ T5867] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 115.202929][ T5867] usb 4-1: config 250 has no interface number 0 [ 115.209255][ T5867] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 115.222019][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.381016][ T5867] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 115.398292][ T5867] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.420357][ T5867] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 115.456557][ T5867] usb 4-1: config 250 interface 228 has no altsetting 0 [ 115.489766][ T5867] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 115.556205][ T6753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 115.570520][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 115.570652][ T30] audit: type=1400 audit(1742588249.501:410): avc: denied { name_bind } for pid=6749 comm="syz.2.254" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 115.595136][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 115.603497][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.670311][ T6754] mmap: syz.4.252 (6754) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.730871][ T30] audit: type=1400 audit(1742588249.511:411): avc: denied { listen } for pid=6749 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.785877][ T5867] usb 4-1: Product: syz [ 115.833919][ T5867] usb 4-1: SerialNumber: syz [ 115.932003][ T5867] hub 4-1:250.228: bad descriptor, ignoring hub [ 115.966479][ T5867] hub 4-1:250.228: probe with driver hub failed with error -5 [ 116.034758][ T6760] FAULT_INJECTION: forcing a failure. [ 116.034758][ T6760] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.072677][ T6760] CPU: 1 UID: 0 PID: 6760 Comm: syz.2.256 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 116.072704][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.072713][ T6760] Call Trace: [ 116.072718][ T6760] [ 116.072725][ T6760] dump_stack_lvl+0x16c/0x1f0 [ 116.072753][ T6760] should_fail_ex+0x50a/0x650 [ 116.072781][ T6760] _copy_from_user+0x2e/0xd0 [ 116.072797][ T6760] copy_msghdr_from_user+0x99/0x160 [ 116.072822][ T6760] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 116.072854][ T6760] ___sys_sendmsg+0xff/0x1e0 [ 116.072877][ T6760] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.072907][ T6760] ? __pfx_lock_release+0x10/0x10 [ 116.072929][ T6760] ? trace_lock_acquire+0x14e/0x1f0 [ 116.072952][ T6760] ? __fget_files+0x206/0x3a0 [ 116.072973][ T6760] __sys_sendmsg+0x16e/0x220 [ 116.072995][ T6760] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.073027][ T6760] do_syscall_64+0xcd/0x250 [ 116.073048][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.073069][ T6760] RIP: 0033:0x7f09fff8d169 [ 116.073080][ T6760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.073091][ T6760] RSP: 002b:00007f0a00eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.073104][ T6760] RAX: ffffffffffffffda RBX: 00007f0a001a5fa0 RCX: 00007f09fff8d169 [ 116.073113][ T6760] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 116.073122][ T6760] RBP: 00007f0a00eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.073132][ T6760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.073142][ T6760] R13: 0000000000000000 R14: 00007f0a001a5fa0 R15: 00007ffdcd2f6198 [ 116.073161][ T6760] [ 116.324123][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.540766][ T5948] usb 4-1: USB disconnect, device number 8 [ 116.731642][ T6768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6768 comm=syz.1.257 [ 116.746204][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.257'. [ 117.080608][ T5948] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 117.260378][ T5948] usb 4-1: Using ep0 maxpacket: 8 [ 117.271868][ T5948] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 117.290646][ T5948] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 117.299116][ T5948] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 117.328580][ T5948] usb 4-1: config 250 has no interface number 0 [ 117.362554][ T5948] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 117.389711][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.398134][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.412135][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.427677][ T5948] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.470423][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.497517][ T5948] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.546948][ T5948] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.575631][ T30] audit: type=1400 audit(1742588251.531:412): avc: denied { setopt } for pid=6781 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.603906][ T5948] usb 4-1: config 250 interface 228 has no altsetting 0 [ 117.625015][ T5948] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 117.640426][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 117.648930][ T5948] usb 4-1: Product: syz [ 117.657004][ T5948] usb 4-1: SerialNumber: syz [ 117.768092][ T5948] hub 4-1:250.228: bad descriptor, ignoring hub [ 118.179512][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.187580][ T5948] hub 4-1:250.228: probe with driver hub failed with error -5 [ 118.195077][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.203990][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.284206][ T5948] usb 4-1: USB disconnect, device number 9 [ 118.329711][ T6788] netlink: 'syz.3.265': attribute type 1 has an invalid length. [ 118.365439][ T6788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.265'. [ 118.536271][ T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.545115][ T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.560602][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.722688][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 118.738658][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.798862][ T26] usb 3-1: config 0 descriptor?? [ 119.108265][ T30] audit: type=1400 audit(1742588253.061:413): avc: denied { setopt } for pid=6801 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.232632][ T26] net_ratelimit: 1 callbacks suppressed [ 120.232653][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.268800][ T974] usb 3-1: USB disconnect, device number 8 [ 120.529652][ T30] audit: type=1326 audit(1742588254.481:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9e78d169 code=0x7ffc0000 [ 120.631043][ T30] audit: type=1326 audit(1742588254.481:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c9e78bad0 code=0x7ffc0000 [ 120.709637][ T30] audit: type=1326 audit(1742588254.481:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9e78d169 code=0x7ffc0000 [ 120.906379][ T6742] Set syz1 is full, maxelem 65536 reached [ 120.913075][ T30] audit: type=1326 audit(1742588254.491:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c9e78d169 code=0x7ffc0000 [ 120.989846][ T30] audit: type=1326 audit(1742588254.491:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9e78d169 code=0x7ffc0000 [ 121.232338][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.292078][ T30] audit: type=1326 audit(1742588254.491:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4c9e78d169 code=0x7ffc0000 [ 121.484136][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.501597][ T30] audit: type=1326 audit(1742588254.491:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9e78d169 code=0x7ffc0000 [ 121.536634][ T30] audit: type=1326 audit(1742588254.491:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c9e78d169 code=0x7ffc0000 [ 121.570364][ T30] audit: type=1326 audit(1742588254.491:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9e78d169 code=0x7ffc0000 [ 121.621952][ T26] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 121.642580][ T30] audit: type=1326 audit(1742588254.491:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4c9e78d169 code=0x7ffc0000 [ 121.691757][ T30] audit: type=1400 audit(1742588254.721:424): avc: denied { name_connect } for pid=6811 comm="syz.4.274" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 121.725288][ T6826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.793996][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.822540][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.860790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.893685][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.946986][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.977688][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.004429][ T26] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.078011][ T6826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.091430][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.101371][ T6847] netlink: 3 bytes leftover after parsing attributes in process `syz.4.284'. [ 122.268116][ T26] usb 2-1: config 0 descriptor?? [ 122.387064][ T6826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.493361][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 122.504120][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.530765][ T26] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 122.563680][ T6826] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.584261][ T26] usb 2-1: USB disconnect, device number 9 [ 122.826726][ T6826] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.891999][ T6826] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.912072][ T6826] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.921674][ T6826] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.978979][ T5831] Bluetooth: hci4: link tx timeout [ 122.984719][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.995416][ T5824] Bluetooth: hci4: link tx timeout [ 123.001943][ T5824] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.061531][ T26] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 123.070438][ T5821] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 123.078299][ T5824] Bluetooth: hci4: link tx timeout [ 123.084723][ T5824] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.110494][ T5824] Bluetooth: hci4: link tx timeout [ 123.115778][ T5824] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.144256][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.153473][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.173251][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 123.182500][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.260518][ T5821] usb 5-1: device descriptor read/64, error -71 [ 123.313177][ T26] usb 2-1: device descriptor read/64, error -71 [ 123.678835][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.699327][ T5821] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 123.770658][ T5896] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.813859][ T26] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 123.890366][ T5821] usb 5-1: device descriptor read/64, error -71 [ 123.944649][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 123.956017][ T5896] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 123.960402][ T26] usb 2-1: device descriptor read/64, error -71 [ 123.980199][ T5896] usb 4-1: config 0 has no interface number 0 [ 124.000669][ T5821] usb usb5-port1: attempt power cycle [ 124.020163][ T5896] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 124.032624][ T5824] Bluetooth: hci4: link tx timeout [ 124.038404][ T5824] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.050022][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.076368][ T5896] usb 4-1: Product: syz [ 124.091245][ T26] usb usb2-port1: attempt power cycle [ 124.095718][ T5896] usb 4-1: Manufacturer: syz [ 124.123000][ T5896] usb 4-1: SerialNumber: syz [ 124.136142][ T5896] usb 4-1: config 0 descriptor?? [ 124.170494][ T5824] Bluetooth: hci4: link tx timeout [ 124.176213][ T5824] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.193438][ T6917] xt_TCPMSS: Only works on TCP SYN packets [ 124.299389][ T5824] Bluetooth: hci4: link tx timeout [ 124.305543][ T5824] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.481934][ T6922] input: syz0 as /devices/virtual/input/input7 [ 125.081898][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 125.100334][ T5821] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 125.111258][ T5824] Bluetooth: hci4: link tx timeout [ 125.139766][ T5824] Bluetooth: hci4: link tx timeout [ 125.152616][ T5821] usb 5-1: device descriptor read/8, error -71 [ 125.263824][ T6888] xt_TCPMSS: Only works on TCP SYN packets [ 125.301869][ T5896] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 125.308630][ T5896] usb 4-1: No streaming interface found for terminal 6. [ 125.334394][ T5896] usb 4-1: USB disconnect, device number 10 [ 125.420415][ T5821] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 125.456550][ T5821] usb 5-1: device descriptor read/8, error -71 [ 126.115384][ T5821] usb usb5-port1: unable to enumerate USB device [ 126.231021][ T26] net_ratelimit: 4 callbacks suppressed [ 126.231039][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.935604][ T6945] 9pnet_fd: Insufficient options for proto=fd [ 126.943793][ T6945] netlink: 'syz.0.306': attribute type 21 has an invalid length. [ 126.960563][ T6945] netlink: 'syz.0.306': attribute type 20 has an invalid length. [ 126.969937][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 126.969949][ T30] audit: type=1400 audit(1742588260.921:447): avc: denied { read } for pid=6947 comm="syz.4.307" dev="sockfs" ino=12719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.016398][ T6949] loop6: detected capacity change from 0 to 64 [ 127.024725][ T6945] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.054074][ T30] audit: type=1400 audit(1742588260.961:448): avc: denied { write } for pid=6948 comm=6C2586CE36DB0CCF197CC94F7FCE8F name="001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 127.054169][ C0] blk_print_req_error: 7 callbacks suppressed [ 127.054183][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 127.094786][ T30] audit: type=1400 audit(1742588260.961:449): avc: denied { map } for pid=6948 comm=6C2586CE36DB0CCF197CC94F7FCE8F path="/dev/bus/usb/003/001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 127.122672][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.124261][ T30] audit: type=1400 audit(1742588261.001:450): avc: denied { map } for pid=6947 comm="syz.4.307" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.131883][ C1] buffer_io_error: 7 callbacks suppressed [ 127.131896][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.169712][ T30] audit: type=1400 audit(1742588261.001:451): avc: denied { execute } for pid=6947 comm="syz.4.307" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.198847][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.208115][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.218162][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.227412][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.238816][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.248084][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.263340][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.272616][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.291088][ T6960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.301312][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.309479][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.314702][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.326842][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.336290][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.345527][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 127.354022][ T30] audit: type=1400 audit(1742588261.151:452): avc: denied { map } for pid=6944 comm="syz.0.306" path="/70/file0" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 127.381011][ T30] audit: type=1400 audit(1742588261.151:453): avc: denied { execute } for pid=6944 comm="syz.0.306" path="/70/file0" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 127.472546][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.503988][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.121190][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.130397][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.341141][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.439551][ T30] audit: type=1400 audit(1742588262.391:454): avc: denied { mount } for pid=6974 comm="syz.4.316" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 128.463305][ T26] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 129.025027][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.037777][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.110480][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.122030][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.128694][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 129.160383][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.170097][ T26] usb 2-1: config 0 descriptor?? [ 129.382355][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.412745][ T971] usb 2-1: USB disconnect, device number 13 [ 129.950522][ T5896] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.064724][ T6995] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 130.107592][ T30] audit: type=1400 audit(1742588264.061:455): avc: denied { mount } for pid=6996 comm="syz.1.320" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 130.111404][ T6997] overlayfs: overlapping lowerdir path [ 130.163557][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 130.176331][ T30] audit: type=1400 audit(1742588264.061:456): avc: denied { unmount } for pid=6996 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 130.191199][ T5896] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 130.219578][ T5896] usb 3-1: config 0 has no interface number 0 [ 130.255940][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 130.266141][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.289273][ T5896] usb 3-1: Product: syz [ 130.300413][ T5896] usb 3-1: Manufacturer: syz [ 130.305908][ T5896] usb 3-1: SerialNumber: syz [ 130.322429][ T5896] usb 3-1: config 0 descriptor?? [ 130.406770][ T7005] netlink: 312 bytes leftover after parsing attributes in process `syz.4.322'. [ 130.510690][ T7012] cgroup: Invalid name [ 130.517062][ T7012] fuse: Unknown parameter '017777777777777777777770xffffffffffffffff18446744073709551615ùœuôwÒ¡^äž„RŽ@jå p6F(RQ¤¬ÏÒyÐuڠ߯¬œ)±1§-¡ƒ}/ãCcœé™_È("l“ÄœJi޾ZÎSšŠÀvå‰Ì2°ËÁXè¨8:‹^¥ÊQ*Zô塹˜uV] ÚùˆRh­¸„AÜàX— [ 130.517062][ T7012] ' [ 130.576750][ T6985] xt_TCPMSS: Only works on TCP SYN packets [ 130.595762][ T5896] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 130.611510][ T5896] usb 3-1: No streaming interface found for terminal 6. [ 130.643979][ T5896] usb 3-1: USB disconnect, device number 9 [ 130.788636][ T7024] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 131.015474][ T7031] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 131.137712][ T7028] overlayfs: failed to clone upperpath [ 131.464063][ T5867] net_ratelimit: 3 callbacks suppressed [ 131.464079][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.601043][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.606540][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 132.606554][ T30] audit: type=1400 audit(1742588266.561:459): avc: denied { unlink } for pid=5823 comm="syz-executor" name="file1" dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 132.733266][ T30] audit: type=1400 audit(1742588266.631:460): avc: denied { read } for pid=7047 comm="syz.2.339" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 132.761652][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.772182][ T30] audit: type=1400 audit(1742588266.641:461): avc: denied { open } for pid=7047 comm="syz.2.339" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 132.939737][ T30] audit: type=1400 audit(1742588266.781:462): avc: denied { mounton } for pid=7047 comm="syz.2.339" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 133.692271][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.701048][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.711846][ T30] audit: type=1400 audit(1742588267.601:463): avc: denied { ioctl } for pid=7059 comm="syz.3.340" path="socket:[13123]" dev="sockfs" ino=13123 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.878582][ T7071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.033052][ T6158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.181672][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.198151][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.208368][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.240414][ T5821] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 134.551898][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 134.590389][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 134.657926][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12408, setting to 64 [ 134.669660][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.682080][ T5821] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 134.691405][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.699413][ T5821] usb 4-1: Product: syz [ 134.703753][ T5821] usb 4-1: Manufacturer: syz [ 134.708373][ T5821] usb 4-1: SerialNumber: syz [ 134.716280][ T5821] usb 4-1: config 0 descriptor?? [ 134.725430][ T5821] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0230 [ 134.800991][ T30] audit: type=1400 audit(1742588268.761:464): avc: denied { getopt } for pid=7086 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 134.992484][ T7109] warning: `syz.0.348' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.060510][ T5821] usb 4-1: USB disconnect, device number 11 [ 135.093498][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.137642][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.325437][ T971] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 136.658904][ T7139] net_ratelimit: 3 callbacks suppressed [ 136.658919][ T7139] Set syz1 is full, maxelem 65536 reached [ 137.067200][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.075408][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.273988][ T7157] 9pnet_fd: Insufficient options for proto=fd [ 137.388893][ T30] audit: type=1400 audit(1742588271.341:465): avc: denied { mount } for pid=7159 comm="syz.3.359" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 137.420510][ T5821] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.432447][ T30] audit: type=1400 audit(1742588271.381:466): avc: denied { ioctl } for pid=7161 comm="syz.1.360" path="socket:[13302]" dev="sockfs" ino=13302 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.670830][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.690363][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 138.706763][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.725922][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.055446][ T30] audit: type=1400 audit(1742588273.001:467): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 139.132037][ T5821] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 139.141398][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.158332][ T5821] usb 3-1: config 0 descriptor?? [ 139.176593][ T30] audit: type=1400 audit(1742588273.131:468): avc: denied { bind } for pid=7178 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.529427][ T30] audit: type=1400 audit(1742588273.481:469): avc: denied { create } for pid=7180 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.989439][ T5821] logitech 0003:046D:C24F.0002: unknown main item tag 0x0 [ 140.006130][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.015092][ T5821] logitech 0003:046D:C24F.0002: unknown main item tag 0x0 [ 140.018909][ T7180] delete_channel: no stack [ 140.023077][ T5821] logitech 0003:046D:C24F.0002: unknown main item tag 0x0 [ 140.035344][ T5821] logitech 0003:046D:C24F.0002: unknown main item tag 0x0 [ 140.039174][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.060378][ T5821] logitech 0003:046D:C24F.0002: unknown main item tag 0x0 [ 140.092448][ T30] audit: type=1400 audit(1742588273.481:470): avc: denied { getopt } for pid=7180 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.131455][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.157349][ T30] audit: type=1400 audit(1742588274.031:471): avc: denied { shutdown } for pid=7146 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.162748][ T5821] logitech 0003:046D:C24F.0002: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.2-1/input0 [ 140.178112][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.520956][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.618531][ T5821] logitech 0003:046D:C24F.0002: no inputs found [ 140.791235][ T7203] input: syz1 as /devices/virtual/input/input8 [ 140.947432][ T5948] usb 3-1: USB disconnect, device number 10 [ 141.005815][ T7209] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 141.063048][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.292826][ T30] audit: type=1400 audit(1742588275.251:472): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 141.356163][ T30] audit: type=1326 audit(1742588275.311:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee58f8d169 code=0x7ffc0000 [ 141.408925][ T30] audit: type=1326 audit(1742588275.311:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee58f8d169 code=0x7ffc0000 [ 141.496492][ T30] audit: type=1326 audit(1742588275.311:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fee58f8d169 code=0x7ffc0000 [ 141.590378][ T30] audit: type=1326 audit(1742588275.311:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee58f8d169 code=0x7ffc0000 [ 141.706678][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.199413][ T7250] overlay: Bad value for 'xino' [ 142.518622][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.272683][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.359251][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 143.404388][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 143.418298][ T7245] ceph: No mds server is up or the cluster is laggy [ 143.825311][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 143.856099][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 143.862377][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.911757][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'. [ 143.985834][ T7274] netlink: 104 bytes leftover after parsing attributes in process `syz.0.381'. [ 144.061413][ T5867] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 144.207131][ T5867] usb 2-1: device descriptor read/64, error -71 [ 144.280703][ T26] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 144.482179][ T5867] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 144.512091][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 144.535072][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.553760][ T26] usb 4-1: config 0 descriptor?? [ 144.564177][ T26] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 144.801922][ T5867] usb 2-1: device descriptor read/64, error -71 [ 144.901451][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.033951][ T5867] usb usb2-port1: attempt power cycle [ 145.511844][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 145.511861][ T30] audit: type=1400 audit(1742588279.461:500): avc: denied { map } for pid=7292 comm="syz.4.389" path="socket:[14471]" dev="sockfs" ino=14471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.547508][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.566097][ T30] audit: type=1400 audit(1742588279.461:501): avc: denied { accept } for pid=7292 comm="syz.4.389" path="socket:[14471]" dev="sockfs" ino=14471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.610467][ T5867] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 145.712063][ T5867] usb 2-1: device descriptor read/8, error -71 [ 145.956726][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.031260][ T5867] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 146.076684][ T5867] usb 2-1: device descriptor read/8, error -71 [ 146.213148][ T5867] usb usb2-port1: unable to enumerate USB device [ 146.213667][ T3565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.228442][ T26] gspca_stv06xx: HDCS-1020 sensor detected [ 146.505774][ T26] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 146.554501][ T26] usb 4-1: USB disconnect, device number 12 [ 146.644518][ T30] audit: type=1400 audit(1742588280.581:502): avc: denied { bind } for pid=7305 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.729625][ T30] audit: type=1400 audit(1742588280.681:503): avc: denied { associate } for pid=7320 comm="syz.0.396" name="file0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 146.916936][ T30] audit: type=1400 audit(1742588280.871:504): avc: denied { mounton } for pid=7320 comm="syz.0.396" path="/file0" dev="rootfs" ino=14513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 146.980663][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.170768][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.184294][ T5896] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 149.180294][ T30] audit: type=1400 audit(1742588283.071:505): avc: denied { module_request } for pid=7330 comm="syz.4.400" kmod="iptable_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 149.215661][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.224166][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.755802][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.761030][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.788554][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.886346][ T5896] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 149.930432][ T5896] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 149.938450][ T5896] usb 4-1: Manufacturer: syz [ 150.022784][ T5896] usb 4-1: config 0 descriptor?? [ 150.620174][ T5831] Bluetooth: hci5: sending frame failed (-49) [ 150.627410][ T5896] cougar 0003:060B:700A.0003: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 150.628193][ T5824] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 150.661012][ T6158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.821829][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.932699][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.958154][ T30] audit: type=1400 audit(1742588284.901:506): avc: denied { ioctl } for pid=7361 comm="syz.1.408" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 150.983030][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.141721][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.391839][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 151.555879][ T7379] netlink: 180 bytes leftover after parsing attributes in process `syz.4.411'. [ 151.622056][ T26] usb 4-1: USB disconnect, device number 13 [ 151.626170][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 151.649265][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 151.716651][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.737124][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.746626][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.786478][ T9] usb 3-1: Product: à  [ 151.813010][ T9] usb 3-1: Manufacturer: á´îž¨á²°â—뚎യ [ 151.818977][ T9] usb 3-1: SerialNumber:  [ 151.820706][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 151.860897][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.952174][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.043253][ T9] usb 3-1: 0:2 : does not exist [ 152.091009][ T9] usb 3-1: USB disconnect, device number 11 [ 152.301685][ T6088] udevd[6088]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.040237][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.530197][ T7401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.014122][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.130756][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.314119][ T30] audit: type=1400 audit(1742588288.271:507): avc: denied { setopt } for pid=7407 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.332328][ T7410] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 154.386762][ T30] audit: type=1400 audit(1742588288.341:508): avc: denied { create } for pid=7411 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 154.440940][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'. [ 154.446423][ T30] audit: type=1400 audit(1742588288.341:509): avc: denied { ioctl } for pid=7411 comm="syz.1.421" path="socket:[14680]" dev="sockfs" ino=14680 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 154.476125][ T7410] lo speed is unknown, defaulting to 1000 [ 154.480228][ T7417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.483476][ T7410] lo speed is unknown, defaulting to 1000 [ 154.498724][ T7410] lo speed is unknown, defaulting to 1000 [ 154.509875][ T7410] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.524755][ T7410] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 154.527544][ T7420] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 154.552478][ T30] audit: type=1400 audit(1742588288.351:510): avc: denied { write } for pid=7411 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 154.554413][ T7421] autofs: Bad value for 'fd' [ 154.573254][ T30] audit: type=1400 audit(1742588288.501:511): avc: denied { write } for pid=7416 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.609265][ T7410] lo speed is unknown, defaulting to 1000 [ 154.619601][ T7410] lo speed is unknown, defaulting to 1000 [ 154.626459][ T7410] lo speed is unknown, defaulting to 1000 [ 154.633401][ T7410] lo speed is unknown, defaulting to 1000 [ 154.642267][ T7410] lo speed is unknown, defaulting to 1000 [ 154.690020][ T30] audit: type=1400 audit(1742588288.641:512): avc: denied { bind } for pid=7407 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.709728][ T5866] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 154.920588][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.954258][ T5866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.955857][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 155.581647][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 155.692648][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.738426][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.874656][ T5866] usb 3-1: Product: syz [ 155.923219][ T5866] usb 3-1: Manufacturer: syz [ 155.928204][ T5866] usb 3-1: SerialNumber: syz [ 156.158992][ T30] audit: type=1400 audit(1742588290.111:513): avc: denied { getopt } for pid=7437 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.260410][ T5821] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 156.421206][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.673586][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.688221][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.698877][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.713518][ T5821] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 156.724048][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.754267][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.761407][ T5821] usb 5-1: config 0 descriptor?? [ 156.919848][ T5821] qmi_wwan 5-1:0.0: bogus CDC Union: master=0, slave=40 [ 157.053913][ T5821] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 157.199036][ T30] audit: type=1400 audit(1742588291.151:514): avc: denied { block_suspend } for pid=7432 comm="syz.4.426" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 157.293690][ T5821] usb 5-1: USB disconnect, device number 18 [ 157.325339][ T5866] cdc_ncm 3-1:1.0: failed to get mac address [ 157.474141][ T30] audit: type=1400 audit(1742588291.431:515): avc: denied { getattr } for pid=7455 comm="syz.3.435" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 157.524273][ T7458] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 157.548282][ T5866] cdc_ncm 3-1:1.0: bind() failure [ 157.559971][ T5866] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 157.570664][ T5866] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 157.579686][ T5866] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 157.592740][ T5866] usb 3-1: USB disconnect, device number 12 [ 157.752641][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.780849][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.825918][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.873616][ T7474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.924205][ T30] audit: type=1400 audit(1742588292.861:516): avc: denied { open } for pid=7476 comm="syz.4.441" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 158.969789][ T30] audit: type=1400 audit(1742588292.881:517): avc: denied { ioctl } for pid=7476 comm="syz.4.441" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 159.066732][ T30] audit: type=1400 audit(1742588292.921:518): avc: denied { setopt } for pid=7470 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.132986][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 159.193551][ T5896] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 159.601313][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 159.601326][ T5866] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 159.614232][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.626903][ T5896] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 159.635459][ T5896] usb 4-1: config 0 has no interface number 0 [ 159.643842][ T5896] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 159.653443][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.661713][ T5896] usb 4-1: Product: syz [ 159.666054][ T5896] usb 4-1: Manufacturer: syz [ 159.670813][ T5896] usb 4-1: SerialNumber: syz [ 159.677404][ T5896] usb 4-1: config 0 descriptor?? [ 159.753382][ T5866] usb 5-1: config 0 has no interfaces? [ 159.780791][ T5866] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 159.790642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.799296][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.863365][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.891443][ T5866] usb 5-1: Product: syz [ 159.900416][ T30] audit: type=1400 audit(1742588293.851:519): avc: denied { append } for pid=7492 comm="syz.1.446" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 159.904876][ T5866] usb 5-1: Manufacturer: syz [ 160.210475][ T5866] usb 5-1: SerialNumber: syz [ 160.223641][ T5866] usb 5-1: config 0 descriptor?? [ 160.383463][ T7475] xt_TCPMSS: Only works on TCP SYN packets [ 160.432702][ T5896] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 160.442041][ T5896] usb 4-1: No streaming interface found for terminal 6. [ 160.454233][ T5896] usb 4-1: USB disconnect, device number 14 [ 160.835370][ T5866] usb 5-1: USB disconnect, device number 19 [ 160.962407][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.648885][ T5866] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 161.858824][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 161.910750][ T5866] usb 3-1: device descriptor read/64, error -71 [ 161.964328][ T7535] netlink: 'syz.3.460': attribute type 13 has an invalid length. [ 161.985005][ T30] audit: type=1400 audit(1742588295.941:520): avc: denied { getopt } for pid=7536 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.020771][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.084573][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.093684][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.160889][ T5866] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 162.177325][ T7533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.185683][ T6566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.199512][ T7533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.300699][ T5866] usb 3-1: device descriptor read/64, error -71 [ 162.339169][ T7533] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.350732][ T7533] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.359630][ T7533] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.371592][ T7533] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.431918][ T5866] usb usb3-port1: attempt power cycle [ 162.564828][ T7550] FAULT_INJECTION: forcing a failure. [ 162.564828][ T7550] name failslab, interval 1, probability 0, space 0, times 0 [ 162.600456][ T7550] CPU: 1 UID: 0 PID: 7550 Comm: syz.4.464 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 162.600482][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.600493][ T7550] Call Trace: [ 162.600498][ T7550] [ 162.600504][ T7550] dump_stack_lvl+0x16c/0x1f0 [ 162.600530][ T7550] should_fail_ex+0x50a/0x650 [ 162.600550][ T7550] ? fs_reclaim_acquire+0xae/0x150 [ 162.600570][ T7550] ? tomoyo_encode2+0x100/0x3e0 [ 162.600588][ T7550] should_failslab+0xc2/0x120 [ 162.600603][ T7550] __kmalloc_noprof+0xcb/0x510 [ 162.600617][ T7550] ? rcu_is_watching+0x12/0xc0 [ 162.600632][ T7550] tomoyo_encode2+0x100/0x3e0 [ 162.600653][ T7550] tomoyo_encode+0x29/0x50 [ 162.600673][ T7550] tomoyo_realpath_from_path+0x19d/0x720 [ 162.600692][ T7550] ? tomoyo_path_number_perm+0x235/0x590 [ 162.600710][ T7550] tomoyo_path_number_perm+0x248/0x590 [ 162.600724][ T7550] ? tomoyo_path_number_perm+0x235/0x590 [ 162.600741][ T7550] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.600773][ T7550] ? __pfx_lock_release+0x10/0x10 [ 162.600790][ T7550] ? trace_lock_acquire+0x14e/0x1f0 [ 162.600806][ T7550] ? lock_acquire+0x2f/0xb0 [ 162.600822][ T7550] ? __fget_files+0x40/0x3a0 [ 162.600837][ T7550] ? __fget_files+0x206/0x3a0 [ 162.600852][ T7550] security_file_ioctl+0x9b/0x240 [ 162.600870][ T7550] __x64_sys_ioctl+0xb7/0x200 [ 162.600889][ T7550] do_syscall_64+0xcd/0x250 [ 162.600907][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.600925][ T7550] RIP: 0033:0x7f4c9e78d169 [ 162.600935][ T7550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.600947][ T7550] RSP: 002b:00007f4c9f636038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.600961][ T7550] RAX: ffffffffffffffda RBX: 00007f4c9e9a5fa0 RCX: 00007f4c9e78d169 [ 162.600970][ T7550] RDX: 0000200000000100 RSI: 00000000000089e3 RDI: 0000000000000004 [ 162.600977][ T7550] RBP: 00007f4c9f636090 R08: 0000000000000000 R09: 0000000000000000 [ 162.600985][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.600992][ T7550] R13: 0000000000000000 R14: 00007f4c9e9a5fa0 R15: 00007fff83985e58 [ 162.601009][ T7550] [ 162.826324][ T7550] ERROR: Out of memory at tomoyo_realpath_from_path. [ 162.854820][ T9] IPVS: starting estimator thread 0... [ 162.913800][ T5866] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.962654][ T7553] IPVS: using max 28 ests per chain, 67200 per kthread [ 163.030067][ T5866] usb 3-1: device descriptor read/8, error -71 [ 163.072273][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.356192][ T30] audit: type=1400 audit(1742588297.301:521): avc: denied { create } for pid=7558 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.390380][ T5866] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 163.421535][ T5866] usb 3-1: device descriptor read/8, error -71 [ 163.428861][ T30] audit: type=1400 audit(1742588297.301:522): avc: denied { bind } for pid=7558 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.461954][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.544062][ T5866] usb usb3-port1: unable to enumerate USB device [ 163.710616][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 163.802153][ T7574] FAULT_INJECTION: forcing a failure. [ 163.802153][ T7574] name failslab, interval 1, probability 0, space 0, times 0 [ 163.815247][ T7574] CPU: 1 UID: 0 PID: 7574 Comm: syz.4.473 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 163.815268][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.815275][ T7574] Call Trace: [ 163.815280][ T7574] [ 163.815284][ T7574] dump_stack_lvl+0x16c/0x1f0 [ 163.815310][ T7574] should_fail_ex+0x50a/0x650 [ 163.815331][ T7574] ? fs_reclaim_acquire+0xae/0x150 [ 163.815352][ T7574] should_failslab+0xc2/0x120 [ 163.815369][ T7574] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 163.815384][ T7574] ? __alloc_skb+0x2b1/0x380 [ 163.815408][ T7574] __alloc_skb+0x2b1/0x380 [ 163.815427][ T7574] ? __pfx___alloc_skb+0x10/0x10 [ 163.815450][ T7574] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 163.815474][ T7574] netlink_alloc_large_skb+0x69/0x130 [ 163.815490][ T7574] netlink_sendmsg+0x689/0xd70 [ 163.815506][ T7574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.815524][ T7574] ____sys_sendmsg+0xaaf/0xc90 [ 163.815536][ T7574] ? copy_msghdr_from_user+0x10b/0x160 [ 163.815551][ T7574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.815568][ T7574] ___sys_sendmsg+0x135/0x1e0 [ 163.815583][ T7574] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.815603][ T7574] ? __pfx_lock_release+0x10/0x10 [ 163.815617][ T7574] ? trace_lock_acquire+0x14e/0x1f0 [ 163.815632][ T7574] ? __fget_files+0x206/0x3a0 [ 163.815646][ T7574] __sys_sendmsg+0x16e/0x220 [ 163.815661][ T7574] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.815683][ T7574] do_syscall_64+0xcd/0x250 [ 163.815698][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.815714][ T7574] RIP: 0033:0x7f4c9e78d169 [ 163.815723][ T7574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.815734][ T7574] RSP: 002b:00007f4c9f636038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.815744][ T7574] RAX: ffffffffffffffda RBX: 00007f4c9e9a5fa0 RCX: 00007f4c9e78d169 [ 163.815750][ T7574] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 163.815756][ T7574] RBP: 00007f4c9f636090 R08: 0000000000000000 R09: 0000000000000000 [ 163.815762][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.815767][ T7574] R13: 0000000000000000 R14: 00007f4c9e9a5fa0 R15: 00007fff83985e58 [ 163.815779][ T7574] [ 163.870593][ T9] usb 2-1: device descriptor read/64, error -71 [ 164.100687][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.109694][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.444645][ T7581] FAULT_INJECTION: forcing a failure. [ 164.444645][ T7581] name failslab, interval 1, probability 0, space 0, times 0 [ 164.532741][ T7581] CPU: 0 UID: 0 PID: 7581 Comm: syz.4.475 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 164.532770][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.532780][ T7581] Call Trace: [ 164.532786][ T7581] [ 164.532793][ T7581] dump_stack_lvl+0x16c/0x1f0 [ 164.532824][ T7581] should_fail_ex+0x50a/0x650 [ 164.532850][ T7581] ? fs_reclaim_acquire+0xae/0x150 [ 164.532877][ T7581] ? tomoyo_encode2+0x100/0x3e0 [ 164.532900][ T7581] should_failslab+0xc2/0x120 [ 164.532920][ T7581] __kmalloc_noprof+0xcb/0x510 [ 164.532936][ T7581] ? d_absolute_path+0x137/0x1b0 [ 164.532957][ T7581] ? rcu_is_watching+0x12/0xc0 [ 164.532978][ T7581] tomoyo_encode2+0x100/0x3e0 [ 164.533005][ T7581] tomoyo_encode+0x29/0x50 [ 164.533027][ T7581] tomoyo_realpath_from_path+0x19d/0x720 [ 164.533059][ T7581] tomoyo_path_number_perm+0x248/0x590 [ 164.533079][ T7581] ? tomoyo_path_number_perm+0x235/0x590 [ 164.533103][ T7581] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.533147][ T7581] ? __pfx_lock_release+0x10/0x10 [ 164.533171][ T7581] ? trace_lock_acquire+0x14e/0x1f0 [ 164.533191][ T7581] ? lock_acquire+0x2f/0xb0 [ 164.533210][ T7581] ? __fget_files+0x40/0x3a0 [ 164.533228][ T7581] ? __fget_files+0x206/0x3a0 [ 164.533262][ T7581] security_file_ioctl+0x9b/0x240 [ 164.533287][ T7581] __x64_sys_ioctl+0xb7/0x200 [ 164.533311][ T7581] do_syscall_64+0xcd/0x250 [ 164.533335][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.533358][ T7581] RIP: 0033:0x7f4c9e78d169 [ 164.533372][ T7581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.533388][ T7581] RSP: 002b:00007f4c9f636038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.533406][ T7581] RAX: ffffffffffffffda RBX: 00007f4c9e9a5fa0 RCX: 00007f4c9e78d169 [ 164.533416][ T7581] RDX: 0000200000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 164.533425][ T7581] RBP: 00007f4c9f636090 R08: 0000000000000000 R09: 0000000000000000 [ 164.533434][ T7581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.533443][ T7581] R13: 0000000000000000 R14: 00007f4c9e9a5fa0 R15: 00007fff83985e58 [ 164.533465][ T7581] [ 164.533477][ T7581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 165.221026][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.317120][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 165.325340][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.411476][ T7592] FAULT_INJECTION: forcing a failure. [ 165.411476][ T7592] name failslab, interval 1, probability 0, space 0, times 0 [ 165.457437][ T7592] CPU: 0 UID: 0 PID: 7592 Comm: syz.3.479 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 165.457466][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.457476][ T7592] Call Trace: [ 165.457482][ T7592] [ 165.457489][ T7592] dump_stack_lvl+0x16c/0x1f0 [ 165.457519][ T7592] should_fail_ex+0x50a/0x650 [ 165.457546][ T7592] ? fs_reclaim_acquire+0xae/0x150 [ 165.457572][ T7592] ? bpf_test_init.isra.0+0x9e/0x130 [ 165.457592][ T7592] should_failslab+0xc2/0x120 [ 165.457611][ T7592] __kmalloc_noprof+0xcb/0x510 [ 165.457634][ T7592] bpf_test_init.isra.0+0x9e/0x130 [ 165.457657][ T7592] bpf_prog_test_run_skb+0x246/0x2280 [ 165.457682][ T7592] ? __fget_files+0x40/0x3a0 [ 165.457702][ T7592] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 165.457727][ T7592] ? fput+0x67/0x440 [ 165.457748][ T7592] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 165.457772][ T7592] __sys_bpf+0xfc6/0x49c0 [ 165.457789][ T7592] ? __pfx_lock_release+0x10/0x10 [ 165.457814][ T7592] ? __pfx___sys_bpf+0x10/0x10 [ 165.457830][ T7592] ? vfs_write+0x306/0x1150 [ 165.457859][ T7592] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 165.457896][ T7592] ? fput+0x67/0x440 [ 165.457915][ T7592] ? ksys_write+0x1ba/0x250 [ 165.457929][ T7592] ? __pfx_ksys_write+0x10/0x10 [ 165.457948][ T7592] __x64_sys_bpf+0x78/0xc0 [ 165.457965][ T7592] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.457987][ T7592] do_syscall_64+0xcd/0x250 [ 165.458018][ T7592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.458041][ T7592] RIP: 0033:0x7fee58f8d169 [ 165.458056][ T7592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.458073][ T7592] RSP: 002b:00007fee59e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.458091][ T7592] RAX: ffffffffffffffda RBX: 00007fee591a5fa0 RCX: 00007fee58f8d169 [ 165.458102][ T7592] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 165.458111][ T7592] RBP: 00007fee59e28090 R08: 0000000000000000 R09: 0000000000000000 [ 165.458120][ T7592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.458129][ T7592] R13: 0000000000000000 R14: 00007fee591a5fa0 R15: 00007ffde9c10688 [ 165.458152][ T7592] [ 165.705273][ T7599] FAULT_INJECTION: forcing a failure. [ 165.705273][ T7599] name failslab, interval 1, probability 0, space 0, times 0 [ 165.707592][ T9] usb 2-1: device descriptor read/64, error -71 [ 165.754923][ T7599] CPU: 1 UID: 0 PID: 7599 Comm: syz.4.483 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 165.754948][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.754958][ T7599] Call Trace: [ 165.754964][ T7599] [ 165.754970][ T7599] dump_stack_lvl+0x16c/0x1f0 [ 165.754996][ T7599] should_fail_ex+0x50a/0x650 [ 165.755018][ T7599] ? fs_reclaim_acquire+0xae/0x150 [ 165.755041][ T7599] ? tomoyo_encode2+0x100/0x3e0 [ 165.755063][ T7599] should_failslab+0xc2/0x120 [ 165.755083][ T7599] __kmalloc_noprof+0xcb/0x510 [ 165.755100][ T7599] ? d_absolute_path+0x137/0x1b0 [ 165.755121][ T7599] ? rcu_is_watching+0x12/0xc0 [ 165.755142][ T7599] tomoyo_encode2+0x100/0x3e0 [ 165.755169][ T7599] tomoyo_encode+0x29/0x50 [ 165.755191][ T7599] tomoyo_realpath_from_path+0x19d/0x720 [ 165.755239][ T7599] tomoyo_path_number_perm+0x248/0x590 [ 165.755259][ T7599] ? tomoyo_path_number_perm+0x235/0x590 [ 165.755283][ T7599] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 165.755326][ T7599] ? __pfx_lock_release+0x10/0x10 [ 165.755349][ T7599] ? trace_lock_acquire+0x14e/0x1f0 [ 165.755371][ T7599] ? lock_acquire+0x2f/0xb0 [ 165.755390][ T7599] ? __fget_files+0x40/0x3a0 [ 165.755409][ T7599] ? __fget_files+0x206/0x3a0 [ 165.755428][ T7599] security_file_ioctl+0x9b/0x240 [ 165.755453][ T7599] __x64_sys_ioctl+0xb7/0x200 [ 165.755479][ T7599] do_syscall_64+0xcd/0x250 [ 165.755504][ T7599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.755528][ T7599] RIP: 0033:0x7f4c9e78d169 [ 165.755541][ T7599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.755557][ T7599] RSP: 002b:00007f4c9f636038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.755574][ T7599] RAX: ffffffffffffffda RBX: 00007f4c9e9a5fa0 RCX: 00007f4c9e78d169 [ 165.755585][ T7599] RDX: 0000200000000500 RSI: 00000000c0945662 RDI: 0000000000000003 [ 165.755595][ T7599] RBP: 00007f4c9f636090 R08: 0000000000000000 R09: 0000000000000000 [ 165.755604][ T7599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.755613][ T7599] R13: 0000000000000000 R14: 00007f4c9e9a5fa0 R15: 00007fff83985e58 [ 165.755635][ T7599] [ 165.755649][ T7599] ERROR: Out of memory at tomoyo_realpath_from_path. [ 165.840499][ T9] usb usb2-port1: attempt power cycle [ 166.126579][ T7616] macsec1: entered allmulticast mode [ 166.275032][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.353431][ T7620] netlink: 224 bytes leftover after parsing attributes in process `syz.4.487'. [ 166.452955][ T7620] process 'syz.4.487' launched './file1' with NULL argv: empty string added [ 166.470682][ T30] audit: type=1400 audit(1742588300.421:523): avc: denied { execute_no_trans } for pid=7611 comm="syz.4.487" path="/90/file1" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.470792][ T5896] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 166.503776][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 166.780441][ T9] usb 2-1: device descriptor read/8, error -71 [ 167.302232][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.380370][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 167.397349][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 167.414388][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.494'. [ 167.428913][ T5896] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 167.446803][ T30] audit: type=1400 audit(1742588301.401:524): avc: denied { connect } for pid=7632 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.447265][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.474540][ T5896] usb 4-1: Product: syz [ 167.478796][ T5896] usb 4-1: Manufacturer: syz [ 167.483550][ T5896] usb 4-1: SerialNumber: syz [ 167.563359][ T30] audit: type=1400 audit(1742588301.521:525): avc: denied { write } for pid=7632 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.771335][ T5896] usb 4-1: config 0 descriptor?? [ 168.000583][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.030417][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 168.050956][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 168.058640][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 168.072625][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.087157][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.103692][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.116267][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.127193][ T9] usb 2-1: Product: syz [ 168.139865][ T9] usb 2-1: Manufacturer: syz [ 168.146679][ T9] usb 2-1: SerialNumber: syz [ 168.165386][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 168.174517][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 168.193562][ T7647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.209332][ T7647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.224557][ T7647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.424831][ T30] audit: type=1400 audit(1742588302.381:526): avc: denied { accept } for pid=7653 comm="syz.4.502" lport=37694 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.448133][ T30] audit: type=1400 audit(1742588302.381:527): avc: denied { getopt } for pid=7653 comm="syz.4.502" lport=37694 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 168.544786][ T30] audit: type=1400 audit(1742588302.501:528): avc: denied { open } for pid=7658 comm="syz.4.506" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 168.546149][ T7659] 9pnet_fd: Insufficient options for proto=fd [ 168.568908][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.588595][ T9] usb 2-1: 0:2 : does not exist [ 168.596561][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 168.650422][ T5896] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 168.800499][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 168.827747][ T5896] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 168.846899][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.856381][ T5896] usb 3-1: Product: syz [ 168.864568][ T5896] usb 3-1: Manufacturer: syz [ 168.869519][ T5896] usb 3-1: SerialNumber: syz [ 169.682203][ T5867] usb 4-1: USB disconnect, device number 15 [ 169.758574][ T26] net_ratelimit: 131 callbacks suppressed [ 169.758593][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.809936][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.843620][ T5896] usb 3-1: config 0 descriptor?? [ 169.852382][ T5896] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 169.861276][ T5896] usb 3-1: Detected FT4233HP [ 169.917262][ T7679] FAULT_INJECTION: forcing a failure. [ 169.917262][ T7679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.940452][ T7679] CPU: 0 UID: 0 PID: 7679 Comm: syz.4.510 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 169.940479][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.940489][ T7679] Call Trace: [ 169.940494][ T7679] [ 169.940500][ T7679] dump_stack_lvl+0x16c/0x1f0 [ 169.940529][ T7679] should_fail_ex+0x50a/0x650 [ 169.940560][ T7679] _copy_from_user+0x2e/0xd0 [ 169.940579][ T7679] kstrtouint_from_user+0xd7/0x1c0 [ 169.940600][ T7679] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 169.940628][ T7679] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 169.940656][ T7679] proc_fail_nth_write+0x84/0x250 [ 169.940681][ T7679] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 169.940701][ T7679] ? ksys_write+0x12b/0x250 [ 169.940723][ T7679] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 169.940745][ T7679] vfs_write+0x24c/0x1150 [ 169.940771][ T7679] ? __fget_files+0x1fc/0x3a0 [ 169.940788][ T7679] ? __pfx___mutex_lock+0x10/0x10 [ 169.940811][ T7679] ? __pfx_vfs_write+0x10/0x10 [ 169.940844][ T7679] ? __fget_files+0x206/0x3a0 [ 169.940867][ T7679] ksys_write+0x12b/0x250 [ 169.940882][ T7679] ? __pfx_ksys_write+0x10/0x10 [ 169.940904][ T7679] do_syscall_64+0xcd/0x250 [ 169.940929][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.940952][ T7679] RIP: 0033:0x7f4c9e78bc1f [ 169.940966][ T7679] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 169.940989][ T7679] RSP: 002b:00007f4c9f615030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 169.941004][ T7679] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c9e78bc1f [ 169.941015][ T7679] RDX: 0000000000000001 RSI: 00007f4c9f6150a0 RDI: 0000000000000004 [ 169.941024][ T7679] RBP: 00007f4c9f615090 R08: 0000000000000000 R09: 0000000000000000 [ 169.941033][ T7679] R10: 0000200000c18000 R11: 0000000000000293 R12: 0000000000000001 [ 169.941042][ T7679] R13: 0000000000000001 R14: 00007f4c9e9a6080 R15: 00007fff83985e58 [ 169.941063][ T7679] [ 170.156756][ T7654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.165747][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.176079][ T7654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.185190][ T6566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.193740][ T7654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.202050][ T7654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.278625][ T7691] FAULT_INJECTION: forcing a failure. [ 170.278625][ T7691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.292264][ T7691] CPU: 0 UID: 0 PID: 7691 Comm: syz.3.513 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 170.292283][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.292292][ T7691] Call Trace: [ 170.292297][ T7691] [ 170.292303][ T7691] dump_stack_lvl+0x16c/0x1f0 [ 170.292329][ T7691] should_fail_ex+0x50a/0x650 [ 170.292359][ T7691] _copy_to_user+0x32/0xd0 [ 170.292377][ T7691] simple_read_from_buffer+0xd0/0x160 [ 170.292401][ T7691] proc_fail_nth_read+0x198/0x270 [ 170.292422][ T7691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.292444][ T7691] ? rw_verify_area+0xcf/0x680 [ 170.292465][ T7691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.292485][ T7691] vfs_read+0x1df/0xbf0 [ 170.292508][ T7691] ? __fget_files+0x1fc/0x3a0 [ 170.292522][ T7691] ? __pfx___mutex_lock+0x10/0x10 [ 170.292544][ T7691] ? __pfx_vfs_read+0x10/0x10 [ 170.292571][ T7691] ? __fget_files+0x206/0x3a0 [ 170.292591][ T7691] ksys_read+0x12b/0x250 [ 170.292611][ T7691] ? __pfx_ksys_read+0x10/0x10 [ 170.292638][ T7691] do_syscall_64+0xcd/0x250 [ 170.292659][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.292679][ T7691] RIP: 0033:0x7fee58f8bb7c [ 170.292693][ T7691] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 170.292707][ T7691] RSP: 002b:00007fee59e28030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 170.292723][ T7691] RAX: ffffffffffffffda RBX: 00007fee591a5fa0 RCX: 00007fee58f8bb7c [ 170.292733][ T7691] RDX: 000000000000000f RSI: 00007fee59e280a0 RDI: 0000000000000005 [ 170.292741][ T7691] RBP: 00007fee59e28090 R08: 0000000000000000 R09: 0000000000000000 [ 170.292749][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.292758][ T7691] R13: 0000000000000000 R14: 00007fee591a5fa0 R15: 00007ffde9c10688 [ 170.292778][ T7691] [ 170.292821][ T30] audit: type=1400 audit(1742588304.251:529): avc: denied { mount } for pid=7688 comm="syz.4.514" name="/" dev="overlay" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 170.393907][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.407761][ T7693] FAULT_INJECTION: forcing a failure. [ 170.407761][ T7693] name failslab, interval 1, probability 0, space 0, times 0 [ 170.412269][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.533794][ T7693] CPU: 1 UID: 0 PID: 7693 Comm: syz.3.515 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 170.533817][ T7693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.533825][ T7693] Call Trace: [ 170.533830][ T7693] [ 170.533836][ T7693] dump_stack_lvl+0x16c/0x1f0 [ 170.533865][ T7693] should_fail_ex+0x50a/0x650 [ 170.533890][ T7693] ? fs_reclaim_acquire+0xae/0x150 [ 170.533916][ T7693] should_failslab+0xc2/0x120 [ 170.533935][ T7693] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 170.533951][ T7693] ? __alloc_skb+0x2b1/0x380 [ 170.533973][ T7693] __alloc_skb+0x2b1/0x380 [ 170.533992][ T7693] ? __pfx___alloc_skb+0x10/0x10 [ 170.534017][ T7693] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 170.534042][ T7693] netlink_alloc_large_skb+0x69/0x130 [ 170.534064][ T7693] netlink_sendmsg+0x689/0xd70 [ 170.534085][ T7693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.534111][ T7693] ____sys_sendmsg+0xaaf/0xc90 [ 170.534128][ T7693] ? copy_msghdr_from_user+0x10b/0x160 [ 170.534149][ T7693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.534177][ T7693] ___sys_sendmsg+0x135/0x1e0 [ 170.534204][ T7693] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.534231][ T7693] ? __pfx_lock_release+0x10/0x10 [ 170.534251][ T7693] ? trace_lock_acquire+0x14e/0x1f0 [ 170.534274][ T7693] ? __fget_files+0x206/0x3a0 [ 170.534296][ T7693] __sys_sendmsg+0x16e/0x220 [ 170.534319][ T7693] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.534349][ T7693] do_syscall_64+0xcd/0x250 [ 170.534370][ T7693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.534393][ T7693] RIP: 0033:0x7fee58f8d169 [ 170.534406][ T7693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.534422][ T7693] RSP: 002b:00007fee59e28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.534437][ T7693] RAX: ffffffffffffffda RBX: 00007fee591a5fa0 RCX: 00007fee58f8d169 [ 170.534448][ T7693] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 170.534457][ T7693] RBP: 00007fee59e28090 R08: 0000000000000000 R09: 0000000000000000 [ 170.534466][ T7693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.534475][ T7693] R13: 0000000000000000 R14: 00007fee591a5fa0 R15: 00007ffde9c10688 [ 170.534494][ T7693] [ 170.756730][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.791911][ T5896] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 170.820746][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.825728][ T5896] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 170.856701][ T5896] usb 3-1: USB disconnect, device number 17 [ 170.881046][ T5896] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 170.913120][ T5896] ftdi_sio 3-1:0.0: device disconnected [ 170.979811][ T30] audit: type=1400 audit(1742588304.931:530): avc: denied { listen } for pid=7627 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.000047][ T30] audit: type=1400 audit(1742588304.931:531): avc: denied { accept } for pid=7627 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.019347][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.026629][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.190875][ T5867] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 171.351970][ T5867] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 171.365864][ T5867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.379191][ T5867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.390749][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.398775][ T5867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.414330][ T5867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.425706][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.435900][ T9] usb 2-1: USB disconnect, device number 22 [ 171.437009][ T7709] FAULT_INJECTION: forcing a failure. [ 171.437009][ T7709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.457478][ T7709] CPU: 1 UID: 0 PID: 7709 Comm: syz.2.521 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 171.457506][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.457515][ T7709] Call Trace: [ 171.457520][ T7709] [ 171.457526][ T7709] dump_stack_lvl+0x16c/0x1f0 [ 171.457556][ T7709] should_fail_ex+0x50a/0x650 [ 171.457591][ T7709] _copy_from_user+0x2e/0xd0 [ 171.457612][ T7709] memdup_user+0x71/0xd0 [ 171.457637][ T7709] strndup_user+0x78/0xe0 [ 171.457659][ T7709] __do_sys_keyctl+0x40b/0x590 [ 171.457681][ T7709] do_syscall_64+0xcd/0x250 [ 171.457704][ T7709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.457726][ T7709] RIP: 0033:0x7f09fff8d169 [ 171.457739][ T7709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.457753][ T7709] RSP: 002b:00007f0a00eb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 171.457768][ T7709] RAX: ffffffffffffffda RBX: 00007f0a001a5fa0 RCX: 00007f09fff8d169 [ 171.457779][ T7709] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000001 [ 171.457788][ T7709] RBP: 00007f0a00eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.457797][ T7709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.457807][ T7709] R13: 0000000000000000 R14: 00007f0a001a5fa0 R15: 00007ffdcd2f6198 [ 171.457828][ T7709] [ 171.598266][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.614690][ T5867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.625443][ T5867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.641595][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.652976][ T5867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.663046][ T5867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.675271][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.685186][ T5867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.696968][ T5867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.709613][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.756621][ T5867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.795832][ T6088] udevd[6088]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.798528][ T5867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.924287][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.996121][ T5867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.108950][ T5867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.147192][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.204045][ T5867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.217806][ T7716] FAULT_INJECTION: forcing a failure. [ 172.217806][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 172.220363][ T5867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.250981][ T7716] CPU: 0 UID: 0 PID: 7716 Comm: syz.1.524 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 172.251007][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.251015][ T7716] Call Trace: [ 172.251020][ T7716] [ 172.251026][ T7716] dump_stack_lvl+0x16c/0x1f0 [ 172.251053][ T7716] should_fail_ex+0x50a/0x650 [ 172.251076][ T7716] ? fs_reclaim_acquire+0xae/0x150 [ 172.251098][ T7716] should_failslab+0xc2/0x120 [ 172.251117][ T7716] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 172.251134][ T7716] ? __alloc_skb+0x2b1/0x380 [ 172.251159][ T7716] __alloc_skb+0x2b1/0x380 [ 172.251179][ T7716] ? __pfx___alloc_skb+0x10/0x10 [ 172.251210][ T7716] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 172.251238][ T7716] netlink_alloc_large_skb+0x69/0x130 [ 172.251263][ T7716] netlink_sendmsg+0x689/0xd70 [ 172.251291][ T7716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.251323][ T7716] ____sys_sendmsg+0xaaf/0xc90 [ 172.251344][ T7716] ? copy_msghdr_from_user+0x10b/0x160 [ 172.251368][ T7716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.251398][ T7716] ___sys_sendmsg+0x135/0x1e0 [ 172.251424][ T7716] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.251458][ T7716] ? __pfx_lock_release+0x10/0x10 [ 172.251481][ T7716] ? trace_lock_acquire+0x14e/0x1f0 [ 172.251508][ T7716] ? __fget_files+0x206/0x3a0 [ 172.251532][ T7716] __sys_sendmsg+0x16e/0x220 [ 172.251557][ T7716] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.251597][ T7716] do_syscall_64+0xcd/0x250 [ 172.251622][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.251645][ T7716] RIP: 0033:0x7f9d84f8d169 [ 172.251660][ T7716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.251676][ T7716] RSP: 002b:00007f9d85e15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.251693][ T7716] RAX: ffffffffffffffda RBX: 00007f9d851a5fa0 RCX: 00007f9d84f8d169 [ 172.251704][ T7716] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 172.251714][ T7716] RBP: 00007f9d85e15090 R08: 0000000000000000 R09: 0000000000000000 [ 172.251723][ T7716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.251733][ T7716] R13: 0000000000000000 R14: 00007f9d851a5fa0 R15: 00007ffd368407c8 [ 172.251754][ T7716] [ 172.483892][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.500616][ T5867] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 172.509730][ T5867] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 172.523471][ T5867] usb 5-1: Product: syz [ 172.537259][ T7718] netlink: 'syz.1.526': attribute type 39 has an invalid length. [ 172.554521][ T5867] usb 5-1: Manufacturer: syz [ 172.586305][ T5867] usb 5-1: SerialNumber: syz [ 172.609272][ T5867] usb 5-1: config 0 descriptor?? [ 172.668461][ T5867] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 172.679695][ T30] audit: type=1400 audit(1742588306.631:532): avc: denied { append } for pid=7723 comm="syz.3.528" name="cec3" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.702196][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.720621][ T30] audit: type=1400 audit(1742588306.631:533): avc: denied { map } for pid=7723 comm="syz.3.528" path="socket:[15221]" dev="sockfs" ino=15221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.819407][ T7728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=7728 comm=syz.1.530 [ 172.824921][ T974] usb 5-1: USB disconnect, device number 20 [ 172.834671][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 172.849302][ T974] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 172.857318][ T7728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.870965][ T26] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 172.895519][ T7731] FAULT_INJECTION: forcing a failure. [ 172.895519][ T7731] name failslab, interval 1, probability 0, space 0, times 0 [ 172.908458][ T7731] CPU: 0 UID: 0 PID: 7731 Comm: syz.3.531 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 172.908479][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.908488][ T7731] Call Trace: [ 172.908493][ T7731] [ 172.908499][ T7731] dump_stack_lvl+0x16c/0x1f0 [ 172.908524][ T7731] should_fail_ex+0x50a/0x650 [ 172.908546][ T7731] ? fs_reclaim_acquire+0xae/0x150 [ 172.908570][ T7731] should_failslab+0xc2/0x120 [ 172.908588][ T7731] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 172.908605][ T7731] ? __alloc_skb+0x2b1/0x380 [ 172.908629][ T7731] __alloc_skb+0x2b1/0x380 [ 172.908650][ T7731] ? __pfx___alloc_skb+0x10/0x10 [ 172.908671][ T7731] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 172.908698][ T7731] netlink_alloc_large_skb+0x69/0x130 [ 172.908719][ T7731] netlink_sendmsg+0x689/0xd70 [ 172.908742][ T7731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.908769][ T7731] ____sys_sendmsg+0xaaf/0xc90 [ 172.908786][ T7731] ? copy_msghdr_from_user+0x10b/0x160 [ 172.908809][ T7731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.908837][ T7731] ___sys_sendmsg+0x135/0x1e0 [ 172.908861][ T7731] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.908891][ T7731] ? __pfx_lock_release+0x10/0x10 [ 172.908911][ T7731] ? trace_lock_acquire+0x14e/0x1f0 [ 172.908935][ T7731] ? __fget_files+0x206/0x3a0 [ 172.908955][ T7731] __sys_sendmsg+0x16e/0x220 [ 172.908976][ T7731] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.909009][ T7731] do_syscall_64+0xcd/0x250 [ 172.909032][ T7731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.909053][ T7731] RIP: 0033:0x7fee58f8d169 [ 172.909066][ T7731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.909082][ T7731] RSP: 002b:00007fee59e28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.909098][ T7731] RAX: ffffffffffffffda RBX: 00007fee591a5fa0 RCX: 00007fee58f8d169 [ 172.909109][ T7731] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000e [ 172.909118][ T7731] RBP: 00007fee59e28090 R08: 0000000000000000 R09: 0000000000000000 [ 172.909128][ T7731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.909138][ T7731] R13: 0000000000000000 R14: 00007fee591a5fa0 R15: 00007ffde9c10688 [ 172.909155][ T7731] [ 173.166462][ T30] audit: type=1400 audit(1742588307.111:534): avc: denied { bind } for pid=7732 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.185996][ T30] audit: type=1400 audit(1742588307.111:535): avc: denied { listen } for pid=7732 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.206303][ T30] audit: type=1400 audit(1742588307.111:536): avc: denied { accept } for pid=7732 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.221940][ T26] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 173.226561][ T30] audit: type=1400 audit(1742588307.111:537): avc: denied { read } for pid=7732 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.236255][ T26] usb 3-1: config 0 has no interface number 0 [ 173.329327][ T26] usb 3-1: config 0 interface 53 altsetting 255 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 173.359630][ T26] usb 3-1: config 0 interface 53 altsetting 255 has a duplicate endpoint with address 0xD, skipping [ 173.383257][ T26] usb 3-1: config 0 interface 53 altsetting 255 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 173.393215][ T7743] FAULT_INJECTION: forcing a failure. [ 173.393215][ T7743] name failslab, interval 1, probability 0, space 0, times 0 [ 173.407073][ T7743] CPU: 0 UID: 0 PID: 7743 Comm: syz.3.535 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 173.407094][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.407104][ T7743] Call Trace: [ 173.407109][ T7743] [ 173.407117][ T7743] dump_stack_lvl+0x16c/0x1f0 [ 173.407144][ T7743] should_fail_ex+0x50a/0x650 [ 173.407164][ T7743] ? fs_reclaim_acquire+0xae/0x150 [ 173.407192][ T7743] ? tomoyo_encode2+0x100/0x3e0 [ 173.407213][ T7743] should_failslab+0xc2/0x120 [ 173.407230][ T7743] __kmalloc_noprof+0xcb/0x510 [ 173.407247][ T7743] ? rcu_is_watching+0x12/0xc0 [ 173.407268][ T7743] tomoyo_encode2+0x100/0x3e0 [ 173.407294][ T7743] tomoyo_encode+0x29/0x50 [ 173.407317][ T7743] tomoyo_realpath_from_path+0x19d/0x720 [ 173.407343][ T7743] ? tomoyo_path_number_perm+0x235/0x590 [ 173.407366][ T7743] tomoyo_path_number_perm+0x248/0x590 [ 173.407383][ T7743] ? tomoyo_path_number_perm+0x235/0x590 [ 173.407407][ T7743] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.407451][ T7743] ? __pfx_lock_release+0x10/0x10 [ 173.407475][ T7743] ? trace_lock_acquire+0x14e/0x1f0 [ 173.407498][ T7743] ? lock_acquire+0x2f/0xb0 [ 173.407517][ T7743] ? __fget_files+0x40/0x3a0 [ 173.407538][ T7743] ? __fget_files+0x206/0x3a0 [ 173.407557][ T7743] security_file_ioctl+0x9b/0x240 [ 173.407583][ T7743] __x64_sys_ioctl+0xb7/0x200 [ 173.407608][ T7743] do_syscall_64+0xcd/0x250 [ 173.407632][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.407655][ T7743] RIP: 0033:0x7fee58f8d169 [ 173.407668][ T7743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.407681][ T7743] RSP: 002b:00007fee59e28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.407694][ T7743] RAX: ffffffffffffffda RBX: 00007fee591a5fa0 RCX: 00007fee58f8d169 [ 173.407703][ T7743] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 173.407711][ T7743] RBP: 00007fee59e28090 R08: 0000000000000000 R09: 0000000000000000 [ 173.407718][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.407726][ T7743] R13: 0000000000000000 R14: 00007fee591a5fa0 R15: 00007ffde9c10688 [ 173.407745][ T7743] [ 173.407760][ T7743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.450819][ T26] usb 3-1: config 0 interface 53 has no altsetting 0 [ 173.590360][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 173.736165][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=a8.54 [ 173.745581][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.753644][ T26] usb 3-1: Product: syz [ 173.758225][ T26] usb 3-1: Manufacturer: syz [ 173.765693][ T26] usb 3-1: SerialNumber: syz [ 173.773115][ T26] usb 3-1: config 0 descriptor?? [ 173.918261][ T9] usb 2-1: device descriptor read/64, error -71 [ 173.930349][ T7757] netlink: 40 bytes leftover after parsing attributes in process `syz.0.542'. [ 173.984678][ T26] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 173.991963][ T26] gspca_vc032x: reg_r err -71 [ 173.996869][ T26] vc032x 3-1:0.53: probe with driver vc032x failed with error -71 [ 174.016832][ T26] usb 3-1: USB disconnect, device number 18 [ 174.080431][ T5867] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 174.170427][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 174.231742][ T5867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.238547][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 174.247985][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.257752][ T5867] usb 4-1: config 0 descriptor?? [ 174.300453][ T9] usb 2-1: device descriptor read/64, error -71 [ 174.410639][ T9] usb usb2-port1: attempt power cycle [ 174.473177][ T5867] (null): keene_cmd_main failed (-71) [ 174.490390][ T5867] video4linux radio48: keene_cmd_main failed (-71) [ 174.498587][ T5867] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 174.504921][ T7760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.543'. [ 174.513399][ T5867] usb 4-1: USB disconnect, device number 16 [ 174.659579][ T7765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.676297][ T7763] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 174.755658][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 174.782986][ T9] usb 2-1: device descriptor read/8, error -71 [ 174.912337][ T13] net_ratelimit: 5 callbacks suppressed [ 174.912356][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.983481][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.030767][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 175.285780][ T9] usb 2-1: device descriptor read/8, error -71 [ 175.916172][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 175.922563][ T5132] Bluetooth: hci0: command 0x0406 tx timeout [ 175.922635][ T5132] Bluetooth: hci3: command 0x0406 tx timeout [ 175.922677][ T5132] Bluetooth: hci2: command 0x0406 tx timeout [ 175.923880][ T9] usb usb2-port1: unable to enumerate USB device [ 175.956412][ T7767] overlayfs: statfs failed on './file0' [ 176.041889][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.653956][ T30] audit: type=1400 audit(1742588310.611:538): avc: denied { ioctl } for pid=7800 comm="syz.2.558" path="socket:[16104]" dev="sockfs" ino=16104 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 176.740756][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.749019][ T5896] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 176.910426][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 176.917196][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.930279][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.930343][ T5866] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 176.940533][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.963401][ T5896] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 176.972645][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.982507][ T5896] usb 4-1: config 0 descriptor?? [ 177.061444][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.091854][ T5866] usb 5-1: config 0 has no interfaces? [ 177.115351][ T5866] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 177.125823][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.134475][ T5866] usb 5-1: Product: syz [ 177.138762][ T5866] usb 5-1: Manufacturer: syz [ 177.144854][ T5866] usb 5-1: SerialNumber: syz [ 177.156781][ T5866] usb 5-1: config 0 descriptor?? [ 177.199722][ T5896] hid-alps 0003:044E:120C.0004: unknown main item tag 0x0 [ 177.214869][ T5896] hid-alps 0003:044E:120C.0004: unknown main item tag 0x0 [ 177.222302][ T5896] hid-alps 0003:044E:120C.0004: unknown main item tag 0x0 [ 177.229559][ T5896] hid-alps 0003:044E:120C.0004: unknown main item tag 0x0 [ 177.241790][ T5896] hid-alps 0003:044E:120C.0004: unknown main item tag 0x0 [ 177.254333][ T5896] hid-alps 0003:044E:120C.0004: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.3-1/input0 [ 177.371346][ T7803] netlink: 40 bytes leftover after parsing attributes in process `syz.4.559'. [ 177.392072][ T5866] usb 5-1: USB disconnect, device number 21 [ 177.414833][ T26] usb 4-1: USB disconnect, device number 17 [ 177.439815][ T7813] vlan2: entered allmulticast mode [ 177.548956][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 177.553101][ T7818] netlink: 340 bytes leftover after parsing attributes in process `syz.1.564'. [ 177.715284][ T30] audit: type=1400 audit(1742588311.671:539): avc: denied { read write } for pid=7825 comm="syz.2.568" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 177.739782][ T30] audit: type=1400 audit(1742588311.671:540): avc: denied { open } for pid=7825 comm="syz.2.568" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 177.863260][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 177.940344][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 177.986135][ T5820] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 178.100487][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.133540][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.195598][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 178.293283][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.366191][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 178.468695][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 178.503198][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.767215][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.795248][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.818177][ T9] usb 2-1: Product: syz [ 178.856708][ T9] usb 2-1: Manufacturer: syz [ 179.039865][ T30] audit: type=1400 audit(1742588312.921:541): avc: denied { map } for pid=7833 comm="syz.4.571" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.118005][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 179.166207][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 179.240047][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 179.250047][ T30] audit: type=1400 audit(1742588312.921:542): avc: denied { execute } for pid=7833 comm="syz.4.571" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.300637][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.323636][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 179.350753][ T9] usb 2-1: USB disconnect, device number 27 [ 179.542893][ T6566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.573063][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 179.618826][ T30] audit: type=1400 audit(1742588313.571:543): avc: denied { link } for pid=7819 comm="syz.1.565" name="file1" dev="overlay" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 179.647685][ T30] audit: type=1400 audit(1742588313.591:544): avc: denied { setattr } for pid=7819 comm="syz.1.565" name="#9" dev="tmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 179.669858][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.678623][ T30] audit: type=1400 audit(1742588313.591:545): avc: denied { rename } for pid=7819 comm="syz.1.565" name="#9" dev="tmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 179.700661][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.761008][ T7851] veth0_to_team: entered promiscuous mode [ 179.766874][ T7851] veth0_to_team: entered allmulticast mode [ 180.021454][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 180.341812][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.760855][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.848373][ T7863] netlink: 452 bytes leftover after parsing attributes in process `syz.1.578'. [ 181.083028][ T7869] bridge0: port 3(hsr_slave_1) entered blocking state [ 181.090116][ T7869] bridge0: port 3(hsr_slave_1) entered disabled state [ 181.097662][ T7869] hsr_slave_1: entered allmulticast mode [ 181.105701][ T7869] hsr_slave_1: left allmulticast mode [ 181.548129][ T971] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 181.567295][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.583435][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 181.783268][ T971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 181.790432][ T971] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 181.799668][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.850154][ T971] usb 4-1: config 0 descriptor?? [ 181.884429][ T9] usb 2-1: config 6 has an invalid interface number: 147 but max is 0 [ 181.950554][ T9] usb 2-1: config 6 has no interface number 0 [ 181.982464][ T9] usb 2-1: config 6 interface 147 has no altsetting 0 [ 182.054797][ T9] usb 2-1: New USB device found, idVendor=1f4d, idProduct=a803, bcdDevice=dd.89 [ 182.066591][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.105237][ T9] usb 2-1: Product: syz [ 182.109458][ T9] usb 2-1: Manufacturer: syz [ 182.110776][ T971] (null): keene_cmd_main failed (-71) [ 182.126820][ T9] usb 2-1: SerialNumber: syz [ 182.144180][ T971] video4linux radio48: keene_cmd_main failed (-71) [ 182.153877][ T971] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 182.176821][ T971] usb 4-1: USB disconnect, device number 18 [ 182.370537][ T9] usb 2-1: USB disconnect, device number 28 [ 182.380382][ T5896] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 182.535315][ T5896] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 182.562771][ T5896] usb 3-1: config 0 has no interface number 0 [ 182.573397][ T5896] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 182.580681][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.593545][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.602841][ T5896] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 182.616757][ T5896] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 182.627974][ T5896] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 182.637914][ T7895] overlayfs: failed to clone upperpath [ 182.643775][ T5896] usb 3-1: Product: syz [ 182.651373][ T5896] usb 3-1: Manufacturer: syz [ 182.656142][ T5896] usb 3-1: SerialNumber: syz [ 182.709454][ T5896] usb 3-1: config 0 descriptor?? [ 182.738228][ T5896] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 182.752266][ T5896] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 182.769862][ T5896] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 182.806573][ T5896] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 182.838348][ T5896] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 182.840853][ T30] audit: type=1400 audit(1742588316.791:546): avc: denied { view } for pid=7903 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 182.877695][ T5896] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 182.886293][ T5896] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 182.899443][ T5896] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 182.991420][ T5896] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 183.001901][ T5896] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 183.024545][ T5896] usb 3-1: USB disconnect, device number 19 [ 183.045302][ T5896] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 183.152194][ T5896] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 183.172491][ T7911] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.592'. [ 183.489971][ T5896] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 183.746347][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.801187][ T5820] Bluetooth: hci4: link tx timeout [ 183.806583][ T5820] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 183.825347][ T5896] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 183.835706][ T5896] keyspan 3-1:0.107: device disconnected [ 183.843866][ T30] audit: type=1400 audit(1742588317.801:547): avc: denied { write } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.924948][ T30] audit: type=1400 audit(1742588317.801:548): avc: denied { remove_name } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.954209][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.963376][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.037990][ T30] audit: type=1400 audit(1742588317.801:549): avc: denied { add_name } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.412143][ T30] audit: type=1400 audit(1742588318.371:550): avc: denied { create } for pid=7921 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 184.450517][ T30] audit: type=1400 audit(1742588318.391:551): avc: denied { ioctl } for pid=7921 comm="syz.2.599" path="socket:[16381]" dev="sockfs" ino=16381 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 185.131076][ T7932] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 185.524001][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.591869][ T7932] vimc vimc.0: subdev_call error Scaler [ 185.595982][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.618222][ T7932] ------------[ cut here ]------------ [ 185.624368][ T7932] WARNING: CPU: 0 PID: 7932 at drivers/media/v4l2-core/v4l2-subdev.c:460 call_s_stream+0x2df/0x350 [ 185.635360][ T7932] Modules linked in: [ 185.639255][ T7932] CPU: 0 UID: 0 PID: 7932 Comm: syz.3.601 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 185.649919][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.660029][ T7932] RIP: 0010:call_s_stream+0x2df/0x350 [ 185.665439][ T7932] Code: c1 ea 03 80 3c 02 00 75 75 48 8b bb 08 01 00 00 44 89 e2 48 c7 c6 e0 b2 50 8c e8 4c dc 37 fe e9 54 fe ff ff e8 42 48 05 fa 90 <0f> 0b 90 e9 cb fe ff ff 4c 89 f7 e8 51 60 68 fa e9 48 fd ff ff e8 [ 185.685101][ T7932] RSP: 0018:ffffc90010be7a60 EFLAGS: 00010287 [ 185.691225][ T7932] RAX: 0000000000017284 RBX: ffff88802a946820 RCX: ffffc9000db4c000 [ 185.699180][ T7932] RDX: 0000000000080000 RSI: ffffffff87b4aa4e RDI: 0000000000000000 [ 185.707230][ T7932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.715211][ T7932] R10: 0000000000000000 R11: 0000000000000113 R12: dffffc0000000000 [ 185.723201][ T7932] R13: 0000000000000000 R14: ffff88802a946998 R15: ffffffff880761d0 [ 185.731198][ T7932] FS: 00007fee59e076c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 185.740120][ T7932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.746916][ T7932] CR2: 00007f0a0002a510 CR3: 0000000075e62000 CR4: 00000000003526f0 [ 185.755200][ T7932] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 185.763408][ T7932] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 185.771489][ T7932] Call Trace: [ 185.774858][ T7932] [ 185.777839][ T7932] ? __warn+0xea/0x3c0 [ 185.782153][ T7932] ? call_s_stream+0x2df/0x350 [ 185.786987][ T7932] ? report_bug+0x3c0/0x580 [ 185.791626][ T7932] ? handle_bug+0x54/0xa0 [ 185.796052][ T7932] ? exc_invalid_op+0x17/0x50 [ 185.800937][ T7932] ? asm_exc_invalid_op+0x1a/0x20 [ 185.806024][ T7932] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 185.811916][ T7932] ? call_s_stream+0x2de/0x350 [ 185.816681][ T7932] ? call_s_stream+0x2df/0x350 [ 185.821459][ T7932] ? __pfx_call_s_stream+0x10/0x10 [ 185.826587][ T7932] vimc_streamer_pipeline_terminate+0x218/0x320 [ 185.834671][ T7932] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 185.845838][ T7932] vimc_streamer_s_stream+0x650/0x9a0 [ 185.853370][ T7932] vimc_capture_start_streaming+0xa1/0x130 [ 185.859330][ T7932] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 185.862917][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 185.865850][ T7932] vb2_start_streaming+0x15f/0x5a0 [ 185.877026][ T7932] ? __bitmap_weight+0xdc/0x110 [ 185.882106][ T7932] vb2_core_streamon+0x2a7/0x450 [ 185.887148][ T7932] vb2_ioctl_streamon+0xf4/0x170 [ 185.892284][ T7932] __video_do_ioctl+0xaf0/0xf00 [ 185.897241][ T7932] ? __pfx___video_do_ioctl+0x10/0x10 [ 185.902802][ T7932] ? __pfx___video_do_ioctl+0x10/0x10 [ 185.908267][ T7932] video_usercopy+0x4d2/0x1620 [ 185.913137][ T7932] ? __pfx___video_do_ioctl+0x10/0x10 [ 185.918567][ T7932] ? __pfx_video_usercopy+0x10/0x10 [ 185.923883][ T7932] v4l2_ioctl+0x1ba/0x250 [ 185.928280][ T7932] ? __pfx_v4l2_ioctl+0x10/0x10 [ 185.933264][ T7932] __x64_sys_ioctl+0x190/0x200 [ 185.938081][ T7932] do_syscall_64+0xcd/0x250 [ 185.942787][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.948734][ T7932] RIP: 0033:0x7fee58f8d169 [ 185.953274][ T7932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.973133][ T7932] RSP: 002b:00007fee59e07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.981696][ T7932] RAX: ffffffffffffffda RBX: 00007fee591a6080 RCX: 00007fee58f8d169 [ 185.989668][ T7932] RDX: 00002000000004c0 RSI: 0000000040045612 RDI: 0000000000000003 [ 185.997704][ T7932] RBP: 00007fee5900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 186.005677][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.013678][ T7932] R13: 0000000000000001 R14: 00007fee591a6080 R15: 00007ffde9c10688 [ 186.021674][ T7932] [ 186.024698][ T7932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.032047][ T7932] CPU: 0 UID: 0 PID: 7932 Comm: syz.3.601 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 186.042623][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.052695][ T7932] Call Trace: [ 186.055963][ T7932] [ 186.058884][ T7932] dump_stack_lvl+0x3d/0x1f0 [ 186.063477][ T7932] panic+0x71d/0x800 [ 186.067362][ T7932] ? __pfx_panic+0x10/0x10 [ 186.071769][ T7932] ? show_trace_log_lvl+0x29d/0x3d0 [ 186.076977][ T7932] ? call_s_stream+0x2df/0x350 [ 186.081765][ T7932] check_panic_on_warn+0xab/0xb0 [ 186.086782][ T7932] __warn+0xf6/0x3c0 [ 186.090666][ T7932] ? call_s_stream+0x2df/0x350 [ 186.095421][ T7932] report_bug+0x3c0/0x580 [ 186.099740][ T7932] handle_bug+0x54/0xa0 [ 186.103886][ T7932] exc_invalid_op+0x17/0x50 [ 186.108395][ T7932] asm_exc_invalid_op+0x1a/0x20 [ 186.113233][ T7932] RIP: 0010:call_s_stream+0x2df/0x350 [ 186.118594][ T7932] Code: c1 ea 03 80 3c 02 00 75 75 48 8b bb 08 01 00 00 44 89 e2 48 c7 c6 e0 b2 50 8c e8 4c dc 37 fe e9 54 fe ff ff e8 42 48 05 fa 90 <0f> 0b 90 e9 cb fe ff ff 4c 89 f7 e8 51 60 68 fa e9 48 fd ff ff e8 [ 186.138197][ T7932] RSP: 0018:ffffc90010be7a60 EFLAGS: 00010287 [ 186.144263][ T7932] RAX: 0000000000017284 RBX: ffff88802a946820 RCX: ffffc9000db4c000 [ 186.152219][ T7932] RDX: 0000000000080000 RSI: ffffffff87b4aa4e RDI: 0000000000000000 [ 186.160170][ T7932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.168124][ T7932] R10: 0000000000000000 R11: 0000000000000113 R12: dffffc0000000000 [ 186.176076][ T7932] R13: 0000000000000000 R14: ffff88802a946998 R15: ffffffff880761d0 [ 186.184033][ T7932] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 186.189770][ T7932] ? call_s_stream+0x2de/0x350 [ 186.194531][ T7932] ? __pfx_call_s_stream+0x10/0x10 [ 186.199633][ T7932] vimc_streamer_pipeline_terminate+0x218/0x320 [ 186.205866][ T7932] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 186.211587][ T7932] vimc_streamer_s_stream+0x650/0x9a0 [ 186.216967][ T7932] vimc_capture_start_streaming+0xa1/0x130 [ 186.222776][ T7932] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 186.229198][ T7932] vb2_start_streaming+0x15f/0x5a0 [ 186.234300][ T7932] ? __bitmap_weight+0xdc/0x110 [ 186.239143][ T7932] vb2_core_streamon+0x2a7/0x450 [ 186.244071][ T7932] vb2_ioctl_streamon+0xf4/0x170 [ 186.248999][ T7932] __video_do_ioctl+0xaf0/0xf00 [ 186.253861][ T7932] ? __pfx___video_do_ioctl+0x10/0x10 [ 186.259286][ T7932] ? __pfx___video_do_ioctl+0x10/0x10 [ 186.264686][ T7932] video_usercopy+0x4d2/0x1620 [ 186.269443][ T7932] ? __pfx___video_do_ioctl+0x10/0x10 [ 186.274820][ T7932] ? __pfx_video_usercopy+0x10/0x10 [ 186.280018][ T7932] v4l2_ioctl+0x1ba/0x250 [ 186.284337][ T7932] ? __pfx_v4l2_ioctl+0x10/0x10 [ 186.289176][ T7932] __x64_sys_ioctl+0x190/0x200 [ 186.293932][ T7932] do_syscall_64+0xcd/0x250 [ 186.298426][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.304311][ T7932] RIP: 0033:0x7fee58f8d169 [ 186.308710][ T7932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.328305][ T7932] RSP: 002b:00007fee59e07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.336890][ T7932] RAX: ffffffffffffffda RBX: 00007fee591a6080 RCX: 00007fee58f8d169 [ 186.344848][ T7932] RDX: 00002000000004c0 RSI: 0000000040045612 RDI: 0000000000000003 [ 186.352805][ T7932] RBP: 00007fee5900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 186.360760][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.368714][ T7932] R13: 0000000000000001 R14: 00007fee591a6080 R15: 00007ffde9c10688 [ 186.376699][ T7932] [ 186.379947][ T7932] Kernel Offset: disabled [ 186.384340][ T7932] Rebooting in 86400 seconds..