last executing test programs: 2m46.640780354s ago: executing program 0 (id=219): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) 2m42.892569317s ago: executing program 0 (id=227): mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000200)='./file0/file0\x00', 0x81802, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m42.580677827s ago: executing program 0 (id=229): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x81, 0x0, 0xfffff00c}, {0x6, 0x80, 0x0, 0x1}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000080)=0x7, 0x4) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffc}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005002000010000000500"], 0x7c}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x0, 0x8, 0x21, 0x1, 0x10000000, 0x5, 0x9}}}, @common=@hbh={{0x48}, {0x3, 0x1, 0x0, [0x0, 0x9, 0x6, 0x3, 0x9, 0xa, 0x17d, 0x7, 0xff, 0x81, 0x0, 0xb99, 0x6, 0x300, 0x8, 0x7c04], 0xa}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x401, 0x80, 0x2a}, 0x18) 2m41.740505247s ago: executing program 0 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 2m40.63348224s ago: executing program 0 (id=235): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m40.082411071s ago: executing program 0 (id=240): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 2m38.524188081s ago: executing program 32 (id=240): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 22.994349146s ago: executing program 5 (id=622): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffff8a, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r5 = getpid() prlimit64(r5, 0xd, &(0x7f0000000080)={0x15c, 0x100000000}, &(0x7f00000000c0)) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) gettid() sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x1000000}, 0x0) 21.933916215s ago: executing program 5 (id=627): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) execve(0x0, &(0x7f0000000200)={[&(0x7f0000000100)='\x00', &(0x7f0000000140)='*U%{}^\'\x00', &(0x7f0000000180)='/#(+]\x00', &(0x7f00000001c0)='pids.current\x00']}, &(0x7f0000000280)={[0x0]}) fallocate(r1, 0x0, 0xfea000, 0x2000402) lseek(r1, 0x1, 0x3) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x7) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 16.364763903s ago: executing program 5 (id=634): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc, 0x2010, r2, 0xffff9000) 10.609710402s ago: executing program 2 (id=647): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x2, 0x10, 0x805, &(0x7f0000000000)="6caf"}, {0x2, 0x8, 0x1, &(0x7f0000000040)='\f'}, {0x0, 0x0, 0x80, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x7ff, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x200, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xf, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x70a, 0x0}, {0x3, 0x0, 0x1cf9571d, 0x0}, {0x2, 0x0, 0xe16, 0x0}, {0x4, 0x0, 0x9, 0x0}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000002e000900a7bd70000000000004000000460018004fbb52fa25a3b6668c2659071fb4dfcd54f6e857bbb92493a9b51bff3c6200da53426b3b7edc4c09d66183806bcb707bfbb5a55b957cff434fa924becf80d7e3d16d5317"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000019c0)) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@empty, @broadcast, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x10, 0x6, 0x10, {{0xc, 0x4, 0x2, 0x4, 0x30, 0x64, 0x0, 0x10, 0x2f, 0x0, @local, @multicast1, {[@end, @timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2}]}, @ssrr={0x89, 0xf, 0x5c, [@multicast2, @multicast2, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f00000002c0)={0x53c, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x274, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4612}, @ETHTOOL_A_BITSET_MASK={0xb4, 0x5, "59d073fc50b9e0369b37f39e49244266178a5f1f5e33e37abda5de7bb5f7c79205a40053be48b89b6429fc04a53eda82bd8e08260cdbe3a6f2e77deffbbef93fa807223ed845e0ff733369c1a20356c1e10f7d45f660ada9611fb9301b691f1d7a71281a9cbee05ae4b1f74f937b0bd0b757941b0a1e74016c10fe72e4b8a7fa2257d92338eea93626789238b75b7bc0ab8829b44a85476761ae797c691725ab44d1771971d1880d944ca23342ee686a"}, @ETHTOOL_A_BITSET_BITS={0x1ac, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',+-,-\x1b[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+*+{\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{-\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@@+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-\'+#./\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xee9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x240, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xaf, 0x5, "60e6d16c208c297f6125ff467c77fb2d95763d9d42d194ac27c47e544364f018be9a93eb1d60bfa386cc022bfc6ab8075c853674d81e2d6dd9053811bc700891df746dcdf66030256dccf1f3460ed6e43e6b2a091021576500afd97751a662abfaa12de17c1f04a8d98262f76a1087658b7da0dc2b8fb4af241233689a320e9946834126757af2991a425384a9059f6048e02d6264f97ff7dcfe76610734237cce0bc6290f17ebefac851c"}, @ETHTOOL_A_BITSET_MASK={0xac, 0x5, "c56b94a26c6ddf5c1c6f2f7977fea74ac2873c0190e605907013c1b30ee324f73376b189e031acbcd11386e9f4b1409e9f8479cd0a52b5685ba0125d994696a6554e0a65110c7d5c66420e7b0a5b168f1d0b67e30c5e268872a36427069dc5e66a97bca18369757d836ef0a37ee5d66ffc49a632a945057914bdff211af6cb70233f8db4d2e126faa08947bf9a032422856c3bbf04a86c44a26e9ff4392468f369a5a6e0e2941ddb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xda, 0x5, "96f64b6965be7e3c18c4e8b6f8835d08e7a114c9fb1e9ccf60703a4a35dc5575f03be50dc1c43cf07e156aa737103178112b7dfbc912cc2e38b350cdc7a0d47cf7bc6c49e4d61d95e19003c3f9a47f871f26313c33e89d6b8b311f25199975bf42c7ebf05389c13f7af763632d17d22f36ae36629fa99b229a670a0023195e3782bf6286e90ef055cb06a0c73595333dc23ba9572d5852683df82b62ae674bcf96c06233fd9ff5786d319c75a76ca83c67168f6a194612c4f4cdb3bb74c82110c9aef49b9bf0dc8da287a3e8a21aa6f3f4d2fc9cc455"}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x53c}}, 0xc0) 10.572658349s ago: executing program 4 (id=648): io_uring_setup(0x4685, 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x100) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954d661c4e85c3bd409af9b77444610960f86577adec70a7a1ce19ff1bf805a3dd0b5f2765f7f86398a766ff07c62f3a45e98473718993877bb0b0b55af14"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x55a, 0x12) 9.570457403s ago: executing program 3 (id=650): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000040)={{r3, r4+60000000}, {r1, r2+60000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r8, 0x0, r6, 0x0, 0xf3a, 0x0) tee(r5, 0xffffffffffffffff, 0xf3a, 0x4) write$binfmt_elf64(r7, &(0x7f0000000380)=ANY=[], 0x18c6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x0) 9.314971163s ago: executing program 4 (id=651): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) fsopen(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x141941) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 9.232134849s ago: executing program 3 (id=652): timer_create(0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) openat$sndseq(0xffffff9c, 0x0, 0x189200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 9.162671085s ago: executing program 2 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 8.410279828s ago: executing program 4 (id=655): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000206010300000000000000000000000037077a325ce1a00900020073797a300000000005000500000000000900020073797a31000000000d000300686173683a"], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.891081384s ago: executing program 1 (id=656): r0 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') getrandom(0x0, 0x0, 0xd86b31f1268e345c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x20, 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 7.697283387s ago: executing program 2 (id=657): fsopen(0x0, 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, 0x0, 0x12060) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) fcntl$setlease(r3, 0x400, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 7.420851708s ago: executing program 3 (id=658): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') recvmsg(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0xffffffffffffffff) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [{0x2, 0x1, "9595f429ae08"}]}}}}}}, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x4fe, &(0x7f00000009c0)) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/228, 0xe4}], 0x1, 0x21, 0x0) 6.961343579s ago: executing program 1 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27a99fdd470f5961}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0x2, 0x0, 0x0, 0x82) 6.740861394s ago: executing program 4 (id=660): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x50, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @ipv4, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2f, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@private0]}, @fragment]}}}}}}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sendto$unix(r2, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) connect$pppl2tp(r2, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x5, 0x3, 0x4, {0xa, 0x4e24, 0x5, @remote, 0xff000000}}}, 0x32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.182833237s ago: executing program 2 (id=661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000007, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 5.973414871s ago: executing program 1 (id=662): timer_delete(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x6c, 0xfffffffffffffffe) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r4, r3}, &(0x7f0000000240)=""/56, 0x38, 0x0) 5.267763961s ago: executing program 3 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20020800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 5.131497526s ago: executing program 2 (id=664): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001c80)={'dummy0\x00', &(0x7f0000001140)=@ethtool_cmd={0x48, 0x0, 0x2, 0xfff9, 0x8, 0x93, 0x40, 0x4, 0x6, 0x0, 0x7fffffff, 0x40, 0x9, 0x6a, 0x9, 0x5, [0x3, 0x3]}}) 3.565064271s ago: executing program 4 (id=665): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ef11896213"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f2a, 0x80002002, 0x10003, 0x8, 0x1000, 0xcc7, 0x0, 0x569b, 0x8, 0x406, 0x5, 0xfffffffd, 0x45, 0x800004f, 0x206, 0xfe, 0x0, 0x1a449, 0x9, 0x40000003, 0x8b, 0xcae4, 0x0, 0x20001e58, 0x8, 0xc69, 0x40, 0x6, 0x4088, 0x0, 0x9]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.564393546s ago: executing program 5 (id=675): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x8, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 3.564112014s ago: executing program 1 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$rtc(0xffffff9c, 0x0, 0xc2440, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 3.563857083s ago: executing program 3 (id=667): syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) munlockall() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000005c0)={0x48, 0x2, r3}) 2.426010626s ago: executing program 1 (id=668): munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) 1.937284962s ago: executing program 3 (id=669): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 1.088014987s ago: executing program 4 (id=670): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x40, @loopback, 0x6}}, 0x3, 0x6}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xd7f, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, 0x0) ptrace(0x4211, r0) socket$nl_route(0x10, 0x3, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x200, 0xb64, 0x4, 0x1}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.076469602s ago: executing program 5 (id=671): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4014000}, 0x90) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 1.002539874s ago: executing program 1 (id=672): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x460e, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') write(0xffffffffffffffff, &(0x7f0000000000), 0x0) 803.716858ms ago: executing program 2 (id=673): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x30) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r4, 0x0, 0x1, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 0s ago: executing program 5 (id=674): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x800) get_robust_list(r0, &(0x7f0000000300)=&(0x7f0000000240), 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e802000000000000290000000400"], 0x2e8}}], 0x2, 0x0) kernel console output (not intermixed with test programs): ck 0, async page read [ 140.381587][ T6551] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.403639][ T6551] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.429779][ T6551] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.437872][ T5870] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.458013][ T6551] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.475019][ T6551] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.500974][ T6551] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.514051][ T6551] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.531471][ T6551] ldm_validate_partition_table(): Disk read failed. [ 140.577304][ T6551] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.601999][ T5870] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.614065][ T6551] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.623820][ T5870] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.635143][ T6551] Dev loop6: unable to read RDB block 0 [ 140.635487][ T6551] loop6: unable to read partition table [ 140.655756][ T6551] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 140.677027][ T5870] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.694286][ T5182] ldm_validate_partition_table(): Disk read failed. [ 140.701907][ T5870] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 140.714577][ T5182] Dev loop6: unable to read RDB block 0 [ 140.727002][ T5182] loop6: unable to read partition table [ 140.784547][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.857378][ T6548] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.885246][ T6558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.894857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.137322][ T29] audit: type=1400 audit(1776497206.417:270): avc: denied { setopt } for pid=6564 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 141.166546][ T29] audit: type=1400 audit(1776497206.417:271): avc: denied { setattr } for pid=6564 comm="syz.3.172" name="ALG" dev="sockfs" ino=11547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 141.190235][ T29] audit: type=1400 audit(1776497206.437:272): avc: denied { write } for pid=6564 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 141.270610][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.392087][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.421890][ T24] usb 2-1: config 0 has no interfaces? [ 141.428197][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 141.490124][ T5884] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.898621][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.933006][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.951872][ T24] usb 2-1: config 0 descriptor?? [ 142.089981][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 142.104547][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.120134][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.193966][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.205916][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.217497][ T5884] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 142.227708][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.243500][ T5884] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 142.257323][ T5884] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 142.279005][ T5884] usb 4-1: Manufacturer: syz [ 142.293727][ T5884] usb 4-1: config 0 descriptor?? [ 142.430804][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.455333][ T29] audit: type=1400 audit(1776497207.737:273): avc: denied { create } for pid=6575 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 143.505154][ T5870] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 143.516359][ T5870] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input6 [ 143.547313][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.567642][ T29] audit: type=1400 audit(1776497208.807:274): avc: denied { getopt } for pid=6575 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 143.791194][ T5884] rc_core: IR keymap rc-hauppauge not found [ 143.826813][ T5884] Registered IR keymap rc-empty [ 143.844272][ T5870] usb 5-1: USB disconnect, device number 2 [ 143.850373][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 143.859884][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 143.930896][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 143.949034][ T29] audit: type=1400 audit(1776497209.227:275): avc: denied { mount } for pid=6584 comm="syz.4.177" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 144.114397][ T29] audit: type=1400 audit(1776497209.397:276): avc: denied { setopt } for pid=6583 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.223986][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 144.261294][ T29] audit: type=1400 audit(1776497209.427:277): avc: denied { append } for pid=6583 comm="syz.2.176" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.506475][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 144.580569][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.582191][ T10] usb 2-1: USB disconnect, device number 2 [ 144.601435][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.635628][ C0] mceusb 4-1:0.0: long-range (0x28) receiver active [ 144.642729][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.670120][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.706179][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.740194][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.773895][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.820287][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.862307][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.890132][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.924246][ T5884] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.105126][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 145.477821][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.912669][ T5884] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 145.921780][ T5884] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x28 active) [ 145.937442][ T5884] usb 4-1: USB disconnect, device number 5 [ 145.984379][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.004138][ T29] audit: type=1400 audit(1776497211.267:278): avc: denied { name_bind } for pid=6606 comm="syz.2.184" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 146.130204][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 146.154721][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.159432][ T29] audit: type=1400 audit(1776497211.437:279): avc: denied { create } for pid=6613 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.188162][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 146.272337][ T6617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.281827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.291442][ T6617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.299742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.309058][ T6617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.317568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.326356][ T6617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.334683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.343413][ T6617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.811805][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 146.831166][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.845871][ T24] usb 5-1: config 0 descriptor?? [ 146.860311][ T6598] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 146.877327][ T24] hub 5-1:0.0: USB hub found [ 147.148496][ T24] hub 5-1:0.0: 1 port detected [ 147.148889][ T6622] tipc: Enabled bearer , priority 0 [ 147.174319][ T29] audit: type=1400 audit(1776497212.457:280): avc: denied { read write } for pid=6624 comm="syz.1.190" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.444771][ T6622] syzkaller0: entered promiscuous mode [ 147.558887][ T6622] syzkaller0: entered allmulticast mode [ 147.589122][ T29] audit: type=1400 audit(1776497212.517:281): avc: denied { open } for pid=6624 comm="syz.1.190" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.636730][ T29] audit: type=1400 audit(1776497212.617:282): avc: denied { ioctl } for pid=6624 comm="syz.1.190" path="/dev/sg0" dev="devtmpfs" ino=718 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.684476][ T6629] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 147.704788][ T6622] tipc: Resetting bearer [ 147.729418][ T6621] tipc: Resetting bearer [ 147.746980][ T6621] tipc: Disabling bearer [ 147.913516][ T6634] xt_nat: multiple ranges no longer supported [ 148.022941][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.079627][ T5870] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 148.271968][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 148.275069][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 148.290539][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.306216][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.316670][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.323681][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 148.342303][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.374804][ T24] usb 1-1: config 0 descriptor?? [ 148.409246][ T29] audit: type=1400 audit(1776497213.687:283): avc: denied { setopt } for pid=6639 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.445729][ T29] audit: type=1400 audit(1776497213.707:284): avc: denied { connect } for pid=6639 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.480907][ T29] audit: type=1400 audit(1776497213.717:285): avc: denied { ioctl } for pid=6639 comm="syz.3.194" path="socket:[11780]" dev="sockfs" ino=11780 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.626957][ T29] audit: type=1400 audit(1776497213.897:286): avc: denied { name_bind } for pid=6626 comm="syz.0.191" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 148.742050][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 148.751025][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 149.030386][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 149.036416][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 149.048988][ T24] usb 1-1: USB disconnect, device number 3 [ 149.243666][ T5884] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 149.595599][ T5884] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 149.626587][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.651524][ T5884] usb 4-1: Product: syz [ 149.660891][ T5884] usb 4-1: Manufacturer: syz [ 149.675505][ T5884] usb 4-1: SerialNumber: syz [ 149.687618][ T29] audit: type=1400 audit(1776497214.967:287): avc: denied { read } for pid=6658 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.724157][ T5884] usb 4-1: config 0 descriptor?? [ 149.779819][ T42] usb 5-1: USB disconnect, device number 3 [ 150.062645][ T5884] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 150.973165][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 151.083572][ T5877] net_ratelimit: 2047 callbacks suppressed [ 151.083596][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.273049][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 151.301379][ T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 151.311001][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 151.323328][ T9] usb 3-1: config 220 has no interface number 2 [ 151.329709][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 151.343631][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 151.350781][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 151.358031][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 151.367757][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 151.384425][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.405155][ T9] usb 3-1: Product: syz [ 151.414728][ T9] usb 3-1: Manufacturer: syz [ 151.426583][ T9] usb 3-1: SerialNumber: syz [ 151.631741][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.804597][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.823501][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.206700][ T5884] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 152.251632][ T5884] usb 4-1: USB disconnect, device number 6 [ 152.268135][ T9] usb 3-1: selecting invalid altsetting 0 [ 152.315563][ T9] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 152.344681][ T9] uvcvideo 3-1:220.0: No valid video chain found. [ 152.394373][ T9] usb 3-1: selecting invalid altsetting 0 [ 152.417023][ T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 152.457803][ T9] usb 3-1: USB disconnect, device number 2 [ 152.632926][ T6690] syzkaller0: entered promiscuous mode [ 152.659506][ T6690] syzkaller0: entered allmulticast mode [ 152.665770][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.910122][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.954810][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 152.954831][ T29] audit: type=1400 audit(1776497218.237:290): avc: denied { setopt } for pid=6692 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.117092][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.417229][ T29] audit: type=1400 audit(1776497219.697:291): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 155.145027][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.230890][ T29] audit: type=1400 audit(1776497220.517:292): avc: denied { create } for pid=6705 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 155.896649][ T29] audit: type=1400 audit(1776497221.177:293): avc: denied { read write } for pid=6705 comm="syz.0.213" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 155.989730][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.003494][ T29] audit: type=1400 audit(1776497221.177:294): avc: denied { open } for pid=6705 comm="syz.0.213" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 156.095442][ T29] audit: type=1400 audit(1776497221.297:295): avc: denied { ioctl } for pid=6705 comm="syz.0.213" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 156.182308][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.588028][ T5870] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.638247][ T29] audit: type=1400 audit(1776497221.917:296): avc: denied { bind } for pid=6731 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.118401][ T5870] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.154740][ T5870] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 157.203782][ T5870] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.249009][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.295671][ T6727] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.389046][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.863149][ T5870] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.420865][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.554304][ T5857] usb 1-1: USB disconnect, device number 4 [ 159.124311][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.552783][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.095608][ T29] audit: type=1400 audit(1776497225.377:297): avc: denied { read write } for pid=6756 comm="syz.0.227" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 160.143007][ T29] audit: type=1400 audit(1776497225.377:298): avc: denied { open } for pid=6756 comm="syz.0.227" path="/39/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 160.585131][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.777220][ T6771] xt_hashlimit: max too large, truncated to 1048576 [ 160.932641][ T6771] xt_hashlimit: overflow, rate too high: 0 [ 161.040549][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.464700][ T6781] ======================================================= [ 161.464700][ T6781] WARNING: The mand mount option has been deprecated and [ 161.464700][ T6781] and is ignored by this kernel. Remove the mand [ 161.464700][ T6781] option from the mount to silence this warning. [ 161.464700][ T6781] ======================================================= [ 161.523699][ T29] audit: type=1400 audit(1776497226.787:299): avc: denied { mount } for pid=6778 comm="syz.0.233" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 161.620959][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.745941][ T29] audit: type=1400 audit(1776497226.797:300): avc: denied { mounton } for pid=6778 comm="syz.0.233" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 162.188532][ T29] audit: type=1400 audit(1776497227.467:301): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 162.335763][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.705765][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.511901][ T29] audit: type=1400 audit(1776497228.787:302): avc: denied { create } for pid=6798 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 163.788759][ T6797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.237'. [ 163.825861][ T468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.903863][ T29] audit: type=1400 audit(1776497229.167:303): avc: denied { bind } for pid=6798 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 164.077449][ T6805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6805 comm=syz.3.237 [ 164.173797][ T468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.194364][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.318633][ T468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.497027][ T29] audit: type=1400 audit(1776497229.757:304): avc: denied { block_suspend } for pid=6807 comm="syz.2.243" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 164.965477][ T29] audit: type=1400 audit(1776497230.247:305): avc: denied { remount } for pid=6817 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 165.097162][ T29] audit: type=1400 audit(1776497230.377:306): avc: denied { listen } for pid=6819 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.158636][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.169450][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.178680][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.191420][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.202824][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.220983][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.309706][ T468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.358972][ T5884] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 165.380159][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.490169][ T5884] usb 5-1: device descriptor read/64, error -71 [ 165.525166][ T29] audit: type=1400 audit(1776497230.787:307): avc: denied { write } for pid=6824 comm="syz.3.247" path="socket:[12097]" dev="sockfs" ino=12097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 166.399160][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.660269][ T5884] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 166.890674][ T5884] usb 5-1: device descriptor read/64, error -71 [ 167.030300][ T5884] usb usb5-port1: attempt power cycle [ 167.065711][ T6822] chnl_net:caif_netlink_parms(): no params data found [ 167.142544][ T29] audit: type=1400 audit(1776497232.427:308): avc: denied { append } for pid=6849 comm="syz.3.253" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.205062][ T29] audit: type=1400 audit(1776497232.447:309): avc: denied { search } for pid=5478 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.227303][ T29] audit: type=1400 audit(1776497232.447:310): avc: denied { search } for pid=5478 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.253597][ T29] audit: type=1400 audit(1776497232.447:311): avc: denied { search } for pid=5478 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.278746][ T29] audit: type=1400 audit(1776497232.447:312): avc: denied { read } for pid=5478 comm="dhcpcd" name="n100" dev="tmpfs" ino=3030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.303570][ T50] Bluetooth: hci0: command tx timeout [ 167.316825][ T29] audit: type=1400 audit(1776497232.447:313): avc: denied { open } for pid=5478 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.361475][ T29] audit: type=1400 audit(1776497232.447:314): avc: denied { getattr } for pid=5478 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.401256][ T5884] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 167.420625][ T5884] usb 5-1: device descriptor read/8, error -71 [ 167.518386][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.585029][ T29] audit: type=1400 audit(1776497232.867:315): avc: denied { read open } for pid=6861 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.054848][ T29] audit: type=1400 audit(1776497232.867:316): avc: denied { getattr } for pid=6861 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.109998][ T5884] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 168.143443][ T5884] usb 5-1: device descriptor read/8, error -71 [ 168.270266][ T5884] usb usb5-port1: unable to enumerate USB device [ 168.421912][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.587894][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.592821][ T468] bond0 (unregistering): Released all slaves [ 168.659246][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.679889][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.707029][ T6822] bridge_slave_0: entered allmulticast mode [ 168.755825][ T6822] bridge_slave_0: entered promiscuous mode [ 168.801526][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.844976][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.872334][ T6822] bridge_slave_1: entered allmulticast mode [ 168.895820][ T6822] bridge_slave_1: entered promiscuous mode [ 169.025614][ T6877] syzkaller0: entered promiscuous mode [ 169.053511][ T6877] syzkaller0: entered allmulticast mode [ 169.086680][ T468] tipc: Left network mode [ 169.179001][ T5478] 8021q: adding VLAN 0 to HW filter on device eth1 [ 169.379997][ T50] Bluetooth: hci0: command tx timeout [ 169.431523][ T6906] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 169.539810][ T6906] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 169.605484][ T6906] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 169.623065][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.727921][ T6906] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 169.764643][ T6906] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 169.877831][ T6906] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 169.945007][ T6906] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 170.158600][ T6906] kvm: kvm [6905]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 170.260314][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.661590][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.590176][ T50] Bluetooth: hci0: command tx timeout [ 171.942447][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.953401][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.322381][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 172.322397][ T29] audit: type=1400 audit(1776497237.607:323): avc: denied { write } for pid=6925 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 172.489271][ T29] audit: type=1400 audit(1776497237.767:324): avc: denied { sqpoll } for pid=6930 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 172.508696][ T29] audit: type=1400 audit(1776497237.777:325): avc: denied { mount } for pid=6930 comm="syz.1.268" name="/" dev="autofs" ino=12557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 172.576221][ T29] audit: type=1400 audit(1776497237.777:326): avc: denied { read } for pid=6930 comm="syz.1.268" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 172.599861][ T29] audit: type=1400 audit(1776497237.777:327): avc: denied { open } for pid=6930 comm="syz.1.268" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 172.626156][ T29] audit: type=1400 audit(1776497237.787:328): avc: denied { ioctl } for pid=6930 comm="syz.1.268" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 172.655281][ T29] audit: type=1400 audit(1776497237.897:329): avc: denied { bind } for pid=6936 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.690338][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.853065][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.868148][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 172.900788][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 172.910160][ T9] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 172.934096][ T9] usb 4-1: Product: syz [ 172.947322][ T9] usb 4-1: SerialNumber: syz [ 172.963545][ T9] usb 4-1: config 0 descriptor?? [ 173.000715][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.571396][ T6822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.589873][ T6822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.620568][ T50] Bluetooth: hci0: command tx timeout [ 173.816094][ T29] audit: type=1400 audit(1776497239.097:330): avc: denied { setopt } for pid=6949 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.856567][ T6822] team0: Port device team_slave_0 added [ 173.857809][ T9] usb 4-1: USB disconnect, device number 7 [ 173.873699][ T6822] team0: Port device team_slave_1 added [ 174.074262][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.957322][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.965150][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.997080][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.039983][ T6822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.135879][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.147482][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.158112][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.189995][ T6822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.241199][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 175.610571][ T29] audit: type=1400 audit(1776497240.897:331): avc: denied { create } for pid=6960 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 175.670670][ T468] hsr_slave_0: left promiscuous mode [ 175.798258][ T29] audit: type=1400 audit(1776497241.077:332): avc: denied { sys_admin } for pid=6960 comm="syz.4.275" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 175.802002][ T468] hsr_slave_1: left promiscuous mode [ 176.275039][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.325179][ T468] veth1_macvtap: left promiscuous mode [ 176.332442][ T468] veth0_macvtap: left promiscuous mode [ 176.338298][ T468] veth1_vlan: left promiscuous mode [ 176.346169][ T468] veth0_vlan: left promiscuous mode [ 177.531172][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.024019][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.065747][ T29] audit: type=1400 audit(1776497243.347:333): avc: denied { write } for pid=6996 comm="syz.3.282" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.124067][ T29] audit: type=1400 audit(1776497243.347:334): avc: denied { open } for pid=6996 comm="syz.3.282" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.808148][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.096024][ T6822] hsr_slave_0: entered promiscuous mode [ 179.106890][ T6822] hsr_slave_1: entered promiscuous mode [ 179.125638][ T6822] debugfs: 'hsr0' already exists in 'hsr' [ 179.145472][ T6822] Cannot create hsr debugfs directory [ 180.098979][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.136686][ T29] audit: type=1400 audit(1776497245.407:335): avc: denied { read } for pid=7010 comm="syz.2.285" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 180.242974][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.267580][ T29] audit: type=1400 audit(1776497245.447:336): avc: denied { write } for pid=7010 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 180.400171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 180.666040][ T6822] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 180.693808][ T6822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.710869][ T5933] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 180.716546][ T6822] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 180.778840][ T6822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.801598][ T6822] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 180.833150][ T6822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.925234][ T6822] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 180.957705][ T6822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.970591][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 180.984856][ T5933] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 180.994348][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.427410][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.456937][ T29] audit: type=1400 audit(1776497246.337:337): avc: denied { write } for pid=7039 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 181.477681][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.512989][ T5933] usb 2-1: Product: syz [ 181.518430][ T6822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.528685][ T5933] usb 2-1: Manufacturer: syz [ 181.552388][ T5933] usb 2-1: SerialNumber: syz [ 181.572806][ T6822] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.595112][ T5933] usb 2-1: config 0 descriptor?? [ 181.599305][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.607210][ T468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.639807][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.647047][ T468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.906749][ T5478] 8021q: adding VLAN 0 to HW filter on device eth2 [ 181.942087][ T29] audit: type=1400 audit(1776497247.227:338): avc: denied { ioctl } for pid=7053 comm="syz.2.293" path="net:[4026532849]" dev="nsfs" ino=4026532849 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 181.995639][ T5933] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 182.045720][ T5933] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 182.112121][ T5933] usb 2-1: USB disconnect, device number 3 [ 182.293055][ T6822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.350637][ T798] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 182.502753][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.511208][ T798] usb 3-1: Using ep0 maxpacket: 16 [ 182.528915][ T798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.549325][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.598795][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.632133][ T798] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 182.664246][ T798] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 182.696032][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.993881][ T798] usb 3-1: config 0 descriptor?? [ 183.540735][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.701799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.904242][ T5478] 8021q: adding VLAN 0 to HW filter on device eth3 [ 183.928111][ T6822] veth0_vlan: entered promiscuous mode [ 183.966715][ T6822] veth1_vlan: entered promiscuous mode [ 184.185802][ T798] usbhid 3-1:0.0: can't add hid device: -71 [ 184.346472][ T6822] veth0_macvtap: entered promiscuous mode [ 184.367336][ T798] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.398106][ T798] usb 3-1: USB disconnect, device number 3 [ 184.398371][ T6822] veth1_macvtap: entered promiscuous mode [ 184.918766][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.969017][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.994118][ T29] audit: type=1400 audit(1776497250.277:339): avc: denied { write } for pid=7109 comm="syz.3.299" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.029801][ T7110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.041042][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.049427][ T7110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.064425][ T7110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.079188][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.087208][ T7111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.104531][ T7111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.113135][ T7003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.124518][ T7003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.173151][ T7003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.228506][ T7003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.452999][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.484419][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.580349][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.591516][ T29] audit: type=1326 audit(1776497250.877:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 185.602835][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.650772][ T29] audit: type=1326 audit(1776497250.877:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 185.660347][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 185.871405][ T29] audit: type=1326 audit(1776497250.907:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 185.897806][ T29] audit: type=1326 audit(1776497250.907:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 185.921488][ T29] audit: type=1326 audit(1776497250.907:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 186.010430][ T29] audit: type=1326 audit(1776497250.917:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 186.039633][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.079967][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 186.095519][ T29] audit: type=1326 audit(1776497250.917:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 186.099827][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 186.119504][ T5478] 8021q: adding VLAN 0 to HW filter on device eth4 [ 186.180302][ T29] audit: type=1326 audit(1776497250.917:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 186.222469][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.246787][ T10] usb 2-1: Product: syz [ 186.259785][ T10] usb 2-1: Manufacturer: syz [ 186.261054][ T29] audit: type=1326 audit(1776497250.917:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 186.316644][ T10] usb 2-1: SerialNumber: syz [ 186.369991][ T10] usb 2-1: config 0 descriptor?? [ 186.393378][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 186.633993][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 186.644402][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 186.654063][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 186.663563][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 186.673523][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 187.747284][ T7150] kvm: kvm [7148]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xc880 [ 187.761182][ T7150] kvm: kvm [7148]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 187.832338][ T7150] kvm: kvm [7148]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa088 [ 187.877180][ T7150] kvm: kvm [7148]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd1a8 [ 187.919218][ T7150] kvm: kvm [7148]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 188.554576][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 189.101012][ T10] gspca_ov534_9: reg_r err -110 [ 189.114105][ T5877] net_ratelimit: 3 callbacks suppressed [ 189.114122][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.140331][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.429966][ T10] gspca_ov534_9: Unknown sensor 0000 [ 189.430048][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 189.525398][ T10] usb 2-1: USB disconnect, device number 4 [ 189.840512][ T798] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 190.091860][ T798] usb 3-1: Using ep0 maxpacket: 16 [ 190.105759][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.127255][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.140763][ T798] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 190.154072][ T798] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 190.165149][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.183221][ T798] usb 3-1: config 0 descriptor?? [ 190.192198][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.278245][ T7183] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 190.414702][ T7180] kvm: pic: level sensitive irq not supported [ 190.414848][ T7180] kvm: pic: single mode not supported [ 190.440833][ T7180] kvm: pic: single mode not supported [ 190.446341][ T7180] kvm: pic: level sensitive irq not supported [ 190.453507][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 190.453522][ T29] audit: type=1400 audit(1776497255.737:358): avc: denied { create } for pid=7188 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.454858][ T7180] kvm: pic: single mode not supported [ 190.468397][ T7189] netlink: 'syz.3.316': attribute type 1 has an invalid length. [ 190.501229][ T7190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.508587][ T7190] IPv6: NLM_F_CREATE should be set when creating new route [ 191.429594][ T798] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 191.466172][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.488414][ T798] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 191.518950][ T798] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 191.548229][ T798] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 191.591225][ T798] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 191.606870][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.616518][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.639238][ T798] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 191.676228][ T798] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 191.721837][ T798] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 191.759614][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.783206][ T798] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 191.817017][ T798] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 191.984634][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.005756][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.398644][ T29] audit: type=1400 audit(1776497257.647:359): avc: denied { ioctl } for pid=7198 comm="syz.4.319" path="socket:[13297]" dev="sockfs" ino=13297 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.158268][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.226553][ T798] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input8 [ 193.351621][ T29] audit: type=1400 audit(1776497258.637:360): avc: denied { read } for pid=5167 comm="acpid" name="event4" dev="devtmpfs" ino=2862 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.399807][ T798] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 193.423117][ T29] audit: type=1400 audit(1776497258.637:361): avc: denied { open } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2862 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.489247][ T798] usb 3-1: USB disconnect, device number 4 [ 193.521048][ T29] audit: type=1400 audit(1776497258.717:362): avc: denied { ioctl } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2862 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.749283][ T7232] fido_id[7232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 193.951116][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.957538][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.984576][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.996465][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.028476][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.043005][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.182963][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.237998][ T7250] netlink: 'syz.4.327': attribute type 1 has an invalid length. [ 194.289796][ T7250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.316370][ T29] audit: type=1400 audit(1776497259.537:363): avc: denied { create } for pid=7247 comm="syz.5.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 194.421075][ T7256] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.325'. [ 195.352132][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.466470][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.653788][ T29] audit: type=1400 audit(1776497259.537:364): avc: denied { accept } for pid=7247 comm="syz.5.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 195.814375][ T7250] vlan2: entered allmulticast mode [ 195.829849][ T7250] bond1: entered allmulticast mode [ 195.876247][ T7261] mmap: syz.1.329 (7261) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 195.921179][ T7252] bond1: (slave geneve2): making interface the new active one [ 195.946559][ T7252] geneve2: entered allmulticast mode [ 195.961664][ T7252] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 196.027277][ T5133] Bluetooth: hci1: command 0x0406 tx timeout [ 196.033511][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 196.039586][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 196.056318][ T7262] tipc: Enabled bearer , priority 0 [ 196.251142][ T7263] syzkaller0: entered promiscuous mode [ 196.467438][ T7263] syzkaller0: entered allmulticast mode [ 196.506893][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.683256][ T7262] tipc: Resetting bearer [ 196.844333][ T7258] tipc: Resetting bearer [ 197.192651][ T7258] tipc: Disabling bearer [ 198.420368][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.204544][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.213501][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.222650][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.706773][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.715779][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.723901][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.741001][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.773169][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.879121][ T29] audit: type=1400 audit(1776497265.157:365): avc: denied { read write } for pid=7297 comm="syz.3.338" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 199.932695][ T29] audit: type=1400 audit(1776497265.157:366): avc: denied { open } for pid=7297 comm="syz.3.338" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 199.995201][ T29] audit: type=1400 audit(1776497265.237:367): avc: denied { ioctl } for pid=7296 comm="syz.5.337" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.740219][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.987479][ T7305] vlan2: entered promiscuous mode [ 201.030836][ T7309] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 201.044798][ T7305] vlan2: entered allmulticast mode [ 201.054244][ T29] audit: type=1400 audit(1776497266.337:368): avc: denied { module_request } for pid=7306 comm="syz.4.339" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 201.063475][ T7305] hsr_slave_1: entered allmulticast mode [ 201.111839][ T7307] tipc: Enabling of bearer rejected, failed to enable media [ 201.170436][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.340'. [ 201.185049][ T7309] bond1: entered promiscuous mode [ 201.200993][ T7309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.415311][ T7314] ipvlan2: entered allmulticast mode [ 201.424115][ T7314] bond1: entered allmulticast mode [ 201.466051][ T7319] bond1: (slave bridge1): making interface the new active one [ 201.474487][ T7319] bridge1: entered promiscuous mode [ 201.484735][ T7319] bridge1: entered allmulticast mode [ 201.832450][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.393205][ T29] audit: type=1400 audit(1776497267.167:369): avc: denied { ioctl } for pid=7329 comm="syz.3.342" path="socket:[14294]" dev="sockfs" ino=14294 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 202.432678][ T7319] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 203.709650][ T7352] macsec1: entered promiscuous mode [ 203.742528][ T7352] virt_wifi0: entered promiscuous mode [ 204.512631][ T24] net_ratelimit: 9 callbacks suppressed [ 204.512650][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.816093][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.353037][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.455518][ T7389] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 206.618014][ T29] audit: type=1400 audit(1776497271.897:370): avc: denied { read append } for pid=7390 comm="syz.3.357" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 206.830080][ T29] audit: type=1400 audit(1776497271.897:371): avc: denied { open } for pid=7390 comm="syz.3.357" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 206.918676][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.931604][ T7396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'. [ 206.974960][ T29] audit: type=1400 audit(1776497272.087:372): avc: denied { ioctl } for pid=7390 comm="syz.3.357" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 207.148332][ T7393] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 207.169210][ T6688] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 207.191652][ T7396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.310831][ T48] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 207.950320][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.064782][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 208.081673][ T6688] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.090142][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 208.090770][ T6688] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.110107][ T6688] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.120492][ T6688] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.135158][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 208.153711][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 208.492825][ T24] libceph: connect (1)[c::]:6789 error -101 [ 208.540440][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 208.575368][ T7425] ceph: No mds server is up or the cluster is laggy [ 208.729552][ T29] audit: type=1400 audit(1776497274.007:373): avc: denied { execute } for pid=7433 comm="syz.4.364" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 208.981973][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.089626][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'. [ 209.301670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.316565][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.711348][ T29] audit: type=1400 audit(1776497274.997:374): avc: denied { write } for pid=7446 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.168221][ T5870] net_ratelimit: 1 callbacks suppressed [ 210.168241][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.183987][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.351311][ T6688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.461681][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.564367][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.293029][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.450277][ T7204] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 211.891234][ T7204] usb 6-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 211.985926][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 211.996027][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 212.016091][ T7204] usb 6-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.029774][ T7204] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 212.039063][ T7204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.060158][ T7204] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 212.573516][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.658385][ T42] usb 6-1: USB disconnect, device number 2 [ 212.775755][ T7492] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 213.632555][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.654013][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.600195][ T29] audit: type=1400 audit(1776497279.887:375): avc: denied { bind } for pid=7518 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.671002][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.719496][ T29] audit: type=1400 audit(1776497279.887:376): avc: denied { node_bind } for pid=7518 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 214.720190][ T7527] syzkaller0: entered promiscuous mode [ 214.834805][ T7527] syzkaller0: entered allmulticast mode [ 215.955698][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.716823][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.874763][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.469936][ T29] audit: type=1400 audit(1776497283.577:377): avc: denied { firmware_load } for pid=7558 comm="syz.5.392" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 218.680704][ T7560] syz.5.392 (7560) used greatest stack depth: 18736 bytes left [ 218.875031][ T7562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.393'. [ 218.900938][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.340721][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.918324][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.940562][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.019096][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.953008][ T29] audit: type=1400 audit(1776497287.207:378): avc: denied { read } for pid=7592 comm="syz.3.402" name="usbmon2" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 222.014711][ T29] audit: type=1400 audit(1776497287.207:379): avc: denied { open } for pid=7592 comm="syz.3.402" path="/dev/usbmon2" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 222.020366][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.824016][ T7600] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 222.832041][ T7600] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 222.841073][ T7600] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 222.848835][ T7600] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 222.994813][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.004061][ T29] audit: type=1400 audit(1776497288.087:380): avc: denied { create } for pid=7595 comm="syz.2.403" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.233175][ T29] audit: type=1400 audit(1776497288.507:381): avc: denied { unlink } for pid=5812 comm="syz-executor" name="file0" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.567866][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.849216][ T29] audit: type=1400 audit(1776497289.107:382): avc: denied { mount } for pid=7605 comm="syz.4.406" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 224.289971][ T5870] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 224.295442][ T7617] overlayfs: missing 'lowerdir' [ 224.602524][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.691427][ T5870] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.773794][ T5870] usb 4-1: config 0 has no interface number 0 [ 224.787065][ T5870] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.809121][ T5870] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.235467][ T5870] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.248561][ T5870] usb 4-1: config 0 interface 1 has no altsetting 0 [ 225.255883][ T5870] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 225.265012][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.294448][ T5870] usb 4-1: config 0 descriptor?? [ 225.620837][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.982482][ T5870] hid (null): invalid report_count 252767622 [ 226.020373][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.185659][ T5870] uclogic 0003:145F:0212.0002: pen parameters not found [ 226.207214][ T5870] uclogic 0003:145F:0212.0002: interface is invalid, ignoring [ 226.424273][ T29] audit: type=1400 audit(1776497291.707:383): avc: denied { write } for pid=7609 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 226.553510][ T5884] usb 4-1: USB disconnect, device number 8 [ 226.604307][ T29] audit: type=1400 audit(1776497291.877:384): avc: denied { bind } for pid=7635 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.660810][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.618337][ T29] audit: type=1400 audit(1776497291.877:385): avc: denied { read } for pid=7635 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 227.880490][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.882521][ T29] audit: type=1400 audit(1776497291.927:386): avc: denied { read append } for pid=7642 comm="syz.5.415" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 227.987492][ T29] audit: type=1400 audit(1776497291.927:387): avc: denied { open } for pid=7642 comm="syz.5.415" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 228.507509][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.900862][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.062437][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.148665][ T29] audit: type=1400 audit(1776497294.427:388): avc: denied { ioctl } for pid=7664 comm="syz.5.421" path="socket:[15872]" dev="sockfs" ino=15872 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 230.491227][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.575320][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.110624][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.525828][ T7701] mkiss: ax0: crc mode is auto. [ 232.550606][ T29] audit: type=1400 audit(1776497297.837:389): avc: denied { bind } for pid=7703 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.582607][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.601879][ T29] audit: type=1400 audit(1776497297.887:390): avc: denied { mount } for pid=7700 comm="syz.1.430" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 232.715709][ T29] audit: type=1400 audit(1776497297.997:391): avc: denied { read } for pid=5478 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 233.056243][ T29] audit: type=1400 audit(1776497298.337:392): avc: denied { execute } for pid=7710 comm="syz.1.433" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 234.028937][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.104111][ T29] audit: type=1400 audit(1776497299.387:393): avc: denied { getopt } for pid=7713 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 234.718924][ T50] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 235.074201][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.581121][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.642374][ T29] audit: type=1400 audit(1776497300.927:394): avc: denied { transfer } for pid=7724 comm="syz.5.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 236.716912][ T29] audit: type=1400 audit(1776497301.717:395): avc: denied { ioctl } for pid=7731 comm="syz.2.438" path="socket:[15146]" dev="sockfs" ino=15146 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 236.753181][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.045009][ T29] audit: type=1400 audit(1776497302.307:396): avc: denied { create } for pid=7739 comm="syz.5.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 237.145944][ T29] audit: type=1400 audit(1776497302.347:397): avc: denied { read write } for pid=7739 comm="syz.5.442" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 237.210549][ T29] audit: type=1400 audit(1776497302.357:398): avc: denied { open } for pid=7739 comm="syz.5.442" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 237.382398][ T798] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 237.510193][ T5870] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 237.570797][ T798] usb 3-1: Using ep0 maxpacket: 8 [ 237.595241][ T798] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 237.613754][ T798] usb 3-1: config 0 has no interface number 0 [ 237.653719][ T798] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.688336][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.690566][ T798] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 237.721762][ T5870] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 237.736262][ T798] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.745450][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.779944][ T798] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.780855][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.810057][ T798] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 237.829694][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.837253][ T5870] usb 2-1: config 0 descriptor?? [ 237.856098][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 237.867689][ T798] usb 3-1: config 0 descriptor?? [ 237.960672][ T798] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 238.082474][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.5.447'. [ 238.119226][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.507586][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00 [ 238.535320][ T5870] pwc: recv_control_msg error -32 req 02 val 2700 [ 238.683604][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.804994][ T29] audit: type=1400 audit(1776497304.087:399): avc: denied { read } for pid=7766 comm="syz.5.449" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 238.833868][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 238.865795][ T29] audit: type=1400 audit(1776497304.087:400): avc: denied { open } for pid=7766 comm="syz.5.449" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 238.890980][ T29] audit: type=1400 audit(1776497304.087:401): avc: denied { ioctl } for pid=7766 comm="syz.5.449" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 239.619482][ T5891] usb 3-1: USB disconnect, device number 5 [ 239.676510][ T5891] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 239.676818][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.692208][ T5870] pwc: recv_control_msg error -32 req 04 val 1000 [ 239.699240][ T5870] pwc: recv_control_msg error -32 req 04 val 1300 [ 239.706855][ T5870] pwc: recv_control_msg error -32 req 04 val 1400 [ 239.718304][ T5870] pwc: recv_control_msg error -71 req 02 val 2000 [ 239.725187][ T5870] pwc: recv_control_msg error -71 req 02 val 2100 [ 239.732029][ T5870] pwc: recv_control_msg error -71 req 04 val 1500 [ 240.080339][ T5870] pwc: recv_control_msg error -71 req 02 val 2500 [ 240.457289][ T5870] pwc: recv_control_msg error -71 req 02 val 2400 [ 240.464946][ T5870] pwc: recv_control_msg error -71 req 02 val 2600 [ 240.472604][ T5870] pwc: recv_control_msg error -71 req 02 val 2900 [ 240.597736][ T29] audit: type=1400 audit(1776497305.477:402): avc: denied { setopt } for pid=7774 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 240.647543][ T5870] pwc: recv_control_msg error -71 req 02 val 2800 [ 240.733515][ T5870] pwc: recv_control_msg error -71 req 04 val 1100 [ 240.741680][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.860801][ T5870] pwc: recv_control_msg error -71 req 04 val 1200 [ 241.104780][ T7787] netlink: 'syz.4.453': attribute type 1 has an invalid length. [ 241.134936][ T5870] pwc: Registered as video103. [ 241.159279][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 241.197074][ T7788] netlink: 'syz.5.451': attribute type 4 has an invalid length. [ 241.253134][ T7794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7794 comm=syz.4.453 [ 241.265853][ T5870] usb 2-1: USB disconnect, device number 5 [ 241.378192][ T7787] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.899492][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.923080][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.060504][ T7791] bond2: (slave gretap1): making interface the new active one [ 242.087132][ T7791] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 242.944673][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.152389][ T7815] netlink: 44 bytes leftover after parsing attributes in process `syz.1.458'. [ 243.163426][ T29] audit: type=1400 audit(1776497308.447:403): avc: denied { setopt } for pid=7814 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.898805][ T7815] netlink: 'syz.1.458': attribute type 15 has an invalid length. [ 243.923625][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 244.008491][ T7778] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 244.008554][ T7815] netlink: 'syz.1.458': attribute type 15 has an invalid length. [ 244.020787][ T7778] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 244.051116][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.053231][ T7778] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 244.108815][ T7778] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 244.123803][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 244.999932][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.563355][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.597128][ T3502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.608032][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.617584][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.660362][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.995407][ T29] audit: type=1400 audit(1776497312.277:404): avc: denied { create } for pid=7865 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 247.343346][ T29] audit: type=1400 audit(1776497312.277:405): avc: denied { ioctl } for pid=7865 comm="syz.1.470" path="socket:[15360]" dev="sockfs" ino=15360 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 247.649494][ T29] audit: type=1400 audit(1776497312.927:406): avc: denied { getopt } for pid=7871 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 247.704733][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.712909][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.092908][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.752067][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.780424][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.016935][ T29] audit: type=1400 audit(1776497315.297:407): avc: denied { write } for pid=7895 comm="syz.2.477" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 250.164007][ T7904] comedi comedi3: 8255: I/O port conflict (0xffffffff80002002,4) [ 250.834671][ T7909] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.842342][ T7909] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.859636][ T7909] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.873149][ T7909] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 250.888527][ T7909] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 250.905807][ T7909] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 250.933841][ T7909] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 250.980813][ T7909] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 251.065002][ T7909] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.073130][ T7909] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.082398][ T7909] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.089579][ T7909] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.097879][ T7909] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.128154][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.140346][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.561697][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.570855][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.700449][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.228731][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.370814][ T7946] wireguard0: entered promiscuous mode [ 253.395194][ T7946] wireguard0: entered allmulticast mode [ 253.505904][ T29] audit: type=1400 audit(1776497318.787:408): avc: denied { map } for pid=7949 comm="syz.5.490" path="socket:[16624]" dev="sockfs" ino=16624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 253.859399][ T29] audit: type=1400 audit(1776497319.137:409): avc: denied { connect } for pid=7952 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.520815][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.722770][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.733268][ T29] audit: type=1400 audit(1776497319.137:410): avc: denied { read } for pid=7952 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.854526][ T29] audit: type=1400 audit(1776497319.357:411): avc: denied { write } for pid=7952 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.909123][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 254.918839][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 255.383867][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.390318][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.541121][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.616760][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.876053][ T29] audit: type=1400 audit(1776497322.157:412): avc: denied { setopt } for pid=7984 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 257.524514][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.545988][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.560943][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.569488][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.567259][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.760805][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.042589][ T29] audit: type=1400 audit(1776497324.327:413): avc: denied { write } for pid=8001 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 259.791121][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.800179][ T29] audit: type=1400 audit(1776497324.357:414): avc: denied { audit_write } for pid=8007 comm="syz.3.506" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 259.893111][ T29] audit: type=1400 audit(1776497324.367:415): avc: denied { read write } for pid=7998 comm="syz.5.503" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 259.918542][ T29] audit: type=1400 audit(1776497324.367:416): avc: denied { open } for pid=7998 comm="syz.5.503" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 260.847820][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.910438][ T29] audit: type=1400 audit(1776497326.187:417): avc: denied { read } for pid=8016 comm="syz.2.508" path="socket:[16782]" dev="sockfs" ino=16782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 261.575067][ T8027] syzkaller0: entered promiscuous mode [ 261.631878][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.642238][ T8027] syzkaller0: entered allmulticast mode [ 261.870973][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.545673][ T8038] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 262.602933][ T8038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.661060][ T8040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.020047][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.062655][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.072972][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.082789][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.146204][ T8041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.167508][ T8041] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 263.199577][ T8041] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 263.493131][ T29] audit: type=1400 audit(1776497328.667:418): avc: denied { bind } for pid=8042 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.796710][ T8038] gretap1: entered promiscuous mode [ 264.059205][ T8038] bond1: (slave gretap1): making interface the new active one [ 264.070478][ T8038] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 264.543968][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.673015][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.898801][ T8044] macvlan2: entered promiscuous mode [ 264.948387][ T8044] macvlan2: entered allmulticast mode [ 265.005388][ T8044] bond1: entered promiscuous mode [ 265.017911][ T8044] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.044869][ T8044] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 265.077062][ T8044] bond1: left promiscuous mode [ 265.762930][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.988994][ T29] audit: type=1400 audit(1776497331.267:419): avc: denied { write } for pid=8068 comm="syz.5.522" path="socket:[16851]" dev="sockfs" ino=16851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.062181][ T29] audit: type=1400 audit(1776497331.337:420): avc: denied { listen } for pid=8070 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 266.125372][ T29] audit: type=1400 audit(1776497331.337:421): avc: denied { accept } for pid=8070 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 266.183835][ T8063] virt_wifi0 speed is unknown, defaulting to 1000 [ 266.820320][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.900175][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.976604][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 267.012005][ T8081] gtp0: entered promiscuous mode [ 267.017027][ T8081] gtp0: entered allmulticast mode [ 267.731861][ T8083] syz.5.526 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 267.744097][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.5.526 Not tainted syzkaller #0 PREEMPT(full) [ 267.744114][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.744121][ T8083] Call Trace: [ 267.744126][ T8083] [ 267.744131][ T8083] dump_stack_lvl+0x100/0x190 [ 267.744149][ T8083] dump_header+0xfb/0x606 [ 267.744161][ T8083] oom_kill_process.cold+0xd/0x330 [ 267.744174][ T8083] out_of_memory+0x340/0x14f0 [ 267.744192][ T8083] ? __pfx_out_of_memory+0x10/0x10 [ 267.744210][ T8083] mem_cgroup_out_of_memory+0xc6/0x130 [ 267.744225][ T8083] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 267.744238][ T8083] ? find_held_lock+0x2b/0x80 [ 267.744257][ T8083] ? do_raw_spin_unlock+0x145/0x1e0 [ 267.744273][ T8083] ? _raw_spin_unlock+0x28/0x50 [ 267.744305][ T8083] try_charge_memcg+0x6e5/0xdf0 [ 267.744319][ T8083] ? __pfx_try_charge_memcg+0x10/0x10 [ 267.744332][ T8083] ? find_held_lock+0x2b/0x80 [ 267.744347][ T8083] ? rcu_read_unlock+0x17/0x60 [ 267.744358][ T8083] ? rcu_read_unlock+0x17/0x60 [ 267.744370][ T8083] charge_memcg+0xa6/0x280 [ 267.744380][ T8083] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 267.744394][ T8083] __swap_cache_prepare_and_add+0x842/0xa20 [ 267.744415][ T8083] ? alloc_pages_mpol+0x25a/0x540 [ 267.744428][ T8083] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 267.744442][ T8083] ? __pfx_swap_entry_swapped+0x10/0x10 [ 267.744456][ T8083] swap_cache_alloc_folio+0x1cb/0x300 [ 267.744472][ T8083] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 267.744485][ T8083] ? __pfx_try_to_wake_up+0x10/0x10 [ 267.744505][ T8083] swap_cluster_readahead+0x411/0x770 [ 267.744523][ T8083] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 267.744538][ T8083] ? rcu_is_cpu_rrupt_from_idle+0x260/0x270 [ 267.744555][ T8083] ? queue_work_on+0x11b/0x1e0 [ 267.744569][ T8083] ? queue_work_on+0x141/0x1e0 [ 267.744586][ T8083] ? get_vma_policy+0x23d/0x3b0 [ 267.744598][ T8083] swapin_readahead+0x160/0x12c0 [ 267.744617][ T8083] ? __pfx_swapin_readahead+0x10/0x10 [ 267.744631][ T8083] ? find_held_lock+0x2b/0x80 [ 267.744646][ T8083] ? swap_table_get+0x103/0x2c0 [ 267.744662][ T8083] ? swap_table_get+0x10d/0x2c0 [ 267.744676][ T8083] ? swap_cache_get_folio+0x286/0x350 [ 267.744689][ T8083] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 267.744703][ T8083] ? __pfx_get_swap_device+0x10/0x10 [ 267.744722][ T8083] ? do_swap_page+0x931/0x6180 [ 267.744736][ T8083] do_swap_page+0x931/0x6180 [ 267.744755][ T8083] ? __pfx_do_swap_page+0x10/0x10 [ 267.744771][ T8083] ? selinux_bpf+0xfb/0x150 [ 267.744787][ T8083] ? rcu_is_watching+0x12/0xc0 [ 267.744801][ T8083] ? __pte_offset_map+0x179/0x310 [ 267.744820][ T8083] __handle_mm_fault+0x192f/0x2a00 [ 267.744837][ T8083] ? reacquire_held_locks+0xce/0x1e0 [ 267.744850][ T8083] ? __pfx___handle_mm_fault+0x10/0x10 [ 267.744866][ T8083] ? lock_vma_under_rcu+0x17c/0x590 [ 267.744888][ T8083] handle_mm_fault+0x36d/0xa20 [ 267.744904][ T8083] do_user_addr_fault+0x5a3/0x12f0 [ 267.744922][ T8083] exc_page_fault+0x6f/0xd0 [ 267.744937][ T8083] asm_exc_page_fault+0x26/0x30 [ 267.744948][ T8083] RIP: 0033:0x7f11c579c82b [ 267.744958][ T8083] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 267.744969][ T8083] RSP: 002b:00007f11c66ba028 EFLAGS: 00010217 [ 267.744978][ T8083] RAX: 000000000000000c RBX: 00007f11c5a15fa0 RCX: ffffffffffffffe8 [ 267.744985][ T8083] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 267.744991][ T8083] RBP: 00007f11c5832c91 R08: 0000000000000000 R09: 0000000000000000 [ 267.744997][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.745003][ T8083] R13: 00007f11c5a16038 R14: 00007f11c5a15fa0 R15: 00007ffd79e24638 [ 267.745017][ T8083] [ 267.745021][ T8083] memory: usage 307200kB, limit 307200kB, failcnt 2275 [ 268.120985][ T8083] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 268.128859][ T8083] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 268.136150][ T8083] Memory cgroup stats for /syz5: [ 268.136428][ T8083] cache 0 [ 268.144268][ T8083] rss 0 [ 268.147005][ T8083] rss_huge 0 [ 268.150199][ T8083] shmem 0 [ 268.153105][ T8083] mapped_file 0 [ 268.156531][ T8083] dirty 0 [ 268.160074][ T8083] writeback 0 [ 268.163346][ T8083] workingset_refault_anon 44 [ 268.167913][ T8083] workingset_refault_file 0 [ 268.172417][ T8083] swap 204800 [ 268.175683][ T8083] swapcached 405504 [ 268.179456][ T8083] pgpgin 55919 [ 268.183049][ T8083] pgpgout 55914 [ 268.186483][ T8083] pgfault 48050 [ 268.189943][ T8083] pgmajfault 36 [ 268.193374][ T8083] inactive_anon 20480 [ 268.197321][ T8083] active_anon 0 [ 268.200769][ T8083] inactive_file 0 [ 268.204369][ T8083] active_file 0 [ 268.207794][ T8083] unevictable 0 [ 268.211235][ T8083] hierarchical_memory_limit 314572800 [ 268.216577][ T8083] hierarchical_memsw_limit 9223372036854771712 [ 268.222723][ T8083] total_cache 0 [ 268.226153][ T8083] total_rss 0 [ 268.229408][ T8083] total_rss_huge 0 [ 268.233118][ T8083] total_shmem 0 [ 268.236546][ T8083] total_mapped_file 0 [ 268.240514][ T8083] total_dirty 0 [ 268.243948][ T8083] total_writeback 0 [ 268.247733][ T8083] total_workingset_refault_anon 44 [ 268.252864][ T8083] total_workingset_refault_file 0 [ 268.257878][ T8083] total_swap 204800 [ 268.262254][ T8083] total_swapcached 405504 [ 268.266567][ T8083] total_pgpgin 55919 [ 268.270491][ T8083] total_pgpgout 55914 [ 268.274452][ T8083] total_pgfault 48050 [ 268.278410][ T8083] total_pgmajfault 36 [ 268.282398][ T8083] total_inactive_anon 20480 [ 268.286892][ T8083] total_active_anon 0 [ 268.290900][ T8083] total_inactive_file 0 [ 268.295037][ T8083] total_active_file 0 [ 268.299003][ T8083] total_unevictable 0 [ 268.302980][ T8083] anon_cost 0 [ 268.306237][ T8083] file_cost 0 [ 268.309490][ T8083] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.526,pid=8082,uid=0 [ 268.325250][ T8083] Memory cgroup out of memory: Killed process 8082 (syz.5.526) total-vm:108776kB, anon-rss:1240kB, file-rss:27296kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 268.417977][ T7003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.426139][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.434687][ T29] audit: type=1400 audit(1776497332.677:422): avc: denied { compute_member } for pid=8082 comm="syz.5.526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 268.460214][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.471310][ T29] audit: type=1400 audit(1776497333.087:423): avc: denied { write } for pid=8082 comm="syz.5.526" name="file0" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 268.535074][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.574814][ T29] audit: type=1400 audit(1776497333.087:424): avc: denied { open } for pid=8082 comm="syz.5.526" path="/41/file0" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 268.632204][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.768347][ T8092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.599256][ T8099] IPVS: sh: FWM 3 0x00000003 - no destination available [ 269.621612][ T42] IPVS: starting estimator thread 0... [ 270.079698][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.103177][ T8102] IPVS: using max 48 ests per chain, 115200 per kthread [ 271.029550][ T8113] netlink: 27 bytes leftover after parsing attributes in process `syz.5.533'. [ 271.183082][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.709341][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.327554][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.865900][ T8138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.914107][ T8145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.383650][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.679728][ T8155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.690188][ T8155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.698905][ T8155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.700078][ T42] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 274.740265][ T5891] net_ratelimit: 2502 callbacks suppressed [ 274.740284][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.904996][ T42] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 274.942309][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.982412][ T42] usb 4-1: Product: syz [ 274.995778][ T42] usb 4-1: Manufacturer: syz [ 275.015724][ T42] usb 4-1: SerialNumber: syz [ 275.047012][ T42] usb 4-1: config 0 descriptor?? [ 275.298977][ T42] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 275.460541][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.680177][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.688305][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.891766][ T29] audit: type=1400 audit(1776497342.177:425): avc: denied { mounton } for pid=8182 comm="syz.5.551" path="/46/file0" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 276.947966][ T29] audit: type=1400 audit(1776497342.207:426): avc: denied { setattr } for pid=8182 comm="syz.5.551" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 277.133971][ T8188] Bluetooth: MGMT ver 1.23 [ 277.559809][ T29] audit: type=1400 audit(1776497342.817:427): avc: denied { create } for pid=8192 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.815705][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.837328][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.884468][ T29] audit: type=1400 audit(1776497342.837:428): avc: denied { connect } for pid=8192 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 278.084289][ T42] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 278.106837][ T42] usb 4-1: USB disconnect, device number 9 [ 278.911734][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.280125][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 279.297295][ T5826] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 280.297697][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.574350][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'. [ 280.598024][ T8220] netlink: 80 bytes leftover after parsing attributes in process `syz.5.561'. [ 280.974562][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.436658][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.488367][ T29] audit: type=1326 audit(1776497347.747:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 282.554373][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.888218][ T29] audit: type=1326 audit(1776497347.747:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 282.952683][ T8243] qrtr: Invalid version 47 [ 282.957886][ T29] audit: type=1326 audit(1776497347.757:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 283.012730][ T29] audit: type=1326 audit(1776497347.757:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 283.067905][ T29] audit: type=1326 audit(1776497347.757:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 283.174846][ T29] audit: type=1326 audit(1776497347.757:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 283.239484][ T8244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.568'. [ 283.266872][ T29] audit: type=1326 audit(1776497347.767:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 283.303162][ T8242] netlink: 60 bytes leftover after parsing attributes in process `syz.3.568'. [ 283.336345][ T29] audit: type=1326 audit(1776497347.767:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77659c819 code=0x7ffc0000 [ 283.862012][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.952721][ T8244] virt_wifi0 speed is unknown, defaulting to 1000 [ 284.140112][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.541695][ T8260] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 284.619527][ T29] audit: type=1400 audit(1776497349.897:437): avc: denied { read append } for pid=8263 comm="syz.3.576" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 284.739737][ T29] audit: type=1400 audit(1776497349.897:438): avc: denied { open } for pid=8263 comm="syz.3.576" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 284.791006][ T8262] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 284.900379][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.920461][ T8265] macvlan2: entered promiscuous mode [ 284.936842][ T8265] macvlan2: entered allmulticast mode [ 284.967405][ T8265] bond2: entered promiscuous mode [ 284.980411][ T8265] bridge2: entered promiscuous mode [ 284.997970][ T8265] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 285.048405][ T8265] bond2: left promiscuous mode [ 285.075290][ T8265] bridge2: left promiscuous mode [ 285.240929][ T8264] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 285.264906][ T8264] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 285.341233][ T8256] syz.5.573 (8256): drop_caches: 2 [ 285.344894][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.579'. [ 285.349770][ T8264] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.382345][ T8264] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 285.406221][ T8279] xt_nfacct: accounting object `syz1' does not exist [ 285.416143][ T8264] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 285.422105][ T8279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8279 comm=syz.4.579 [ 285.428177][ T8264] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 285.473935][ T8264] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 285.485022][ T8264] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 285.526428][ T8264] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 285.610260][ T8264] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.631111][ T8264] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 285.689297][ T8264] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 285.963163][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.965036][ T8283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.979272][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.996672][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.379143][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.389498][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.411249][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.076361][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.310084][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 287.390483][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 287.469976][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 287.496039][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.540373][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 287.622745][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 287.750576][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.815568][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.978295][ T7201] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 289.346547][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 289.346588][ T29] audit: type=1400 audit(1776497354.217:442): avc: denied { getopt } for pid=8314 comm="syz.3.588" lport=34173 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 289.389600][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 289.480437][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 289.531477][ T7201] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.544343][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 289.619958][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 289.674664][ T7201] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 289.690109][ T7201] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 289.700578][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 289.701703][ T7201] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 289.717549][ T7201] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 289.739281][ T7201] usb 2-1: Manufacturer: syz [ 289.762921][ T7201] usb 2-1: SerialNumber: syz [ 290.386810][ T29] audit: type=1400 audit(1776497355.667:443): avc: denied { setopt } for pid=8326 comm="syz.5.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.404549][ T8333] virt_wifi0 speed is unknown, defaulting to 1000 [ 290.460072][ T8336] comedi comedi3: 8255: I/O port conflict (0xffffffff80002002,4) [ 290.764487][ T7201] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 290.814725][ T7201] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input12 [ 290.865710][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 290.872864][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 290.879845][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 290.887220][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 290.894418][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 290.901566][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 290.908498][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 290.915463][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 290.922228][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 290.966659][ T7201] usb 2-1: USB disconnect, device number 6 [ 291.057145][ T8343] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 291.222707][ C1] net_ratelimit: 4 callbacks suppressed [ 291.222727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 291.498609][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.545840][ T8339] netlink: 32 bytes leftover after parsing attributes in process `syz.5.591'. [ 291.699948][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 291.780017][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.885378][ T8350] trusted_key: encrypted_key: key user:syz not found [ 292.139408][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.154254][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.162407][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.176259][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.184415][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.192003][ T7201] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 292.206912][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.221663][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.498329][ T8370] geneve3: entered promiscuous mode [ 293.503651][ T8370] geneve3: entered allmulticast mode [ 293.581389][ T3502] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 293.726056][ T3502] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 293.752712][ T8369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.602'. [ 293.767543][ T8365] --map-set only usable from mangle table [ 293.773738][ T8369] unsupported nlmsg_type 40 [ 293.845706][ T3502] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 293.864868][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.868945][ T3502] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 294.161897][ T8378] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 294.269964][ T29] audit: type=1400 audit(1776497359.527:444): avc: denied { mount } for pid=8375 comm="syz.3.603" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 294.724358][ T8381] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 294.749578][ T8381] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 294.875500][ T8386] F2FS-fs: Conflicting test_dummy_encryption options [ 294.891374][ T29] audit: type=1400 audit(1776497360.167:445): avc: denied { create } for pid=8377 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 295.057395][ T29] audit: type=1400 audit(1776497360.197:446): avc: denied { write } for pid=8377 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 295.534575][ T8378] bond4: (slave gretap1): making interface the new active one [ 295.577109][ T8378] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 295.664707][ T8381] macvlan0: entered promiscuous mode [ 295.681524][ T8381] macvlan0: entered allmulticast mode [ 295.696596][ T8381] bond4: entered promiscuous mode [ 295.705271][ T8381] gretap1: entered promiscuous mode [ 296.355825][ T8381] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 296.387052][ T8381] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 296.441727][ T8381] bond4: left promiscuous mode [ 296.448787][ T8381] gretap1: left promiscuous mode [ 296.660140][ T42] net_ratelimit: 4 callbacks suppressed [ 296.660155][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.900156][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.175545][ T8405] netlink: 'syz.3.611': attribute type 1 has an invalid length. [ 297.215308][ T8405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.236069][ T8405] vlan2: entered allmulticast mode [ 297.241931][ T8405] bond2: entered allmulticast mode [ 297.263830][ T8405] bond2: (slave geneve2): making interface the new active one [ 297.271445][ T8405] geneve2: entered allmulticast mode [ 297.277793][ T8405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.288341][ T8405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.298469][ T8405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.307020][ T8405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.315810][ T8405] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 297.698463][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.720812][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.729093][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.748076][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.242239][ T8436] comedi comedi3: 8255: I/O port conflict (0xffffffff80002002,4) [ 299.669209][ T8435] netlink: 'syz.3.619': attribute type 10 has an invalid length. [ 299.706492][ T8435] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 299.739782][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.619'. [ 299.995779][ T8448] syzkaller0: entered promiscuous mode [ 300.020775][ T8448] syzkaller0: entered allmulticast mode [ 300.710138][ T5884] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 300.940077][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 300.992754][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.049963][ T24] net_ratelimit: 11 callbacks suppressed [ 302.049976][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.831640][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.950533][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.126184][ T42] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 303.163220][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.270870][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.705876][ T42] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 303.770544][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.806997][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.815121][ T42] usb 4-1: Product: syz [ 303.925498][ T42] usb 4-1: Manufacturer: syz [ 303.938242][ T42] usb 4-1: SerialNumber: syz [ 305.093108][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.104159][ T42] usb 4-1: config 0 descriptor?? [ 305.480408][ T8485] netlink: 260 bytes leftover after parsing attributes in process `syz.2.630'. [ 305.489791][ T8485] netlink: 76 bytes leftover after parsing attributes in process `syz.2.630'. [ 305.510982][ T29] audit: type=1400 audit(1776497370.757:447): avc: denied { create } for pid=8478 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 305.838188][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.850915][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.035292][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 306.467291][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.475631][ T42] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 306.483147][ T42] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 306.496607][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.498633][ T42] usb 4-1: USB disconnect, device number 10 [ 306.536308][ T5884] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 306.569695][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.635163][ T5884] usb 2-1: config 0 descriptor?? [ 306.673649][ T5884] usb 2-1: can't set config #0, error -71 [ 306.782665][ T5884] usb 2-1: USB disconnect, device number 8 [ 307.860910][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.988827][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.233668][ T7003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.255977][ T7003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.878472][ T8522] netlink: 'syz.3.641': attribute type 1 has an invalid length. [ 308.907693][ T8522] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.940093][ T8522] bond3: (slave gretap2): making interface the new active one [ 308.948015][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.957623][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.965918][ T8522] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 309.004923][ T8522] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8522 comm=syz.3.641 [ 309.027655][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.063792][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.006298][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.148525][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.139128][ T29] audit: type=1400 audit(1776497376.197:448): avc: denied { append } for pid=8545 comm="syz.3.646" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 312.647428][ T29] audit: type=1400 audit(1776497377.907:449): avc: denied { ioctl } for pid=8551 comm="syz.2.647" path="socket:[19123]" dev="sockfs" ino=19123 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 312.672495][ T8552] bridge0: port 3(netdevsim0) entered blocking state [ 312.792547][ T8552] bridge0: port 3(netdevsim0) entered disabled state [ 313.242019][ T5884] net_ratelimit: 4 callbacks suppressed [ 313.242037][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.276796][ T8552] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 313.324493][ T29] audit: type=1400 audit(1776497378.607:450): avc: denied { bind } for pid=8559 comm="syz.1.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 313.340696][ T6688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.358378][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.366252][ T8552] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 313.366840][ T6688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.424283][ T8552] bridge0: port 3(netdevsim0) entered blocking state [ 313.432700][ T8552] bridge0: port 3(netdevsim0) entered forwarding state [ 313.565855][ T6688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.420435][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.426065][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.461095][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.486081][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.664096][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.828955][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.835355][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.906993][ T8612] syzkaller0: entered promiscuous mode [ 317.005449][ T8612] syzkaller0: entered allmulticast mode [ 318.391390][ T141] net_ratelimit: 7 callbacks suppressed [ 318.391402][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.417497][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.541363][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.580373][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.470613][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 319.912200][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.938329][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.024968][ T8676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.044773][ T7003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.150568][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.264385][ T7003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.383049][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.675'. [ 320.980639][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.910059][ T5877] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 322.520213][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 322.544457][ T5877] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.573515][ T5877] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 322.597898][ T5877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.615560][ T5877] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 322.648859][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.662619][ T5826] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 322.669437][ T29] audit: type=1400 audit(1776497387.947:451): avc: denied { read } for pid=8706 comm="syz.2.673" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 322.733473][ T5877] usb 4-1: config 0 descriptor?? [ 322.758955][ T29] audit: type=1400 audit(1776497387.947:452): avc: denied { open } for pid=8706 comm="syz.2.673" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 322.939731][ T29] audit: type=1400 audit(1776497387.957:453): avc: denied { ioctl } for pid=8706 comm="syz.2.673" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 323.187620][ T8714] [ 323.189972][ T8714] ============================================ [ 323.196105][ T8714] WARNING: possible recursive locking detected [ 323.202228][ T8714] syzkaller #0 Not tainted [ 323.206607][ T8714] -------------------------------------------- [ 323.212731][ T8714] syz.3.669/8714 is trying to acquire lock: [ 323.218597][ T8714] ffffffff8f7c0610 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 323.228848][ T8714] [ 323.228848][ T8714] but task is already holding lock: [ 323.236200][ T8714] ffffffff8f7c0610 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 323.246491][ T8714] [ 323.246491][ T8714] other info that might help us debug this: [ 323.254537][ T8714] Possible unsafe locking scenario: [ 323.254537][ T8714] [ 323.261968][ T8714] CPU0 [ 323.265229][ T8714] ---- [ 323.268486][ T8714] lock(qp_broker_list.mutex); [ 323.273315][ T8714] lock(qp_broker_list.mutex); [ 323.278146][ T8714] [ 323.278146][ T8714] *** DEADLOCK *** [ 323.278146][ T8714] [ 323.286265][ T8714] May be due to missing lock nesting notation [ 323.286265][ T8714] [ 323.294560][ T8714] 1 lock held by syz.3.669/8714: [ 323.299510][ T8714] #0: ffffffff8f7c0610 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 323.310197][ T8714] [ 323.310197][ T8714] stack backtrace: [ 323.316069][ T8714] CPU: 0 UID: 0 PID: 8714 Comm: syz.3.669 Not tainted syzkaller #0 PREEMPT(full) [ 323.316088][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 323.316097][ T8714] Call Trace: [ 323.316104][ T8714] [ 323.316110][ T8714] dump_stack_lvl+0x100/0x190 [ 323.316128][ T8714] print_deadlock_bug.cold+0xbd/0xca [ 323.316150][ T8714] __lock_acquire+0x12bb/0x2630 [ 323.316173][ T8714] lock_acquire+0x1b1/0x370 [ 323.316189][ T8714] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 323.316207][ T8714] ? __pfx___might_resched+0x10/0x10 [ 323.316226][ T8714] ? kasan_save_stack+0x3f/0x50 [ 323.316246][ T8714] __mutex_lock+0x1a4/0x1b10 [ 323.316265][ T8714] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 323.316281][ T8714] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 323.316297][ T8714] ? vmci_host_close+0x115/0x1a0 [ 323.316309][ T8714] ? __fput+0x3ff/0xb50 [ 323.316323][ T8714] ? task_work_run+0x150/0x240 [ 323.316339][ T8714] ? exit_to_user_mode_loop+0x100/0x4a0 [ 323.316356][ T8714] ? do_syscall_64+0x706/0xf80 [ 323.316374][ T8714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.316388][ T8714] ? __pfx___mutex_lock+0x10/0x10 [ 323.316412][ T8714] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 323.316428][ T8714] vmci_qp_broker_detach+0x14c/0x11e0 [ 323.316445][ T8714] ? kasan_quarantine_put+0x104/0x240 [ 323.316464][ T8714] ? lockdep_hardirqs_on+0x78/0x100 [ 323.316482][ T8714] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 323.316498][ T8714] ? ctx_free_ctx+0x440/0xda0 [ 323.316514][ T8714] ? ctx_free_ctx+0x4bd/0xda0 [ 323.316531][ T8714] ? kfree+0x223/0x6c0 [ 323.316548][ T8714] ctx_free_ctx+0x517/0xda0 [ 323.316565][ T8714] ? __pfx___schedule+0x10/0x10 [ 323.316587][ T8714] ? __pfx_ctx_free_ctx+0x10/0x10 [ 323.316604][ T8714] ? preempt_schedule_thunk+0x16/0x30 [ 323.316626][ T8714] ? preempt_schedule_common+0x42/0xc0 [ 323.316644][ T8714] ? preempt_schedule_thunk+0x16/0x30 [ 323.316666][ T8714] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 323.316686][ T8714] vmci_datagram_dispatch+0x3db/0xc60 [ 323.316707][ T8714] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 323.316730][ T8714] ? find_held_lock+0x2b/0x80 [ 323.316751][ T8714] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 323.316767][ T8714] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 323.316784][ T8714] qp_notify_peer+0x1a6/0x230 [ 323.316798][ T8714] ? __pfx_qp_notify_peer+0x10/0x10 [ 323.316816][ T8714] vmci_qp_broker_detach+0xa20/0x11e0 [ 323.316834][ T8714] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 323.316849][ T8714] ? ctx_free_ctx+0x440/0xda0 [ 323.316865][ T8714] ? ctx_free_ctx+0x4bd/0xda0 [ 323.316882][ T8714] ? kfree+0x223/0x6c0 [ 323.316898][ T8714] ctx_free_ctx+0x517/0xda0 [ 323.316916][ T8714] ? synchronize_rcu_expedited+0x3c3/0x450 [ 323.316933][ T8714] ? __pfx_ctx_free_ctx+0x10/0x10 [ 323.316950][ T8714] ? __pfx_autoremove_wake_function+0x10/0x10 [ 323.316967][ T8714] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 323.316985][ T8714] vmci_ctx_destroy+0x150/0x1c0 [ 323.317003][ T8714] vmci_host_close+0x115/0x1a0 [ 323.317015][ T8714] ? __pfx_vmci_host_close+0x10/0x10 [ 323.317028][ T8714] __fput+0x3ff/0xb50 [ 323.317046][ T8714] task_work_run+0x150/0x240 [ 323.317062][ T8714] ? __pfx_task_work_run+0x10/0x10 [ 323.317079][ T8714] ? rcu_is_watching+0x12/0xc0 [ 323.317099][ T8714] exit_to_user_mode_loop+0x100/0x4a0 [ 323.317115][ T8714] ? do_syscall_64+0x52d/0xf80 [ 323.317134][ T8714] do_syscall_64+0x706/0xf80 [ 323.317151][ T8714] ? clear_bhb_loop+0x40/0x90 [ 323.317167][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.317181][ T8714] RIP: 0033:0x7fd56c19c819 [ 323.317194][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.317208][ T8714] RSP: 002b:00007fd56cff8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 323.317221][ T8714] RAX: 0000000000000000 RBX: 00007fd56c416090 RCX: 00007fd56c19c819 [ 323.317230][ T8714] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 323.317238][ T8714] RBP: 00007fd56c232c91 R08: 0000000000000000 R09: 0000000000000000 [ 323.317247][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.317255][ T8714] R13: 00007fd56c416128 R14: 00007fd56c416090 R15: 00007ffe5bb29488 [ 323.317268][ T8714] [ 324.002086][ T13] net_ratelimit: 6 callbacks suppressed [ 324.002102][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.019557][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.190380][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.460593][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.130001][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.138233][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.220523][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.560470][ T6688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.020279][ T7201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.240010][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.781675][ T5877] usbhid 4-1:0.0: can't add hid device: -32 [ 327.787643][ T5877] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 329.061014][ T5877] net_ratelimit: 12 callbacks suppressed [ 329.061028][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.380592][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.600015][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.608237][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.049994][ T6688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.420035][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.729969][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.738182][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.169964][ T6688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.460522][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog