last executing test programs: 10.319754464s ago: executing program 0 (id=2091): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$user(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x100000000000}, 0x0) pidfd_getfd(0xffffffffffffffff, r3, 0x0) gettid() 9.911561441s ago: executing program 3 (id=2093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1, 0x0, 0x22}}], 0x2, 0x0) shutdown(r1, 0x1) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_emit_ethernet(0x8a, &(0x7f00000003c0)={@local, @random, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x1c, 0x4, 0x0, 0x5, 0x78, 0x68, 0x0, 0xfa, 0x1, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0xb, 0xd9, [@broadcast, @rand_addr=0x64010100]}, @cipso={0x86, 0x36, 0x3, [{0x7, 0xe, "cff7a371da0766ec1439aa08"}, {0x2, 0xd, "150fda4bcb947a8904aa8a"}, {0x1, 0x2}, {0x7, 0x8, "16caac61b7e3"}, {0x5, 0xb, "aca662926ad417aefa"}]}, @timestamp={0x44, 0x8, 0xe9, 0x0, 0x3, [0x0]}, @generic={0x82, 0x10, "cc3e33841e8a70033012108a8bd4"}]}}, @info_reply={0x10, 0x0, 0x0, 0x4, 0x4}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) renameat2(r2, &(0x7f0000000340)='./bus\x00', r2, &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f00000004c0)=r5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x5, 0x3, 0x80000000, 0x9, 0x80000001}, 0x14) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x12d080, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x15}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 9.911008349s ago: executing program 4 (id=2094): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="09020000000000000000010000000500040002000000"], 0x1c}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff"]) 8.964017999s ago: executing program 4 (id=2096): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x20, 0x1, 0x0, 0xfe4b, 0x8000, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10004, 0x0, @value, @void, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000600)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0600000000000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYRESOCT=r4, @ANYRES32=r5, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400f5490206050000000000000000000000000005000100815e4e610400078014000300606173683a69702c706f3872742c697089de25a089834193efd15103f0daec7b3ac58d3e1c2c771c2639cad42fe6e12e9cf4810e746523ad229dd4f74e8037dedf146232cc24b05f8c688c70acdcfc7480761a87"], 0x34}}, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x6abc, &(0x7f00000001c0)={0x0, 0x5085, 0x2000, 0x0, 0x334}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRES32=r0]) 7.951561642s ago: executing program 3 (id=2098): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b090224000100000000"], 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x15) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4804) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 7.799851375s ago: executing program 4 (id=2100): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = socket(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000040)=""/3, 0x3}], 0x2) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioperm(0x284, 0x7f, 0xe3) r4 = memfd_secret(0x0) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) shmat(r5, &(0x7f0000ffc000/0x3000)=nil, 0x7000) fchmod(r4, 0x0) 7.643035485s ago: executing program 0 (id=2101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe}}}}}}}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000727a296e74209f05b221dc6feafc2e1600"/44], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) 6.567336924s ago: executing program 4 (id=2104): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB, @ANYRESHEX=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={0x0}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x664840, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x240041c5) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) socket$inet6(0xa, 0x3, 0x5) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) read$dsp(r3, &(0x7f0000000180)=""/166, 0xa6) mkdir(&(0x7f0000000280)='./file0\x00', 0x44) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x40080) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0xbfe2}], 0x1, 0x40000060, 0x0) 6.50059172s ago: executing program 0 (id=2106): pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x2, 0x0, 0x100, 0x10001000}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000040000340000000000000003000000000300000002000000000000000000000000000006"], 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 5.626215343s ago: executing program 4 (id=2109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1, 0x0, 0x22}}], 0x2, 0x0) shutdown(r1, 0x1) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_emit_ethernet(0x8a, &(0x7f00000003c0)={@local, @random, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x1c, 0x4, 0x0, 0x5, 0x78, 0x68, 0x0, 0xfa, 0x1, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0xb, 0xd9, [@broadcast, @rand_addr=0x64010100]}, @cipso={0x86, 0x36, 0x3, [{0x7, 0xe, "cff7a371da0766ec1439aa08"}, {0x2, 0xd, "150fda4bcb947a8904aa8a"}, {0x1, 0x2}, {0x7, 0x8, "16caac61b7e3"}, {0x5, 0xb, "aca662926ad417aefa"}]}, @timestamp={0x44, 0x8, 0xe9, 0x0, 0x3, [0x0]}, @generic={0x82, 0x10, "cc3e33841e8a70033012108a8bd4"}]}}, @info_reply={0x10, 0x0, 0x0, 0x4, 0x4}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) renameat2(r2, &(0x7f0000000340)='./bus\x00', r2, &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f00000004c0)=r5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x5, 0x3, 0x80000000, 0x9, 0x80000001}, 0x14) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x12d080, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x15}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 5.53989421s ago: executing program 0 (id=2110): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400000000030000000000", @ANYRES32=0x0, @ANYBLOB="18c00000000000006c0012800b0001006d616373656300005c00028005000d0043"], 0x94}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x2) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x0, 0x15, 0x4, "01496a43"}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x90, r5, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x100, 0x3a}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x2, 0x7, 0x1, 0x12f}}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xa802, 0x0, 0x7, 0x0, {0x1af2, 0xc, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x302, 0x5, 0xa}}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}]}, 0x90}, 0x1, 0x0, 0x0, 0x6004001}, 0x80) 4.341574344s ago: executing program 4 (id=2112): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) 3.831953597s ago: executing program 1 (id=2118): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) unshare(0x44040300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 3.806543778s ago: executing program 2 (id=2119): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = socket(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioperm(0x284, 0x7f, 0xe3) r3 = memfd_secret(0x0) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x7000) fchmod(r3, 0x0) 3.698588474s ago: executing program 2 (id=2120): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xfffffffd}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000240)=@random={'security.', 'rdma.current\x00'}, 0x0, 0x0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x80800) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000002c0)={{0x6000, 0x0, 0xe, 0x6, 0x4, 0x5, 0x2, 0x7, 0x4, 0x0, 0x5, 0x40}, {0xeeeed000, 0xd000, 0xb, 0x1, 0x2, 0x3, 0x24, 0x2, 0x7f, 0xa7, 0xff, 0x6}, {0x100000, 0xeeee0000, 0xf, 0x4, 0x9, 0x0, 0x22, 0x10, 0x7, 0x6, 0xa4, 0xc}, {0x2, 0xd000, 0x8, 0x2, 0x5, 0x9, 0x1, 0x4, 0x1, 0x0, 0x9, 0x7f}, {0x8080000, 0x2000, 0x9, 0x5, 0x40, 0x4, 0xd1, 0x9, 0x6, 0xe7, 0xee, 0x7f}, {0x0, 0x2000, 0xc, 0x68, 0x0, 0x9, 0x8, 0x5f, 0x8, 0x7f, 0x2, 0x38}, {0x1000, 0x1, 0xd, 0xff, 0x4, 0xfd, 0x0, 0x0, 0xfe, 0x0, 0x8, 0x6}, {0x80a0000, 0x2, 0x3, 0x2, 0x8, 0x1, 0x0, 0x3, 0x3, 0x66, 0x8, 0x9}, {0xdddd1000, 0x800}, {0xdddd1000, 0x5}, 0x60050039, 0x0, 0x80a0000, 0x12250, 0x1, 0x2400, 0x6000, [0xae1b, 0x10000, 0x5, 0x7]}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x555a, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) open_by_handle_at(r2, 0x0, 0x430002) preadv(r2, &(0x7f00000008c0)=[{}, {&(0x7f0000000080)}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000400)=""/221, 0xdd}, {&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f00000005c0)=""/160, 0xa0}, {&(0x7f0000000680)=""/100, 0x64}, {&(0x7f0000000700)=""/241, 0xf1}, {&(0x7f0000000800)=""/141, 0x8d}], 0xa, 0x8, 0xfffeffff) 3.595825605s ago: executing program 1 (id=2121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_pidfd_open(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {0x0, 0x6000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 3.595439503s ago: executing program 2 (id=2122): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r5, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 2.687637737s ago: executing program 2 (id=2123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1, 0x0, 0x22}}], 0x2, 0x0) shutdown(r1, 0x1) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_emit_ethernet(0x8a, &(0x7f00000003c0)={@local, @random, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x1c, 0x4, 0x0, 0x5, 0x78, 0x68, 0x0, 0xfa, 0x1, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0xb, 0xd9, [@broadcast, @rand_addr=0x64010100]}, @cipso={0x86, 0x36, 0x3, [{0x7, 0xe, "cff7a371da0766ec1439aa08"}, {0x2, 0xd, "150fda4bcb947a8904aa8a"}, {0x1, 0x2}, {0x7, 0x8, "16caac61b7e3"}, {0x5, 0xb, "aca662926ad417aefa"}]}, @timestamp={0x44, 0x8, 0xe9, 0x0, 0x3, [0x0]}, @generic={0x82, 0x10, "cc3e33841e8a70033012108a8bd4"}]}}, @info_reply={0x10, 0x0, 0x0, 0x4, 0x4}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) renameat2(r2, &(0x7f0000000340)='./bus\x00', r2, &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f00000004c0)=r5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x5, 0x3, 0x80000000, 0x9, 0x80000001}, 0x14) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x12d080, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x15}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2.651218283s ago: executing program 1 (id=2124): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000208000b400000000068000480340001800b"], 0x104}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000090a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000040000000050a01020000000000100000010020000c00024000000000000000010900010073797a310000000014000480080002"], 0xdc}}, 0x0) 2.17878694s ago: executing program 0 (id=2125): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = landlock_create_ruleset(0x0, 0x0, 0x1) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x0) r1 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)) socket(0x400000000010, 0xa, 0x0) write(r3, &(0x7f0000000380)="1b00000018002551075c0165ff0ffc028020001e0004000500e100e65786b213e7f5bf8092afd827301338e10a52de4e451548acf7ba97b763c9b4b270f1595221722944", 0xfffffffffffffed5) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x30) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) chdir(&(0x7f0000000340)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x54, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7fffefff, 0x0) 1.171045825s ago: executing program 2 (id=2126): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = socket(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000040)=""/3, 0x3}], 0x2) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioperm(0x284, 0x7f, 0xe3) r4 = memfd_secret(0x0) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) shmat(r5, &(0x7f0000ffc000/0x3000)=nil, 0x7000) fchmod(r4, 0x0) 1.14512674s ago: executing program 3 (id=2127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000130900010073797a310000000054000000030a01020000000000000000010000000900030073797a32000000002800b380080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000040000000050a01020000000000100000010020000c00024000000000000000010900010073797a3100000000140004"], 0xdc}}, 0x0) 1.011950884s ago: executing program 1 (id=2128): syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000780)=ANY=[@ANYRES32]) r2 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x3) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02000000f7f2474c8f34fc2298e6aa4bd438d36616831869208562d77e624c8e1df51c132fe91b0d21b619031af3952cce1cff85af887728dde975367c385e0820cd16e369e5c294"], 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000004d76000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000500000000000000000000000000000000000000894a3736ebf7c29c4b5d0a8c19e585d704d0b694489816048da336b1c8762ce79a804683b9a04ef928b7fe4b4b557c24abc24a2166e80576ac118e3c1ed8813cd5915e91d9ed14eb62874543d8c6f06a69149ef7c1a603f74acfabc89cb3ab6eb5ad7f7052d3f49e90fb6c4ea694cc2af683a973e70246434476ffac3d555a2225eac1f31545a8772897b8aba300"/179], 0x50) 1.001066559s ago: executing program 3 (id=2129): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) getpid() r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x200, 0x0) write$rfkill(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 854.727535ms ago: executing program 3 (id=2130): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = socket(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioperm(0x284, 0x7f, 0xe3) r3 = memfd_secret(0x0) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x7000) fchmod(r3, 0x0) 435.098399ms ago: executing program 1 (id=2131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x2000000}, 0x0) 431.096862ms ago: executing program 3 (id=2132): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r5, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r6 = dup(r4) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r7, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x2e34, &(0x7f0000000180)) (async) getpid() (async) syz_pidfd_open(r1, 0x0) (async) setns(r2, 0x24020000) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) (async) writev(r5, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) (async) dup(r4) (async) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x0) (async) creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) write$UHID_INPUT(r7, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async) umount2(&(0x7f0000000540)='.\x00', 0x2) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 235.773135ms ago: executing program 0 (id=2133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, @void}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @private}, &(0x7f0000000280)=0xc) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x80044dff, 0x1000000000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xc2, 0x0, 0x0, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) ftruncate(r7, 0x81ff) r8 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x5, 0x0) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = signalfd4(r2, &(0x7f0000000840)={[0x8]}, 0x8, 0x100800) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfd9}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x2, 0xc}, @alu={0x4, 0x0, 0x0, 0xa, 0x1, 0xfffffffffffffff0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc3d}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x9b, &(0x7f0000000380)=""/155, 0x40f00, 0x83, '\x00', r3, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x0, &(0x7f0000000880)=[r7, r8, r9, r10, r11], 0x0, 0x10, 0x9, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) unshare(0x64000600) 63.938467ms ago: executing program 1 (id=2134): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x895}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000040), 0x6f) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff65, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x7, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0xb, 0x0, 0x0, 0x8, 0xb6, 0x82, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'}) syz_open_dev$mouse(0x0, 0x2, 0x80000) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 0s ago: executing program 2 (id=2135): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707a, 0x0, 0x4, 0x157}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000940)=ANY=[@ANYBLOB="400f010000825b82ddfbae934b5ec3e468df0056"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r7, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r7, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLL', 0x14}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r6, 0x3ba0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfefa}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x3, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x6, 0x7, 0x7, 0x3, 0x9, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x8, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x89, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x2b, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000640), 0x6, 0x10000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x51d382, 0x40) kernel console output (not intermixed with test programs): mode [ 408.446292][T10746] veth1_macvtap: entered allmulticast mode [ 408.763181][T10705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.816978][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.852084][ T5915] scsi host1: usb-storage 1-1:3.20 [ 408.855902][ T5860] usb-storage 5-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 408.925443][T10705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.957794][ T5860] scsi host2: usb-storage 5-1:3.20 [ 408.964619][T10751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.066889][T10751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.132918][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.172580][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.392031][T10785] fuse: Unknown parameter 'group_i00000000000000000000' [ 410.747626][T10788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1456'. [ 411.142699][ T10] usb 1-1: USB disconnect, device number 47 [ 411.177493][ T5871] usb 5-1: USB disconnect, device number 33 [ 411.230286][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.248114][ T30] audit: type=1400 audit(1745173229.924:692): avc: denied { connect } for pid=10793 comm="syz.3.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 411.503349][ T30] audit: type=1400 audit(1745173230.144:693): avc: denied { block_suspend } for pid=10793 comm="syz.3.1460" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 411.605842][T10799] Cannot find del_set index 4 as target [ 411.853243][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.192869][T10784] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1456'. [ 412.387387][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.940862][ T30] audit: type=1400 audit(1745173231.554:694): avc: denied { watch } for pid=10806 comm="syz.1.1464" path="/275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 413.382761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.471515][ T30] audit: type=1400 audit(1745173231.614:695): avc: denied { watch_sb watch_reads } for pid=10806 comm="syz.1.1464" path="/275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 413.483454][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.812228][T10822] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1459'. [ 414.572790][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.622994][ T5871] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 414.737722][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.884156][ T5871] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 414.892606][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.900196][ T5871] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 414.926014][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 414.945754][ T5871] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 414.969305][ T5871] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 414.996601][ T5871] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 415.006016][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 415.018189][ T5871] usb 5-1: Product: syz [ 415.024489][ T5871] usb 5-1: Manufacturer: syz [ 415.036193][ T5871] cdc_wdm 5-1:1.0: skipping garbage [ 415.041558][ T5871] cdc_wdm 5-1:1.0: skipping garbage [ 415.049089][ T5871] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 415.058181][ T5871] cdc_wdm 5-1:1.0: Unknown control protocol [ 415.070987][ T30] audit: type=1400 audit(1745173233.744:696): avc: denied { bind } for pid=10834 comm="syz.2.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 415.121897][ T30] audit: type=1400 audit(1745173233.744:697): avc: denied { listen } for pid=10834 comm="syz.2.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 415.309235][T10817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.345492][T10817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.477326][T10847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1466'. [ 415.592367][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 416.786799][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 416.877587][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.969523][ T5871] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 417.172998][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 417.183413][ T5871] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 417.222475][ T5871] usb 1-1: config 0 has no interface number 0 [ 417.275249][ T5871] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 417.354976][ T5871] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 417.441239][ T5871] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 417.502007][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.512808][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 417.525122][ T5871] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 417.528142][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.554152][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 417.569795][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 417.582418][ T10] usb 4-1: Product: syz [ 417.589984][ T10] usb 4-1: Manufacturer: syz [ 417.602320][ T5871] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 417.616672][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 417.638259][ T24] usb 5-1: USB disconnect, device number 34 [ 417.651004][ T5871] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 417.661634][ T5871] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 417.671617][ T5871] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 417.684869][ T5871] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.701415][ T5871] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 417.716872][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.727164][ T5871] usb 1-1: Product: syz [ 417.731328][ T5871] usb 1-1: Manufacturer: syz [ 417.738156][ T5871] usb 1-1: SerialNumber: syz [ 417.745457][ T5871] usb 1-1: config 0 descriptor?? [ 417.790845][T10839] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 417.798848][ T5871] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 417.816873][T10841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.825963][T10841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.319682][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.335176][ T24] usb 4-1: USB disconnect, device number 39 [ 418.339218][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.359923][ T81] usb 1-1: USB disconnect, device number 48 [ 418.560554][ T30] audit: type=1400 audit(1745173237.234:698): avc: denied { listen } for pid=10863 comm="syz.3.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 418.694979][T10872] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 419.071908][T10880] veth0_vlan: entered allmulticast mode [ 420.152071][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.455679][ T81] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 420.614285][ T81] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 420.623288][ T81] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 420.633742][ T81] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 420.777466][ T81] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 420.788931][ T81] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 420.789366][T10903] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 420.802080][ T81] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 420.820364][ T81] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 420.828580][ T81] usb 1-1: Product: syz [ 420.833812][ T81] usb 1-1: Manufacturer: syz [ 420.857772][ T81] cdc_wdm 1-1:1.0: skipping garbage [ 420.863124][ T81] cdc_wdm 1-1:1.0: skipping garbage [ 420.869635][ T81] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 420.875672][ T81] cdc_wdm 1-1:1.0: Unknown control protocol [ 420.958275][T10907] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 420.958275][T10907] The task syz.3.1491 (10907) triggered the difference, watch for misbehavior. [ 420.999282][T10910] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[10910] [ 421.002828][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1491'. [ 421.018598][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1492'. [ 421.212908][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.324347][T10893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.482635][T10893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.058308][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.083775][T10916] cgroup: No subsys list or none specified [ 422.090217][T10916] cgroup: No subsys list or none specified [ 422.101244][T10916] cgroup: No subsys list or none specified [ 422.108097][T10916] cgroup: No subsys list or none specified [ 422.645327][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.669626][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1487'. [ 423.692705][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.602558][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.774447][T10934] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1497'. [ 424.783653][T10934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.796185][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.804577][ T5916] usb 1-1: USB disconnect, device number 49 [ 425.132543][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.149076][ T10] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 425.561796][T10949] veth1_to_bond: mtu less than device minimum [ 425.689897][T10949] bridge0: port 3(team0) entered blocking state [ 425.696679][T10949] bridge0: port 3(team0) entered disabled state [ 425.703675][T10949] team0: entered allmulticast mode [ 425.708811][T10949] team_slave_0: entered allmulticast mode [ 425.714599][T10949] team_slave_1: entered allmulticast mode [ 425.729176][T10949] team0: entered promiscuous mode [ 425.734320][T10949] team_slave_0: entered promiscuous mode [ 425.740134][T10949] team_slave_1: entered promiscuous mode [ 425.746535][T10949] bridge0: port 3(team0) entered blocking state [ 425.754226][T10949] bridge0: port 3(team0) entered forwarding state [ 425.777380][ T30] audit: type=1400 audit(1745173244.354:699): avc: granted { setsecparam } for pid=10945 comm="syz.1.1503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 425.811981][ T30] audit: type=1400 audit(1745173244.484:700): avc: denied { mount } for pid=10932 comm="syz.2.1499" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 425.853007][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.943575][ T10] usb 4-1: config index 0 descriptor too short (expected 5668, got 36) [ 425.951898][ T10] usb 4-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 425.964871][ T10] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 425.974013][T10952] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 425.980655][T10952] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 425.998241][T10952] vhci_hcd vhci_hcd.0: Device attached [ 426.011115][ T10] usb 4-1: config 3 has no interface number 0 [ 426.013769][T10954] vhci_hcd: connection closed [ 426.021174][ T80] vhci_hcd: stop threads [ 426.039355][ T80] vhci_hcd: release socket [ 426.041841][ T10] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 426.052659][ T80] vhci_hcd: disconnect device [ 426.078140][ T10] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 426.107966][ T10] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 426.125084][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.140603][ T10] usb 4-1: Product: syz [ 426.149888][ T10] usb 4-1: Manufacturer: syz [ 426.157021][ T10] usb 4-1: SerialNumber: syz [ 426.169172][T10939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 426.395862][ T10] usb-storage 4-1:3.20: USB Mass Storage device detected [ 426.412336][ T10] usb-storage 4-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 426.597161][ T10] scsi host1: usb-storage 4-1:3.20 [ 426.612519][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 426.792341][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 426.798921][ T24] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 426.803972][T10939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.807374][ T24] usb 5-1: config 0 has no interface number 0 [ 426.823953][ T5916] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 426.831837][T10939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.832903][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e [ 426.850246][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.858299][ T24] usb 5-1: Product: syz [ 426.862647][ T24] usb 5-1: Manufacturer: syz [ 426.867259][ T24] usb 5-1: SerialNumber: syz [ 426.873135][ T24] usb 5-1: config 0 descriptor?? [ 426.879830][ T24] ttusb_dec_send_command: command bulk message failed: error -22 [ 426.887722][ T24] ttusb-dec 5-1:0.217: probe with driver ttusb-dec failed with error -22 [ 426.896342][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.984070][ T5916] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 426.992826][ T5916] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 427.003118][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 427.012080][ T5916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 427.023341][ T5916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 427.036474][ T5916] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 427.045607][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 427.053602][ T5916] usb 1-1: Product: syz [ 427.057781][ T5916] usb 1-1: Manufacturer: syz [ 427.065837][ T5916] cdc_wdm 1-1:1.0: skipping garbage [ 427.071031][ T5916] cdc_wdm 1-1:1.0: skipping garbage [ 427.077142][ T5916] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 427.083131][ T5916] cdc_wdm 1-1:1.0: Unknown control protocol [ 427.119988][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 427.130950][ T24] usb 5-1: USB disconnect, device number 35 [ 427.286240][T10966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.295098][T10966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.408295][T10970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1508'. [ 427.947944][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.172683][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.875981][ T24] usb 4-1: USB disconnect, device number 40 [ 429.040904][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.147244][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 429.308874][ T10] usb 1-1: USB disconnect, device number 50 [ 429.442773][ T5916] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 429.650069][ T5916] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 429.660300][ T5916] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 430.172917][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 430.192436][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 430.203647][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 430.283218][ T5916] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 430.323993][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 430.408477][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.419073][ T5916] usb 5-1: Product: syz [ 430.435761][ T5916] usb 5-1: Manufacturer: syz [ 430.462125][ T5916] cdc_wdm 5-1:1.0: skipping garbage [ 430.467497][ T5916] cdc_wdm 5-1:1.0: skipping garbage [ 430.571834][ T5916] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 430.652605][ T5916] cdc_wdm 5-1:1.0: Unknown control protocol [ 430.795561][T10977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.812611][T10977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.240810][T11004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1512'. [ 431.388391][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.751328][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.812628][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.942749][ T10] usb 5-1: USB disconnect, device number 36 [ 433.408889][T11020] syz.1.1525: attempt to access beyond end of device [ 433.408889][T11020] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 433.540937][T11026] dccp_v6_rcv: dropped packet with invalid checksum [ 433.691773][ T30] audit: type=1400 audit(1745173252.364:701): avc: denied { accept } for pid=11027 comm="syz.0.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 433.893243][ T30] audit: type=1400 audit(1745173252.564:702): avc: denied { accept } for pid=11029 comm="syz.4.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.920454][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.062559][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.065667][ T30] audit: type=1400 audit(1745173252.594:703): avc: denied { getopt } for pid=11029 comm="syz.4.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 434.092448][ T30] audit: type=1400 audit(1745173252.594:704): avc: denied { write } for pid=11029 comm="syz.4.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 434.112005][ T30] audit: type=1400 audit(1745173252.594:705): avc: denied { bind } for pid=11029 comm="syz.4.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.412809][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.975041][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.524674][T11054] team0: No ports can be present during mode change [ 435.533632][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'. [ 435.543483][T11054] tipc: Resetting bearer [ 435.590421][T11056] overlayfs: failed to resolve '/ÿÿ¬ ': -2 [ 435.768399][T11054] tipc: Disabling bearer [ 435.802065][T11054] team0 (unregistering): Port device team_slave_0 removed [ 435.835435][T11054] team0 (unregistering): Port device team_slave_1 removed [ 435.966624][ T30] audit: type=1400 audit(1745173254.644:706): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 436.022965][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.136458][ T30] audit: type=1400 audit(1745173254.814:707): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 436.434010][T11076] FAULT_INJECTION: forcing a failure. [ 436.434010][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 436.446793][T11076] CPU: 0 UID: 0 PID: 11076 Comm: syz.3.1541 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 436.446815][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 436.446823][T11076] Call Trace: [ 436.446827][T11076] [ 436.446832][T11076] dump_stack_lvl+0x16c/0x1f0 [ 436.446850][T11076] should_fail_ex+0x512/0x640 [ 436.446861][T11076] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 436.446874][T11076] should_failslab+0xc2/0x120 [ 436.446887][T11076] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 436.446897][T11076] ? getname_kernel+0x52/0x370 [ 436.446909][T11076] ? do_raw_read_unlock+0x44/0xe0 [ 436.446923][T11076] getname_kernel+0x52/0x370 [ 436.446935][T11076] kern_path+0x1d/0x50 [ 436.446944][T11076] tomoyo_mount_acl+0x624/0x850 [ 436.446960][T11076] ? rcu_is_watching+0x12/0xc0 [ 436.446975][T11076] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 436.446989][T11076] ? preempt_schedule_notrace+0x62/0xe0 [ 436.447016][T11076] ? tomoyo_domain+0xbb/0x150 [ 436.447025][T11076] ? tomoyo_profile+0x47/0x60 [ 436.447035][T11076] tomoyo_mount_permission+0x16d/0x420 [ 436.447049][T11076] ? tomoyo_mount_permission+0x14f/0x420 [ 436.447063][T11076] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 436.447085][T11076] security_sb_mount+0x9b/0x260 [ 436.447100][T11076] path_mount+0x128/0x1f30 [ 436.447113][T11076] ? kmem_cache_free+0x2d4/0x4d0 [ 436.447122][T11076] ? __pfx_path_mount+0x10/0x10 [ 436.447135][T11076] ? putname+0x154/0x1a0 [ 436.447148][T11076] __x64_sys_mount+0x28d/0x310 [ 436.447160][T11076] ? __pfx___x64_sys_mount+0x10/0x10 [ 436.447171][T11076] ? syscall_user_dispatch+0x78/0x140 [ 436.447186][T11076] do_syscall_64+0xcd/0x260 [ 436.447202][T11076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.447212][T11076] RIP: 0033:0x7f352318e169 [ 436.447221][T11076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.447231][T11076] RSP: 002b:00007f3523fe1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 436.447241][T11076] RAX: ffffffffffffffda RBX: 00007f35233b6080 RCX: 00007f352318e169 [ 436.447247][T11076] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000200000000140 [ 436.447253][T11076] RBP: 00007f3523fe1090 R08: 0000000000000000 R09: 0000000000000000 [ 436.447259][T11076] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000002 [ 436.447265][T11076] R13: 0000000000000000 R14: 00007f35233b6080 R15: 00007ffc2faed078 [ 436.447278][T11076] [ 437.124555][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.613999][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.643023][ T30] audit: type=1400 audit(1745173255.874:708): avc: denied { ioctl } for pid=11080 comm="syz.4.1546" path="socket:[27539]" dev="sockfs" ino=27539 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 438.033022][T11101] netlink: 'syz.4.1553': attribute type 1 has an invalid length. [ 438.593829][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.834839][T11110] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 439.712781][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.719276][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.852751][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.513266][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.652464][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.921321][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.558722][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.686010][T11128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44560 sclass=netlink_route_socket pid=11128 comm=syz.2.1562 [ 441.829352][T11146] futex_wake_op: syz.2.1567 tries to shift op by -1; fix this program [ 441.918970][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 441.955610][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.602450][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 442.826040][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.836974][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.846790][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 442.855888][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.907097][ T24] usb 4-1: config 0 descriptor?? [ 443.106017][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.116047][T11142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.127862][T11161] fuse: Bad value for 'fd' [ 443.142692][T11142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.159646][ T30] audit: type=1326 audit(1745173261.824:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 443.588948][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.597339][ T30] audit: type=1326 audit(1745173261.834:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 443.621037][ T30] audit: type=1326 audit(1745173261.834:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 443.644718][ T30] audit: type=1326 audit(1745173261.834:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 443.668274][ T30] audit: type=1326 audit(1745173261.834:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 443.691719][ T30] audit: type=1326 audit(1745173261.834:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 443.715881][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.724196][ T30] audit: type=1326 audit(1745173261.834:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 443.747662][ T30] audit: type=1326 audit(1745173261.834:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 443.751268][T11142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.771087][ T30] audit: type=1326 audit(1745173261.834:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 443.771131][ T30] audit: type=1326 audit(1745173261.834:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 443.862989][T11142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.885781][T11169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.909610][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 443.918853][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 443.929397][ T24] usb 4-1: USB disconnect, device number 41 [ 444.186773][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.363365][T11177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1574'. [ 445.323712][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.783253][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 446.336160][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.726146][T11208] block nbd0: shutting down sockets [ 446.748280][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.496315][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.600424][T11229] fuse: Bad value for 'fd' [ 448.572628][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.612386][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 448.665950][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1597'. [ 448.685683][T11246] overlayfs: failed to clone upperpath [ 448.693097][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 448.693111][ T30] audit: type=1400 audit(1745173267.374:723): avc: denied { write } for pid=11240 comm="syz.4.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 448.745571][ T30] audit: type=1400 audit(1745173267.394:724): avc: denied { ioctl } for pid=11240 comm="syz.4.1596" path="socket:[28908]" dev="sockfs" ino=28908 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 448.792461][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 448.800389][ T9] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 448.810744][ T30] audit: type=1400 audit(1745173267.394:725): avc: denied { accept } for pid=11240 comm="syz.4.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 448.834534][ T9] usb 4-1: config 0 has no interface number 0 [ 448.855216][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e [ 448.871593][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.885784][ T9] usb 4-1: Product: syz [ 448.890464][ T9] usb 4-1: Manufacturer: syz [ 448.898581][ T9] usb 4-1: SerialNumber: syz [ 448.906249][ T9] usb 4-1: config 0 descriptor?? [ 448.906613][T11253] loop2: detected capacity change from 0 to 7 [ 448.919557][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 448.929436][ T9] ttusb-dec 4-1:0.217: probe with driver ttusb-dec failed with error -22 [ 448.929833][T11253] Dev loop2: unable to read RDB block 7 [ 448.943783][T11253] loop2: unable to read partition table [ 448.949493][T11253] loop2: partition table beyond EOD, truncated [ 448.957340][T11253] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 449.049918][T11257] SET target dimension over the limit! [ 449.091648][ T30] audit: type=1400 audit(1745173267.764:726): avc: denied { bind } for pid=11258 comm="syz.4.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 449.113551][ T30] audit: type=1400 audit(1745173267.764:727): avc: denied { name_bind } for pid=11258 comm="syz.4.1602" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 449.137691][ T30] audit: type=1400 audit(1745173267.764:728): avc: denied { node_bind } for pid=11258 comm="syz.4.1602" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 449.162968][ T30] audit: type=1400 audit(1745173267.764:729): avc: denied { listen } for pid=11258 comm="syz.4.1602" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 449.163245][ T9] usb 4-1: USB disconnect, device number 42 [ 449.193616][ T30] audit: type=1400 audit(1745173267.764:730): avc: denied { connect } for pid=11258 comm="syz.4.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 449.226795][ T5860] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 449.236294][ T30] audit: type=1400 audit(1745173267.764:731): avc: denied { name_connect } for pid=11258 comm="syz.4.1602" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 449.259663][ T30] audit: type=1400 audit(1745173267.764:732): avc: denied { accept } for pid=11258 comm="syz.4.1602" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 449.404378][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 449.422379][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.434654][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.461909][ T5860] usb 1-1: New USB device found, idVendor=046d, idProduct=c12b, bcdDevice= 0.00 [ 449.588372][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.614221][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.625615][ T5860] usb 1-1: config 0 descriptor?? [ 449.873112][ T5860] usb 1-1: USB disconnect, device number 51 [ 449.873448][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.887889][T11277] fuse: Unknown parameter 'grou00000000000000000000' [ 450.236412][T11279] ip6erspan0: entered promiscuous mode [ 450.654341][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.080796][T11300] Invalid ELF header magic: != ELF [ 451.706833][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.092471][ T5860] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 452.484732][ T5860] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 452.523550][ T5860] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.552381][ T5916] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 452.561483][ T5860] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 452.601199][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.687382][ T5860] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 452.723696][ T5916] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 452.737212][ T5916] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 452.745644][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.765977][ T5860] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 452.784360][ T5916] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 452.805693][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.828927][T11313] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 452.843748][ T5916] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 452.913899][T11310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.922581][T11310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.937350][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.977100][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.993495][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.002146][T11318] fuse: Unknown parameter 'grou00000000000000000000' [ 453.020753][T11310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.042096][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.061551][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.073286][T11311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.083639][ T5916] usb 1-1: USB disconnect, device number 52 [ 454.069956][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1629'. [ 454.628826][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 454.628837][ T30] audit: type=1400 audit(1745173273.304:738): avc: denied { setopt } for pid=11358 comm="syz.0.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 454.752733][T11362] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1635'. [ 455.091355][ T5860] usb 4-1: USB disconnect, device number 43 [ 455.184180][T11368] PKCS8: Unsupported PKCS#8 version [ 456.012567][ T5916] net_ratelimit: 209 callbacks suppressed [ 456.012583][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.226016][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.627885][T11374] fuse: Bad value for 'fd' [ 456.942388][ T5916] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 457.007629][T11393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11393 comm=syz.4.1648 [ 457.024981][ T30] audit: type=1400 audit(1745173275.704:739): avc: denied { read } for pid=11392 comm="syz.4.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 457.249396][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 457.256217][ T5916] usb 1-1: unable to get BOS descriptor set [ 457.263258][ T5916] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 457.272120][ T5916] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 457.282359][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.293589][ T5916] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.371987][T11400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 458.195063][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.263853][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.271871][ T5916] usb 1-1: Product: syz [ 458.276578][ T5916] usb 1-1: Manufacturer: syz [ 458.281167][ T5916] usb 1-1: SerialNumber: syz [ 459.083910][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.099536][ T5916] usb 1-1: 0:2 : does not exist [ 459.104702][T11412] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1646'. [ 459.112505][ T5916] usb 1-1: USB disconnect, device number 53 [ 459.120813][T11411] overlayfs: failed to clone upperpath [ 459.212621][ T5860] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 459.260271][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.423296][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 459.455353][ T5860] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 459.491158][ T5860] usb 5-1: config 0 has no interface number 0 [ 459.508201][ T5860] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e [ 459.518982][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.527040][ T5860] usb 5-1: Product: syz [ 459.534233][ T5860] usb 5-1: Manufacturer: syz [ 459.541424][ T5860] usb 5-1: SerialNumber: syz [ 459.549005][ T5860] usb 5-1: config 0 descriptor?? [ 459.556447][ T5860] ttusb_dec_send_command: command bulk message failed: error -22 [ 459.564340][ T5860] ttusb-dec 5-1:0.217: probe with driver ttusb-dec failed with error -22 [ 460.313608][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 460.328571][T11426] fuse: Invalid rootmode [ 460.396094][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.455563][ T5860] usb 5-1: USB disconnect, device number 37 [ 461.100518][ T30] audit: type=1400 audit(1745173279.774:740): avc: denied { connect } for pid=11428 comm="syz.3.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 461.109567][T11434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.128562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.237693][T11435] input: syz0 as /devices/virtual/input/input29 [ 461.742847][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.851583][T11442] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 461.883184][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 461.906018][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.916189][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 461.925961][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.943073][T11440] dummy0: entered promiscuous mode [ 461.948768][T11440] macsec1: entered allmulticast mode [ 461.954147][T11440] dummy0: entered allmulticast mode [ 462.094843][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.116497][T11455] overlayfs: failed to clone upperpath [ 462.511214][T11471] fuse: Unknown parameter 'group_i00000000000000000000' [ 462.884273][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.958655][T11478] syz.1.1672: attempt to access beyond end of device [ 462.958655][T11478] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 462.971724][T11478] efs: cannot read volume header [ 463.243420][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.411544][ T5916] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 463.661674][ T30] audit: type=1400 audit(1745173282.334:741): avc: denied { ioctl } for pid=11483 comm="syz.3.1679" path="socket:[29380]" dev="sockfs" ino=29380 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 463.691217][T11486] FAULT_INJECTION: forcing a failure. [ 463.691217][T11486] name failslab, interval 1, probability 0, space 0, times 0 [ 463.707641][T11486] CPU: 0 UID: 0 PID: 11486 Comm: syz.0.1680 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 463.707666][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.707676][T11486] Call Trace: [ 463.707681][T11486] [ 463.707687][T11486] dump_stack_lvl+0x16c/0x1f0 [ 463.707715][T11486] should_fail_ex+0x512/0x640 [ 463.707737][T11486] should_failslab+0xc2/0x120 [ 463.707756][T11486] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 463.707775][T11486] ? __alloc_skb+0x2b2/0x380 [ 463.707797][T11486] __alloc_skb+0x2b2/0x380 [ 463.707815][T11486] ? __pfx___alloc_skb+0x10/0x10 [ 463.707832][T11486] ? skb_put+0x138/0x1b0 [ 463.707853][T11486] ? __asan_memset+0x23/0x50 [ 463.707876][T11486] ? __nla_reserve+0x9c/0xc0 [ 463.707899][T11486] wireless_send_event+0x629/0xc50 [ 463.707928][T11486] ? __pfx_wireless_send_event+0x10/0x10 [ 463.707959][T11486] ioctl_standard_iw_point+0xaa1/0xca0 [ 463.707983][T11486] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 463.708006][T11486] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 463.708028][T11486] ? wext_handle_ioctl+0x20b/0x2a0 [ 463.708053][T11486] ? __pfx___mutex_lock+0x10/0x10 [ 463.708082][T11486] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 463.708101][T11486] ioctl_standard_call+0x166/0x1d0 [ 463.708125][T11486] ? __pfx_ioctl_standard_call+0x10/0x10 [ 463.708147][T11486] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 463.708166][T11486] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 463.708195][T11486] wext_handle_ioctl+0x226/0x2a0 [ 463.708219][T11486] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 463.708247][T11486] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 463.708275][T11486] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 463.708305][T11486] sock_ioctl+0x3a1/0x6b0 [ 463.708321][T11486] ? __pfx_sock_ioctl+0x10/0x10 [ 463.708343][T11486] ? hook_file_ioctl_common+0x145/0x410 [ 463.708367][T11486] ? selinux_file_ioctl+0x180/0x270 [ 463.708390][T11486] ? selinux_file_ioctl+0xb4/0x270 [ 463.708416][T11486] ? __pfx_sock_ioctl+0x10/0x10 [ 463.708442][T11486] __x64_sys_ioctl+0x190/0x200 [ 463.708467][T11486] do_syscall_64+0xcd/0x260 [ 463.708500][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.708517][T11486] RIP: 0033:0x7f8adad8e169 [ 463.708530][T11486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.708546][T11486] RSP: 002b:00007f8adbcc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.708563][T11486] RAX: ffffffffffffffda RBX: 00007f8adafb5fa0 RCX: 00007f8adad8e169 [ 463.708574][T11486] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003 [ 463.708583][T11486] RBP: 00007f8adbcc1090 R08: 0000000000000000 R09: 0000000000000000 [ 463.708593][T11486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.708602][T11486] R13: 0000000000000000 R14: 00007f8adafb5fa0 R15: 00007fff886a14c8 [ 463.708626][T11486] [ 464.000672][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 464.099549][ T30] audit: type=1400 audit(1745173282.684:742): avc: denied { read } for pid=11483 comm="syz.3.1679" path="socket:[29380]" dev="sockfs" ino=29380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 464.129139][ T5916] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 464.136147][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.139360][ T5916] usb 5-1: config 0 has no interface number 0 [ 464.185551][ T30] audit: type=1400 audit(1745173282.834:743): avc: denied { read } for pid=11488 comm="syz.2.1681" name="file0" dev="tmpfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 464.208134][ T5916] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e [ 464.217225][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.228637][ T5916] usb 5-1: Product: syz [ 464.233221][ T5916] usb 5-1: Manufacturer: syz [ 464.237836][ T5916] usb 5-1: SerialNumber: syz [ 464.246214][ T30] audit: type=1400 audit(1745173282.834:744): avc: denied { open } for pid=11488 comm="syz.2.1681" path="/369/file0" dev="tmpfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 464.269798][ T5916] usb 5-1: config 0 descriptor?? [ 464.275039][ T30] audit: type=1400 audit(1745173282.834:745): avc: denied { ioctl } for pid=11488 comm="syz.2.1681" path="/369/file0" dev="tmpfs" ino=2033 ioctlcmd=0x1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 464.304237][ T5916] ttusb_dec_send_command: command bulk message failed: error -22 [ 464.312802][ T5916] ttusb-dec 5-1:0.217: probe with driver ttusb-dec failed with error -22 [ 464.371383][ T30] audit: type=1400 audit(1745173283.044:746): avc: denied { create } for pid=11498 comm="syz.3.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 464.400817][ T30] audit: type=1400 audit(1745173283.044:747): avc: denied { setopt } for pid=11498 comm="syz.3.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 464.433139][ T30] audit: type=1400 audit(1745173283.084:748): avc: denied { setopt } for pid=11500 comm="syz.0.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 464.468229][ T30] audit: type=1400 audit(1745173283.104:749): avc: denied { getattr } for pid=11500 comm="syz.0.1685" name="KEY" dev="sockfs" ino=29400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 464.531076][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 464.555253][ T5872] usb 5-1: USB disconnect, device number 38 [ 464.658813][T11512] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[11512] [ 464.933540][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1688'. [ 465.132607][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.149424][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.722605][ T5916] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 466.070538][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 466.077099][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.078276][T11527] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.102384][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.112128][ T5916] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 466.134346][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.149362][ T5916] usb 4-1: config 0 descriptor?? [ 466.156557][ T5916] hub 4-1:0.0: USB hub found [ 466.173775][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.312707][ T5872] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 466.505937][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 466.524814][T11514] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1689'. [ 466.547889][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.571240][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.595716][ T30] audit: type=1400 audit(1745173285.274:750): avc: denied { append } for pid=11536 comm="syz.4.1697" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 466.620450][ T5872] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 466.642638][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.666639][ T5872] usb 1-1: config 0 descriptor?? [ 466.912608][ T24] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 467.052387][ T24] usb 5-1: device descriptor read/64, error -71 [ 467.090004][ T5872] ft260 0003:0403:6030.0007: item fetching failed at offset 0/2 [ 467.100412][ T5872] ft260 0003:0403:6030.0007: failed to parse HID [ 467.110897][ T5872] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -22 [ 467.153774][ T5916] hub 4-1:0.0: 1 port detected [ 467.212623][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.292316][ T24] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 467.389854][ T30] audit: type=1400 audit(1745173286.064:751): avc: denied { checkpoint_restore } for pid=11513 comm="syz.3.1689" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 467.422344][ T5916] hub 4-1:0.0: activate --> -90 [ 467.442511][ T24] usb 5-1: device descriptor read/64, error -71 [ 467.552767][ T24] usb usb5-port1: attempt power cycle [ 467.838734][ T9] usb 4-1: USB disconnect, device number 44 [ 468.257816][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.303880][ T24] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 468.312060][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.332755][ T24] usb 5-1: device descriptor read/8, error -71 [ 468.626448][ T24] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 468.688835][ T24] usb 5-1: device descriptor read/8, error -71 [ 468.836658][ T24] usb usb5-port1: unable to enumerate USB device [ 469.617184][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.697225][ T9] usb 1-1: USB disconnect, device number 54 [ 470.135894][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1706'. [ 470.745444][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.093531][T11587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1711'. [ 471.202731][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 471.304529][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.394750][ T30] audit: type=1400 audit(1745173290.074:752): avc: denied { connect } for pid=11585 comm="syz.4.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 471.423859][T11591] overlayfs: failed to clone upperpath [ 471.457629][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.475793][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.521502][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.544040][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.552114][ T24] usb 4-1: Product: syz [ 471.562202][ T24] usb 4-1: Manufacturer: syz [ 471.572163][ T24] usb 4-1: SerialNumber: syz [ 471.673538][ T30] audit: type=1400 audit(1745173290.354:753): avc: denied { remount } for pid=11596 comm="syz.2.1717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 471.768553][T11606] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 471.782573][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.812352][T11582] openvswitch: netlink: Tunnel attr 12 has unexpected len 2 expected 16 [ 471.886699][T11617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1724'. [ 472.384835][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.697099][ T24] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 472.703457][ T24] cdc_mbim 4-1:1.0: bind() failure [ 472.719322][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 472.736080][ T24] cdc_ncm 4-1:1.1: bind() failure [ 472.748788][ T24] usb 4-1: USB disconnect, device number 45 [ 472.789016][T11627] FAULT_INJECTION: forcing a failure. [ 472.789016][T11627] name failslab, interval 1, probability 0, space 0, times 0 [ 472.802081][T11627] CPU: 0 UID: 0 PID: 11627 Comm: syz.4.1727 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 472.802106][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 472.802117][T11627] Call Trace: [ 472.802123][T11627] [ 472.802129][T11627] dump_stack_lvl+0x16c/0x1f0 [ 472.802158][T11627] should_fail_ex+0x512/0x640 [ 472.802181][T11627] should_failslab+0xc2/0x120 [ 472.802201][T11627] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 472.802220][T11627] ? sctp_get_port_local+0x51e/0x1610 [ 472.802251][T11627] sctp_get_port_local+0x51e/0x1610 [ 472.802279][T11627] ? __pfx_sctp_get_port_local+0x10/0x10 [ 472.802299][T11627] ? sctp_bind_addr_match+0x193/0x300 [ 472.802322][T11627] ? sctp_bind_addr_match+0x19d/0x300 [ 472.802344][T11627] sctp_do_bind+0x223/0x700 [ 472.802365][T11627] sctp_connect_new_asoc+0x5fd/0x790 [ 472.802384][T11627] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 472.802407][T11627] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 472.802432][T11627] sctp_sendmsg+0x15f9/0x1ee0 [ 472.802447][T11627] ? avc_has_perm+0x11a/0x1c0 [ 472.802468][T11627] ? __pfx_sctp_sendmsg+0x10/0x10 [ 472.802491][T11627] ? __pfx_sock_has_perm+0x10/0x10 [ 472.802513][T11627] ? __might_fault+0xe3/0x190 [ 472.802539][T11627] ? __pfx_sctp_sendmsg+0x10/0x10 [ 472.802558][T11627] inet_sendmsg+0x119/0x140 [ 472.802575][T11627] __sys_sendto+0x431/0x510 [ 472.802601][T11627] ? __pfx___sys_sendto+0x10/0x10 [ 472.802640][T11627] ? ksys_write+0x1b9/0x240 [ 472.802656][T11627] ? __pfx_ksys_write+0x10/0x10 [ 472.802669][T11627] ? rcu_is_watching+0x12/0xc0 [ 472.802694][T11627] __x64_sys_sendto+0xe0/0x1c0 [ 472.802711][T11627] ? do_syscall_64+0x91/0x260 [ 472.802733][T11627] ? lockdep_hardirqs_on+0x7c/0x110 [ 472.802754][T11627] do_syscall_64+0xcd/0x260 [ 472.802779][T11627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.802796][T11627] RIP: 0033:0x7f9eda78e169 [ 472.802811][T11627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.802828][T11627] RSP: 002b:00007f9edb5e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 472.802845][T11627] RAX: ffffffffffffffda RBX: 00007f9eda9b5fa0 RCX: 00007f9eda78e169 [ 472.802855][T11627] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 472.802865][T11627] RBP: 00007f9edb5e9090 R08: 000020000005ffe4 R09: 000000000000001c [ 472.802875][T11627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.802885][T11627] R13: 0000000000000000 R14: 00007f9eda9b5fa0 R15: 00007ffd3e97f398 [ 472.802908][T11627] [ 472.901420][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.095449][ T30] audit: type=1400 audit(1745173291.774:754): avc: denied { setopt } for pid=11634 comm="syz.4.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 473.128930][ T30] audit: type=1400 audit(1745173291.804:755): avc: denied { write } for pid=11638 comm="syz.4.1732" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 473.247273][T11639] input: syz1 as /devices/virtual/input/input30 [ 473.312391][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 473.409667][ T30] audit: type=1400 audit(1745173292.084:756): avc: denied { bind } for pid=11643 comm="syz.3.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 473.447481][T11646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.456222][T11646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.464481][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 473.464508][T11646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.471020][ T9] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 473.485979][ T9] usb 1-1: config 0 has no interface number 0 [ 473.516930][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e [ 473.526336][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.537845][ T9] usb 1-1: Product: syz [ 473.542048][ T9] usb 1-1: Manufacturer: syz [ 473.549882][ T9] usb 1-1: SerialNumber: syz [ 473.559411][ T9] usb 1-1: config 0 descriptor?? [ 473.567799][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 473.578924][ T9] ttusb-dec 1-1:0.217: probe with driver ttusb-dec failed with error -22 [ 474.007184][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 474.130557][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 474.141051][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.189956][ T5860] usb 1-1: USB disconnect, device number 55 [ 474.298920][T11645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.355167][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 474.385232][ T24] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 474.394207][ T24] usb 5-1: config 0 has no interface number 0 [ 474.404501][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e [ 474.413772][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.421786][ T24] usb 5-1: Product: syz [ 474.426214][ T24] usb 5-1: Manufacturer: syz [ 474.430849][ T24] usb 5-1: SerialNumber: syz [ 474.533584][ T24] usb 5-1: config 0 descriptor?? [ 474.540280][ T24] ttusb_dec_send_command: command bulk message failed: error -22 [ 475.003564][ T24] ttusb-dec 5-1:0.217: probe with driver ttusb-dec failed with error -22 [ 475.014204][ T24] usb 5-1: USB disconnect, device number 43 [ 476.372444][T11667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1739'. [ 476.873677][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'. [ 477.372624][ T5860] net_ratelimit: 4 callbacks suppressed [ 477.372640][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.386243][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.752477][ T5860] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 477.979632][ T5860] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 477.991950][ T5860] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 478.003650][ T5860] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 478.065117][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1754'. [ 478.247983][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.285011][T11700] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 478.312590][ T5860] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 478.438101][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.527961][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 479.203495][T11736] block nbd0: shutting down sockets [ 479.422345][ T5860] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 479.452537][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.538918][ T30] audit: type=1400 audit(1745173298.214:757): avc: denied { getopt } for pid=11746 comm="syz.1.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 479.572416][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 479.584054][ T5860] usb 5-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 479.608226][ T5860] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 479.640047][ T24] usb 1-1: USB disconnect, device number 56 [ 479.647151][ T5860] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 479.912333][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.922511][ T5860] usb 5-1: Product: syz [ 479.926680][ T5860] usb 5-1: Manufacturer: syz [ 479.931322][ T5860] usb 5-1: SerialNumber: syz [ 479.940939][ T5860] usb 5-1: config 0 descriptor?? [ 480.257569][T11735] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1762'. [ 480.266894][T11735] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 480.413660][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.493549][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.694654][ T30] audit: type=1400 audit(1745173299.374:758): avc: denied { ioctl } for pid=11759 comm="syz.1.1770" path="socket:[31002]" dev="sockfs" ino=31002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 480.719227][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.532492][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.632762][ T5860] usb 5-1: USB disconnect, device number 44 [ 481.946257][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.192347][ T5871] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 482.353817][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 482.365627][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 482.377400][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 482.390410][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.404185][T11791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.412574][T11791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.420817][T11791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.429092][ T5871] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.432445][T11791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.438168][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.456338][ T5871] usb 1-1: config 0 descriptor?? [ 482.456793][T11791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.461899][T11786] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 482.469826][T11791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.487636][T11791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.496962][T11791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.505741][T11791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.514368][T11791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.570945][T11793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1781'. [ 482.597413][T11793] overlay: filesystem on ./bus not supported as upperdir [ 482.977365][ T5871] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.032563][ T5871] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.046327][ T5871] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.063284][ T5871] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.072911][ T5871] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 483.081368][T11805] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1786'. [ 483.081533][ T5871] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 483.115530][T11807] overlayfs: failed to clone upperpath [ 483.168574][ T5871] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 483.192645][ T5871] usb 1-1: USB disconnect, device number 57 [ 484.349016][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1794'. [ 484.616708][T11842] loop4: detected capacity change from 0 to 7 [ 484.809026][T11842] Dev loop4: unable to read RDB block 7 [ 484.896967][T11842] loop4: unable to read partition table [ 484.917332][T11842] loop4: partition table beyond EOD, truncated [ 484.956015][T11842] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 484.985308][ C1] sd 0:0:1:0: [sda] tag#5255 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 484.995743][ C1] sd 0:0:1:0: [sda] tag#5255 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 485.644862][ T30] audit: type=1400 audit(1745173303.894:759): avc: denied { write } for pid=11849 comm="syz.1.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 486.655123][T11869] veth0_vlan: left promiscuous mode [ 486.664397][T11869] veth0_vlan: entered promiscuous mode [ 488.122777][ T5860] net_ratelimit: 10 callbacks suppressed [ 488.122795][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.251274][T11880] dvmrp0: entered allmulticast mode [ 488.857397][T11890] netlink: '+}[@': attribute type 4 has an invalid length. [ 488.945569][ T30] audit: type=1400 audit(1745173307.624:760): avc: denied { write } for pid=11888 comm="syz.0.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 489.022476][ T30] audit: type=1400 audit(1745173307.624:761): avc: denied { map } for pid=11889 comm="syz.1.1813" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 489.147667][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.243292][T11898] fuse: Unknown parameter 'use00000000000000000000' [ 489.564459][T11902] input: syz0 as /devices/virtual/input/input32 [ 490.003990][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.018201][ T30] audit: type=1400 audit(1745173307.764:762): avc: denied { ioctl } for pid=11888 comm="syz.0.1812" path="socket:[30622]" dev="sockfs" ino=30622 ioctlcmd=0x8947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 490.112828][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 490.122326][ T30] audit: type=1400 audit(1745173307.764:763): avc: denied { read } for pid=11888 comm="syz.0.1812" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 490.271111][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.272722][ T30] audit: type=1400 audit(1745173307.764:764): avc: denied { open } for pid=11888 comm="syz.0.1812" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 490.402347][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 490.415528][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.420795][ T30] audit: type=1400 audit(1745173307.764:765): avc: denied { ioctl } for pid=11888 comm="syz.0.1812" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 490.455345][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.501149][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 490.522584][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.659702][T11917] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 490.817029][ T24] usb 4-1: config 0 descriptor?? [ 490.838593][ T24] hub 4-1:0.0: USB hub found [ 491.061874][T11908] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1817'. [ 491.262395][ T24] hub 4-1:0.0: 1 port detected [ 491.309327][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.319809][T11927] overlayfs: failed to clone upperpath [ 491.532651][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.542342][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 491.706660][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 491.740763][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 491.882415][ T5915] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 492.046868][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 492.056678][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 492.070615][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 492.087917][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 492.098423][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 492.107900][ T10] usb 5-1: Product: syz [ 492.112362][ T10] usb 5-1: Manufacturer: syz [ 492.120846][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 492.128223][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 492.135525][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 492.141619][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 492.147909][ T24] hub 4-1:0.0: activate --> -90 [ 492.202412][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 492.211509][ T5915] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 492.220908][ T5915] usb 1-1: config 0 has no interface number 0 [ 492.231128][ T5915] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e [ 492.296648][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.318686][ T5915] usb 1-1: Product: syz [ 492.337952][ T5915] usb 1-1: Manufacturer: syz [ 492.350897][ T5915] usb 1-1: SerialNumber: syz [ 492.387208][T11929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.401983][ T5915] usb 1-1: config 0 descriptor?? [ 492.412351][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.435097][T11929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.445293][ T5915] ttusb_dec_send_command: command bulk message failed: error -22 [ 492.463924][ T5915] ttusb-dec 1-1:0.217: probe with driver ttusb-dec failed with error -22 [ 492.679136][ T10] usb 4-1: USB disconnect, device number 46 [ 493.454436][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.633276][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 493.643918][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.683953][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.750857][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.762842][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.795608][ T81] usb 1-1: USB disconnect, device number 58 [ 493.968871][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1831'. [ 494.060845][ T10] usb 5-1: USB disconnect, device number 45 [ 494.237855][T11967] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[11967] [ 494.500891][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.792348][ T81] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 495.002573][ T81] usb 1-1: device descriptor read/64, error -71 [ 495.272644][ T81] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 495.412572][ T81] usb 1-1: device descriptor read/64, error -71 [ 495.528863][T11989] overlayfs: failed to clone upperpath [ 495.537412][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.593710][T11990] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1838'. [ 495.682056][ T81] usb usb1-port1: attempt power cycle [ 496.131124][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1845'. [ 496.142708][ T81] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 496.166210][ T81] usb 1-1: device descriptor read/8, error -71 [ 496.442443][ T81] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 496.744565][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.772736][ T81] usb 1-1: device descriptor read/8, error -71 [ 496.814446][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.882730][ T81] usb usb1-port1: unable to enumerate USB device [ 497.955340][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.245695][T12025] fuse: Unknown parameter 'user_i00000000000000000000' [ 498.762730][T12024] netlink: 'syz.3.1853': attribute type 1 has an invalid length. [ 498.942884][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 498.975556][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.214849][T12033] bond1 (unregistering): Released all slaves [ 499.239141][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.282182][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.386967][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.445921][T12042] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1859'. [ 499.459040][ T30] audit: type=1400 audit(1745173318.124:766): avc: denied { write } for pid=12039 comm="syz.2.1859" path="socket:[31899]" dev="sockfs" ino=31899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 499.633747][T12050] overlayfs: failed to clone upperpath [ 499.706029][T12051] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 499.843426][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 500.091878][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.210380][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 500.267146][ T10] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 500.275734][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.300669][ T10] usb 5-1: config 0 has no interface number 0 [ 500.308187][ T10] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x5 has an invalid bInterval 130, changing to 11 [ 500.338026][ T10] usb 5-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 500.364868][ T10] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 500.377550][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.385738][ T10] usb 5-1: Product: syz [ 500.389969][ T10] usb 5-1: Manufacturer: syz [ 500.410157][ T10] usb 5-1: SerialNumber: syz [ 500.520082][ T10] usb 5-1: config 0 descriptor?? [ 500.555154][ T10] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 500.715387][T12067] overlayfs: failed to clone upperpath [ 500.803315][ T10] usb 5-1: USB disconnect, device number 46 [ 501.135910][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.144047][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.155793][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.162095][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.348018][ T30] audit: type=1400 audit(1745173320.024:767): avc: denied { getopt } for pid=12083 comm="syz.0.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 501.647838][ T5860] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 502.017245][T12099] syz.0.1877: attempt to access beyond end of device [ 502.017245][T12099] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 502.030323][T12099] efs: cannot read volume header [ 502.290493][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.298847][ T5871] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 502.338084][ T5860] usb 5-1: Invalid ep0 maxpacket: 64 [ 502.472503][ T5860] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 502.508016][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 502.515876][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.530449][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.544850][ T5871] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 502.554396][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.003465][ T5871] usb 1-1: Product: syz [ 503.020744][ T5871] usb 1-1: Manufacturer: syz [ 503.031858][ T5871] usb 1-1: SerialNumber: syz [ 503.048477][ T5871] usb 1-1: config 0 descriptor?? [ 503.065337][ T5871] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 503.073159][ T5860] usb 5-1: Invalid ep0 maxpacket: 64 [ 503.086995][ T5860] usb usb5-port1: attempt power cycle [ 503.265702][T12096] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1877'. [ 503.275259][T12096] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 503.452527][ T5860] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 503.493638][ T5860] usb 5-1: Invalid ep0 maxpacket: 64 [ 503.608241][ T5871] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 503.617811][ T5871] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 503.627017][ T5860] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 503.652952][ T5860] usb 5-1: Invalid ep0 maxpacket: 64 [ 503.658643][ T5860] usb usb5-port1: unable to enumerate USB device [ 503.772350][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 503.943732][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.955030][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 503.972449][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.981482][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.005070][T12112] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 504.014988][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.250152][ T10] usb 4-1: USB disconnect, device number 47 [ 504.430799][ T5860] net_ratelimit: 1 callbacks suppressed [ 504.430815][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.072068][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.080845][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.111177][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.119570][ T5860] usb 1-1: USB disconnect, device number 63 [ 505.442668][ T81] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 505.454251][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1892'. [ 505.471084][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.702298][ T81] usb 5-1: Using ep0 maxpacket: 32 [ 505.710286][ T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.731537][ T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.741341][ T81] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 505.753606][ T81] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.785773][ T81] usb 5-1: config 0 descriptor?? [ 505.791997][ T81] hub 5-1:0.0: USB hub found [ 505.998035][T12132] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1889'. [ 506.009034][ T81] hub 5-1:0.0: 1 port detected [ 506.492599][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.642401][ T81] hub 5-1:0.0: activate --> -90 [ 507.098009][ T5860] usb 5-1: USB disconnect, device number 51 [ 507.805879][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.898598][ T5871] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 508.062335][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 508.098760][ T5871] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 508.127032][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.195503][ T5871] usb 1-1: Product: syz [ 508.234316][ T5871] usb 1-1: Manufacturer: syz [ 508.239153][ T5871] usb 1-1: SerialNumber: syz [ 508.333324][T12178] FAULT_INJECTION: forcing a failure. [ 508.333324][T12178] name failslab, interval 1, probability 0, space 0, times 0 [ 508.346052][T12178] CPU: 1 UID: 0 PID: 12178 Comm: syz.3.1906 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 508.346076][T12178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 508.346085][T12178] Call Trace: [ 508.346091][T12178] [ 508.346097][T12178] dump_stack_lvl+0x16c/0x1f0 [ 508.346124][T12178] should_fail_ex+0x512/0x640 [ 508.346142][T12178] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 508.346163][T12178] should_failslab+0xc2/0x120 [ 508.346182][T12178] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 508.346200][T12178] ? __alloc_skb+0x2b2/0x380 [ 508.346223][T12178] __alloc_skb+0x2b2/0x380 [ 508.346241][T12178] ? __pfx___alloc_skb+0x10/0x10 [ 508.346258][T12178] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 508.346279][T12178] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 508.346307][T12178] netlink_alloc_large_skb+0x69/0x130 [ 508.346332][T12178] netlink_sendmsg+0x6a1/0xdd0 [ 508.346358][T12178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.346390][T12178] ____sys_sendmsg+0xa95/0xc70 [ 508.346416][T12178] ? copy_msghdr_from_user+0x10a/0x160 [ 508.346435][T12178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.346471][T12178] ___sys_sendmsg+0x134/0x1d0 [ 508.346492][T12178] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.346542][T12178] __sys_sendmsg+0x16d/0x220 [ 508.346562][T12178] ? __pfx___sys_sendmsg+0x10/0x10 [ 508.346589][T12178] ? rcu_is_watching+0x12/0xc0 [ 508.346617][T12178] do_syscall_64+0xcd/0x260 [ 508.346641][T12178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.346658][T12178] RIP: 0033:0x7f352318e169 [ 508.346672][T12178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.346688][T12178] RSP: 002b:00007f3524002038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.346704][T12178] RAX: ffffffffffffffda RBX: 00007f35233b5fa0 RCX: 00007f352318e169 [ 508.346715][T12178] RDX: 0000000004000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 508.346725][T12178] RBP: 00007f3524002090 R08: 0000000000000000 R09: 0000000000000000 [ 508.346734][T12178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.346744][T12178] R13: 0000000000000000 R14: 00007f35233b5fa0 R15: 00007ffc2faed078 [ 508.346766][T12178] [ 508.370937][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.432334][ T5871] r8152-cfgselector 1-1: Unknown version 0x0000 [ 508.642268][ T5871] r8152-cfgselector 1-1: config 0 descriptor?? [ 509.048549][ T30] audit: type=1326 audit(1745173327.714:768): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 509.343404][ T30] audit: type=1326 audit(1745173327.714:769): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 509.343852][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.375519][ T30] audit: type=1326 audit(1745173327.724:770): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf93b8dd6b code=0x7ffc0000 [ 509.577577][ T30] audit: type=1326 audit(1745173327.724:771): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 509.627968][T12195] dccp_v6_rcv: dropped packet with invalid checksum [ 509.664179][ T30] audit: type=1326 audit(1745173327.724:772): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf93b8e169 code=0x7ffc0000 [ 509.714326][ T81] r8152-cfgselector 1-1: USB disconnect, device number 64 [ 510.041079][ T30] audit: type=1400 audit(1745173328.564:773): avc: denied { recv } for pid=12180 comm="syz.4.1907" saddr=10.128.0.169 src=30006 daddr=10.128.0.32 dest=60040 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 510.417810][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.692104][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 510.850773][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.858919][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.874112][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.885896][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.909076][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.170736][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.262341][ T30] audit: type=1400 audit(1745173329.884:774): avc: denied { setopt } for pid=12199 comm="syz.0.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 511.500520][ C1] hrtimer: interrupt took 18356 ns [ 511.815971][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.838748][ T30] audit: type=1400 audit(1745173330.054:775): avc: denied { egress } for pid=12205 comm="syz.1.1914" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 511.847645][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.872302][ T30] audit: type=1400 audit(1745173330.054:776): avc: denied { sendto } for pid=12205 comm="syz.1.1914" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 512.444025][T12230] overlayfs: failed to clone upperpath [ 512.534351][T12235] overlayfs: failed to resolve './file1': -2 [ 513.164847][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1927'. [ 513.200593][T12252] macsec2: entered allmulticast mode [ 513.206012][T12252] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 513.554550][T12252] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 513.584984][ T5915] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 513.874198][ T5915] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 513.882786][ T5915] usb 5-1: config 0 has no interface number 0 [ 513.929179][ T5915] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 514.268795][ T5915] usb 5-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.321985][ T5915] usb 5-1: config 0 interface 113 has no altsetting 0 [ 514.340474][ T5915] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 514.350124][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.358351][ T5915] usb 5-1: Product: syz [ 514.362727][ T5915] usb 5-1: Manufacturer: syz [ 514.367361][ T5915] usb 5-1: SerialNumber: syz [ 514.380913][ T5915] usb 5-1: config 0 descriptor?? [ 514.398256][ T5915] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 515.405356][ T81] net_ratelimit: 3 callbacks suppressed [ 515.405372][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.735740][T12297] overlayfs: failed to clone upperpath [ 516.205899][ T9] usb 5-1: USB disconnect, device number 52 [ 516.267273][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.276253][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.285064][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.520304][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.528429][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.544613][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.557221][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.984329][T12318] lo speed is unknown, defaulting to 1000 [ 516.991092][T12318] lo speed is unknown, defaulting to 1000 [ 516.997973][T12318] lo speed is unknown, defaulting to 1000 [ 517.014462][T12318] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 517.196816][T12318] lo speed is unknown, defaulting to 1000 [ 517.209516][T12318] lo speed is unknown, defaulting to 1000 [ 517.221519][T12318] lo speed is unknown, defaulting to 1000 [ 517.233388][T12318] lo speed is unknown, defaulting to 1000 [ 517.245203][T12318] lo speed is unknown, defaulting to 1000 [ 517.921537][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.972505][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.222321][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 519.404301][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 519.558660][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.570831][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.602910][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 519.611963][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.636404][ T9] usb 1-1: config 0 descriptor?? [ 519.652171][ T9] hub 1-1:0.0: USB hub found [ 519.860015][T12343] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1955'. [ 519.891399][ T9] hub 1-1:0.0: 1 port detected [ 520.182523][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 520.512418][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 520.746960][ T24] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 520.758302][ T24] usb 4-1: config 0 has no interface number 0 [ 520.770483][ T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e [ 520.779697][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.787719][ T24] usb 4-1: Product: syz [ 520.791880][ T24] usb 4-1: Manufacturer: syz [ 520.796516][ T24] usb 4-1: SerialNumber: syz [ 520.803770][ T24] usb 4-1: config 0 descriptor?? [ 520.810966][ T24] ttusb_dec_send_command: command bulk message failed: error -22 [ 520.819401][ T24] ttusb-dec 4-1:0.217: probe with driver ttusb-dec failed with error -22 [ 520.865669][ T5915] hub 1-1:0.0: activate --> -90 [ 521.014610][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 521.034063][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 521.046025][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 521.063906][ T81] net_ratelimit: 2 callbacks suppressed [ 521.063921][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.081841][ T30] audit: type=1400 audit(1745173339.754:777): avc: denied { read } for pid=12373 comm="syz.1.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 521.227152][ T5916] usb 4-1: USB disconnect, device number 48 [ 521.279649][ T9] usb 1-1: USB disconnect, device number 65 [ 521.949459][ T30] audit: type=1804 audit(1745173340.624:778): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1967" name="file0" dev="tmpfs" ino=2406 res=1 errno=0 [ 522.166315][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.412835][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.752352][ T81] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 522.839450][T12403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 522.913836][ T81] usb 4-1: config index 0 descriptor too short (expected 5668, got 36) [ 522.992049][ T81] usb 4-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 523.006791][ T81] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 523.016229][ T81] usb 4-1: config 3 has no interface number 0 [ 523.022869][ T81] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 523.034775][ T81] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 523.057935][ T81] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 523.067279][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.075333][ T81] usb 4-1: Product: syz [ 523.079659][ T81] usb 4-1: Manufacturer: syz [ 523.093184][ T81] usb 4-1: SerialNumber: syz [ 523.153804][T12390] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 523.222551][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.364596][ T81] usb-storage 4-1:3.20: USB Mass Storage device detected [ 523.387469][ T81] usb-storage 4-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 523.578040][ T81] scsi host1: usb-storage 4-1:3.20 [ 523.827932][T12390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.831724][ T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 523.845254][T12390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.992292][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 524.003510][ T24] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 524.011678][ T24] usb 1-1: config 0 has no interface number 0 [ 524.028212][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e [ 524.042288][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.050298][ T24] usb 1-1: Product: syz [ 524.062258][ T24] usb 1-1: Manufacturer: syz [ 524.066859][ T24] usb 1-1: SerialNumber: syz [ 524.084763][ T24] usb 1-1: config 0 descriptor?? [ 524.104173][ T24] ttusb_dec_send_command: command bulk message failed: error -22 [ 524.112556][ T24] ttusb-dec 1-1:0.217: probe with driver ttusb-dec failed with error -22 [ 524.178957][T12429] SET target dimension over the limit! [ 524.252641][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.330291][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'. [ 524.351458][ T5915] usb 1-1: USB disconnect, device number 66 [ 525.414999][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.488241][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.523726][T12444] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1985'. [ 525.624540][T12448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1987'. [ 526.084398][ T30] audit: type=1326 audit(1745173344.754:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adad8e169 code=0x7ffc0000 [ 526.108209][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.121645][ T30] audit: type=1326 audit(1745173344.804:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adad8e169 code=0x7ffc0000 [ 526.163272][ T30] audit: type=1326 audit(1745173344.804:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f8adad8e169 code=0x7ffc0000 [ 526.193089][T12460] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.1990'. [ 526.207990][T12460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1990'. [ 526.221752][ T30] audit: type=1326 audit(1745173344.804:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adad8e169 code=0x7ffc0000 [ 526.264123][ T30] audit: type=1326 audit(1745173344.804:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adad8e169 code=0x7ffc0000 [ 526.291922][ T30] audit: type=1326 audit(1745173344.804:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8adad8e169 code=0x7ffc0000 [ 526.319948][ T30] audit: type=1326 audit(1745173344.804:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adad8e169 code=0x7ffc0000 [ 526.347713][ T30] audit: type=1326 audit(1745173344.804:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adad8e169 code=0x7ffc0000 [ 526.377110][ T30] audit: type=1326 audit(1745173344.804:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8adad8e169 code=0x7ffc0000 [ 526.377231][ T24] usb 4-1: USB disconnect, device number 49 [ 526.413424][ T30] audit: type=1326 audit(1745173344.804:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8adad8e169 code=0x7ffc0000 [ 526.540941][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.812342][ T5915] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 526.964450][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 526.984793][ T5915] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 526.998354][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 527.028063][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 7 [ 527.045213][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 59372, setting to 1024 [ 527.066811][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41660, setting to 1024 [ 527.086586][ T5915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 527.101279][ T5915] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 527.110574][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.118695][ T5915] usb 1-1: Product: syz [ 527.125788][ T5915] usb 1-1: Manufacturer: syz [ 527.130474][ T5915] usb 1-1: SerialNumber: syz [ 527.141263][ T5915] usb 1-1: config 0 descriptor?? [ 527.147110][T12470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 527.155798][ T5915] mcba_usb 1-1:0.0: Can't find endpoints [ 527.685610][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.711816][ T5915] usb 1-1: USB disconnect, device number 67 [ 528.483372][T12499] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[12499] [ 528.531778][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.596947][T12502] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 528.737776][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.802646][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.802898][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 530.192449][ T5871] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 530.390770][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 530.401987][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 530.426035][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 530.450865][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 530.465050][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 530.477231][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 530.491247][ T5871] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 530.505436][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.525025][ T5871] usb 4-1: Product: syz [ 530.533757][ T5871] usb 4-1: Manufacturer: syz [ 530.542318][ T5871] usb 4-1: SerialNumber: syz [ 530.555320][ T5871] usb 4-1: config 0 descriptor?? [ 530.642426][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 530.911042][T12560] fuse: Bad value for 'fd' [ 531.721767][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.733010][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 531.741315][ T9] usb 5-1: config 0 has no interface number 0 [ 531.747566][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.758556][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.768396][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 531.968916][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.184454][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 532.256812][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.294130][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.304288][ T9] usb 5-1: config 0 descriptor?? [ 532.304889][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.318873][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.325858][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.337222][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.346282][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.354487][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.360903][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.369807][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.385618][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.399326][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.410485][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.418122][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.425084][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.432392][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.439395][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.446362][ T5871] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 532.452511][ T5871] input input35: Timeout waiting for response from device. [ 532.714841][ T5871] usb 4-1: USB disconnect, device number 50 [ 532.778550][ T9] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 532.786452][ T9] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 532.793783][ T9] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 532.800999][ T9] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 532.808248][ T9] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 532.815517][ T9] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 532.822733][ T9] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 532.831444][ T9] prodikeys 0003:041E:2801.0009: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 532.851976][ T9] hid_prodikeys: hid-prodikeys: failed to find output report [ 532.851976][ T9] [ 533.250520][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.678650][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 533.678664][ T30] audit: type=1400 audit(1745173352.354:819): avc: denied { accept } for pid=12551 comm="syz.4.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 533.725354][T12552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2019'. [ 534.207151][ T5871] usb 5-1: USB disconnect, device number 53 [ 534.265103][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.696454][T12609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.705429][T12609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.722669][T12609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.732514][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.764233][T12609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.782308][ T30] audit: type=1400 audit(1745173353.444:820): avc: denied { read } for pid=12607 comm="syz.3.2034" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 534.792779][T12609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.812615][ T5915] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 534.997739][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.020793][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.041148][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 535.086318][ T5915] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 535.112253][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.162194][ T5915] usb 1-1: config 0 descriptor?? [ 535.710739][ T5915] sunplus 0003:04FC:05D8.000A: unknown main item tag 0x0 [ 535.720202][ T5915] sunplus 0003:04FC:05D8.000A: unknown main item tag 0x0 [ 535.727861][ T5915] sunplus 0003:04FC:05D8.000A: unknown main item tag 0x0 [ 535.739722][ T5915] sunplus 0003:04FC:05D8.000A: hidraw0: USB HID v0.02 Device [HID 04fc:05d8] on usb-dummy_hcd.0-1/input0 [ 536.007280][T12644] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2042'. [ 536.093924][ T5915] usb 1-1: USB disconnect, device number 68 [ 536.210308][T12648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.284239][T12651] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2045'. [ 537.141215][ T5871] net_ratelimit: 4 callbacks suppressed [ 537.141231][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.167033][T12654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.209057][T12656] tmpfs: Unknown parameter 'huge½always' [ 537.733861][T12660] fuse: Unknown parameter '0x0000000000000008' [ 537.775465][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.865800][ T30] audit: type=1400 audit(1745173356.534:821): avc: denied { ioctl } for pid=12655 comm="syz.3.2047" path="socket:[33586]" dev="sockfs" ino=33586 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 538.263454][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.817848][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2054'. [ 539.309086][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.707810][T12712] fuse: Unknown parameter '0x0000000000000008' [ 539.932302][ T5871] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 540.414741][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.646581][ T5871] usb 4-1: device descriptor read/64, error -71 [ 541.052627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.060890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.069197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.078359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.081356][T12734] siw: device registration error -23 [ 541.262564][ T5871] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 541.475802][T12736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.482984][ T5871] usb 4-1: device descriptor read/64, error -71 [ 541.511105][T12736] bond0: (slave bond3): Enslaving as an active interface with an up link [ 541.635754][ T5871] usb usb4-port1: attempt power cycle [ 541.762854][ T5860] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 541.932401][ T5860] usb 1-1: device descriptor read/64, error -71 [ 541.979783][ T5871] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 542.143981][T12758] lo speed is unknown, defaulting to 1000 [ 542.192379][ T5860] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 542.256521][ T30] audit: type=1400 audit(1745173360.934:822): avc: denied { bind } for pid=12755 comm="syz.2.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 542.275755][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.846860][ T30] audit: type=1400 audit(1745173360.984:823): avc: denied { read } for pid=12755 comm="syz.2.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 542.932381][ T24] net_ratelimit: 92 callbacks suppressed [ 542.932396][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.056112][ T30] audit: type=1326 audit(1745173361.704:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eda78e169 code=0x7ffc0000 [ 543.084284][ T30] audit: type=1326 audit(1745173361.704:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eda78e169 code=0x7ffc0000 [ 543.116734][ T5860] usb 1-1: device descriptor read/64, error -71 [ 543.116799][ T30] audit: type=1326 audit(1745173361.734:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9eda78e169 code=0x7ffc0000 [ 543.152989][ T5871] usb 4-1: device not accepting address 53, error -71 [ 543.153027][ T30] audit: type=1326 audit(1745173361.734:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eda78e169 code=0x7ffc0000 [ 543.208352][ T30] audit: type=1326 audit(1745173361.734:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eda78e169 code=0x7ffc0000 [ 543.234364][ T30] audit: type=1326 audit(1745173361.734:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9eda78cad0 code=0x7ffc0000 [ 543.261351][ T30] audit: type=1326 audit(1745173361.764:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eda78e169 code=0x7ffc0000 [ 543.301928][ T30] audit: type=1326 audit(1745173361.764:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9eda78e169 code=0x7ffc0000 [ 543.325233][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.349789][ T5860] usb usb1-port1: attempt power cycle [ 544.108524][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.172437][ T5860] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 544.172958][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.226636][ T5860] usb 1-1: device descriptor read/8, error -71 [ 544.552460][ T5860] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 544.784271][ T5860] usb 1-1: device not accepting address 72, error -71 [ 544.897134][ T5860] usb usb1-port1: unable to enumerate USB device [ 545.048092][T12786] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 545.111218][T12789] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2088'. [ 545.135256][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.242433][ T5860] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 545.292682][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.422415][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 545.444980][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.464732][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.491149][ T5860] usb 1-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 545.511466][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.526861][ T5860] usb 1-1: config 0 descriptor?? [ 546.112109][T12797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.133239][T12797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.245939][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.287019][ T5860] usbhid 1-1:0.0: can't add hid device: -71 [ 546.287101][ T5860] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 546.289140][ T5860] usb 1-1: USB disconnect, device number 73 [ 546.927502][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 547.376233][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.384348][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.262370][T12815] overlayfs: failed to clone upperpath [ 548.336194][T12823] fuse: Unknown parameter '0x0000000000000009' [ 548.432053][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.731795][T12838] veth0_vlan: entered allmulticast mode [ 549.758247][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.417815][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.758882][T12855] tipc: Enabling of bearer rejected, already enabled [ 550.816803][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.927208][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.045221][T12865] fuse: Unknown parameter '0x0000000000000009' [ 552.222862][T12868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2111'. [ 552.326628][ T5860] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 552.338583][T12871] dccp_v6_rcv: dropped packet with invalid checksum [ 552.494392][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 552.513451][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.536324][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.559304][ T5860] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 552.578563][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.592448][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 552.610561][ T5860] usb 1-1: config 0 descriptor?? [ 552.620851][ T5860] hub 1-1:0.0: USB hub found [ 552.764965][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 552.792260][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 552.820107][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 552.823459][T12866] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2110'. [ 552.842353][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 552.858719][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 552.867705][ T5860] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 552.889754][T12885] overlayfs: failed to clone upperpath [ 552.906837][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 552.906865][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 552.906884][ T9] usb 4-1: Product: syz [ 552.906897][ T9] usb 4-1: Manufacturer: syz [ 552.910187][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 552.910203][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 552.923666][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 552.923687][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 552.976858][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.238742][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.238916][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.247296][ T5860] usbhid 1-1:0.0: can't add hid device: -71 [ 553.247517][ T5860] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 553.520833][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.579368][ T5860] usb 1-1: USB disconnect, device number 74 [ 554.058364][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.892679][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.046415][T12905] fuse: Unknown parameter 'fd0x0000000000000008' [ 555.133280][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.453068][ T5916] usb 4-1: USB disconnect, device number 55 [ 555.473925][T12909] netlink: 'syz.1.2124': attribute type 3 has an invalid length. [ 555.473946][T12909] netlink: 'syz.1.2124': attribute type 4 has an invalid length. [ 556.172591][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.338540][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 556.338554][ T30] audit: type=1400 audit(1745173375.014:836): avc: denied { setattr } for pid=12925 comm="syz.3.2132" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 556.342096][ T30] audit: type=1400 audit(1745173375.014:837): avc: denied { write } for pid=12925 comm="syz.3.2132" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 556.345899][ T30] audit: type=1400 audit(1745173375.024:838): avc: denied { open } for pid=12925 comm="syz.3.2132" path="/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 556.589541][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.820580][T12938] lo speed is unknown, defaulting to 1000 [ 557.158502][ T5937] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000023: 0000 [#1] SMP KASAN NOPTI [ 557.158524][ T5937] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] [ 557.158538][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: kworker/u8:10 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 557.158557][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 557.158567][ T5937] Workqueue: events_unbound netfs_write_collection_worker [ 557.158591][ T5937] RIP: 0010:iov_iter_revert+0x2ec/0x5a0 [ 557.158609][ T5937] Code: ec 41 83 fd 1e 0f 87 3b 02 00 00 4b 8d bc 26 00 01 00 00 48 b9 00 00 00 00 00 fc ff df 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 08 38 d0 7f 08 84 c0 0f 85 02 02 00 00 47 0f b6 bc 26 00 [ 557.158623][ T5937] RSP: 0018:ffffc9000460f950 EFLAGS: 00010206 [ 557.158634][ T5937] RAX: 0000000000000023 RBX: 0000000000000048 RCX: dffffc0000000000 [ 557.158643][ T5937] RDX: 0000000000000006 RSI: ffffffff84cd9d20 RDI: 000000000000011e [ 557.158653][ T5937] RBP: ffffc9000460fa78 R08: 0000000000000005 R09: 0000000000000000 [ 557.158662][ T5937] R10: 0000000000000000 R11: ffff8881416e652c R12: 000000000000001e [ 557.158671][ T5937] R13: 000000000000001e R14: 0000000000000000 R15: ffff8881416e63a8 [ 557.158680][ T5937] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 557.158695][ T5937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.158705][ T5937] CR2: 000000110c4142a5 CR3: 000000000e180000 CR4: 00000000003526f0 [ 557.158715][ T5937] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 557.158723][ T5937] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 557.158732][ T5937] Call Trace: [ 557.158738][ T5937] [ 557.158746][ T5937] netfs_retry_writes+0x166d/0x1a50 [ 557.158766][ T5937] ? __pfx___mod_timer+0x10/0x10 [ 557.158781][ T5937] ? __lock_acquire+0xaa4/0x1ba0 [ 557.158795][ T5937] ? __pfx_netfs_retry_writes+0x10/0x10 [ 557.158815][ T5937] ? register_lock_class+0x41/0x4c0 [ 557.158836][ T5937] ? do_raw_spin_lock+0x12c/0x2b0 [ 557.158853][ T5937] netfs_write_collection_worker+0x23fd/0x3830 [ 557.158879][ T5937] process_one_work+0x9cc/0x1b70 [ 557.158898][ T5937] ? __pfx_bond_mii_monitor+0x10/0x10 [ 557.158916][ T5937] ? __pfx_process_one_work+0x10/0x10 [ 557.158935][ T5937] ? assign_work+0x1a0/0x250 [ 557.158950][ T5937] worker_thread+0x6c8/0xf10 [ 557.158970][ T5937] ? __kthread_parkme+0x19e/0x250 [ 557.158992][ T5937] ? __pfx_worker_thread+0x10/0x10 [ 557.159009][ T5937] kthread+0x3c2/0x780 [ 557.159025][ T5937] ? __pfx_kthread+0x10/0x10 [ 557.159038][ T5937] ? __pfx_kthread+0x10/0x10 [ 557.159053][ T5937] ? __pfx_kthread+0x10/0x10 [ 557.159068][ T5937] ? __pfx_kthread+0x10/0x10 [ 557.159082][ T5937] ? rcu_is_watching+0x12/0xc0 [ 557.159100][ T5937] ? __pfx_kthread+0x10/0x10 [ 557.159115][ T5937] ret_from_fork+0x45/0x80 [ 557.159131][ T5937] ? __pfx_kthread+0x10/0x10 [ 557.159146][ T5937] ret_from_fork_asm+0x1a/0x30 [ 557.159173][ T5937] [ 557.159178][ T5937] Modules linked in: [ 557.159190][ T5937] ---[ end trace 0000000000000000 ]--- [ 557.159197][ T5937] RIP: 0010:iov_iter_revert+0x2ec/0x5a0 [ 557.159216][ T5937] Code: ec 41 83 fd 1e 0f 87 3b 02 00 00 4b 8d bc 26 00 01 00 00 48 b9 00 00 00 00 00 fc ff df 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 08 38 d0 7f 08 84 c0 0f 85 02 02 00 00 47 0f b6 bc 26 00 [ 557.159230][ T5937] RSP: 0018:ffffc9000460f950 EFLAGS: 00010206 [ 557.159243][ T5937] RAX: 0000000000000023 RBX: 0000000000000048 RCX: dffffc0000000000 [ 557.159253][ T5937] RDX: 0000000000000006 RSI: ffffffff84cd9d20 RDI: 000000000000011e [ 557.159262][ T5937] RBP: ffffc9000460fa78 R08: 0000000000000005 R09: 0000000000000000 [ 557.159272][ T5937] R10: 0000000000000000 R11: ffff8881416e652c R12: 000000000000001e [ 557.159282][ T5937] R13: 000000000000001e R14: 0000000000000000 R15: ffff8881416e63a8 [ 557.159292][ T5937] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 557.159308][ T5937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.159319][ T5937] CR2: 000000110c4142a5 CR3: 000000000e180000 CR4: 00000000003526f0 [ 557.159329][ T5937] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 557.159338][ T5937] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 557.159350][ T5937] Kernel panic - not syncing: Fatal exception [ 557.159538][ T5937] Kernel Offset: disabled