last executing test programs: 6m39.711824954s ago: executing program 1 (id=800): ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0x2000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x200000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0x60000, 0xc, 0x7, 0x7f, 0x7, 0xfe, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xe, 0x2, 0x7, 0x2, 0x5, 0x2, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0x4, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xffff1000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x1, 0x1]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x43400078, 0x1000000000, 0x6, 0x41, 0x3000000, 0x3, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x40000000000000, 0x3, 0x6, 0x0, 0x3], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m39.348652883s ago: executing program 1 (id=802): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000fedbdf2520"], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f0000000580)="b1", 0xffe0, 0x4000, 0x0, 0x0) 6m39.195734421s ago: executing program 1 (id=804): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c602b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 6m39.049553281s ago: executing program 1 (id=805): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 6m38.962107256s ago: executing program 1 (id=806): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x8000}}}}}}, 0x0) 6m38.64439464s ago: executing program 1 (id=812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 6m38.378118198s ago: executing program 32 (id=812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 1m44.245735387s ago: executing program 0 (id=1601): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000440)={{0x9, 0xfd}, 'port0\x00', 0x10, 0x11069, 0x3, 0x8000, 0x55814893, 0x80, 0x7fffffff, 0x0, 0x1, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000025000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, r4}, 0xc) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f0000000240)=0x10, 0x8f2eaf272c613c3b) r6 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x1fe, 0x0, 0x10}) 1m41.279473671s ago: executing program 0 (id=1612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x2}, 0x1c) listen(r0, 0x2) 1m41.024584515s ago: executing program 0 (id=1615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x2}, {0xffff1000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0xfc, 0x4, 0x0, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x6f, 0x1, 0xfd, 0x0, 0x9, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x2, 0x20, 0xe, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) 1m40.709408178s ago: executing program 0 (id=1621): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 1m40.472343898s ago: executing program 0 (id=1624): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m40.159947215s ago: executing program 0 (id=1627): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "8b0f00", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) 1m39.260329134s ago: executing program 33 (id=1627): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "8b0f00", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) 1m11.795820744s ago: executing program 6 (id=1629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r0, 0xffffffffffffffff, 0x0) 56.678715248s ago: executing program 6 (id=1629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r0, 0xffffffffffffffff, 0x0) 38.372576745s ago: executing program 6 (id=1629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r0, 0xffffffffffffffff, 0x0) 16.037874622s ago: executing program 5 (id=1844): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 14.809287082s ago: executing program 2 (id=1845): r0 = inotify_init1(0x80000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="a5ce", 0xfed0) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) inotify_add_watch(r0, 0x0, 0x2000775) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 14.680213598s ago: executing program 5 (id=1846): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) socket(0x11, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) socket$inet(0x2, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.655884236s ago: executing program 6 (id=1629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r0, 0xffffffffffffffff, 0x0) 13.622124796s ago: executing program 2 (id=1848): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040), 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x48}}, 0x8000) 13.608509023s ago: executing program 3 (id=1849): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951", 0x9f) 10.968021636s ago: executing program 5 (id=1853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080), 0x0) io_uring_setup(0x2f00, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x0, 0x0}) socket$inet(0x2, 0xa, 0x0) mkdir(0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "653c1b4e82844461df245d602e571157637b2b264d65f76409a869d62cec2666", "2e2bb08b16c51ac62f5a95c880e2467137a74f00e71e64160700", "aed417062feee7c199b98743ad7e98588e00", "9fcc63648d5ca6f91b8d245971ee8a08460e7400", "21acd16f247aae4d9e6d207292339e96294b6d8b1491fae6922d6d21831cdac0", "81f44df52305410a0af0460a", 0x4, 0x5, 0x6, 0x7, 0x7ffffffd}}) 10.223320115s ago: executing program 2 (id=1855): syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220500000091679d249b09"], 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xfffffffd) r1 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 9.620538448s ago: executing program 4 (id=1856): socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60160000"], 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404040000000000000057c8"], 0xd) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000d0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) landlock_restrict_self(r2, 0x9) r3 = syz_open_dev$media(&(0x7f0000000240), 0x100000000, 0x802) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000480)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0003000d0085a168d0bf46d32345653600648d0a08000000000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) 8.803882567s ago: executing program 4 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000000c0)='nfs\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', 0x0}) mkdir(0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r3, 0xaeb, 0x1) getdents64(r3, 0x0, 0x4f) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0xc840) r5 = fsopen(&(0x7f0000000240)='erofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) 7.783148363s ago: executing program 4 (id=1858): openat$ttyS3(0xffffff9c, 0x0, 0x210100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe8}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYRESHEX, @ANYBLOB="21726f45b8e351e66f74", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRESHEX=r0]) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000002, 0xa) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpgid(0x0) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f00000005c0)}, {&(0x7f00000007c0)}, {0x0}], 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 7.656185458s ago: executing program 3 (id=1859): r0 = inotify_init1(0x80000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="a5ce", 0xfed0) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) inotify_add_watch(r0, 0x0, 0x2000775) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.548140186s ago: executing program 5 (id=1860): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f00000000c0)={0xc89}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, 0x0, 0x40000c0) timer_create(0x4, &(0x7f00000005c0)={0x0, 0x29, 0x800000000004, @tid=r1}, 0x0) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioprio_get$pid(0x3, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6.214062591s ago: executing program 4 (id=1861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000640)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x4002, 0x100007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001e580)=""/102400, 0x19000) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast1, 0x6}}, {{0xa, 0x4c21, 0x4e11, @empty, 0x1000}}}, 0x108) r6 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = request_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000001e80)={'syz', 0x2}, 0x0, r6) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x4, @meta={0x43465052, 0x18ed989b, 0xac24, 0x5549, 0x39d680c8}}) add_key(0x0, &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, r7) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x5000, 0x100000, 0xc, 0xfa, 0x1, 0x1, 0x2, 0x24, 0x0, 0x1, 0xf9, 0x3c}, {0xdddd1000, 0x200000, 0xd, 0x0, 0xf9, 0xd, 0x3, 0x8, 0x8, 0xc, 0x80, 0x2}, {0xe000, 0x7000, 0x8, 0xa, 0x2, 0x0, 0x1, 0x3b, 0xa2, 0x9, 0x4c, 0x1}, {0x100000, 0xc000, 0x4, 0x40, 0x8, 0x2, 0x4, 0xfa, 0x8, 0x2, 0x2f, 0x2}, {0x7000, 0x2, 0x4, 0x0, 0x2, 0x87, 0x4, 0xfa, 0xb, 0x7f, 0x9, 0x53}, {0xfdc3cfa976b32d4e, 0x7000, 0xf, 0x7, 0xe1, 0x40, 0x0, 0x6, 0x1, 0x3, 0xe, 0xcb}, {0xb000, 0x8080000, 0xc, 0x18, 0x11, 0x2, 0x1, 0x80, 0x8, 0x8f, 0x1, 0x2}, {0x4000, 0x26000, 0x8, 0x3, 0x3a, 0xa, 0x7, 0xff, 0xf7, 0xdd, 0x9, 0x2c}, {0x26000, 0x1}, {0x100000, 0x283e}, 0x4, 0x0, 0x26000, 0x1, 0x5, 0x6900, 0x25000, [0x7, 0x8, 0x5, 0xff]}) 5.699883534s ago: executing program 2 (id=1862): r0 = socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x1a6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x170, 0x3a, 0x0, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x25, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x4f, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x32, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379"}, @calipso={0x7, 0x8}]}]}}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0xffff, @rand_addr=0x64010102}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[], 0x20}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000520001002bbd70"], 0x1c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_b, @device_a, @from_mac, {0x8, 0x9}}, 0x1, 0x4, 0x9, @val={0x10, 0x1, 0x39}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x48}}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$FBIOGET_CON2FBMAP(r6, 0x460f, &(0x7f0000000000)={0x33, 0x2}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0xf}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 5.367138813s ago: executing program 3 (id=1863): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x290) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000040)) 4.783224762s ago: executing program 2 (id=1864): r0 = inotify_init1(0x80000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="a5ce", 0xfed0) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) inotify_add_watch(r0, 0x0, 0x2000775) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2080, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'dt2815\x00', [0xfffffffd, 0x9, 0x7ff, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff5, 0xcd6, 0x6, 0x1db, 0x1000002, 0x7, 0x400, 0x10002, 0xf, 0x0, 0x3fe, 0x2, 0xfff, 0x3, 0x0, 0x6, 0xc00, 0x3f, 0x8, 0x6, 0xffffffff, 0xfffffffc]}) io_setup(0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x0, 0x1, 0x8000, 0xe229, 0x5}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r4, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x800, 0x121040) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) 4.782249129s ago: executing program 5 (id=1865): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x350, 0x4f, 0xeb, 0x27, 0x8, 0x2040, 0x9941, 0x93b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0xe7, 0x2, 0x1, 0xa9, 0x5b, 0x27, 0x7, [], [{{0x9, 0x5, 0x1, 0x2, 0x8, 0x80, 0xd6, 0x2}}]}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup, r3, 0x35, 0x0, r3}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x140, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @loopback, [0xffffffff, 0xff, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xffffff00], 'rose0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x4, 0xae, 0x1}, 0x0, 0xd8, 0x140, 0x60030000, {0x0, 0xff000000}, [@common=@frag={{0x30}, {[0x13, 0x43], 0x47a1, 0x10, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xa, 0x7, 0xfffffff9, 0xa5, 'syz0\x00', 'syz0\x00', {0x1ff}}}}, {{@ipv6={@remote, @private2, [0xff, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000640)={&(0x7f00000005c0)=[{0x7fffffffffffffff, 0x200, 0x40, 0x2, 0x7}, {0xf0b, 0x8, 0x3, 0x0, 0x8}, {0x4, 0x2, 0x9, 0xfffffffffffffe01, 0xffffffff}], 0x3, 0x28, 0x8, 0x3ff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCGLCKTRMIOS(r5, 0x5433, 0xfffffffffffffffd) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000000b05000000000000000000030000050800024000000005090001006d61726b00000000080003"], 0x7c}}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000007c0)={r3, &(0x7f00000006c0)='\x00', 0x1, &(0x7f0000000700)={@align=0x81, {0x6, 0x3, 0x8, 0x7}}, 0x200, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0xa5}) openat$cgroup_ro(r6, &(0x7f0000000800)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r7, 0x1}}, 0x48) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.390566503s ago: executing program 4 (id=1866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x558, 0xffffffff, 0x3d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x4c0, 0x4c0, 0x4c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0xa010100, @multicast2, 0xff000000, 0x0, 'nr0\x00', 'pimreg\x00', {}, {}, 0xe9, 0x3, 0x28}, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x318, 0x340, 0x0, {0x122}, [@common=@inet=@hashlimit3={{0x158}, {'ip_vti0\x00', {0x80, 0x1, 0x1e, 0x3, 0xffff61e9, 0x1, 0x9, 0x3, 0x80, 0x80}, {0x7}}}, @common=@inet=@hashlimit2={{0x150}, {'macsec0\x00', {0x1, 0xe0b6, 0x54, 0x40f, 0xf, 0x1000, 0x1000, 0x78}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x101) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004845}, 0x20050000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000900)={0xfffffffb, 0x50424752, 0x2, @stepwise={0x2, 0xff, 0xfffffbff, 0x9, 0x2, 0x7f}}) 4.31164461s ago: executing program 3 (id=1867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) close(r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r6, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xffe, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000024000600000011109078"], 0x0) mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000000)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x130}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}) 2.667884826s ago: executing program 3 (id=1868): r0 = inotify_init1(0x80000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="a5ce", 0xfed0) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) inotify_add_watch(r0, 0x0, 0x2000775) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2080, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'dt2815\x00', [0xfffffffd, 0x9, 0x7ff, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff5, 0xcd6, 0x6, 0x1db, 0x1000002, 0x7, 0x400, 0x10002, 0xf, 0x0, 0x3fe, 0x2, 0xfff, 0x3, 0x0, 0x6, 0xc00, 0x3f, 0x8, 0x6, 0xffffffff, 0xfffffffc]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x0, 0x1, 0x8000, 0xe229, 0x5}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r4, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x800, 0x121040) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) 1.666981743s ago: executing program 4 (id=1869): getpid() r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mknod$loop(0x0, 0x6000, 0x0) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xe}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}], 0x30, 0x8000}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) 530.463781ms ago: executing program 5 (id=1870): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x2b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1, 0x4, 0x3) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@remote, @in6=@loopback, 0x4e20, 0x8, 0x4e24, 0x0, 0x2, 0x80, 0x20, 0xff}, {0xffffffffffffffff, 0x77, 0x4, 0x6, 0x8000000000000000, 0x3fe0000000000, 0x2, 0x7fffffffffffffff}, {0xdb65, 0x2, 0x9, 0x5}, 0x8, 0x6e6bbd, 0x2, 0x1, 0x3, 0x2}, {{@in=@loopback, 0x4d6}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x3502, 0x2, 0x3, 0x3, 0x10000, 0x5, 0xfb3c}}, 0xe8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000240)={0x0, 0x0, 0x6}) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) close_range(r5, 0xffffffffffffffff, 0x0) 515.225514ms ago: executing program 3 (id=1871): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES64], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x2008c014) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(r2, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000000)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4000080) 0s ago: executing program 2 (id=1872): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000301012abd09000000df2507000002d3000000"], 0x18}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) creat(&(0x7f0000000080)='./file0\x00', 0x248) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0xc0403d11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 0, SerialNumber=0 [ 457.220651][T10937] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1391'. [ 458.077437][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.094915][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.184860][ T24] usb 6-1: config 0 descriptor?? [ 458.218145][ T24] usb 6-1: can't set config #0, error -71 [ 458.252580][ T24] usb 6-1: USB disconnect, device number 13 [ 458.374868][T10940] binder: BINDER_SET_CONTEXT_MGR already set [ 458.426420][T10940] binder: 10939:10940 ioctl 4018620d 200000000040 returned -16 [ 458.843140][ T30] audit: type=1400 audit(1777683156.798:1212): avc: denied { read append } for pid=10939 comm="syz.3.1392" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 458.942359][T10951] NILFS (nullb0): couldn't find nilfs on the device [ 459.852599][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.867665][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.886976][ T30] audit: type=1400 audit(1777683156.798:1213): avc: denied { open } for pid=10939 comm="syz.3.1392" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 460.447940][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 461.302884][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.456009][T10958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.469075][T10958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.636496][ T5743] lo speed is unknown, defaulting to 1000 [ 461.649985][ T9630] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.650869][ T5743] syz0: Port: 1 Link DOWN [ 461.714403][ T9630] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.754874][ T9630] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.827820][ T9630] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.363701][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.981252][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.425036][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.766629][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.973314][ T30] audit: type=1400 audit(1777683163.078:1214): avc: denied { read } for pid=10976 comm="syz.3.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 465.052926][T10977] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 465.803590][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.625648][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.661862][ T30] audit: type=1400 audit(1777683164.768:1215): avc: denied { ioctl } for pid=10981 comm="syz.5.1404" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 466.831538][ T30] audit: type=1400 audit(1777683164.948:1216): avc: denied { connect } for pid=10990 comm="syz.4.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 466.864851][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.110660][ T59] Bluetooth: hci5: Frame reassembly failed (-90) [ 467.419837][ T5718] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 467.667772][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.680150][ T5718] usb 6-1: Using ep0 maxpacket: 8 [ 467.741592][ T5718] usb 6-1: unable to get BOS descriptor or descriptor too short [ 467.919074][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.950480][ T5718] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 468.039106][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.101013][ T5718] usb 6-1: Product: syz [ 468.153096][ T5718] usb 6-1: Manufacturer: syz [ 468.200480][ T5718] usb 6-1: SerialNumber: syz [ 468.947285][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.168391][ T5613] Bluetooth: hci5: command 0xfc11 tx timeout [ 469.176863][ T5620] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 469.396886][ T5718] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 469.418402][ T5718] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 469.703802][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.060531][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.916637][ T5718] usb 6-1: USB disconnect, device number 14 [ 471.107022][T11020] Cannot find map_set index 135 as target [ 471.460765][T11026] siw: device registration error -23 [ 472.447268][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.760441][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.298205][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.800470][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.101641][T11040] syz.0.1416 (11040): drop_caches: 2 [ 475.776750][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.962731][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.930185][T11041] team0: entered allmulticast mode [ 477.935390][T11041] team_slave_0: entered allmulticast mode [ 477.941292][T11041] team_slave_1: entered allmulticast mode [ 477.947805][T11041] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.954948][T11041] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1417'. [ 477.964259][T11041] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 477.988653][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.034484][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.265749][ T30] audit: type=1400 audit(1777683176.378:1217): avc: denied { bind } for pid=11046 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 479.806009][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.016817][T11063] lo speed is unknown, defaulting to 1000 [ 480.551518][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.761962][ T30] audit: type=1400 audit(1777683178.868:1218): avc: denied { read } for pid=11061 comm="syz.5.1422" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 480.844002][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.926584][T11070] xt_recent: Unsupported userspace flags (000000de) [ 481.348830][ T30] audit: type=1400 audit(1777683179.318:1219): avc: denied { setopt } for pid=11068 comm="syz.2.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 481.558350][ T30] audit: type=1400 audit(1777683179.668:1220): avc: denied { bind } for pid=11068 comm="syz.2.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 481.640403][ T30] audit: type=1400 audit(1777683179.668:1221): avc: denied { listen } for pid=11068 comm="syz.2.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 481.883444][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.961068][ T5613] Bluetooth: hci5: command 0x1003 tx timeout [ 481.970397][ T5620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 481.990088][T11069] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 482.001888][T11086] ceph: No mds server is up or the cluster is laggy [ 482.012923][ T24] libceph: connect (1)[c::]:6789 error -101 [ 482.023479][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 482.090009][T11069] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 482.241912][ T30] audit: type=1400 audit(1777683180.358:1222): avc: denied { write } for pid=11075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.312757][T11069] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 482.346796][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 482.357182][T11067] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 482.366264][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1425'. [ 482.377616][T11069] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 482.399313][T11067] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 482.408509][T11086] netlink: 'syz.2.1425': attribute type 14 has an invalid length. [ 482.451214][ T30] audit: type=1400 audit(1777683180.568:1223): avc: denied { write } for pid=11097 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.502591][T11069] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 482.550200][T11069] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 482.587397][T11067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 482.639329][T11067] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 482.738133][T11067] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 482.758169][T11067] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 482.920550][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.931154][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 482.936088][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.968473][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.109766][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 483.131976][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 483.185722][ T24] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 483.214056][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.224102][ T30] audit: type=1400 audit(1777683181.328:1224): avc: denied { write } for pid=11099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.285376][ T24] usb 4-1: Product: syz [ 483.301501][ T24] usb 4-1: Manufacturer: syz [ 483.324193][ T24] usb 4-1: SerialNumber: syz [ 483.351529][ T24] usb 4-1: config 0 descriptor?? [ 483.516559][ T30] audit: type=1400 audit(1777683181.618:1225): avc: denied { write } for pid=11116 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.540915][T11067] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 483.557396][T11067] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 483.566352][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.581627][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.616135][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.066917][ T5703] usb 4-1: USB disconnect, device number 29 [ 484.100523][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.962875][T11128] vlan0: entered promiscuous mode [ 484.967976][T11128] bridge0: entered promiscuous mode [ 485.639743][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.777318][ T30] audit: type=1400 audit(1777683183.888:1226): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 485.998780][ T30] audit: type=1400 audit(1777683183.918:1227): avc: denied { write } for pid=11130 comm="syz.5.1430" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 486.502357][ T30] audit: type=1400 audit(1777683184.258:1228): avc: denied { ioctl } for pid=11130 comm="syz.5.1430" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 486.673653][ T30] audit: type=1400 audit(1777683184.788:1229): avc: denied { read } for pid=11133 comm="syz.3.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 487.014182][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.045074][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.502388][ T9793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.513444][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.524402][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.859408][T11154] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1434'. [ 488.963879][ T30] audit: type=1400 audit(1777683187.078:1230): avc: denied { write } for pid=11119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.562886][ T24] net_ratelimit: 4 callbacks suppressed [ 489.562904][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.053538][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.403350][ T30] audit: type=1400 audit(1777683188.518:1231): avc: denied { write } for pid=11182 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.490328][T11181] lo speed is unknown, defaulting to 1000 [ 490.527815][T11181] lo speed is unknown, defaulting to 1000 [ 490.711299][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.747129][T11181] lo speed is unknown, defaulting to 1000 [ 490.756008][T11181] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 490.759020][T11183] smbdirect: ib_dev[syz0] removed [ 490.771476][T11181] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 490.855341][T11192] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 490.936376][T11193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.944751][T11193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.953087][T11193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.189848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.200632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.544354][T11181] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 491.688600][T11195] 9p: Bad value for 'rfdno' [ 491.723742][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.915350][T11181] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 491.995369][ T24] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 492.612573][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.996165][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.025805][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 493.038163][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 493.047553][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.116532][T11181] lo speed is unknown, defaulting to 1000 [ 493.122742][ T24] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 493.122769][ T24] usb 3-1: no configuration chosen from 1 choice [ 493.203826][T11181] lo speed is unknown, defaulting to 1000 [ 493.688638][ T9707] usb 3-1: USB disconnect, device number 32 [ 493.743325][T11181] lo speed is unknown, defaulting to 1000 [ 493.787819][T11181] lo speed is unknown, defaulting to 1000 [ 493.822277][T11181] lo speed is unknown, defaulting to 1000 [ 493.948117][ T30] audit: type=1400 audit(1777683192.058:1232): avc: denied { write } for pid=11202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.209445][ T5743] net_ratelimit: 6 callbacks suppressed [ 495.209464][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.279881][ T9707] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 495.423535][ T30] audit: type=1400 audit(1777683193.528:1233): avc: denied { write } for pid=11219 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.609864][ T9707] usb 6-1: Using ep0 maxpacket: 8 [ 495.628629][ T9707] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.665243][ T9707] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.696336][ T9707] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.714745][ T9707] usb 6-1: config 0 interface 0 has no altsetting 0 [ 495.737845][ T9707] usb 6-1: New USB device found, idVendor=046d, idProduct=822d, bcdDevice= 0.00 [ 495.862206][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.122069][T11246] syzkaller0: entered promiscuous mode [ 496.127628][T11246] syzkaller0: entered allmulticast mode [ 496.437671][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.447940][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.536274][ T9707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.548918][ T9707] usb 6-1: config 0 descriptor?? [ 497.099535][ T30] audit: type=1400 audit(1777683195.208:1234): avc: denied { write } for pid=11234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.518819][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.702431][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1453'. [ 498.075742][T11262] vivid-004: disconnect [ 498.230506][T11258] vivid-004: reconnect [ 498.260932][ T30] audit: type=1400 audit(1777683196.278:1235): avc: denied { write } for pid=11264 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.536010][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.568701][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.613837][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.506621][ T9707] usb 6-1: string descriptor 0 read error: -71 [ 500.555840][ T9707] usbhid 6-1:0.0: can't add hid device: -71 [ 500.562567][ T9707] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 500.575304][ T9707] usb 6-1: USB disconnect, device number 15 [ 500.671088][T11280] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5606] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11280] [ 500.765089][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.998848][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.464919][T11286] serio: Serial port ttyS3 [ 501.750755][ T30] audit: type=1400 audit(1777683199.868:1236): avc: denied { write } for pid=11271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.780524][ T9707] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 501.824296][ T5703] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 501.843625][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.867337][ T30] audit: type=1400 audit(1777683199.978:1237): avc: denied { read } for pid=11300 comm="syz.0.1464" path="socket:[35748]" dev="sockfs" ino=35748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 501.980378][ T5703] usb 5-1: device descriptor read/64, error -71 [ 501.987429][ T9707] usb 6-1: Using ep0 maxpacket: 8 [ 501.998970][ T9707] usb 6-1: unable to get BOS descriptor or descriptor too short [ 502.012225][ T9707] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 502.029033][ T9707] usb 6-1: config 4 has an invalid descriptor of length 20, skipping remainder of the config [ 502.088197][ T30] audit: type=1400 audit(1777683200.078:1238): avc: denied { write } for pid=11302 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.145036][ T9707] usb 6-1: config 4 has no interface number 0 [ 502.147992][ T9707] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 502.178064][ T9707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.296695][T11306] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 502.316782][ T30] audit: type=1400 audit(1777683200.418:1239): avc: denied { write } for pid=11300 comm="syz.0.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 502.890008][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.910201][ T9707] usb 6-1: Product: syz [ 502.931272][ T9707] usb 6-1: Manufacturer: syz [ 502.936346][ T9707] usb 6-1: SerialNumber: syz [ 502.937687][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.954143][ T5703] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 503.122937][ T5703] usb 5-1: device descriptor read/64, error -71 [ 503.277991][ T5703] usb usb5-port1: attempt power cycle [ 503.287108][ T9707] uvcvideo 6-1:4.147: Found multiple Units with ID 6 [ 503.297113][ T9707] uvcvideo 6-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 504.108715][T11321] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 504.127135][T11318] vivid-006: kernel_thread() failed [ 504.305720][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.314322][ T9707] uvcvideo 6-1:4.147: No valid video chain found. [ 504.613975][T11325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.615166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.985858][T11325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.986056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.117332][ T9707] usb 6-1: USB disconnect, device number 16 [ 505.236366][T11332] netlink: 'syz.5.1474': attribute type 1 has an invalid length. [ 505.253674][T11335] ubi: mtd0 is already attached to ubi16 [ 505.269894][T11332] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1474'. [ 505.624836][T11345] lo speed is unknown, defaulting to 1000 [ 505.630750][T11345] lo speed is unknown, defaulting to 1000 [ 505.637062][T11345] lo speed is unknown, defaulting to 1000 [ 505.644397][T11345] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 505.658691][T11345] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 505.675751][T11345] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 505.708331][T11345] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 506.050493][T11345] lo speed is unknown, defaulting to 1000 [ 506.057556][T11345] lo speed is unknown, defaulting to 1000 [ 506.064761][T11345] lo speed is unknown, defaulting to 1000 [ 506.072517][T11345] lo speed is unknown, defaulting to 1000 [ 506.082887][T11345] lo speed is unknown, defaulting to 1000 [ 506.693547][ T9708] net_ratelimit: 1 callbacks suppressed [ 506.693569][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.797873][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.841497][T11348] binder: 11342:11348 ioctl c0306201 200000000080 returned -22 [ 506.850044][ T30] audit: type=1400 audit(1777683204.958:1240): avc: denied { ioctl } for pid=11330 comm="syz.5.1474" path="socket:[35850]" dev="sockfs" ino=35850 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 507.566609][ T30] audit: type=1400 audit(1777683205.438:1241): avc: denied { connect } for pid=11351 comm="syz.2.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 508.093272][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.318681][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.722731][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.081993][T11379] netlink: 408 bytes leftover after parsing attributes in process `syz.4.1485'. [ 510.274946][ T30] audit: type=1400 audit(1777683208.368:1242): avc: denied { associate } for pid=11380 comm="syz.3.1486" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 510.481923][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.521522][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.389731][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 511.459779][ T5743] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 511.570156][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 511.581041][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.597854][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 511.618131][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 511.626250][ T5743] usb 1-1: device descriptor read/64, error -71 [ 511.655573][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 511.836757][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.020999][ T24] usb 4-1: config 0 descriptor?? [ 512.060649][ T5743] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 512.204019][T11407] No such timeout policy "syz0" [ 512.209938][ T5743] usb 1-1: device descriptor read/64, error -71 [ 512.330780][ T5743] usb usb1-port1: attempt power cycle [ 512.440265][ T5725] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 512.609304][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.620125][ T5725] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.643542][ T5725] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 512.666711][ T5725] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 512.678038][ T5743] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 512.699299][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.717658][ T5725] usb 3-1: config 0 descriptor?? [ 512.727990][ T5743] usb 1-1: device descriptor read/8, error -71 [ 512.761280][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.830484][ T24] corsair-psu 0003:1B1C:1C09.0014: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 513.085920][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1504'. [ 513.102602][ T9707] usb 3-1: USB disconnect, device number 33 [ 513.116831][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'. [ 513.133664][ T5725] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 513.199772][ T24] corsair-psu 0003:1B1C:1C09.0014: unable to initialize device (-110) [ 513.246848][ T24] corsair-psu 0003:1B1C:1C09.0014: probe with driver corsair-psu failed with error -110 [ 513.302625][ T5725] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.336210][ T5725] usb 6-1: config 0 has no interfaces? [ 513.372929][ T5725] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 513.393718][ T5725] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 513.413989][ T5725] usb 6-1: Manufacturer: syz [ 513.434521][ T5725] usb 6-1: config 0 descriptor?? [ 513.560282][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 513.604196][ T5725] usb 4-1: USB disconnect, device number 30 [ 513.644185][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.752480][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.762883][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.787243][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 513.809659][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.838165][ T24] usb 3-1: config 0 descriptor?? [ 513.911094][ T24] usb 6-1: USB disconnect, device number 17 [ 514.281147][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 514.347596][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 514.620100][ T9707] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 514.642447][ T9708] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 514.707447][T11464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1513'. [ 515.406108][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.452963][ T9709] usb 3-1: USB disconnect, device number 34 [ 515.489824][ T9707] usb 1-1: Using ep0 maxpacket: 32 [ 515.513317][ T9707] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.525448][ T9707] usb 1-1: config 0 has no interface number 0 [ 515.568196][ T9707] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 515.588126][ T9708] usb 5-1: unable to get BOS descriptor or descriptor too short [ 515.599671][ T9707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.607716][ T9707] usb 1-1: Product: syz [ 515.611896][ T9707] usb 1-1: Manufacturer: syz [ 515.616826][ T9707] usb 1-1: SerialNumber: syz [ 515.623581][ T9707] usb 1-1: config 0 descriptor?? [ 515.674307][ T9708] usb 5-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 515.687441][ T9707] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 515.696264][ T9707] usb 1-1: selecting invalid altsetting 1 [ 515.701998][ T9707] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 515.714620][ T9708] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.750339][ T9708] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 515.768940][ T9708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.778829][ T9707] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 515.790125][ T9708] usb 5-1: Product: syz [ 515.794315][ T9708] usb 5-1: Manufacturer: syz [ 515.799139][ T9707] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 515.807436][ T9708] usb 5-1: SerialNumber: syz [ 515.815942][ T9707] usb 1-1: media controller created [ 515.822585][ T9709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.846165][ T9707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.894590][ T9708] usb 5-1: selecting invalid altsetting 1 [ 515.959138][ T9708] usb 5-1: unit 6 not found! [ 515.959455][T11484] comedi comedi3: 8255: I/O base address not correctly aligned [ 516.238736][T11493] loop5: detected capacity change from 0 to 7 [ 516.324022][ T5849] buffer_io_error: 32 callbacks suppressed [ 516.324040][ T5849] Buffer I/O error on dev loop5, logical block 0, async page read [ 516.372592][ T5849] Buffer I/O error on dev loop5, logical block 0, async page read [ 516.400934][ T5849] Buffer I/O error on dev loop5, logical block 0, async page read [ 516.429527][ T5849] Buffer I/O error on dev loop5, logical block 0, async page read [ 516.440179][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.494651][ T9708] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 516.502276][ T5849] Buffer I/O error on dev loop5, logical block 0, async page read [ 516.513916][ T9708] usb 5-1: USB disconnect, device number 36 [ 516.564580][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.659858][ T9709] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 516.839811][ T9709] usb 6-1: Using ep0 maxpacket: 32 [ 516.861370][ T9709] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 516.887293][ T9709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.904823][ T9709] usb 6-1: Product: syz [ 516.913033][ T9709] usb 6-1: Manufacturer: syz [ 516.913259][ T30] audit: type=1400 audit(1777683215.028:1243): avc: denied { read } for pid=11501 comm="syz.2.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 516.918181][ T9709] usb 6-1: SerialNumber: syz [ 516.968703][ T9709] usb 6-1: config 0 descriptor?? [ 517.002505][ T9707] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 517.012746][ T9709] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 517.021346][ T9709] dvb-usb: bulk message failed: -22 (4/0) [ 517.027479][ T9709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 517.045343][ T9707] zl10353_read_register: readreg error (reg=127, ret==-110) [ 517.057612][ T9707] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 517.079058][ T9709] dvb-usb: bulk message failed: -22 (5/0) [ 517.109353][ T9709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 517.163922][ T9707] usb 1-1: USB disconnect, device number 34 [ 517.224091][ T9709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.260353][ T9709] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 517.298212][ T9709] usb 6-1: media controller created [ 517.384206][ T9709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.430629][ T9709] usb 6-1: selecting invalid altsetting 3 [ 517.449768][ T9709] ttusb2: set interface to alts=3 failed [ 517.490712][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.599784][T11511] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1534'. [ 517.940907][T11514] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1535'. [ 517.971363][T11514] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1535'. [ 518.114743][ T9709] DVB: Unable to find symbol tda10086_attach() [ 518.156325][ T9709] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 518.207424][ T9709] dvb-usb: bulk message failed: -22 (4/0) [ 518.240046][ T9709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 518.291672][ T9709] dvb-usb: bulk message failed: -22 (5/0) [ 518.319820][ T9709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 518.497557][ T9709] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 518.840073][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.456838][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.476528][ T9709] usb 6-1: USB disconnect, device number 18 [ 519.949003][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.021023][ T30] audit: type=1400 audit(1777683218.128:1244): avc: denied { read write } for pid=11531 comm="syz.0.1542" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 520.135783][ T30] audit: type=1400 audit(1777683218.128:1245): avc: denied { open } for pid=11531 comm="syz.0.1542" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 520.139152][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.193681][ T9709] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 520.579966][ T9709] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 520.689773][ T5725] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 520.789873][ T9709] usb 6-1: Using ep0 maxpacket: 16 [ 520.810396][ T9709] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 520.822971][ T9709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.852380][ T9709] usb 6-1: Product: syz [ 520.860804][ T9709] usb 6-1: Manufacturer: syz [ 520.872158][ T24] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 520.879860][ T5725] usb 1-1: Using ep0 maxpacket: 16 [ 520.895896][ T5725] usb 1-1: unable to get BOS descriptor or descriptor too short [ 520.909105][ T5725] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 520.922204][ T9709] usb 6-1: SerialNumber: syz [ 520.923287][ T5725] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 520.938156][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.955087][ T9709] usb 6-1: config 0 descriptor?? [ 520.968372][ T5725] usb 1-1: Product: syz [ 520.973015][ T9709] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 520.988099][ T5725] usb 1-1: Manufacturer: syz [ 520.997212][ T5725] usb 1-1: SerialNumber: syz [ 521.002195][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.061964][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.074420][ T24] usb 5-1: config 0 has no interfaces? [ 521.080865][T11528] ALSA: mixer_oss: invalid OSS volume 'zkaller' [ 521.092868][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 521.103396][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 521.112466][ T24] usb 5-1: Manufacturer: syz [ 521.140725][ T24] usb 5-1: config 0 descriptor?? [ 521.203158][ T9708] hid_parser_main: 29 callbacks suppressed [ 521.203189][ T9708] hid-generic 000A:0002:0089.0015: unknown main item tag 0x0 [ 521.243260][ T9708] hid-generic 000A:0002:0089.0015: unknown main item tag 0x0 [ 521.251595][ T9708] hid-generic 000A:0002:0089.0015: unknown main item tag 0x0 [ 521.257627][ T5725] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 521.259742][ T9708] hid-generic 000A:0002:0089.0015: unknown main item tag 0x0 [ 521.282554][ T5725] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 521.282694][ T9708] hid-generic 000A:0002:0089.0015: unknown main item tag 0x0 [ 521.336359][ T9708] hid-generic 000A:0002:0089.0015: unknown main item tag 0x0 [ 521.360298][ T9708] hid-generic 000A:0002:0089.0015: unknown main item tag 0x0 [ 521.387813][ T9708] hid-generic 000A:0002:0089.0015: unknown main item tag 0x0 [ 521.412303][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.435757][ T9708] hid-generic 000A:0002:0089.0015: unknown main item tag 0x0 [ 521.455756][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.479954][ T9708] hid-generic 000A:0002:0089.0015: unknown main item tag 0x0 [ 521.490947][ T9709] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 521.492093][T11534] binder: 11533:11534 ioctl c0109428 200000000300 returned -22 [ 521.502167][ T9707] usb 5-1: USB disconnect, device number 37 [ 521.644827][ T9708] hid-generic 000A:0002:0089.0015: hidraw0: HID v0.83 Device [syz0] on syz0 [ 521.785077][ T5725] usb 1-1: USB disconnect, device number 35 [ 521.798282][T11555] fido_id[11555]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 521.933302][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.041399][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.118326][ T9708] usb 6-1: USB disconnect, device number 19 [ 522.129931][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 522.309763][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 522.331580][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 522.359129][ T24] usb 3-1: config 0 has no interface number 0 [ 522.374910][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 522.391473][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 522.412402][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.439941][ T24] usb 3-1: Product: syz [ 522.447834][ T24] usb 3-1: Manufacturer: syz [ 522.463225][ T24] usb 3-1: SerialNumber: syz [ 522.479110][ T24] usb 3-1: config 0 descriptor?? [ 522.498504][ T30] audit: type=1400 audit(1777683220.608:1246): avc: denied { write } for pid=11579 comm="syz.4.1564" name="/" dev="ocfs2_dlmfs" ino=36690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 522.522986][T11580] o2cb: This node has not been configured. [ 522.523152][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.529308][T11580] o2cb: Cluster check failed. Fix errors before retrying. [ 522.529362][T11580] (syz.4.1564,11580,1):user_dlm_register:674 ERROR: status = -22 [ 522.529388][T11580] (syz.4.1564,11580,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 522.530717][ T30] audit: type=1400 audit(1777683220.638:1247): avc: denied { add_name } for pid=11579 comm="syz.4.1564" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 522.597944][ T30] audit: type=1400 audit(1777683220.638:1248): avc: denied { create } for pid=11579 comm="syz.4.1564" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 522.627756][T11584] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1566'. [ 522.637679][ T30] audit: type=1400 audit(1777683220.638:1249): avc: denied { associate } for pid=11579 comm="syz.4.1564" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 522.898753][T11589] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 523.249924][ T5718] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 523.283968][ T24] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 523.368920][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 523.461421][ T5718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.484433][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 523.572108][ T5718] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 523.581625][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.594865][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 523.755218][ T5718] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 523.766891][ T24] usb 3-1: USB disconnect, device number 35 [ 523.773215][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.798597][ T5718] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 523.827215][ T5718] usb 1-1: no configuration chosen from 1 choice [ 523.897667][T11601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1569'. [ 524.252254][T11611] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1573'. [ 524.611345][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.646366][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.677651][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.935369][ T9708] usb 1-1: USB disconnect, device number 36 [ 526.696753][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.746184][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.257577][T11683] tipc: Started in network mode [ 528.263090][T11683] tipc: Node identity 7f000001, cluster identity 4711 [ 528.270907][T11683] tipc: Enabling of bearer rejected, failed to enable media [ 528.292231][ T5725] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 528.350011][ T9708] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 528.559775][ T5725] usb 6-1: Using ep0 maxpacket: 32 [ 528.566629][ T5725] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 528.574896][ T5725] usb 6-1: config 0 has no interface number 0 [ 528.583540][ T5725] usb 6-1: config 0 interface 184 has no altsetting 0 [ 528.594102][ T5725] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 528.603482][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.610090][ T9708] usb 3-1: Using ep0 maxpacket: 32 [ 528.622033][ T5725] usb 6-1: Product: syz [ 528.629200][ T5725] usb 6-1: Manufacturer: syz [ 528.630571][ T9708] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 528.944954][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.953221][ T5725] usb 6-1: SerialNumber: syz [ 528.966147][ T5725] usb 6-1: config 0 descriptor?? [ 528.977633][ T9707] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 528.990046][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.000150][ T9708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 529.008794][ T9708] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 529.018898][ T9708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.037736][ T9708] usb 3-1: config 0 descriptor?? [ 529.149829][ T9707] usb 5-1: Using ep0 maxpacket: 8 [ 529.157928][ T9707] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 529.167103][ T9707] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 529.178810][ T9707] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 529.190111][ T9707] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 529.202061][ T9707] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.226743][ T9707] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 529.253713][ T9707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.485660][ T9707] usb 5-1: GET_CAPABILITIES returned 0 [ 529.500239][ T9707] usbtmc 5-1:16.0: can't read capabilities [ 529.695112][ T9707] usb 5-1: USB disconnect, device number 38 [ 529.781686][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.930619][ T9708] corsair-psu 0003:1B1C:1C09.0016: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 529.965839][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.033998][ T5725] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 530.075002][ T5725] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 530.117831][ T5725] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 530.155314][ T5725] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 530.168142][ T5725] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 530.179611][ T5725] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 530.199513][ T5725] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 530.252656][ T5725] usb 6-1: USB disconnect, device number 20 [ 530.370385][ T9708] corsair-psu 0003:1B1C:1C09.0016: unable to initialize device (-110) [ 530.476728][ T9708] corsair-psu 0003:1B1C:1C09.0016: probe with driver corsair-psu failed with error -110 [ 530.896808][ T5725] usb 3-1: USB disconnect, device number 36 [ 531.004341][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.064591][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1618'. [ 531.116654][T11716] ipvlan2: entered allmulticast mode [ 531.497784][T11734] tipc: Enabling of bearer rejected, failed to enable media [ 531.701229][ T30] audit: type=1400 audit(1777683229.818:1250): avc: denied { setopt } for pid=11737 comm="syz.3.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 532.205802][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.222910][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.243443][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.294170][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 533.306125][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 533.315435][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 533.329541][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 533.341980][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 533.374349][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 533.382469][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 533.393832][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 533.410261][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 533.421334][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 534.192032][T11777] bridge0: port 3(syz_tun) entered blocking state [ 534.198712][T11777] bridge0: port 3(syz_tun) entered disabled state [ 534.207078][T11777] syz_tun: entered allmulticast mode [ 534.218136][T11777] syz_tun: entered promiscuous mode [ 534.224397][T11777] bridge0: port 3(syz_tun) entered blocking state [ 534.230926][T11777] bridge0: port 3(syz_tun) entered forwarding state [ 534.253653][T11777] netlink: 'syz.5.1636': attribute type 10 has an invalid length. [ 534.261965][T11777] bridge0: port 3(syz_tun) entered disabled state [ 534.268525][T11777] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.275778][T11777] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.017688][T11777] bridge0: port 3(syz_tun) entered blocking state [ 535.024395][T11777] bridge0: port 3(syz_tun) entered forwarding state [ 535.031260][T11777] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.038396][T11777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.045906][T11777] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.053063][T11777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.070484][T11777] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 535.137961][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.241598][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.484004][ T5613] Bluetooth: hci0: command tx timeout [ 535.647012][T11758] Failed to initialize the IGMP autojoin socket (err -2) [ 536.200261][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.752206][ T9710] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 536.974212][ T9710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.008700][ T9710] usb 4-1: config 0 has no interfaces? [ 537.023958][ T9710] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 537.037005][ T9710] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 537.050463][ T9710] usb 4-1: Manufacturer: syz [ 537.077179][ T9710] usb 4-1: config 0 descriptor?? [ 537.184511][ T30] audit: type=1400 audit(1777683235.298:1251): avc: denied { write } for pid=11805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.253911][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.407843][T11758] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.435875][T11758] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.473575][T11758] bridge_slave_0: entered allmulticast mode [ 537.482078][ T30] audit: type=1400 audit(1777683235.598:1252): avc: denied { write } for pid=11839 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.522836][T11758] bridge_slave_0: entered promiscuous mode [ 537.560219][ T5613] Bluetooth: hci0: command tx timeout [ 537.628622][T11837] syzkaller0: entered promiscuous mode [ 537.634387][T11837] syzkaller0: entered allmulticast mode [ 537.645266][T11758] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.657888][T11758] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.665697][T11758] bridge_slave_1: entered allmulticast mode [ 537.674116][T11758] bridge_slave_1: entered promiscuous mode [ 537.693281][ T5725] usb 4-1: USB disconnect, device number 31 [ 537.807181][T11758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.281688][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.298771][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.324628][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.336027][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.649916][ T5613] Bluetooth: hci0: command tx timeout [ 540.372728][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.524456][T11842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.007572][ T5725] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 541.123323][T11877] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 541.290024][ T5725] usb 3-1: Using ep0 maxpacket: 8 [ 541.297057][ T5725] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 541.312060][ T5725] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 541.325404][ T5725] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 541.335800][ T9709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.336184][ T5725] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.358112][ T5725] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 541.368225][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.397945][ T30] audit: type=1400 audit(1777683239.508:1253): avc: denied { read } for pid=11879 comm="syz.4.1662" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 541.425942][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.622920][ T5725] usb 3-1: usb_control_msg returned -32 [ 541.628585][ T30] audit: type=1804 audit(1777683239.728:1254): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1663" name="/newroot/341/bus/file0" dev="overlay" ino=1832 res=1 errno=0 [ 541.651594][ T5725] usbtmc 3-1:16.0: can't read capabilities [ 541.727230][ T5613] Bluetooth: hci0: command tx timeout [ 541.884316][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.073176][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 542.455519][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.592441][T11758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.805785][T11758] team0: Port device team_slave_0 added [ 542.862938][T11758] team0: Port device team_slave_1 added [ 543.394265][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 543.457334][T11758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.468827][T11758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.507834][T11758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.508485][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.523924][T11758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.564755][T11758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.592728][T11758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.601382][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 543.611040][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 543.619881][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.630207][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.640457][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 543.652906][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.669906][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 543.680106][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.871309][ T9709] usb 3-1: USB disconnect, device number 37 [ 544.075610][ T24] usb 4-1: usb_control_msg returned -32 [ 544.109020][ T24] usbtmc 4-1:16.0: can't read capabilities [ 544.203871][T11758] hsr_slave_0: entered promiscuous mode [ 544.224482][T11758] hsr_slave_1: entered promiscuous mode [ 544.245269][T11758] debugfs: 'hsr0' already exists in 'hsr' [ 544.260540][T11758] Cannot create hsr debugfs directory [ 544.360040][ T9709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.557751][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.732925][T11917] rdma_rxe: Failed to create IPv4 UDP tunnel [ 545.513320][T11914] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 545.580463][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.714933][ T5725] usb 4-1: USB disconnect, device number 32 [ 545.906046][T11927] orangefs_devreq_open: device cannot be opened in blocking mode [ 546.478498][ T30] audit: type=1400 audit(1777683244.588:1255): avc: denied { write } for pid=11934 comm="syz.2.1675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 546.579879][ T30] audit: type=1400 audit(1777683244.618:1256): avc: denied { read } for pid=11934 comm="syz.2.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 546.613843][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.666475][ T30] audit: type=1400 audit(1777683244.678:1257): avc: denied { write } for pid=11913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.049398][ T30] audit: type=1400 audit(1777683245.158:1258): avc: denied { write } for pid=11948 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.078701][ T9709] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 547.179493][T11758] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 547.244758][T11758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.249777][ T9709] usb 4-1: Using ep0 maxpacket: 16 [ 547.276589][ T9709] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 547.287456][T11758] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 547.296643][ T9709] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 547.317097][ T9709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 547.329617][ T9709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 547.353238][ T9709] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 547.363768][ T9709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.373263][ T9709] usb 4-1: Product: syz [ 547.377888][ T9709] usb 4-1: Manufacturer: syz [ 547.392629][ T9709] usb 4-1: SerialNumber: syz [ 547.402826][T11758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.411114][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.452858][T11758] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 547.461633][ T9709] usb 4-1: config 0 descriptor?? [ 547.537946][T11758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.548283][T11758] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 547.585840][T11758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.643692][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.767773][T11980] binder: 11979:11980 ioctl c0306201 0 returned -14 [ 547.770780][ T9709] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 547.799539][ C0] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 547.822286][ T9709] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 547.879959][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 547.884162][ T9709] usb 4-1: USB disconnect, device number 33 [ 547.959849][ T30] audit: type=1400 audit(1777683246.068:1259): avc: denied { ioctl } for pid=11981 comm="syz.4.1688" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 548.073131][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 548.122789][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.146286][ T24] usb 6-1: Product: syz [ 548.163512][ T24] usb 6-1: Manufacturer: syz [ 548.179078][ T24] usb 6-1: SerialNumber: syz [ 548.222625][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 548.262080][ T5718] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 548.358263][T11758] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.438752][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.445930][ T6756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.560449][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.567653][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.691757][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.064420][ T30] audit: type=1400 audit(1777683247.168:1260): avc: denied { load_policy } for pid=11993 comm="syz.3.1691" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 549.104620][T11995] SELinux: failed to load policy [ 549.383509][ T9710] usb 6-1: USB disconnect, device number 21 [ 549.728843][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.788393][T12014] SELinux: ebitmap: truncated map [ 549.815197][T12014] SELinux: failed to load policy [ 550.180513][ T30] audit: type=1400 audit(1777683248.298:1261): avc: denied { watch watch_reads } for pid=12025 comm="syz.3.1698" path="pipe:[39154]" dev="pipefs" ino=39154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 550.210449][T12022] syzkaller0: entered promiscuous mode [ 550.217671][ T5718] usb 6-1: Service connection timeout for: 260 [ 550.235282][ T5718] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 550.246543][T12022] syzkaller0: entered allmulticast mode [ 550.251969][ T5718] ath9k_htc: Failed to initialize the device [ 550.283003][ T9710] usb 6-1: ath9k_htc: USB layer deinitialized [ 550.354232][T12030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1699'. [ 550.396152][T11758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.440369][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.496983][T12035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12035 comm=syz.3.1699 [ 550.803649][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.493727][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.642246][ T5718] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 551.831518][ T5718] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 551.853238][ T5718] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 551.865141][ T5718] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 551.877698][ T5718] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 551.889609][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.903172][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.911724][ T5718] usb 5-1: Product: syz [ 551.915969][ T5718] usb 5-1: Manufacturer: syz [ 551.920700][ T5718] usb 5-1: SerialNumber: syz [ 552.124148][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.153558][ T5718] adutux 5-1:168.0: interrupt endpoints not found [ 552.174664][ T5718] usb 5-1: USB disconnect, device number 39 [ 552.923556][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.490349][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.969340][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.740769][ T9710] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 555.530801][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.602065][ T9710] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 555.718140][ T9710] usb 3-1: config 0 interface 0 has no altsetting 0 [ 555.736693][T11758] veth0_vlan: entered promiscuous mode [ 555.754805][ T9710] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 555.775787][ T9710] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 555.827819][T12076] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1707'. [ 555.844461][ T9710] usb 3-1: Product: syz [ 556.003593][ T9710] usb 3-1: Manufacturer: syz [ 556.020939][ T9710] usb 3-1: SerialNumber: syz [ 556.039537][ T9710] usb 3-1: config 0 descriptor?? [ 556.989992][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.998176][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.001937][T12057] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 557.034152][ T9710] usb 3-1: selecting invalid altsetting 0 [ 557.036724][T11758] veth1_vlan: entered promiscuous mode [ 557.453024][ T9709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.675409][T11758] veth0_macvtap: entered promiscuous mode [ 557.749454][T11758] veth1_macvtap: entered promiscuous mode [ 557.806874][ T9710] usb 3-1: USB disconnect, device number 38 [ 558.050290][ T29] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 558.074026][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.136358][T11758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.228171][T11758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.242832][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 558.290315][T11758] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 558.313408][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 558.329956][T11758] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 558.366261][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.416246][ T29] usb 5-1: config 0 descriptor?? [ 558.435505][T12085] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 558.466413][T11758] wireguard: wg0: Could not create IPv4 socket [ 558.759958][T12089] bond2: entered promiscuous mode [ 558.776112][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1711'. [ 558.788539][T12089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 558.814569][T12094] hsr0: entered promiscuous mode [ 558.878580][T12091] hsr_slave_0: left promiscuous mode [ 558.922463][T12091] hsr_slave_1: left promiscuous mode [ 558.937475][ T29] hid_parser_main: 89 callbacks suppressed [ 558.937496][ T29] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 558.954739][T12091] hsr0 (unregistering): left promiscuous mode [ 558.960223][ T29] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 558.969302][ T29] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 558.978190][ T29] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 558.982332][T11758] wireguard: wg1: Could not create IPv4 socket [ 558.986778][ T29] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 558.986867][ T29] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 559.006570][T11758] wireguard: wg2: Could not create IPv4 socket [ 559.016493][ T29] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 559.025478][ T29] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 559.033980][ T29] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 559.074200][ T29] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 559.084053][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.183962][ T29] logitech-djreceiver 0003:046D:C71F.0017: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 559.312318][ T29] usb 5-1: USB disconnect, device number 40 [ 559.562761][T12102] fido_id[12102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 560.117514][T12118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.135455][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.139411][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.186454][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.380205][ T5743] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 561.868235][ T30] audit: type=1400 audit(1777683259.978:1262): avc: denied { mounton } for pid=12124 comm="syz.4.1722" path="/361/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 562.065190][ T5743] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 562.076182][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.088382][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 562.111880][ T5743] usb 3-1: Product: syz [ 562.118638][ T5743] usb 3-1: Manufacturer: syz [ 562.127316][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 562.136964][ T5743] usb 3-1: SerialNumber: syz [ 562.141947][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 562.151608][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 562.162167][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 562.209766][ T5743] usb 3-1: config 0 descriptor?? [ 562.224237][ T24] net_ratelimit: 1 callbacks suppressed [ 562.224255][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.434153][ T5743] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 562.975014][T12134] Failed to initialize the IGMP autojoin socket (err -2) [ 563.244245][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.148908][ T5743] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 564.202681][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.212531][ T5743] usb 3-1: USB disconnect, device number 39 [ 564.280149][ T5613] Bluetooth: hci0: command tx timeout [ 564.344221][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.251922][ T30] audit: type=1400 audit(1777683263.298:1263): avc: denied { write } for pid=12162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.385861][ T5743] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 565.395328][ T30] audit: type=1400 audit(1777683263.488:1264): avc: denied { write } for pid=12187 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.425006][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.596084][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.627576][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.668004][ T5743] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 565.685658][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.715514][ T5743] usb 3-1: config 0 descriptor?? [ 565.780129][ T5725] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 565.941716][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.972965][ T5725] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 566.003117][ T5725] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 566.036306][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.068002][ T5725] usb 4-1: config 0 descriptor?? [ 566.096303][ T5725] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 566.125163][ T5725] dvb-usb: bulk message failed: -22 (3/0) [ 566.153172][ T5725] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 566.184236][ T5743] hid_parser_main: 453 callbacks suppressed [ 566.184258][ T5743] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 566.208547][ T5725] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 566.224887][ T5725] usb 4-1: media controller created [ 566.233102][ T5743] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 566.241284][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 566.267097][ T5725] dvb-usb: bulk message failed: -22 (6/0) [ 566.274568][ T5743] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0018/input/input24 [ 566.309381][ T30] audit: type=1400 audit(1777683264.418:1265): avc: denied { write } for pid=12198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.335814][ T5725] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 566.343425][T12194] dvb-usb: bulk message failed: -22 (2/0) [ 566.377620][ T5725] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 566.389970][ T5613] Bluetooth: hci0: command tx timeout [ 566.414683][ T5743] cm6533_jd 0003:0D8C:0022.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 566.445334][ T5725] dvb-usb: schedule remote query interval to 150 msecs. [ 566.460043][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.488451][ T5725] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 566.499399][ T5743] usb 3-1: USB disconnect, device number 40 [ 566.548847][ T5725] usb 4-1: USB disconnect, device number 34 [ 566.671299][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 566.697737][T12212] fido_id[12212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 566.728301][ T29] dvb-usb: error while querying for an remote control event. [ 566.837260][ T30] audit: type=1400 audit(1777683264.948:1266): avc: denied { write } for pid=12218 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.938378][ T5725] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 566.964783][T12214] kvm_intel: kvm [12213]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x100000001 [ 567.238995][T12228] overlayfs: upper fs does not support tmpfile. [ 567.250590][ T9707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.485745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.494265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.516492][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.584427][T12237] syzkaller0: entered promiscuous mode [ 567.611739][T12237] syzkaller0: entered allmulticast mode [ 567.629142][ T30] audit: type=1400 audit(1777683265.738:1267): avc: denied { ioctl } for pid=12244 comm="syz.2.1740" path="/361/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 567.667160][T12242] syzkaller0: entered promiscuous mode [ 567.677873][T12242] syzkaller0: entered allmulticast mode [ 567.809836][ T30] audit: type=1400 audit(1777683265.918:1268): avc: denied { write } for pid=12229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.026718][ T30] audit: type=1400 audit(1777683266.128:1269): avc: denied { write } for pid=12263 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.557328][T12270] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 569.436396][ T5613] Bluetooth: hci0: command tx timeout [ 569.458857][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.531394][T12134] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 569.545940][T12134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.556009][T12134] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 569.580930][T12134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.591219][T12134] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 569.789836][T12134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.828755][T12134] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 570.228812][T12134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.521899][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.754093][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.015583][T12286] binder: 12285:12286 ioctl c0306201 200000000080 returned -14 [ 571.071560][T12286] binder: 12285:12286 ioctl c0306201 2000000003c0 returned -14 [ 572.155739][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.164025][ T5613] Bluetooth: hci0: command tx timeout [ 572.191463][ T30] audit: type=1400 audit(1777683269.598:1270): avc: denied { audit_read } for pid=12289 comm="syz.4.1749" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 572.195479][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.254536][ T30] audit: type=1804 audit(1777683270.298:1271): pid=12293 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1746" name="/newroot/138/file1" dev="tmpfs" ino=754 res=1 errno=0 [ 572.465062][T12302] syzkaller0: entered promiscuous mode [ 572.563474][T12302] 0: reclassify loop, rule prio 0, protocol 800 [ 572.915706][ T30] audit: type=1400 audit(1777683271.028:1272): avc: denied { write } for pid=12284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.171557][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.199885][ T30] audit: type=1400 audit(1777683271.308:1273): avc: denied { write } for pid=12323 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.329869][ T9708] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 573.480026][ T9708] usb 4-1: device descriptor read/64, error -71 [ 573.720568][ T9708] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 573.802837][ T9701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.949756][ T9708] usb 4-1: device descriptor read/64, error -71 [ 574.250258][ T9708] usb usb4-port1: attempt power cycle [ 574.261013][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.562489][T12134] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 574.605543][ T9708] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 574.625407][T12134] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 574.661873][ T9708] usb 4-1: device descriptor read/8, error -71 [ 574.682783][T12134] wireguard: wg0: Could not create IPv4 socket [ 574.724480][T12134] wireguard: wg1: Could not create IPv4 socket [ 574.756776][T12134] wireguard: wg2: Could not create IPv4 socket [ 574.944333][ T9708] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 574.990897][ T30] audit: type=1400 audit(1777683273.098:1274): avc: denied { write } for pid=12333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.042014][ T9708] usb 4-1: device descriptor read/8, error -71 [ 575.181127][ T9708] usb usb4-port1: unable to enumerate USB device [ 575.327723][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.807765][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 575.825062][ T30] audit: type=1400 audit(1777683273.938:1275): avc: denied { write } for pid=12362 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.858979][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 575.872521][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 575.889303][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 575.897382][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 575.979853][ T5743] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 576.030328][ T30] audit: type=1400 audit(1777683274.138:1276): avc: denied { append } for pid=12373 comm="syz.2.1761" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 576.209963][ T5743] usb 6-1: Using ep0 maxpacket: 16 [ 576.243778][ T5743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.179477][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.200211][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.208540][ T5743] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 577.360485][T12381] syzkaller0: entered promiscuous mode [ 577.370092][T12381] syzkaller0: entered allmulticast mode [ 577.999970][ T5620] Bluetooth: hci0: command tx timeout [ 578.196682][ T5743] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 578.347878][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.360951][ T5743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.514977][ T5743] usb 6-1: config 0 descriptor?? [ 578.939867][ T5743] usbhid 6-1:0.0: can't add hid device: -71 [ 578.968748][ T5743] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 579.006601][ T5743] usb 6-1: USB disconnect, device number 22 [ 579.413635][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.594052][T12405] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1767'. [ 579.646043][T12405] vlan2: entered allmulticast mode [ 579.668759][T12405] bond0: entered allmulticast mode [ 579.680307][ T5743] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 579.696550][T12410] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1767'. [ 579.712828][T12405] bond_slave_0: entered allmulticast mode [ 579.740279][T12405] bond_slave_1: entered allmulticast mode [ 579.779724][T12405] bridge0: entered allmulticast mode [ 579.897372][ T30] audit: type=1400 audit(1777683278.008:1277): avc: denied { write } for pid=12387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.953646][ T5743] usb 6-1: unable to get BOS descriptor or descriptor too short [ 579.968096][T12410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.002667][ T5743] usb 6-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.032221][T12410] bond_slave_0: left allmulticast mode [ 580.043877][ T5743] usb 6-1: config 1 interface 0 has no altsetting 0 [ 580.074417][T12410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.088706][ T5743] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 580.107675][ T30] audit: type=1400 audit(1777683278.218:1278): avc: denied { write } for pid=12418 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.136115][ T5620] Bluetooth: hci0: command tx timeout [ 580.147334][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.156958][T12410] bond_slave_1: left allmulticast mode [ 580.173975][T12410] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 580.186665][ T5743] usb 6-1: Product: syz [ 580.200186][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.208597][ T5743] usb 6-1: Manufacturer: syz [ 580.208618][ T5743] usb 6-1: SerialNumber: syz [ 580.233662][T12410] bridge0: left allmulticast mode [ 580.253551][T12410] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.261007][T12410] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.317971][T12410] bond0 (unregistering): Released all slaves [ 580.359214][T12366] Failed to initialize the IGMP autojoin socket (err -2) [ 580.444153][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.503721][ T9710] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 580.654842][ T5743] usbhid 6-1:1.0: can't add hid device: -71 [ 580.677077][ T5743] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 580.702273][ T9710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.720704][ T5743] usb 6-1: USB disconnect, device number 23 [ 580.744012][ T9710] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 580.788844][ T9710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.838007][ T9710] usb 5-1: config 0 descriptor?? [ 580.866514][ T9710] pwc: Askey VC010 type 2 USB webcam detected. [ 581.308924][ T9710] pwc: recv_control_msg error -32 req 02 val 2b00 [ 581.316303][ T30] audit: type=1400 audit(1777683279.418:1279): avc: denied { write } for pid=12423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.391001][ T9710] pwc: recv_control_msg error -32 req 02 val 2700 [ 581.407789][ T9710] pwc: recv_control_msg error -32 req 02 val 2c00 [ 581.437511][ T9710] pwc: recv_control_msg error -32 req 04 val 1000 [ 581.476537][ T9710] pwc: recv_control_msg error -32 req 04 val 1300 [ 581.493897][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.503675][ T9710] pwc: recv_control_msg error -32 req 04 val 1400 [ 581.548196][ T9710] pwc: recv_control_msg error -32 req 02 val 2000 [ 581.560219][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.577963][ T9710] pwc: recv_control_msg error -32 req 02 val 2100 [ 581.585271][ T30] audit: type=1400 audit(1777683279.688:1280): avc: denied { write } for pid=12444 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.626419][ T9710] pwc: recv_control_msg error -32 req 04 val 1500 [ 581.649289][ T9710] pwc: recv_control_msg error -32 req 02 val 2500 [ 582.270531][ T5613] Bluetooth: hci0: command tx timeout [ 582.472125][ T9710] pwc: recv_control_msg error -71 req 02 val 2600 [ 582.483228][ T9710] pwc: recv_control_msg error -71 req 02 val 2900 [ 582.493889][ T9710] pwc: recv_control_msg error -71 req 02 val 2800 [ 582.504007][ T9710] pwc: recv_control_msg error -71 req 04 val 1100 [ 582.511908][ T9710] pwc: recv_control_msg error -71 req 04 val 1200 [ 582.529384][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.561841][ T9710] pwc: Registered as video103. [ 582.694516][ T9710] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 582.952809][ T9710] usb 5-1: USB disconnect, device number 41 [ 583.042446][T12460] netlink: 'syz.5.1775': attribute type 1 has an invalid length. [ 583.240328][ T9701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.334916][T12463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1775'. [ 583.564152][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.647804][T12460] bond3: entered promiscuous mode [ 583.691559][T12460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.746066][T12463] bond3: entered allmulticast mode [ 583.856563][T12465] bond3: (slave bridge1): making interface the new active one [ 583.896621][T12465] bridge1: entered promiscuous mode [ 583.922581][T12465] bridge1: entered allmulticast mode [ 583.965564][ T9710] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 584.003996][T12465] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 584.134396][ T30] audit: type=1400 audit(1777683282.248:1281): avc: denied { write } for pid=12461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.199898][ T9710] usb 4-1: Using ep0 maxpacket: 32 [ 584.211527][ T9710] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 584.232439][ T9710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.265706][ T9710] usb 4-1: config 0 descriptor?? [ 584.281732][ T5620] Bluetooth: hci0: command tx timeout [ 584.315482][ T9710] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 584.463984][ T30] audit: type=1400 audit(1777683282.578:1282): avc: denied { write } for pid=12484 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.610505][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.643733][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.910770][T12366] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 585.947205][T12366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.979748][T12366] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 586.018233][ T30] audit: type=1400 audit(1777683284.128:1283): avc: denied { write } for pid=12492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.049087][T12366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 586.078664][T12366] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 586.098187][T12366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 586.133269][T12366] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 586.291356][ T9701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.605802][T12366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 586.693965][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.745876][ T30] audit: type=1400 audit(1777683284.858:1284): avc: denied { write } for pid=12523 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.909769][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 587.481810][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 587.493830][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.523024][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 587.539824][ T9708] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 587.561093][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 587.585540][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 587.604898][ T9710] gspca_vc032x: reg_r err -71 [ 587.617694][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.643144][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.654543][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 587.658965][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.693042][ T9708] usb 3-1: device descriptor read/64, error -71 [ 587.711068][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.719408][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 587.730884][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.739174][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.746030][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.762711][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.767120][ T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 587.776059][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.776103][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.776112][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.776137][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.776146][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.776169][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.776178][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.776186][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.776209][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.776217][ T9710] gspca_vc032x: I2c Bus Busy Wait 00 [ 587.776241][ T9710] gspca_vc032x: Unknown sensor... [ 587.776346][ T9710] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 587.871898][ T24] usb 6-1: Manufacturer: syz [ 587.924613][ T24] usb 6-1: config 0 descriptor?? [ 587.952117][ T9710] usb 4-1: USB disconnect, device number 39 [ 588.009292][ T9708] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 588.702546][ T24] rc_core: IR keymap rc-hauppauge not found [ 588.738294][ T24] Registered IR keymap rc-empty [ 588.804628][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.823276][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 588.871103][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 588.916034][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 588.964140][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 589.052365][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 589.101953][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 589.109877][ T9708] usb 3-1: device descriptor read/64, error -71 [ 589.149880][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 589.189893][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 589.234080][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 589.269882][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 589.309844][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 589.343963][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 589.390869][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 589.421331][T12366] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 589.829903][ T9708] usb usb3-port1: attempt power cycle [ 589.837934][ T9701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.924339][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 589.934012][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.972057][ T24] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 589.980223][ T24] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 590.002743][ T24] usb 6-1: USB disconnect, device number 24 [ 590.643496][T12366] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 590.955089][ T30] audit: type=1400 audit(1777683289.068:1285): avc: denied { write } for pid=12534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.991860][T12366] wireguard: wg0: Could not create IPv4 socket [ 591.023050][T12366] wireguard: wg1: Could not create IPv4 socket [ 591.045476][T12366] wireguard: wg2: Could not create IPv4 socket [ 591.052572][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.272245][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.119961][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.840397][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.051532][ T30] audit: type=1400 audit(1777683291.108:1286): avc: denied { write } for pid=12575 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.159847][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.588599][T12585] syzkaller0: entered promiscuous mode [ 593.607971][T12587] fuse: Unknown parameter '0xffffffffffffffff18446744073709551615ÿÿÿÿ' [ 593.635217][T12585] syzkaller0: entered allmulticast mode [ 594.205713][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.310961][ T30] audit: type=1400 audit(1777683292.428:1287): avc: denied { write } for pid=12590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.225210][T12616] kvm_intel: kvm [12606]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 595.697515][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.932442][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.013967][ T30] audit: type=1400 audit(1777683294.128:1288): avc: denied { write } for pid=12612 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.660236][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 596.689334][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 596.699927][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 596.712239][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 596.722759][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 596.775462][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.803347][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.491919][T12632] Failed to initialize the IGMP autojoin socket (err -2) [ 598.523718][ T30] audit: type=1400 audit(1777683296.638:1289): avc: denied { write } for pid=12636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.843120][ T5613] Bluetooth: hci0: command tx timeout [ 598.862134][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.871399][ T30] audit: type=1400 audit(1777683296.968:1290): avc: denied { write } for pid=12673 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.000378][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.309896][ T24] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 599.603556][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.637970][ T24] usb 4-1: config 0 has no interfaces? [ 599.664017][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 599.700071][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 599.727408][ T24] usb 4-1: Manufacturer: syz [ 599.751662][ T24] usb 4-1: config 0 descriptor?? [ 599.883420][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.838328][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.927606][ T5613] Bluetooth: hci0: command tx timeout [ 600.933269][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.239175][T12706] hugetlbfs: syz.4.1811 (12706): Using mlock ulimits for SHM_HUGETLB is obsolete [ 601.291286][ T29] usb 4-1: USB disconnect, device number 40 [ 601.901631][ T30] audit: type=1400 audit(1777683300.018:1291): avc: denied { write } for pid=12685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.963501][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.040119][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.087578][ T30] audit: type=1804 audit(1777683300.188:1292): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1813" name="/newroot/379/file1" dev="fuse" ino=1 res=1 errno=0 [ 602.212777][ T30] audit: type=1800 audit(1777683300.208:1293): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1813" name="/" dev="fuse" ino=1 res=0 errno=0 [ 602.959101][ T30] audit: type=1400 audit(1777683301.068:1294): avc: denied { write } for pid=12719 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.021425][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.039318][ T5613] Bluetooth: hci0: command tx timeout [ 603.940780][T12738] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 604.043288][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.157106][T12738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1818'. [ 604.166950][T12738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.701551][T12752] kvm: pic: non byte write [ 604.881660][ T30] audit: type=1400 audit(1777683302.998:1295): avc: denied { create } for pid=12757 comm="syz.5.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 604.934617][ T30] audit: type=1400 audit(1777683303.048:1296): avc: denied { shutdown } for pid=12757 comm="syz.5.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 604.996537][ T30] audit: type=1400 audit(1777683303.108:1297): avc: denied { write } for pid=12741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.013835][T12632] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 605.080277][ T5613] Bluetooth: hci0: command tx timeout [ 605.081717][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.359179][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.365812][T12632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.382811][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.386633][T12632] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 605.399827][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.415754][ T9709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.458083][T12632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.502232][T12632] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 605.570826][T12632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.598122][T12632] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 605.683652][T12632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 605.723816][ T30] audit: type=1400 audit(1777683303.838:1298): avc: denied { write } for pid=12764 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.368291][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.413737][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.929416][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.082082][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.122410][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.903734][ T30] audit: type=1400 audit(1777683308.018:1299): avc: denied { write } for pid=12775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.999973][ T5718] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 610.873572][ T9708] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 611.010809][ T1052] net_ratelimit: 2 callbacks suppressed [ 611.010827][ T1052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.028831][ T9709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.157998][ T9708] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 611.176445][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.180210][ T9708] usb 5-1: config 0 has no interface number 0 [ 611.199228][ T9709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.210128][ T9701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.231240][ T9708] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 611.253215][ T5718] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 611.278584][ T9708] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 611.286357][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.444988][ T30] audit: type=1400 audit(1777683309.418:1300): avc: denied { write } for pid=12828 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 611.447382][ T5718] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 611.499766][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 611.508007][ T5718] usb 3-1: Product: syz [ 611.511706][ T9708] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 611.512750][ T5718] usb 3-1: Manufacturer: syz [ 611.550305][ T9708] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 611.568980][ T9708] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 611.582687][ T9708] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 611.583943][ T5718] usb 3-1: SerialNumber: syz [ 611.625374][ T9708] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 611.636845][ T9708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.673622][ T9708] usb 5-1: config 0 descriptor?? [ 611.679230][ T5718] usb 3-1: config 0 descriptor?? [ 611.685855][T12822] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 611.702046][T12816] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 611.715855][T12822] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 611.734374][ T5718] usb 3-1: selecting invalid altsetting 0 [ 611.749494][T12836] Bluetooth: MGMT ver 1.23 [ 611.752420][ T9708] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 611.784207][T12836] Bluetooth: hci0: unsupported parameter 255 [ 611.823506][T12836] Bluetooth: hci0: unsupported parameter 255 [ 612.573599][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.582128][ T30] audit: type=1400 audit(1777683310.688:1301): avc: denied { setopt } for pid=12844 comm="syz.5.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 613.730795][ T9710] usb 3-1: USB disconnect, device number 44 [ 613.769447][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.795800][T12855] [U] [ 613.799232][T12855] [U] [ 613.801934][T12855] [U] [ 613.804632][T12855] [U] [ 613.893217][T12855] [U] [ 613.895966][T12855] [U] [ 613.898673][T12855] [U] [ 613.901363][T12855] [U] [ 614.045680][T12855] [U] [ 614.048440][T12855] [U] [ 614.051143][T12855] [U] [ 614.291271][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.464848][T12854] [U] [ 614.830197][ T9710] usb 5-1: USB disconnect, device number 42 [ 614.879110][ T9793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.893396][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.898903][ T9710] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 614.906607][T12870] binder: 12869:12870 ioctl c018620c 200000000240 returned -22 [ 615.165596][ T30] audit: type=1400 audit(1777683313.278:1302): avc: denied { write } for pid=12840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.951107][T12632] wireguard: wg0: Could not create IPv4 socket [ 616.003631][T12632] wireguard: wg1: Could not create IPv4 socket [ 616.043978][T12632] wireguard: wg2: Could not create IPv4 socket [ 616.988838][ T9630] net_ratelimit: 5 callbacks suppressed [ 616.988856][ T9630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.013168][ T30] audit: type=1400 audit(1777683315.108:1303): avc: denied { write } for pid=12883 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.014729][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.049534][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.076869][ T9709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.700470][ T9709] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 617.899107][ T9709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.935582][ T9709] usb 6-1: config 0 has no interfaces? [ 617.950783][ T9709] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 617.961096][ T9709] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 617.970540][ T9709] usb 6-1: Manufacturer: syz [ 617.986726][ T9709] usb 6-1: config 0 descriptor?? [ 618.049614][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.088469][ T30] audit: type=1400 audit(1777683316.198:1304): avc: denied { write } for pid=12895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.187793][ T30] audit: type=1400 audit(1777683316.298:1305): avc: denied { write } for pid=12907 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.678880][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.718091][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.874891][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 619.543213][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 619.550818][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 619.611312][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.750261][ T9709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.759335][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.771810][T11043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.796049][ T9709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.814261][ T5725] usb 6-1: USB disconnect, device number 25 [ 621.333757][T12941] overlayfs: invalid origin (0000) [ 621.639780][ T5620] Bluetooth: hci0: command tx timeout [ 621.877907][ T30] audit: type=1400 audit(1777683319.988:1306): avc: denied { write } for pid=12918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.191730][ T30] audit: type=1400 audit(1777683320.308:1307): avc: denied { write } for pid=12966 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.221378][ T9701] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 622.232108][T12925] Failed to initialize the IGMP autojoin socket (err -2) [ 622.406941][ T9701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.418469][ T9701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 622.436634][ T9701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.473884][ T9701] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 622.499798][ T9701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.517736][T12971] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 622.525668][T12971] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 622.538217][ T9793] net_ratelimit: 3 callbacks suppressed [ 622.538235][ T9793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.552626][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.563871][ T9709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.952450][ T9701] usb 3-1: config 0 descriptor?? [ 623.017548][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.159855][ T9701] hid-picolcd 0003:04D8:F002.0019: item fetching failed at offset 4/5 [ 624.169324][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.186279][T12959] netlink: 'syz.2.1855': attribute type 10 has an invalid length. [ 624.212744][ T9701] hid-picolcd 0003:04D8:F002.0019: device report parse failed [ 624.235749][T12959] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1855'. [ 624.247141][ T9701] hid-picolcd 0003:04D8:F002.0019: probe with driver hid-picolcd failed with error -22 [ 624.974968][ T30] audit: type=1400 audit(1777683323.088:1308): avc: denied { write } for pid=12975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.229030][ T30] audit: type=1400 audit(1777683323.338:1309): avc: denied { write } for pid=12996 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.243401][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.653615][ T9701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.943468][T13005] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 626.243939][ T5718] usb 3-1: USB disconnect, device number 45 [ 626.312587][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.927759][ T30] audit: type=1400 audit(1777683325.038:1310): avc: denied { write } for pid=13001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.007264][T13024] overlayfs: overlapping lowerdir path [ 627.271786][ T30] audit: type=1400 audit(1777683325.388:1311): avc: denied { write } for pid=13028 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.342985][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.490538][ T5718] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 627.693132][ T5718] usb 6-1: unable to get BOS descriptor or descriptor too short [ 627.732977][ T5718] usb 6-1: not running at top speed; connect to a high speed hub [ 627.763764][ T5718] usb 6-1: config 12 has an invalid interface number: 231 but max is 0 [ 627.794369][ T5718] usb 6-1: config 12 has no interface number 0 [ 627.811236][ T5718] usb 6-1: config 12 interface 231 has no altsetting 0 [ 627.831254][ T5718] usb 6-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 627.985927][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.999493][ T5718] usb 6-1: Product: syz [ 628.008180][ T5718] usb 6-1: Manufacturer: syz [ 628.018518][ T5718] usb 6-1: SerialNumber: syz [ 628.979343][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.021206][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.034162][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.062571][ T9708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.009996][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.074878][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.264292][ T9709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.293941][T13030] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1865'. [ 630.342309][T13030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.422973][T13030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.427822][T12925] netdevsim netdevsim6 netdevsim0: renamed from eth5 [ 630.682772][ T5718] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 630.726486][T12925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 630.774192][T12925] netdevsim netdevsim6 netdevsim1: renamed from eth6 [ 630.836061][T12925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 630.875242][T12925] netdevsim netdevsim6 netdevsim2: renamed from eth7 [ 630.898823][ T5718] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 630.909515][ T5718] dib0700: firmware download failed at 7 with -71 [ 630.947968][ T5718] usb 6-1: USB disconnect, device number 26 [ 630.956356][T12925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 630.972562][T12925] netdevsim netdevsim6 netdevsim3: renamed from eth8 [ 631.064297][T12925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.089202][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.234156][ T30] audit: type=1400 audit(1777683329.348:1312): avc: denied { search } for pid=13064 comm="sed" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.327934][ T30] audit: type=1400 audit(1777683329.348:1313): avc: denied { read } for pid=13064 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 631.439799][ T30] audit: type=1400 audit(1777683329.408:1314): avc: denied { open } for pid=13064 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 631.574844][ T30] audit: type=1400 audit(1777683329.408:1315): avc: denied { getattr } for pid=13064 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 631.747331][ T30] audit: type=1400 audit(1777683329.508:1316): avc: denied { module_request } for pid=12925 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 631.769683][ T30] audit: type=1400 audit(1777683329.598:1317): avc: denied { read write } for pid=8871 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 631.826796][ T30] audit: type=1400 audit(1777683329.608:1318): avc: denied { open } for pid=8871 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 631.914536][ T30] audit: type=1400 audit(1777683329.608:1319): avc: denied { ioctl } for pid=8871 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 631.960822][ T30] audit: type=1400 audit(1777683329.608:1320): avc: denied { getattr } for pid=13037 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.038418][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1872'. [ 632.055417][T13076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.049602][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 737.056659][ C1] rcu: 0-...!: (1 ticks this GP) idle=64f4/1/0x4000000000000000 softirq=65045/65046 fqs=1 [ 737.067728][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13075/1:b..l [ 737.075741][ C1] rcu: (detected by 1, t=10502 jiffies, g=70993, q=458 ncpus=2) [ 737.083463][ C1] Sending NMI from CPU 1 to CPUs 0: [ 737.083492][ C0] NMI backtrace for cpu 0 [ 737.083506][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.083526][ C0] Tainted: [L]=SOFTLOCKUP [ 737.083531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 737.083539][ C0] RIP: 0010:__lock_acquire+0x11e/0x2630 [ 737.083562][ C0] Code: c8 00 00 00 01 48 89 04 24 75 1f 48 8d b4 1d 68 0b 00 00 0f b7 46 20 25 ff 1f 00 00 44 39 e8 75 09 4d 85 e4 0f 85 99 05 00 00 <48> 8b 04 24 44 89 ea 66 81 e2 ff 1f 48 01 c3 0f b7 43 20 4c 89 53 [ 737.083579][ C0] RSP: 0000:ffffc90000007c80 EFLAGS: 00000046 [ 737.083591][ C0] RAX: ffff88801e2bb090 RBX: 0000000000000000 RCX: 0000000000000000 [ 737.083599][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888021f372c0 [ 737.083608][ C0] RBP: ffff88801e2ba500 R08: 0000000000000001 R09: 0000000000000001 [ 737.083616][ C0] R10: ffff888021f372c0 R11: 0000000000000001 R12: 0000000000000000 [ 737.083625][ C0] R13: 0000000000000ecb R14: 0000000000000000 R15: 0000000000000000 [ 737.083633][ C0] FS: 0000000000000000(0000) GS:ffff888124376000(0000) knlGS:0000000000000000 [ 737.083647][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.083656][ C0] CR2: 00007fc4f19af286 CR3: 000000002f67d000 CR4: 00000000003526f0 [ 737.083665][ C0] Call Trace: [ 737.083671][ C0] [ 737.083677][ C0] ? do_raw_spin_lock+0x128/0x260 [ 737.083697][ C0] ? do_raw_spin_lock+0x128/0x260 [ 737.083715][ C0] lock_acquire+0x1b1/0x370 [ 737.083731][ C0] ? advance_sched+0xe5/0xd20 [ 737.083749][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 737.083769][ C0] _raw_spin_lock+0x2e/0x40 [ 737.083783][ C0] ? advance_sched+0xe5/0xd20 [ 737.083800][ C0] advance_sched+0xe5/0xd20 [ 737.083817][ C0] ? find_held_lock+0x2b/0x80 [ 737.083829][ C0] ? __hrtimer_run_queues+0x383/0xa00 [ 737.083849][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 737.083866][ C0] ? __pfx_advance_sched+0x10/0x10 [ 737.083884][ C0] __hrtimer_run_queues+0x470/0xa00 [ 737.083905][ C0] hrtimer_interrupt+0x3e5/0x940 [ 737.083921][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 737.083941][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 737.083956][ C0] [ 737.083960][ C0] [ 737.083965][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 737.083981][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 737.083994][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 4a 85 57 f6 48 89 df e8 22 d5 57 f6 e8 7d db 83 f6 fb bf 01 00 00 00 72 a8 47 f6 65 8b 05 6b af 7d 08 85 c0 74 06 5b e9 51 4a 00 00 [ 737.084006][ C0] RSP: 0000:ffffc90000147b50 EFLAGS: 00000202 [ 737.084016][ C0] RAX: 00000000003c3ab6 RBX: ffff8880b8426340 RCX: 0000000000000000 [ 737.084025][ C0] RDX: 0000000000000000 RSI: ffffffff8df1fe73 RDI: 0000000000000001 [ 737.084033][ C0] RBP: ffffffff81f4cfb0 R08: 0000000000000001 R09: 0000000000000000 [ 737.084041][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90000147c20 [ 737.084049][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8426340 [ 737.084058][ C0] ? __pfx_process_timeout+0x10/0x10 [ 737.084074][ C0] __run_timers+0x74f/0xaf0 [ 737.084091][ C0] ? __pfx___run_timers+0x10/0x10 [ 737.084106][ C0] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 737.084123][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 737.084137][ C0] run_timer_base+0x114/0x190 [ 737.084152][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 737.084166][ C0] ? rcu_is_watching+0x12/0xc0 [ 737.084186][ C0] run_timer_softirq+0x1a/0x50 [ 737.084201][ C0] handle_softirqs+0x1ea/0xa00 [ 737.084222][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 737.084240][ C0] ? run_ksoftirqd+0x5b/0x60 [ 737.084256][ C0] ? rcu_is_watching+0x12/0xc0 [ 737.084275][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 737.084292][ C0] run_ksoftirqd+0x38/0x60 [ 737.084309][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 737.084325][ C0] ? kthread+0x13a/0x450 [ 737.084339][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 737.084352][ C0] kthread+0x370/0x450 [ 737.084366][ C0] ? __pfx_kthread+0x10/0x10 [ 737.084381][ C0] ret_from_fork+0x72b/0xd50 [ 737.084398][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 737.084415][ C0] ? __switch_to+0x800/0x1100 [ 737.084434][ C0] ? __pfx_kthread+0x10/0x10 [ 737.084449][ C0] ret_from_fork_asm+0x1a/0x30 [ 737.084472][ C0] [ 737.084488][ C1] task:dhcpcd-run-hook state:R running task stack:26376 pid:13075 tgid:13075 ppid:13037 task_flags:0x400040 flags:0x00080000 [ 737.520468][ C1] Call Trace: [ 737.523757][ C1] [ 737.526690][ C1] __schedule+0x10e9/0x6820 [ 737.531194][ C1] ? __lock_acquire+0x4a5/0x2630 [ 737.536141][ C1] ? __lock_acquire+0x4a5/0x2630 [ 737.541088][ C1] ? mark_held_locks+0x40/0x70 [ 737.545851][ C1] ? __pfx___schedule+0x10/0x10 [ 737.550701][ C1] ? irqentry_exit+0x246/0x790 [ 737.555480][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 737.561555][ C1] preempt_schedule_notrace+0x5f/0xd0 [ 737.566934][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 737.572834][ C1] rcu_is_watching+0x8e/0xc0 [ 737.577426][ C1] unwind_next_frame+0x745/0x2090 [ 737.582454][ C1] ? kasan_save_free_info+0x3b/0x70 [ 737.587656][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 737.593814][ C1] arch_stack_walk+0x94/0xf0 [ 737.598445][ C1] ? __kasan_slab_free+0x5f/0x80 [ 737.603398][ C1] ? unlink_anon_vmas+0x228/0x8e0 [ 737.608448][ C1] stack_trace_save+0x8e/0xc0 [ 737.613143][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 737.618540][ C1] ? __lock_acquire+0x4a5/0x2630 [ 737.623497][ C1] kasan_save_stack+0x30/0x50 [ 737.628170][ C1] ? kasan_save_stack+0x30/0x50 [ 737.633021][ C1] ? kasan_save_track+0x14/0x30 [ 737.637874][ C1] ? kasan_save_free_info+0x3b/0x70 [ 737.643097][ C1] kasan_save_track+0x14/0x30 [ 737.647772][ C1] kasan_save_free_info+0x3b/0x70 [ 737.652789][ C1] __kasan_slab_free+0x5f/0x80 [ 737.657541][ C1] kmem_cache_free+0x127/0x6c0 [ 737.662303][ C1] unlink_anon_vmas+0x228/0x8e0 [ 737.667152][ C1] free_pgtables+0x2e7/0xd80 [ 737.671747][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 737.676863][ C1] exit_mmap+0x44c/0xa10 [ 737.681121][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 737.685880][ C1] ? rcu_is_watching+0x12/0xc0 [ 737.690649][ C1] ? uprobe_clear_state+0x5f/0x260 [ 737.695777][ C1] ? uprobe_clear_state+0x5f/0x260 [ 737.700926][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 737.706586][ C1] __mmput+0x12a/0x410 [ 737.710662][ C1] mmput+0x67/0x80 [ 737.714383][ C1] begin_new_exec+0x10f0/0x3880 [ 737.719251][ C1] ? __pfx_begin_new_exec+0x10/0x10 [ 737.724440][ C1] ? __pfx_load_elf_phdrs+0x10/0x10 [ 737.729637][ C1] ? rw_verify_area+0xce/0x6d0 [ 737.734400][ C1] load_elf_binary+0x8f1/0x51b0 [ 737.739248][ C1] ? lock_acquire+0x1b1/0x370 [ 737.743922][ C1] ? find_held_lock+0x2b/0x80 [ 737.748589][ C1] ? load_misc_binary+0x95e/0xd20 [ 737.753610][ C1] ? __pfx_load_elf_binary+0x10/0x10 [ 737.758886][ C1] ? find_held_lock+0x2b/0x80 [ 737.763551][ C1] ? bprm_execve+0x8d3/0x1650 [ 737.768225][ C1] ? bprm_execve+0x8d3/0x1650 [ 737.772898][ C1] bprm_execve+0x8f5/0x1650 [ 737.777400][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 737.782326][ C1] ? copy_strings.isra.0+0x491/0x790 [ 737.787610][ C1] do_execveat_common.isra.0+0x4a5/0x580 [ 737.793261][ C1] __x64_sys_execve+0x93/0xd0 [ 737.797955][ C1] do_syscall_64+0x10b/0xf80 [ 737.802579][ C1] ? clear_bhb_loop+0x40/0x90 [ 737.807302][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.813215][ C1] RIP: 0033:0x7fc4f18f5107 [ 737.817632][ C1] RSP: 002b:00007ffef8fc7a78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 737.826049][ C1] RAX: ffffffffffffffda RBX: 000055beff6f6e88 RCX: 00007fc4f18f5107 [ 737.834011][ C1] RDX: 000055beff6f6ea8 RSI: 000055beff6f6e88 RDI: 000055beff6f6f30 [ 737.841969][ C1] RBP: 000055beff6f6f30 R08: 00007ffef8fcbc20 R09: 0000000000000000 [ 737.849927][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 000055beff6f6ea8 [ 737.857887][ C1] R13: 00007fc4f1abae8b R14: 000055beff6f6ea8 R15: 0000000000000000 [ 737.865863][ C1] [ 737.868879][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g70993 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 737.880086][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 737.890055][ C1] rcu: RCU grace-period kthread stack dump: [ 737.895946][ C1] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 737.909457][ C1] Call Trace: [ 737.912841][ C1] [ 737.915781][ C1] __schedule+0x10e9/0x6820 [ 737.920310][ C1] ? __pfx___schedule+0x10/0x10 [ 737.925246][ C1] ? find_held_lock+0x2b/0x80 [ 737.929942][ C1] ? schedule+0x2bf/0x390 [ 737.934268][ C1] schedule+0xdd/0x390 [ 737.938327][ C1] schedule_timeout+0x127/0x280 [ 737.943177][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 737.948567][ C1] ? __pfx_process_timeout+0x10/0x10 [ 737.953851][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 737.959650][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 737.965110][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 737.969866][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 737.975145][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 737.980679][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 737.985662][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 737.990924][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 737.996754][ C1] rcu_gp_kthread+0x179/0x230 [ 738.001469][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 738.006680][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 738.012498][ C1] ? __kthread_parkme+0x18c/0x230 [ 738.017518][ C1] ? kthread+0x13a/0x450 [ 738.021782][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 738.026975][ C1] kthread+0x370/0x450 [ 738.031035][ C1] ? __pfx_kthread+0x10/0x10 [ 738.035622][ C1] ret_from_fork+0x72b/0xd50 [ 738.040210][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 738.045315][ C1] ? __switch_to+0x800/0x1100 [ 738.049990][ C1] ? __pfx_kthread+0x10/0x10 [ 738.054574][ C1] ret_from_fork_asm+0x1a/0x30 [ 738.059349][ C1] [ 738.062355][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 738.068673][ C1] CPU: 1 UID: 0 PID: 13074 Comm: syz.2.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.079595][ C1] Tainted: [L]=SOFTLOCKUP [ 738.083905][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 738.094122][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 738.100195][ C1] Code: b6 5a 5c 00 48 89 df 5b e9 7d e5 61 00 be 03 00 00 00 5b e9 32 c2 f0 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 05 16 02 12 48 8b 34 24 65 48 8b 15 e1 15 02 [ 738.119830][ C1] RSP: 0018:ffffc9000595fa78 EFLAGS: 00000202 [ 738.125915][ C1] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffffff81fc0dbd [ 738.133873][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88804610ca00 [ 738.141832][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 738.149801][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 738.157762][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 738.165718][ C1] FS: 00007f412b1e36c0(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 738.174636][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 738.181226][ C1] CR2: 000000110c2a3d6f CR3: 0000000045dfe000 CR4: 00000000003526f0 [ 738.189220][ C1] Call Trace: [ 738.192509][ C1] [ 738.195427][ C1] smp_call_function_many_cond+0x587/0x1700 [ 738.201339][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 738.206386][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 738.212739][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 738.218150][ C1] ? __pfx___text_poke+0x10/0x10 [ 738.223106][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 738.228129][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 738.233253][ C1] ? yield_to+0x43f/0x9b0 [ 738.237589][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 738.243307][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 738.249552][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 738.255788][ C1] ? find_held_lock+0x2b/0x80 [ 738.260474][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 738.266443][ C1] jump_label_update+0x37a/0x550 [ 738.271377][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 738.277270][ C1] static_key_enable+0x1a/0x20 [ 738.282044][ C1] sched_core_get+0x8a/0xa0 [ 738.286553][ C1] sched_core_share_pid+0x406/0x9d0 [ 738.291902][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 738.297817][ C1] ? cap_task_prctl+0x104/0xa50 [ 738.302679][ C1] ? __pfx_sched_core_share_pid+0x10/0x10 [ 738.308434][ C1] ? static_key_count+0x5a/0x70 [ 738.313308][ C1] ? security_task_prctl+0x11c/0x160 [ 738.318630][ C1] __do_sys_prctl+0x6bd/0x2310 [ 738.323610][ C1] ? __pfx___do_sys_prctl+0x10/0x10 [ 738.328830][ C1] ? rcu_is_watching+0x12/0xc0 [ 738.333595][ C1] do_syscall_64+0x10b/0xf80 [ 738.338180][ C1] ? clear_bhb_loop+0x40/0x90 [ 738.342853][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.348744][ C1] RIP: 0033:0x7f412a39cdd9 [ 738.353332][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.373102][ C1] RSP: 002b:00007f412b1e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 738.381611][ C1] RAX: ffffffffffffffda RBX: 00007f412a615fa0 RCX: 00007f412a39cdd9 [ 738.389803][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 738.397802][ C1] RBP: 00007f412a432d69 R08: 0000000000000000 R09: 0000000000000000 [ 738.405795][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 738.413778][ C1] R13: 00007f412a616038 R14: 00007f412a615fa0 R15: 00007ffe72a66fc8 [ 738.421803][ C1]