last executing test programs: 4m14.987753712s ago: executing program 3 (id=414): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r1) 4m14.838821349s ago: executing program 3 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="080026009015000008005700", @ANYRESHEX=r2], 0x2c}}, 0x40808) 4m14.774528912s ago: executing program 3 (id=419): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000005c0)={0x14, 0x0, 0x0}, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x0, 0xf, 0x2, "8413"}, 0x0, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x7}, 0x0, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0xb81}, &(0x7f0000000740)={0xc0, 0xa2, 0x2f, "4231ce595f19b8499cfa40fddc4413423b0a87762eb6a24a9e2bbe4a2b93acd56e6f80c57d4e74d10170539ffcd197"}}) open(0x0, 0x60840, 0x0) fsopen(0x0, 0x0) 4m13.079591596s ago: executing program 3 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0xa05404, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4m12.779413421s ago: executing program 3 (id=427): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 4m12.464882121s ago: executing program 3 (id=432): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x4007}, 0x4) unshare(0x400) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 4m12.263440308s ago: executing program 32 (id=432): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x4007}, 0x4) unshare(0x400) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 2m38.701426127s ago: executing program 1 (id=1581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="0f20e035400000000f22e0f3410f1ed6b846a14c83ef269afc6a0c0cb8000066ef6664660f66147edec066bad104b806000000efc421296bdddfc03e0f787000c4427d133a66b878008ec0", 0x4b}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m38.472127075s ago: executing program 1 (id=1583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m38.360877885s ago: executing program 1 (id=1584): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2m38.201877548s ago: executing program 1 (id=1586): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)='./file0\x00') 2m38.06919412s ago: executing program 1 (id=1589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06}]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 2m37.24869079s ago: executing program 1 (id=1602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 2m36.980126249s ago: executing program 33 (id=1602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 27.411922939s ago: executing program 0 (id=3268): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = memfd_secret(0x80000) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x8000000000000002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) close_range(r0, 0xffffffffffffffff, 0x2) 27.228214118s ago: executing program 0 (id=3269): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x241}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 26.989010756s ago: executing program 0 (id=3274): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 26.828980903s ago: executing program 0 (id=3278): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000021c0)='./file0\x00', 0x4) 26.657226252s ago: executing program 0 (id=3280): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) 26.376675841s ago: executing program 5 (id=3283): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0xfff, 0x1004000}) 26.178965708s ago: executing program 5 (id=3284): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100002200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/84) 25.768202397s ago: executing program 0 (id=3287): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32=0x0, @ANYBLOB="feffffff000010"], 0x50) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1) 25.45526106s ago: executing program 34 (id=3287): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32=0x0, @ANYBLOB="feffffff000010"], 0x50) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1) 24.152516958s ago: executing program 5 (id=3297): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0xa) 23.922307801s ago: executing program 5 (id=3298): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 23.634134105s ago: executing program 5 (id=3300): r0 = socket$netlink(0x10, 0x3, 0xb) unshare(0x22020600) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23.023220495s ago: executing program 5 (id=3307): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r0, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000400), 0x79) listen(r1, 0xc) 22.629493729s ago: executing program 35 (id=3307): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r0, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000400), 0x79) listen(r1, 0xc) 21.684791159s ago: executing program 4 (id=3316): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 21.559567988s ago: executing program 4 (id=3318): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x21000, 0x4, 0x11, r0, 0x100000000) 21.324654656s ago: executing program 4 (id=3322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60842, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000400)) 21.069440614s ago: executing program 4 (id=3325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_clone(0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 20.9561951s ago: executing program 4 (id=3326): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 20.289250803s ago: executing program 4 (id=3328): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}}) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x5, 0x40, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x4, 0x1ff, 0x1b}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x42, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x13, 0x5, 0x3}}}}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x44}}, 0x48040) 19.862290617s ago: executing program 36 (id=3328): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}}) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x5, 0x40, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x4, 0x1ff, 0x1b}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x42, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x13, 0x5, 0x3}}}}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x44}}, 0x48040) 4.954744172s ago: executing program 6 (id=3465): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00005ec000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0x9}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.769457969s ago: executing program 6 (id=3468): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004880)=ANY=[], 0x1e70}}, 0x4010) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0xffffffff, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.674544321s ago: executing program 2 (id=3471): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x1a) fcntl$notify(r1, 0x402, 0x40000029) 4.347328405s ago: executing program 2 (id=3475): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 4.173476244s ago: executing program 6 (id=3476): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000']) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRES16, @ANYRES64=r0], 0x15) 3.928558502s ago: executing program 6 (id=3479): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) 3.543461299s ago: executing program 6 (id=3483): unshare(0x60000600) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.133910849s ago: executing program 9 (id=3487): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 2.926374626s ago: executing program 2 (id=3489): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2002, 0x0) 2.068963228s ago: executing program 8 (id=3495): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup3(r1, r0, 0x80000) write$P9_RREAD(r2, &(0x7f0000000080)={0x27, 0x75, 0x2, {0x1c, "4d19aa34bc3fcc0f026e80a8a15995a6c5e76da32b8eea321101fdad"}}, 0x27) 1.705337442s ago: executing program 9 (id=3499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x3, 0x800004, 0xfffffff3, 0x7a2a}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000500)={0x1, 0x0, [{0x1, 0xef3, 0x2, 0x950, 0xc}]}) 1.588697819s ago: executing program 6 (id=3501): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)="039456", 0x3}], 0x1) 1.505641886s ago: executing program 9 (id=3502): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSLCKTRMIOS(r2, 0x80047437, &(0x7f00000010c0)) 1.436860494s ago: executing program 8 (id=3503): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@code={0xa, 0x5d, {"6766676636f2420f38f01f36408432660f38f12500480000f30f1ef948b876000000000000000f23d80f21f835800000600f23f845f4be137f00000fc77dc066ba4000b800000000ef460f77"}}], 0x5d}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.177904837s ago: executing program 8 (id=3504): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 1.022688708s ago: executing program 8 (id=3505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0101000000000000000002000003300003802c0003801400010077673200000000000000000000000000145e92006e6963766630000000000000000000000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 913.352848ms ago: executing program 7 (id=3506): r0 = landlock_create_ruleset(&(0x7f0000000100)={0x2000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) r1 = fsopen(&(0x7f00000003c0)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 871.972816ms ago: executing program 8 (id=3507): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) 799.836963ms ago: executing program 8 (id=3508): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b45c33a47d3a158da980000000000000bea6f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f00000002c0)=[@assoc={0x0, 0x117, 0x4, 0x5e}], 0xa}], 0x1, 0x4008880) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) 788.125781ms ago: executing program 7 (id=3509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x58, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff0}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x40880) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 687.580688ms ago: executing program 2 (id=3510): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, 0x0}) 532.80207ms ago: executing program 2 (id=3511): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x175) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$msr(r0, &(0x7f0000000300)=""/169, 0xa9) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2008000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@noextend}, {@nodevmap}]}}) 531.605575ms ago: executing program 7 (id=3521): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 477.194612ms ago: executing program 9 (id=3512): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 450.539147ms ago: executing program 7 (id=3513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x3, 0x800004, 0xfffffff3, 0x7a2a}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000500)={0x1, 0x0, [{0x1, 0xef3, 0x2, 0x950, 0xc}]}) 382.21131ms ago: executing program 2 (id=3514): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 256.778721ms ago: executing program 9 (id=3515): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000680)=0x522, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 199.005579ms ago: executing program 7 (id=3516): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x48}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 40.404473ms ago: executing program 9 (id=3517): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3be2b02884f95c63}]) io_destroy(r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 0s ago: executing program 7 (id=3518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) kernel console output (not intermixed with test programs): TLOCKUP [ 287.615652][T12466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.615672][T12466] Call Trace: [ 287.615679][T12466] [ 287.615687][T12466] dump_stack_lvl+0x100/0x190 [ 287.615721][T12466] gup_vma_lookup.cold+0x83/0x96 [ 287.615757][T12466] __get_user_pages+0x241/0x32a0 [ 287.615794][T12466] ? find_held_lock+0x2b/0x80 [ 287.615816][T12466] ? mtree_load+0x311/0xa90 [ 287.615844][T12466] ? __pfx___get_user_pages+0x10/0x10 [ 287.615880][T12466] get_user_pages_remote+0x3d2/0xb10 [ 287.615908][T12466] ? mas_root_expand+0x670/0x750 [ 287.615939][T12466] ? __pfx_get_user_pages_remote+0x10/0x10 [ 287.615968][T12466] ? __access_remote_vm+0x755/0x890 [ 287.615991][T12466] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.616026][T12466] __access_remote_vm+0x3bb/0x890 [ 287.616055][T12466] ? do_raw_spin_lock+0x128/0x260 [ 287.616088][T12466] ? __pfx___access_remote_vm+0x10/0x10 [ 287.616110][T12466] ? proc_pid_cmdline_read+0x31b/0x8c0 [ 287.616144][T12466] proc_pid_cmdline_read+0x4f2/0x8c0 [ 287.616173][T12466] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 287.616202][T12466] ? rw_verify_area+0xce/0x6d0 [ 287.616225][T12466] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 287.616249][T12466] vfs_readv+0x5d8/0x8d0 [ 287.616280][T12466] ? __pfx_vfs_readv+0x10/0x10 [ 287.616323][T12466] ? __fget_files+0x21f/0x3d0 [ 287.616359][T12466] ? do_preadv+0x1ac/0x270 [ 287.616378][T12466] do_preadv+0x1ac/0x270 [ 287.616402][T12466] ? __pfx_do_preadv+0x10/0x10 [ 287.616425][T12466] ? rcu_is_watching+0x12/0xc0 [ 287.616462][T12466] do_syscall_64+0x10b/0xf80 [ 287.616496][T12466] ? clear_bhb_loop+0x40/0x90 [ 287.616526][T12466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.616550][T12466] RIP: 0033:0x7fa18f19cdd9 [ 287.616570][T12466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.616592][T12466] RSP: 002b:00007fa18fffb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 287.616616][T12466] RAX: ffffffffffffffda RBX: 00007fa18f415fa0 RCX: 00007fa18f19cdd9 [ 287.616632][T12466] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 287.616645][T12466] RBP: 00007fa18f232d69 R08: 00000000fffffff9 R09: 0000000000000000 [ 287.616660][T12466] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 287.616674][T12466] R13: 00007fa18f416038 R14: 00007fa18f415fa0 R15: 00007fff0f3e08b8 [ 287.616706][T12466] [ 287.930797][ T5747] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 288.082309][ T5747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.093486][ T5747] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.102908][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.115244][ T5747] usb 3-1: config 0 descriptor?? [ 288.364927][ T29] audit: type=1400 audit(1778177853.157:783): avc: denied { block_suspend } for pid=12481 comm="syz.6.2685" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 288.522692][T12490] netlink: 'syz.6.2689': attribute type 29 has an invalid length. [ 288.541022][T12490] netlink: 'syz.6.2689': attribute type 29 has an invalid length. [ 288.550658][ T5747] keytouch 0003:0926:3333.003D: fixing up Keytouch IEC report descriptor [ 288.578062][T12490] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2689'. [ 288.587466][ T5747] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.003D/input/input64 [ 288.599334][T12490] unsupported nla_type 58 [ 288.604702][ T46] usb 5-1: USB disconnect, device number 43 [ 288.718037][T12492] Bluetooth: MGMT ver 1.23 [ 288.787699][ T5747] keytouch 0003:0926:3333.003D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 289.097935][ T5747] usb 3-1: USB disconnect, device number 40 [ 289.221965][ T5799] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 289.383093][ T5799] usb 1-1: unable to get BOS descriptor or descriptor too short [ 289.393066][ T5799] usb 1-1: not running at top speed; connect to a high speed hub [ 289.412154][ T5799] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.430738][ T5799] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 289.442339][ T5799] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 289.472753][ T5799] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 289.483355][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.500959][ T5799] usb 1-1: Product: syz [ 289.510979][ T5799] usb 1-1: Manufacturer: syz [ 289.517180][ T5799] usb 1-1: SerialNumber: syz [ 289.570853][ T5706] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 289.732974][ T5706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.754629][ T5706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.756631][ T5799] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 289.765972][ T5706] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 289.781945][ T5706] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 289.790000][ T5706] usb 7-1: Manufacturer: syz [ 289.803733][ T5799] usb 1-1: 1:1 : sample bitwidth 169 in over sample bytes 2 [ 289.820370][ T5706] usb 7-1: config 0 descriptor?? [ 289.828430][ T5799] usb 1-1: 1:1 : unsupported format bits 0x2002 [ 289.845725][ T5799] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 289.863997][ T5799] usb 1-1: unit 8 not found! [ 289.936935][T12526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2704'. [ 289.980069][ T5799] usb 1-1: USB disconnect, device number 40 [ 290.084216][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.173315][T12532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2707'. [ 290.254839][ T5741] hid_parser_main: 28 callbacks suppressed [ 290.254858][ T5741] hid-generic 0006:0008:0001.003E: unknown main item tag 0x0 [ 290.281513][ T5741] hid-generic 0006:0008:0001.003E: unknown main item tag 0x0 [ 290.289047][ T5741] hid-generic 0006:0008:0001.003E: unknown main item tag 0x0 [ 290.296996][ T5741] hid-generic 0006:0008:0001.003E: unknown main item tag 0x0 [ 290.304856][ T5741] hid-generic 0006:0008:0001.003E: unknown main item tag 0x0 [ 290.313254][ T5741] hid-generic 0006:0008:0001.003E: unknown main item tag 0x0 [ 290.327038][ T5741] hid-generic 0006:0008:0001.003E: unknown main item tag 0x0 [ 290.341047][ T5741] hid-generic 0006:0008:0001.003E: unknown main item tag 0x0 [ 290.348972][ T5741] hid-generic 0006:0008:0001.003E: unknown main item tag 0x0 [ 290.356969][ T5741] hid-generic 0006:0008:0001.003E: unknown main item tag 0x0 [ 290.369820][ T5741] hid-generic 0006:0008:0001.003E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 290.486616][T12540] fido_id[12540]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 290.560784][ T988] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 290.662888][ T5747] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 290.689699][ T5706] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.003F/input/input65 [ 290.743241][ T29] audit: type=1400 audit(1778177855.527:784): avc: denied { write } for pid=12548 comm="syz.2.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 290.768225][ T988] usb 5-1: unable to get BOS descriptor or descriptor too short [ 290.787146][ T988] usb 5-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 290.806582][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.820740][ T988] usb 5-1: Product: syz [ 290.829441][ T988] usb 5-1: Manufacturer: syz [ 290.837939][ T5706] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.003F/input/input66 [ 290.860291][ T988] usb 5-1: SerialNumber: syz [ 290.884890][ T5747] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.902382][ T5706] input: syz Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.003F/input/input67 [ 290.914708][ T5747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.939126][ T5747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 290.953050][ T5706] input: syz Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.003F/input/input68 [ 290.967571][ T5747] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.982109][ T5747] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.999448][ T5706] uclogic 0003:256C:006D.003F: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.6-1/input0 [ 291.020271][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.034037][ T5706] usb 7-1: USB disconnect, device number 17 [ 291.044680][ T5747] usb 1-1: config 0 descriptor?? [ 291.312365][ T988] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 291.325323][T12556] fido_id[12556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 291.513675][ T988] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.529923][ T988] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 291.552405][ T5747] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 291.721792][ T988] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 291.863242][ T5706] usb 1-1: USB disconnect, device number 41 [ 291.927018][ T988] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.942097][ T988] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 291.955495][ T988] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 291.965053][ T988] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.011727][ T988] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 292.036295][ T988] usb 5-1: USB disconnect, device number 44 [ 292.078125][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.374202][ T29] audit: type=1400 audit(1778177857.157:785): avc: denied { mounton } for pid=12573 comm="syz.5.2724" path="/proc/993" dev="proc" ino=45133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 292.504931][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2728'. [ 292.514017][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2728'. [ 292.556352][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.611587][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2729'. [ 292.643089][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.653200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.711496][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.780323][T12594] netlink: 'syz.4.2733': attribute type 83 has an invalid length. [ 292.857406][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 292.916309][T12601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.953196][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.200087][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2743'. [ 293.209346][ T5747] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 293.363007][ T5747] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 293.380766][ T5747] usb 5-1: config 0 has no interface number 0 [ 293.386956][ T5747] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 293.398809][ T5747] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 293.411762][ T5747] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 293.437120][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 293.456639][ T5747] usb 5-1: Product: syz [ 293.466307][ T5747] usb 5-1: SerialNumber: syz [ 293.483731][ T5747] usb 5-1: config 0 descriptor?? [ 293.499476][ T5747] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 293.509114][ T5747] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input69 [ 293.700826][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 293.835922][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.935964][ C1] cm109_urb_ctl_callback: 19 callbacks suppressed [ 293.935990][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 293.949867][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 293.957059][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 293.964213][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 293.971460][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 293.978593][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 293.985717][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 293.992969][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.000863][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.007997][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.014951][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 294.024019][ T5799] usb 5-1: USB disconnect, device number 45 [ 294.031728][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.047642][ T5799] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 294.090745][ T5713] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 294.242915][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 294.250332][ T5713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 294.260047][ T5713] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.271208][ T5713] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 294.282934][ T5713] usb 1-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice= 0.40 [ 294.292291][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.300363][ T5713] usb 1-1: Product: syz [ 294.304820][ T5713] usb 1-1: Manufacturer: syz [ 294.309524][ T5713] usb 1-1: SerialNumber: syz [ 294.535298][ T5713] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 294.558455][ T5713] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 294.599364][ T5713] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 294.624947][ T5713] usb 1-1: MIDIStreaming interface descriptor not found [ 294.754845][ T5713] usb 1-1: USB disconnect, device number 42 [ 294.843998][ T8682] udevd[8682]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.112563][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.144800][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2767'. [ 295.180843][ T988] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 295.342260][ T988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.353968][ T988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.369880][ T988] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.385669][ T988] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.395231][ T988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.406610][ T988] usb 6-1: config 0 descriptor?? [ 295.510851][ T5799] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 295.671238][ T5799] usb 1-1: too many configurations: 53, using maximum allowed: 8 [ 295.682469][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.687644][ T5799] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 295.692712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.711876][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.719888][ T5799] usb 1-1: Product: syz [ 295.724099][ T5799] usb 1-1: Manufacturer: syz [ 295.728685][ T5799] usb 1-1: SerialNumber: syz [ 295.832629][ T988] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 295.998022][ T5799] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 296.022286][ T5799] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 296.042414][ T5799] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 296.070165][ T5799] usb 1-1: USB disconnect, device number 43 [ 296.133305][ T988] usb 6-1: USB disconnect, device number 41 [ 296.203169][ T5747] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 296.380771][ T5747] usb 7-1: Using ep0 maxpacket: 16 [ 296.393217][ T5747] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.416452][ T5747] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 296.433200][ T5747] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 296.449012][ T5747] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.461334][ T5747] usb 7-1: config 0 descriptor?? [ 296.721893][T12706] input: syz0 as /devices/virtual/input/input74 [ 297.386638][ T29] audit: type=1400 audit(1778177862.177:786): avc: denied { write } for pid=12712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.663877][ T29] audit: type=1400 audit(1778177862.457:787): avc: denied { write } for pid=12737 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.200233][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'. [ 298.232142][ T5713] net_ratelimit: 7 callbacks suppressed [ 298.232157][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.313258][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.351781][T12761] ip6erspan0: entered allmulticast mode [ 298.414607][T12766] netlink: 'syz.0.2797': attribute type 10 has an invalid length. [ 298.553854][T12765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.608295][T12765] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.655842][T12765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.716066][ T29] audit: type=1400 audit(1778177863.507:788): avc: denied { write } for pid=12746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.740947][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.749277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.796545][T12765] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 298.853283][T12766] syz_tun: entered promiscuous mode [ 298.899035][ T29] audit: type=1400 audit(1778177863.687:789): avc: denied { write } for pid=12782 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.951103][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.005098][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.012290][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.040592][ T5747] usbhid 7-1:0.0: can't add hid device: -71 [ 299.060818][ T988] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 299.078677][ T5747] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 299.124508][ T5747] usb 7-1: USB disconnect, device number 18 [ 299.193428][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 299.201458][ T5741] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 299.219355][ T5741] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 299.250253][T12796] loop5: detected capacity change from 0 to 7 [ 299.256643][ T988] usb 6-1: Using ep0 maxpacket: 32 [ 299.270920][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.272096][ T988] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 299.305508][T12796] Dev loop5: unable to read RDB block 7 [ 299.311381][T12796] loop5: unable to read partition table [ 299.317268][T12796] loop5: partition table beyond EOD, truncated [ 299.324659][T12796] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 299.338079][ T988] usb 6-1: config 0 has no interface number 0 [ 299.353724][ T988] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.394084][ T988] usb 6-1: config 0 interface 85 has no altsetting 0 [ 299.422542][ T988] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 299.449930][ T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.470691][ T988] usb 6-1: Product: syz [ 299.480951][ T988] usb 6-1: Manufacturer: syz [ 299.487670][ T988] usb 6-1: SerialNumber: syz [ 299.522398][ T5734] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 299.522437][ T988] usb 6-1: config 0 descriptor?? [ 299.694711][ T29] audit: type=1400 audit(1778177864.467:790): avc: denied { write } for pid=12786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.750879][ T5734] usb 1-1: Using ep0 maxpacket: 16 [ 299.759061][ T5734] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 299.783951][ T5734] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.796284][ T5734] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 299.825545][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.859198][ T5734] usb 1-1: config 0 descriptor?? [ 299.946305][T12824] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2814'. [ 299.955347][ T29] audit: type=1400 audit(1778177864.737:791): avc: denied { write } for pid=12822 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.999092][ T988] appletouch 6-1:0.85: Geyser mode initialized. [ 300.026301][ T988] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input76 [ 300.295931][ T5734] hid_parser_main: 7 callbacks suppressed [ 300.295955][ T5734] asus 0003:0B05:1822.0042: unknown main item tag 0x0 [ 300.311893][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.343688][ T5734] asus 0003:0B05:1822.0042: unknown main item tag 0x0 [ 300.359666][ T5734] asus 0003:0B05:1822.0042: unknown main item tag 0x0 [ 300.374854][ T5734] asus 0003:0B05:1822.0042: unknown main item tag 0x0 [ 300.408458][ T5734] asus 0003:0B05:1822.0042: unknown main item tag 0x0 [ 300.423202][ T5734] asus 0003:0B05:1822.0042: unknown main item tag 0x0 [ 300.438141][T12842] loop8: detected capacity change from 0 to 7 [ 300.447187][ T5734] asus 0003:0B05:1822.0042: unknown main item tag 0x0 [ 300.456904][ T5734] asus 0003:0B05:1822.0042: unknown main item tag 0x0 [ 300.467190][T12842] Dev loop8: unable to read RDB block 7 [ 300.477432][T12842] loop8: unable to read partition table [ 300.486126][ T5734] asus 0003:0B05:1822.0042: unknown main item tag 0x0 [ 300.496391][T12842] loop8: partition table beyond EOD, truncated [ 300.502652][ T5734] asus 0003:0B05:1822.0042: unknown main item tag 0x0 [ 300.516981][T12842] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 300.525338][ T988] usb 6-1: USB disconnect, device number 42 [ 300.535744][ T5734] asus 0003:0B05:1822.0042: hidraw0: USB HID v0.08 Device [HID 0b05:1822] on usb-dummy_hcd.0-1/input0 [ 300.599236][ T5734] usb 1-1: USB disconnect, device number 44 [ 300.673296][ T988] appletouch 6-1:0.85: input: appletouch disconnected [ 300.728063][T12850] fido_id[12850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 300.805074][ T29] audit: type=1400 audit(1778177865.597:792): avc: denied { write } for pid=12833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.960243][ T29] audit: type=1400 audit(1778177865.747:793): avc: denied { write } for pid=12860 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.155365][T12870] program syz.0.2827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.210143][T12876] program syz.0.2827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.270782][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 301.278641][ T5741] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 301.298413][ T5741] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 301.352310][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.525089][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.707469][ T29] audit: type=1400 audit(1778177866.487:794): avc: denied { write } for pid=12868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.964259][ T29] audit: type=1400 audit(1778177866.757:795): avc: denied { write } for pid=12912 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.733729][ T29] audit: type=1400 audit(1778177867.527:796): avc: denied { write } for pid=12932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.932064][ T29] audit: type=1400 audit(1778177867.727:797): avc: denied { write } for pid=12973 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.350762][ T4930] Bluetooth: hci4: command 0x0405 tx timeout [ 303.358548][ T5741] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 303.378857][ T5741] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 303.433095][ T46] net_ratelimit: 2 callbacks suppressed [ 303.433112][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.721018][ T5747] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 303.882082][ T5747] usb 5-1: Using ep0 maxpacket: 16 [ 303.906468][ T5747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.920348][ T5747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.948003][ T5747] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.969736][ T5747] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 303.979203][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.993972][ T5747] usb 5-1: config 0 descriptor?? [ 304.073218][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.415292][ T5747] microsoft 0003:045E:07DA.0043: ignoring exceeding usage max [ 304.470840][ T4930] Bluetooth: hci1: command 0x0406 tx timeout [ 304.484866][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.566845][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.575222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.623230][ T5747] microsoft 0003:045E:07DA.0043: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 304.658075][ T5747] microsoft 0003:045E:07DA.0043: no inputs found [ 304.670139][ T5747] microsoft 0003:045E:07DA.0043: could not initialize ff, continuing anyway [ 304.691101][ T5713] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 304.711778][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.862301][ T5713] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.880571][ T5713] usb 3-1: config 0 has no interface number 0 [ 304.885993][T13060] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2900'. [ 304.896975][ T5713] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.899377][ T988] usb 5-1: USB disconnect, device number 46 [ 304.920602][ T5713] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.922354][T13060] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2900'. [ 304.941419][T13060] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2900'. [ 304.953584][ T5713] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 304.966706][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.988122][ T5713] usb 3-1: config 0 descriptor?? [ 305.050137][T13064] Invalid argument reading file caps for ./file0 [ 305.098459][T13068] input: syz1 as /devices/virtual/input/input77 [ 305.330427][T13077] tap0: tun_chr_ioctl cmd 2147767511 [ 305.336982][T13077] tap0: tun_chr_ioctl cmd 1074025675 [ 305.343236][T13077] tap0: persist disabled [ 305.352093][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.363497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.436938][ T5713] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0044/input/input78 [ 305.510978][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.587072][ T5713] holtek_kbd 0003:04D9:A055.0044: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 305.643675][ T5713] usb 3-1: USB disconnect, device number 41 [ 305.659132][T13086] input: syz0 as /devices/virtual/input/input79 [ 305.746574][T13085] fido_id[13085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 306.550916][ T4930] Bluetooth: hci1: command 0x0406 tx timeout [ 306.556987][ T5741] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 306.563237][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.571584][ T5741] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 306.893112][T13129] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2932'. [ 307.572385][ T5747] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 307.731823][ T5747] usb 3-1: Using ep0 maxpacket: 16 [ 307.744790][ T5747] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 307.761406][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.772334][ T5747] usb 3-1: config 0 descriptor?? [ 307.797546][ T5747] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 307.878737][ T29] audit: type=1400 audit(1778177872.667:798): avc: denied { lock } for pid=13176 comm="syz.4.2955" path="socket:[47768]" dev="sockfs" ino=47768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 308.381003][ T988] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 308.420273][ T29] audit: type=1400 audit(1778177873.207:799): avc: denied { connect } for pid=13191 comm="syz.0.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 308.444443][ T29] audit: type=1400 audit(1778177873.227:800): avc: denied { setopt } for pid=13191 comm="syz.0.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 308.550813][ T988] usb 7-1: Using ep0 maxpacket: 32 [ 308.557159][ T988] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 308.568646][ T988] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 308.579547][ T988] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 308.588898][ T988] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 308.597269][ T988] usb 7-1: Product: syz [ 308.601533][ T988] usb 7-1: SerialNumber: syz [ 308.608715][ T988] usb 7-1: config 0 descriptor?? [ 308.632267][ T5741] net_ratelimit: 5 callbacks suppressed [ 308.632283][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.710966][ T4930] Bluetooth: hci5: command 0x1003 tx timeout [ 308.718139][ T5629] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 308.808784][ T5747] gspca_sonixj: reg_w1 err -71 [ 308.830935][ T5747] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 308.841160][ T5747] usb 3-1: USB disconnect, device number 42 [ 308.886481][ T5741] usb 7-1: USB disconnect, device number 19 [ 309.191267][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.525424][T13220] netlink: 'syz.2.2971': attribute type 39 has an invalid length. [ 309.681545][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.689846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.730165][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.740429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.846530][T13233] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 309.882034][T13233] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 310.316662][T13253] bridge1: entered promiscuous mode [ 310.323135][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.331399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.339696][ T988] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 310.351165][T13253] bridge1: entered allmulticast mode [ 310.364573][T13253] team0: Port device bridge1 added [ 310.396856][T13257] bridge0: port 3(team0) entered blocking state [ 310.425618][T13257] bridge0: port 3(team0) entered disabled state [ 310.458476][T13257] team0: entered allmulticast mode [ 310.468296][T13257] team_slave_0: entered allmulticast mode [ 310.471372][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.483049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.488545][T13257] team_slave_1: entered allmulticast mode [ 310.514687][ T988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.526612][T13257] team0: entered promiscuous mode [ 310.534895][ T988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.540697][T13257] team_slave_0: entered promiscuous mode [ 310.555263][ T988] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 310.564990][T13257] team_slave_1: entered promiscuous mode [ 310.576501][ T988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.614752][ T988] usb 3-1: config 0 descriptor?? [ 311.067997][ T10] hid_parser_main: 41 callbacks suppressed [ 311.068016][ T10] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 311.094661][ T988] savu 0003:1E7D:2D5A.0046: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 311.124362][ T10] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 311.148769][ T10] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 311.166514][ T10] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 311.177305][ T10] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 311.185127][ T10] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 311.193008][ T10] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 311.207846][ T10] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 311.215916][ T10] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 311.223472][ T10] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 311.236630][ T10] hid-generic 0000:0000:0000.0045: hidraw1: HID v0.00 Device [Á“ƽZÄæwÇý[baÿ–é|\rnÀ)A¼#6”oÒ¯ô?•ða Iü¸äãs„Ö5hVõ3ñ®(;éò [ 311.236630][ T10] ãуPÔ$zÉ·‡X$©·à˜w[SÖì–ÀRìÑeÑzx—ÞuñS r»œÏláì[µ5l'˜ZCz2ñ] on [ 311.277627][ T5747] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 311.347104][T13290] fido_id[13290]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 311.377157][ T10] usb 3-1: USB disconnect, device number 43 [ 311.440785][ T988] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 311.448510][ T5747] usb 6-1: Using ep0 maxpacket: 16 [ 311.460100][ T5747] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 311.477009][ T5747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.498343][ T5747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.517894][ T5747] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 311.542836][ T5747] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 311.560742][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.574095][ T5747] usb 6-1: config 0 descriptor?? [ 311.613724][ T988] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.624340][ T988] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.640418][ T988] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.649957][ T988] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.658208][ T988] usb 7-1: Product: syz [ 311.662922][ T988] usb 7-1: Manufacturer: syz [ 311.667623][ T988] usb 7-1: SerialNumber: syz [ 312.090356][ T5747] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0047/input/input81 [ 312.445694][ T5747] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0047/input/input82 [ 312.504150][ T988] cdc_ncm 7-1:1.0: SET_NTB_FORMAT failed [ 312.525802][ T988] cdc_ncm 7-1:1.0: bind() failure [ 312.557982][ T5747] kye 0003:0458:5013.0047: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 312.581629][ T988] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 312.602234][ T988] cdc_ncm 7-1:1.1: bind() failure [ 312.627956][ T5747] usb 6-1: USB disconnect, device number 43 [ 312.634427][ T988] usb 7-1: USB disconnect, device number 20 [ 312.645630][ T29] audit: type=1326 audit(1778177877.437:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 312.683562][ T29] audit: type=1326 audit(1778177877.437:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 312.713693][T13305] fido_id[13305]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 312.721926][ T29] audit: type=1326 audit(1778177877.467:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 312.773120][ T29] audit: type=1326 audit(1778177877.467:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 312.810461][ T29] audit: type=1326 audit(1778177877.467:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 312.903600][ T29] audit: type=1326 audit(1778177877.467:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 312.933159][ T29] audit: type=1326 audit(1778177877.467:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 312.961537][ T29] audit: type=1326 audit(1778177877.477:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 312.993157][ T29] audit: type=1326 audit(1778177877.477:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 313.021685][ T29] audit: type=1326 audit(1778177877.477:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 313.073051][ T29] audit: type=1326 audit(1778177877.477:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 313.151721][ T29] audit: type=1326 audit(1778177877.477:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 313.207668][ T29] audit: type=1326 audit(1778177877.477:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 313.318534][ T29] audit: type=1326 audit(1778177877.477:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 313.380483][ T29] audit: type=1326 audit(1778177877.477:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13306 comm="syz.0.3010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f569519cdd9 code=0x7ffc0000 [ 313.533871][ T5747] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 313.692910][ T5747] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 313.707524][ T5747] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.723224][ T5747] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.744075][ T5747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 313.773494][ T5747] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.796982][ T5747] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.840825][ T5747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 313.868037][ T5747] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.897306][ T5747] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.914287][ T5713] net_ratelimit: 8 callbacks suppressed [ 313.914306][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.928552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.930835][ T5747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 313.953482][ T5747] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.979957][ T5747] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.991407][ T5747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 314.005327][ T5747] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.011324][T13354] all (unregistering): Released all slaves [ 314.014893][ T5747] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.031106][ T5747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 314.038648][ T5747] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.048318][ T5747] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.059375][ T5747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 314.067157][ T5747] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.077438][ T5747] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.089296][ T5747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 314.098941][ T5747] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.108156][ T5747] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.110743][ T5799] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 314.119995][ T5747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 314.140518][ T5747] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 314.149950][ T5747] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 314.160095][ T5747] usb 3-1: Product: syz [ 314.164413][ T5747] usb 3-1: Manufacturer: syz [ 314.169093][ T5747] usb 3-1: SerialNumber: syz [ 314.182337][ T5747] usb 3-1: config 0 descriptor?? [ 314.192949][ T5747] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 314.210818][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 314.272475][ T5799] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 314.284410][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.307141][ T5799] usb 7-1: config 0 descriptor?? [ 314.313788][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.333721][ T5799] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 314.363648][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.383828][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 314.404599][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 314.416697][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.425171][ T10] usb 5-1: Product: syz [ 314.429545][ T10] usb 5-1: Manufacturer: syz [ 314.434404][ T10] usb 5-1: SerialNumber: syz [ 314.455884][ T10] cdc_mbim 5-1:1.0: skipping garbage [ 314.532708][T13366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3038'. [ 314.597976][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 314.608228][ T5747] usb 3-1: USB disconnect, device number 44 [ 314.620213][T13368] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 314.628608][ T5747] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 314.666637][T13352] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 314.961953][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.970302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.986376][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.994793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.149366][ T5799] gspca_stv06xx: I2C: Read error writing address: -71 [ 315.159708][ T5799] usb 7-1: USB disconnect, device number 21 [ 315.287972][T13352] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 315.302742][ T10] cdc_mbim 5-1:1.0: setting rx_max = 16384 [ 315.359971][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3048'. [ 315.430880][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.439180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.502923][ T10] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 315.517017][ T10] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 315.601134][ T10] wwan wwan0: port wwan0mbim0 attached [ 315.641469][ T10] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, a6:88:8d:d0:14:15 [ 315.667653][ T10] usb 5-1: USB disconnect, device number 47 [ 315.692055][ T10] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 315.818132][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 315.914287][T13411] netlink: 'syz.6.3056': attribute type 2 has an invalid length. [ 315.944081][T13411] netlink: 'syz.6.3056': attribute type 2 has an invalid length. [ 315.995106][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.036110][T13413] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 316.049052][T13413] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 316.428990][T13426] xt_hashlimit: size too large, truncated to 1048576 [ 316.565418][T13435] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 316.565418][T13435] The task syz.6.3064 (13435) triggered the difference, watch for misbehavior. [ 316.861037][ T9] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 316.874817][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.885245][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.042905][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.086105][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.098686][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 317.110050][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 317.126724][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.152218][T13437] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.182345][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 317.200728][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 317.211204][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 317.220687][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 317.239078][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 317.261538][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 317.546787][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 317.553657][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 317.559810][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 317.684615][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 317.691530][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 317.698097][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 317.704700][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 317.711105][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 317.717718][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 317.723842][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 317.860744][ T9] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 317.871329][ T5747] usb 3-1: USB disconnect, device number 45 [ 317.880732][ T5799] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 318.022490][ T9] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 318.040750][ T9] usb 6-1: config 0 has no interface number 0 [ 318.047219][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 318.058825][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 318.061274][ T5799] usb 1-1: Using ep0 maxpacket: 16 [ 318.075879][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 318.083249][ T5799] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 318.085293][ T9] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 318.100706][ T5799] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 318.101253][ T9] usb 6-1: Product: syz [ 318.113477][ T5799] usb 1-1: config 0 has no interface number 0 [ 318.113521][ T5799] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 318.113549][ T5799] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 318.121101][ T9] usb 6-1: SerialNumber: syz [ 318.144701][ T5799] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 318.155857][ T9] usb 6-1: config 0 descriptor?? [ 318.166258][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.166495][ T9] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 318.180623][ T5799] usb 1-1: Product: syz [ 318.185186][ T5799] usb 1-1: Manufacturer: syz [ 318.192576][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input83 [ 318.202318][ T5799] usb 1-1: SerialNumber: syz [ 318.220615][ T5799] usb 1-1: config 0 descriptor?? [ 318.238358][T13478] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 318.246399][T13478] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 318.416631][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 318.460383][T13478] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 318.472624][T13478] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 318.499582][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 318.569726][ T4930] Bluetooth: hci5: sending frame failed (-49) [ 318.576773][ T5629] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 318.695713][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.702933][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.710148][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.717392][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.724573][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.731900][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.742396][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.750719][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.757774][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 318.757788][ T29] audit: type=1400 audit(1778177883.547:824): avc: denied { write } for pid=13505 comm="syz.2.3098" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 318.763832][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.796328][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.803687][ T5713] usb 6-1: USB disconnect, device number 44 [ 318.803740][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 318.818941][ T5713] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 318.895018][ T5799] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 318.915709][ T5799] asix 1-1:0.251: probe with driver asix failed with error -524 [ 319.111640][ T5713] net_ratelimit: 9 callbacks suppressed [ 319.111659][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.119410][ T9] usb 1-1: USB disconnect, device number 45 [ 319.125837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.072961][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.081364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.094847][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.511541][ T29] audit: type=1326 audit(1778177885.307:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.5.3134" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f375659cdd9 code=0x0 [ 320.880779][ T5713] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 321.021041][ T5741] hid_parser_main: 6 callbacks suppressed [ 321.021060][ T5741] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 321.035330][ T5799] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 321.061120][ T5713] usb 3-1: Using ep0 maxpacket: 8 [ 321.075514][ T5713] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 321.091200][ T5741] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.109797][ T5713] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.120470][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.128779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.143481][ T5713] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.155935][ T5713] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.166102][ T5713] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.179447][ T5713] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 321.188773][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.198431][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.206778][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.220766][ T5799] usb 7-1: Using ep0 maxpacket: 8 [ 321.235970][ T5799] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 321.264629][ T5799] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.283449][ T5799] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.295036][ T5799] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.305476][ T5799] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.319204][ T5799] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 321.328663][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.418845][ T5713] usb 3-1: usb_control_msg returned -32 [ 321.424631][ T46] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 321.439253][ T5713] usbtmc 3-1:16.0: can't read capabilities [ 321.552639][ T5799] usb 7-1: usb_control_msg returned -32 [ 321.559965][T13607] hid-generic 0000:0000:0000.0048: pid 13607 passed too large report [ 321.573224][ T5799] usbtmc 7-1:16.0: can't read capabilities [ 321.605003][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.615521][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 321.633516][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 321.654771][ T46] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 321.669158][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.689375][T13609] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 321.698904][ T46] hub 1-1:1.0: bad descriptor, ignoring hub [ 321.709263][ T46] hub 1-1:1.0: probe with driver hub failed with error -5 [ 321.722431][ T46] cdc_wdm 1-1:1.0: skipping garbage [ 321.730855][ T46] cdc_wdm 1-1:1.0: skipping garbage [ 321.741308][ T46] cdc_wdm 1-1:1.0: cdc-wdm2: USB WDM device [ 321.750851][ T46] cdc_wdm 1-1:1.0: Unknown control protocol [ 321.800476][T13619] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 321.810549][ T5747] usb 3-1: USB disconnect, device number 46 [ 321.997381][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.032426][ T46] usb 1-1: USB disconnect, device number 46 [ 322.342347][T13640] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 322.408996][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 322.426684][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3153'. [ 322.437497][T13643] netlink: 'syz.2.3153': attribute type 7 has an invalid length. [ 322.485742][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.485853][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 322.520546][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.521132][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3153'. [ 322.548650][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.551751][T13643] netlink: 'syz.2.3153': attribute type 7 has an invalid length. [ 322.581769][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.737539][ T29] audit: type=1400 audit(1778177887.527:826): avc: denied { name_bind 0x1000000 } for pid=13652 comm="syz.0.3157" path="socket:[51264]" dev="sockfs" ino=51264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 322.871448][ T5747] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 323.029412][ T46] libceph: connect (1)[c::]:6789 error -13 [ 323.050121][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 323.056444][ T29] audit: type=1400 audit(1778177887.847:827): avc: denied { name_bind } for pid=13668 comm="syz.0.3163" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 323.056660][ T5747] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 323.097864][T13664] ceph: No mds server is up or the cluster is laggy [ 323.105181][ T46] libceph: connect (1)[c::]:6789 error -13 [ 323.115924][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 323.123017][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.132521][ T5747] usb 6-1: Product: syz [ 323.136695][ T5747] usb 6-1: Manufacturer: syz [ 323.147401][ T5747] usb 6-1: SerialNumber: syz [ 323.390776][ T988] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 323.542506][ T988] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 323.551814][ T988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.562696][ T988] usb 1-1: config 0 descriptor?? [ 323.567988][ T5747] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 323.581655][ T988] cp210x 1-1:0.0: cp210x converter detected [ 323.814804][ T9] usb 7-1: USB disconnect, device number 22 [ 323.991665][ T988] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 324.026502][ T988] usb 1-1: cp210x converter now attached to ttyUSB0 [ 324.201341][ T5747] net_ratelimit: 8 callbacks suppressed [ 324.201366][ T5747] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 324.226037][ T5713] usb 1-1: USB disconnect, device number 47 [ 324.239950][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.248259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.250458][ T5747] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 324.257939][T13682] ceph: No mds server is up or the cluster is laggy [ 324.269623][ T5747] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 324.277277][ T5713] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 324.295363][ T5747] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 324.319005][ T5713] cp210x 1-1:0.0: device disconnected [ 324.322569][ T5747] usb 6-1: USB disconnect, device number 45 [ 324.452906][ T29] audit: type=1400 audit(1778177889.247:828): avc: denied { create } for pid=13689 comm="syz.6.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 324.476945][ T29] audit: type=1400 audit(1778177889.267:829): avc: denied { bind } for pid=13689 comm="syz.6.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 324.560744][ T46] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 324.722399][ T46] usb 5-1: config 1 interface 0 has no altsetting 0 [ 324.739043][ T46] usb 5-1: string descriptor 0 read error: -22 [ 324.749093][ T46] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 324.759024][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.871297][ T5629] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 325.209807][ T46] steelseries 0003:1038:1410.0049: unknown main item tag 0x0 [ 325.227223][ T46] steelseries 0003:1038:1410.0049: unknown main item tag 0x0 [ 325.243308][ T46] steelseries 0003:1038:1410.0049: unknown main item tag 0x0 [ 325.252597][ T46] steelseries 0003:1038:1410.0049: unknown main item tag 0x0 [ 325.260150][ T46] steelseries 0003:1038:1410.0049: unknown main item tag 0x0 [ 325.267714][ T46] steelseries 0003:1038:1410.0049: unknown main item tag 0x0 [ 325.276111][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.284396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.292884][ T46] steelseries 0003:1038:1410.0049: unknown main item tag 0x0 [ 325.302279][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.310511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.319423][ T46] steelseries 0003:1038:1410.0049: unknown main item tag 0x0 [ 325.327900][ T46] steelseries 0003:1038:1410.0049: unknown main item tag 0x0 [ 325.387480][ T46] steelseries 0003:1038:1410.0049: not enough fields in HID_OUTPUT_REPORT 0 [ 325.460804][ T5747] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 325.472839][ T46] usb 5-1: USB disconnect, device number 48 [ 325.561058][T13729] loop6: detected capacity change from 0 to 2640 [ 325.568020][T13729] buffer_io_error: 50 callbacks suppressed [ 325.568038][T13729] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.585306][T13729] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.594798][T13729] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.604787][T13729] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.614827][T13729] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.626948][T13733] blk_print_req_error: 51 callbacks suppressed [ 325.626967][T13733] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 325.643087][ T5747] usb 6-1: Using ep0 maxpacket: 8 [ 325.643445][T13729] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.648672][T13733] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 325.657311][T13729] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.667693][ T5747] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 325.675378][T13729] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.682608][T13733] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 325.697205][T13729] ldm_validate_partition_table(): Disk read failed. [ 325.700357][ T5747] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.709012][T13729] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.716446][T13733] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 325.724498][T13729] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.734134][ T5747] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.751727][ T5747] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.762544][T13733] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 325.772487][ T5747] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.772561][T13729] Dev loop6: unable to read RDB block 0 [ 325.785630][T13733] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 325.785714][T13733] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 325.811110][ T5747] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 325.811371][T13729] loop6: unable to read partition table [ 325.820217][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.833500][T13729] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 325.835464][T13733] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 325.843000][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.063867][ T29] audit: type=1326 audit(1778177890.857:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13739 comm="syz.4.3192" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72a379cdd9 code=0x0 [ 326.073497][T13742] netlink: 272 bytes leftover after parsing attributes in process `syz.6.3191'. [ 326.092320][ T29] audit: type=1400 audit(1778177890.867:831): avc: denied { nlmsg_read } for pid=13741 comm="syz.6.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 326.107491][ T5747] usb 6-1: usb_control_msg returned -32 [ 326.131331][ T5747] usbtmc 6-1:16.0: can't read capabilities [ 326.311714][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.319975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.335864][T13754] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3196'. [ 326.415368][ T29] audit: type=1400 audit(1778177891.207:832): avc: denied { append } for pid=13758 comm="syz.6.3199" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 326.526132][T13762] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 326.536824][ T5747] usb 6-1: USB disconnect, device number 46 [ 326.627353][T13768] input: syz1 as /devices/virtual/input/input84 [ 326.725550][T13772] netlink: 'syz.6.3205': attribute type 1 has an invalid length. [ 326.752104][T13772] bond0: entered promiscuous mode [ 326.757481][T13772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.788303][T13772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.801200][T13772] bond0: (slave bond1): making interface the new active one [ 326.818987][T13772] bond1: entered promiscuous mode [ 326.830071][T13772] bond0: (slave bond1): Enslaving as an active interface with an up link [ 327.201596][T13789] netlink: 'syz.4.3209': attribute type 1 has an invalid length. [ 327.241259][T13789] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3209'. [ 327.283939][T13789] nbd: illegal input index 1852732788 [ 327.540807][ T988] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 327.546735][ T29] audit: type=1400 audit(1778177892.337:833): avc: denied { write } for pid=13778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.710739][ T988] usb 6-1: Using ep0 maxpacket: 8 [ 327.720543][ T988] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 327.739342][ T988] usb 6-1: config 0 has no interface number 0 [ 327.752591][ T988] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 327.790140][ T988] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 327.830844][ T988] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 327.841321][ T29] audit: type=1400 audit(1778177892.627:834): avc: denied { write } for pid=13809 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.882866][ T988] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 327.939329][ T988] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.975578][T13814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.013100][ T988] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 328.042866][ T5734] hid_parser_main: 4003 callbacks suppressed [ 328.042883][ T5734] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 328.045377][ T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.087479][ T5734] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 328.134901][ T988] usb 6-1: Product: syz [ 328.159523][ T988] usb 6-1: Manufacturer: syz [ 328.176167][ T988] usb 6-1: SerialNumber: syz [ 328.204242][ T988] usb 6-1: config 0 descriptor?? [ 328.459470][ T988] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 328.631173][ T5734] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 328.709687][T13846] input: syz1 as /devices/virtual/input/input85 [ 328.755063][ T988] usb 6-1: USB disconnect, device number 47 [ 328.799627][ T29] audit: type=1400 audit(1778177893.587:835): avc: denied { write } for pid=13822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.849850][ T5734] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 328.871008][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.887960][ T5734] usb 5-1: Product: syz [ 328.901341][ T5734] usb 5-1: Manufacturer: syz [ 328.908048][ T5734] usb 5-1: SerialNumber: syz [ 328.918622][ T5734] usb 5-1: config 0 descriptor?? [ 328.957921][ T29] audit: type=1400 audit(1778177893.747:836): avc: denied { write } for pid=13853 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.994722][T13855] syz.6.3230(13855): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 329.198717][T13860] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.222698][T13860] bond2: (slave lo): Enslaving as an active interface with an up link [ 329.233526][T13860] net_ratelimit: 8 callbacks suppressed [ 329.233543][T13860] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 329.264167][T13868] kernel read not supported for file /file0 (pid: 13868 comm: syz.2.3235) [ 329.275281][ T29] audit: type=1800 audit(1778177894.067:837): pid=13868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3235" name="file0" dev="mqueue" ino=50656 res=0 errno=0 [ 329.431508][ T988] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 329.435148][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.447475][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.594639][ T988] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.615689][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.636128][ T988] usb 1-1: Product: syz [ 329.641101][ T988] usb 1-1: Manufacturer: syz [ 329.645742][ T988] usb 1-1: SerialNumber: syz [ 329.657650][ T988] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 329.677065][ T5747] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 329.687062][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.695284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.883176][T13885] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 329.948140][ T5734] usb 5-1: non-Atmel transceiver xxxx005a [ 330.065880][T13895] netlink: 'syz.2.3246': attribute type 8 has an invalid length. [ 330.082589][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3246'. [ 330.115621][T13895] bond0: entered promiscuous mode [ 330.129895][T13895] bond_slave_0: entered promiscuous mode [ 330.146646][T13895] bond_slave_1: entered promiscuous mode [ 330.159209][ T5734] usb 5-1: Firmware version (0.0) predates our first public release. [ 330.183248][ T5734] usb 5-1: Please update to version 0.2 or newer [ 330.193637][T13895] gretap0: entered promiscuous mode [ 330.204719][T13895] ip6gretap0: entered promiscuous mode [ 330.210564][ T5734] usb 5-1: atusb_probe: initialization failed, error = -19 [ 330.226557][T13895] debugfs: 'hsr1' already exists in 'hsr' [ 330.228357][ T5734] usb 5-1: USB disconnect, device number 49 [ 330.258414][T13895] Cannot create hsr debugfs directory [ 330.289605][T13895] hsr1: entered promiscuous mode [ 330.474715][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.483071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.518044][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.526528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.586035][ T5713] usb 1-1: USB disconnect, device number 48 [ 330.871116][ T46] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 331.033535][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.058444][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.095026][ T29] audit: type=1400 audit(1778177895.887:838): avc: denied { shutdown } for pid=13936 comm="syz.4.3266" laddr=172.20.20.67 lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 331.137582][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.147079][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.155389][ T46] usb 3-1: Product: syz [ 331.161217][ T46] usb 3-1: Manufacturer: syz [ 331.166138][ T46] usb 3-1: SerialNumber: syz [ 331.189553][ T46] cdc_mbim 3-1:1.0: skipping garbage [ 331.203601][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3267'. [ 331.214075][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3267'. [ 331.239607][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3267'. [ 331.239648][ T1171] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.248684][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3267'. [ 331.279076][ T1171] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.290282][ T1171] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.317907][ T1171] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.434749][ T5747] usb 1-1: Service connection timeout for: 258 [ 331.441027][ T5747] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 331.460143][ T5747] ath9k_htc: Failed to initialize the device [ 331.478277][ T5713] usb 1-1: ath9k_htc: USB layer deinitialized [ 331.527882][T13952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.592676][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.237287][ T46] cdc_mbim 3-1:1.0: bind() failure [ 332.271385][ T46] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 332.293652][ T46] cdc_ncm 3-1:1.1: bind() failure [ 332.502974][ T5799] usb 3-1: USB disconnect, device number 47 [ 332.735520][ T46] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 332.830992][T13985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.840983][ T145] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 332.855701][ T145] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 332.913164][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 332.937443][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.960950][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.011201][ T46] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 333.021955][ T145] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 333.030712][ T46] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 333.032095][ T145] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 333.050762][ T46] usb 6-1: Manufacturer: syz [ 333.073110][ T46] usb 6-1: config 0 descriptor?? [ 333.139624][ T145] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 333.169492][ T145] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 333.285861][ T4930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.304763][ T4930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.316146][ T145] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 333.326821][ T4930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.340537][ T4930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.349315][ T145] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 333.364523][ T4930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.442454][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.454826][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.463893][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.479073][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.491925][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.556636][ T46] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.004B/input/input86 [ 333.707367][ T46] creative-sb0540 0003:041E:3100.004B: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 333.776911][ T988] usb 6-1: USB disconnect, device number 48 [ 334.118956][T14009] fido_id[14009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 334.147561][ T145] team0: left allmulticast mode [ 334.160963][ T145] team_slave_0: left allmulticast mode [ 334.176229][ T145] team_slave_1: left allmulticast mode [ 334.211109][ T145] team0: left promiscuous mode [ 334.224559][ T145] team_slave_0: left promiscuous mode [ 334.243143][ T145] team_slave_1: left promiscuous mode [ 334.261584][ T145] bridge0: port 3(team0) entered disabled state [ 334.285166][ T145] bridge_slave_1: left allmulticast mode [ 334.303959][ T145] bridge_slave_1: left promiscuous mode [ 334.320033][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.360973][ T145] bridge_slave_0: left allmulticast mode [ 334.366614][ T145] bridge_slave_0: left promiscuous mode [ 334.397747][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.711434][ T5741] net_ratelimit: 10 callbacks suppressed [ 334.711449][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.725293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.839314][T14030] input: syz0 as /devices/virtual/input/input87 [ 334.863787][ T29] audit: type=1400 audit(1778177899.657:839): avc: denied { write } for pid=14015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.089904][ T29] audit: type=1400 audit(1778177899.887:840): avc: denied { write } for pid=14038 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.325261][ T145] team0: Port device bridge1 removed [ 335.403131][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.414241][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.424048][ T145] bond0 (unregistering): Released all slaves [ 335.433924][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.442144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.481589][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 335.494074][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3305'. [ 335.512284][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3305'. [ 335.590864][ T5629] Bluetooth: hci4: command tx timeout [ 335.624466][ T145] tipc: Disabling bearer [ 335.630201][ T145] tipc: Left network mode [ 335.640696][ T29] audit: type=1400 audit(1778177900.427:841): avc: denied { watch watch_reads } for pid=14056 comm="syz.4.3308" path="/655/file1" dev="tmpfs" ino=3411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 335.763147][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.771451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.806926][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.815257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.072388][ T29] audit: type=1400 audit(1778177900.857:842): avc: denied { mounton } for pid=14067 comm="syz.6.3310" path="/360/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 336.357937][ T4930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.363583][ T29] audit: type=1400 audit(1778177901.157:843): avc: denied { write } for pid=14061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.411184][ T4930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.423351][ T4930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.439086][ T4930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.454817][ T4930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.669790][ T29] audit: type=1400 audit(1778177901.447:844): avc: denied { write } for pid=14090 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.788720][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10 [ 336.870860][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.879148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.172077][ T145] hsr_slave_0: left promiscuous mode [ 337.188421][ T145] hsr_slave_1: left promiscuous mode [ 337.223348][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.247359][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.439071][ T29] audit: type=1326 audit(1778177902.227:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="syz.2.3324" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5341d9cdd9 code=0x0 [ 337.535448][ T29] audit: type=1400 audit(1778177902.327:846): avc: denied { mounton } for pid=14125 comm="syz.4.3325" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 337.563924][ T145] team0 (unregistering): Port device team_slave_1 removed [ 337.586348][ T145] team0 (unregistering): Port device team_slave_0 removed [ 337.616971][ T29] audit: type=1400 audit(1778177902.407:847): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 337.659150][ T29] audit: type=1400 audit(1778177902.447:848): avc: denied { unlink } for pid=5612 comm="syz-executor" name="tap62" dev="devtmpfs" ino=3445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.690989][ T5629] Bluetooth: hci4: command tx timeout [ 338.165341][ T1109] smbdirect: ib_dev[syz1] removed [ 338.198275][ T9] infiniband syz1: ib_query_port failed (-19) [ 338.210942][ T5734] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 338.252400][ T145] IPVS: stop unused estimator thread 0... [ 338.258425][T13996] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.268107][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.283870][T13996] bridge_slave_0: entered allmulticast mode [ 338.291466][T13996] bridge_slave_0: entered promiscuous mode [ 338.299519][T13996] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.307195][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.314773][T13996] bridge_slave_1: entered allmulticast mode [ 338.329613][T13996] bridge_slave_1: entered promiscuous mode [ 338.380704][ T5734] usb 7-1: Using ep0 maxpacket: 16 [ 338.409794][ T5734] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 338.431090][ T5734] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 338.446135][ T29] audit: type=1400 audit(1778177903.237:849): avc: denied { write } for pid=14132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.450689][ T5734] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 338.489854][T13996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.517294][T13996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.540926][ T5734] usb 7-1: config 0 interface 0 has no altsetting 0 [ 338.550931][ T5629] Bluetooth: hci0: command tx timeout [ 338.566968][ T5734] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 338.588002][ T29] audit: type=1400 audit(1778177903.377:850): avc: denied { write } for pid=14149 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.614998][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.640559][ T5734] usb 7-1: Product: syz [ 338.656740][ T5734] usb 7-1: Manufacturer: syz [ 338.669907][ T5734] usb 7-1: SerialNumber: syz [ 338.686636][T13996] team0: Port device team_slave_0 added [ 338.695141][ T5734] usb 7-1: config 0 descriptor?? [ 338.709941][T13996] team0: Port device team_slave_1 added [ 338.766422][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11 [ 338.824568][T13996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.840872][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.885457][T13996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.885839][ T4930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.909870][T13996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.918677][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.948825][ T4930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.966741][ T5734] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input88 [ 338.976705][ T4930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.991801][ T4964] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 339.002000][ T4930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.013662][T13996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.029290][ T4930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.071696][ T4964] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 339.102773][ T4964] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 339.123129][ T4964] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 339.192852][T14134] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 339.222733][ T5635] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 339.235910][ T9] usb 7-1: USB disconnect, device number 23 [ 339.237231][T13996] hsr_slave_0: entered promiscuous mode [ 339.262393][ T4964] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 339.278159][T13996] hsr_slave_1: entered promiscuous mode [ 339.302410][T13996] debugfs: 'hsr0' already exists in 'hsr' [ 339.325665][T13996] Cannot create hsr debugfs directory [ 339.612951][T14081] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.620727][T14081] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.627896][T14081] bridge_slave_0: entered allmulticast mode [ 339.635401][T14081] bridge_slave_0: entered promiscuous mode [ 339.655368][T14081] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.663123][T14081] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.670321][T14081] bridge_slave_1: entered allmulticast mode [ 339.677782][T14081] bridge_slave_1: entered promiscuous mode [ 339.741254][T14081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.758069][ T4930] Bluetooth: hci4: command tx timeout [ 339.773740][T14081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.843325][T14081] team0: Port device team_slave_0 added [ 339.876261][T14081] team0: Port device team_slave_1 added [ 339.919983][T14081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.937114][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.966866][T14081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.991055][ T46] net_ratelimit: 9 callbacks suppressed [ 339.991069][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.004867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.029065][T14081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.036351][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.063684][T14081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.083550][ T29] audit: type=1400 audit(1778177904.877:851): avc: denied { write } for pid=14169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.207136][ T29] audit: type=1400 audit(1778177904.997:852): avc: denied { write } for pid=14198 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.288456][T14081] hsr_slave_0: entered promiscuous mode [ 340.303048][T14081] hsr_slave_1: entered promiscuous mode [ 340.314730][T14081] debugfs: 'hsr0' already exists in 'hsr' [ 340.330800][T14081] Cannot create hsr debugfs directory [ 340.359507][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12 [ 340.527708][T14210] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 340.553710][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.562090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.630931][ T4930] Bluetooth: hci0: command tx timeout [ 340.888590][T13996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.031720][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.039988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.055686][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.063941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.086491][T14155] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.106915][T14155] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.114796][ T4930] Bluetooth: hci3: command tx timeout [ 341.131310][T14155] bridge_slave_0: entered allmulticast mode [ 341.154004][T14155] bridge_slave_0: entered promiscuous mode [ 341.168780][T13996] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.179912][T14155] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.199755][T14155] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.207259][T14155] bridge_slave_1: entered allmulticast mode [ 341.222233][T14155] bridge_slave_1: entered promiscuous mode [ 341.268451][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.275620][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.302312][T14155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.329070][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.336219][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.353619][T14155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.424341][T14155] team0: Port device team_slave_0 added [ 341.445280][T14081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.455369][T14155] team0: Port device team_slave_1 added [ 341.488885][T14249] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 341.493284][T14081] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.511286][ T5747] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 341.529453][T14155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.540776][T14155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.567071][T14155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.579644][T14155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.587257][T14155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.617325][T14155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.643301][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.650454][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.692311][ T5747] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 341.706028][ T5747] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.711596][T14155] hsr_slave_0: entered promiscuous mode [ 341.715571][ T5747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.721988][T14155] hsr_slave_1: entered promiscuous mode [ 341.735362][T14155] debugfs: 'hsr0' already exists in 'hsr' [ 341.739863][ T5747] usb 7-1: Product: syz [ 341.741804][T14155] Cannot create hsr debugfs directory [ 341.757029][ T5747] usb 7-1: Manufacturer: syz [ 341.763899][ T5747] usb 7-1: SerialNumber: syz [ 341.788673][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.795813][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.831075][ T4930] Bluetooth: hci4: command tx timeout [ 342.008494][T14243] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 342.071221][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.079457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.430225][T14155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.462153][T14155] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.489934][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.497095][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.540437][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.547622][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.639184][T14243] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 342.710822][ T4930] Bluetooth: hci0: command 0x040f tx timeout [ 342.817744][T13996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.857323][ T5747] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 342.884472][ T5747] cdc_ncm 7-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 342.918018][ T5747] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 342.941954][T14081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.066087][ T5747] cdc_ncm 7-1:1.0: setting tx_max = 64 [ 343.140500][ T5747] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 343.191880][ T4930] Bluetooth: hci3: command tx timeout [ 343.194591][ T5747] usb 7-1: USB disconnect, device number 24 [ 343.239291][ T5747] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 343.305801][T13996] veth0_vlan: entered promiscuous mode [ 343.367459][T13996] veth1_vlan: entered promiscuous mode [ 343.464680][T13996] veth0_macvtap: entered promiscuous mode [ 343.481698][T13996] veth1_macvtap: entered promiscuous mode [ 343.533019][T13996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.554995][T13996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.576335][T14155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.863123][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.879755][T14081] veth0_vlan: entered promiscuous mode [ 343.889581][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.967126][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.988713][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.003723][T14081] veth1_vlan: entered promiscuous mode [ 344.103000][T14081] veth0_macvtap: entered promiscuous mode [ 344.108963][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 344.108978][ T29] audit: type=1400 audit(1778177908.897:854): avc: denied { mounton } for pid=13996 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 344.178442][T14081] veth1_macvtap: entered promiscuous mode [ 344.215618][ T29] audit: type=1400 audit(1778177908.987:855): avc: denied { bind } for pid=14328 comm="syz.6.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 344.252849][T14155] veth0_vlan: entered promiscuous mode [ 344.285257][T14081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.319307][T14081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.339243][T14155] veth1_vlan: entered promiscuous mode [ 344.442409][T14155] veth0_macvtap: entered promiscuous mode [ 344.493774][T14155] veth1_macvtap: entered promiscuous mode [ 344.592103][ T5734] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 344.600126][T14155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.663570][T14155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.719535][T14341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.731263][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.755041][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.782089][ T5734] usb 7-1: Using ep0 maxpacket: 8 [ 344.793733][ T4930] Bluetooth: hci0: command 0x040f tx timeout [ 344.836228][ T5734] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 344.846255][ T5734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.871670][ T5734] pvrusb2: Hardware description: Terratec Grabster AV400 [ 344.879457][ T5734] pvrusb2: ********** [ 344.891758][ T5734] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 344.914785][ T5734] pvrusb2: Important functionality might not be entirely working. [ 344.942003][ T5734] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 344.973775][ T5734] pvrusb2: ********** [ 345.077060][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.095043][ T2363] pvrusb2: Invalid write control endpoint [ 345.101197][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.148235][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.191666][ T5713] net_ratelimit: 83 callbacks suppressed [ 345.191682][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.205572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.216928][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.281302][ T4930] Bluetooth: hci3: command tx timeout [ 345.362171][ T5815] usb 7-1: USB disconnect, device number 25 [ 345.420066][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.446797][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.486437][T14350] xt_hashlimit: size too large, truncated to 1048576 [ 345.612552][ T2363] pvrusb2: Invalid write control endpoint [ 345.633367][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 345.664172][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 345.686167][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 345.718283][ T2363] pvrusb2: Device being rendered inoperable [ 345.754280][ T2363] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 345.809917][ T2363] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 345.884244][ T2363] pvrusb2: Attached sub-driver cx25840 [ 345.913755][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 345.947002][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 346.058604][T14367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.083844][T14371] netlink: 'syz.6.3371': attribute type 1 has an invalid length. [ 346.126095][T14370] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 346.233197][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.241499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.285859][T14371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.288766][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.301512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.316681][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.324982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.428907][T14373] bond3: (slave gretap1): making interface the new active one [ 346.478922][T14373] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 346.499130][ T29] audit: type=1400 audit(1778177911.287:856): avc: denied { search } for pid=14381 comm="syz.7.3376" name="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 346.553189][ T29] audit: type=1400 audit(1778177911.287:857): avc: denied { search } for pid=14381 comm="syz.7.3376" name="/" dev="configfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 346.770498][ T29] audit: type=1400 audit(1778177911.557:858): avc: denied { ioctl } for pid=14389 comm="syz.6.3380" path="socket:[54811]" dev="sockfs" ino=54811 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 346.851626][ T29] audit: type=1400 audit(1778177911.557:859): avc: denied { setopt } for pid=14389 comm="syz.6.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 346.881203][ T4930] Bluetooth: hci0: command 0x040f tx timeout [ 347.351529][ T4930] Bluetooth: hci3: command tx timeout [ 347.357412][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.365708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.071519][ T5815] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 348.126784][ T5815] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 348.416255][T14442] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3397'. [ 348.431518][T14446] ªªªªªª: renamed from wg2 (while UP) [ 348.506200][T14448] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 348.587468][T14452] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.3401'. [ 348.972318][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 349.133548][ T10] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 349.174519][ T10] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 349.215259][ T10] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 349.238892][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.267899][T14460] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 349.268457][T14477] sctp: [Deprecated]: syz.8.3412 (pid 14477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.268457][T14477] Use struct sctp_sack_info instead [ 349.283954][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.322446][ T5747] IPVS: starting estimator thread 0... [ 349.337778][T14479] tipc: Enabled bearer , priority 10 [ 349.421389][T14480] IPVS: using max 47 ests per chain, 112800 per kthread [ 349.449691][ T29] audit: type=1326 audit(1778177914.237:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14467 comm="syz.6.3408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa18f19cdd9 code=0x0 [ 349.499882][ T8682] udevd[8682]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 349.580238][ T10] usb 10-1: USB disconnect, device number 2 [ 349.589685][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'. [ 350.073036][ C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967280. macoff=96 [ 350.231135][ T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 350.310845][ C0] net_ratelimit: 24 callbacks suppressed [ 350.310863][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.380808][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 350.397897][ T10] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 350.418486][ T10] usb 7-1: config 0 has no interface number 0 [ 350.425059][ T10] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 350.435318][ T10] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 350.448116][ T10] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 350.467473][ T5815] tipc: Node number set to 1266094916 [ 350.480784][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.481233][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.489471][ T10] usb 7-1: Product: syz [ 350.497136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.509956][ T10] usb 7-1: Manufacturer: syz [ 350.515607][ T10] usb 7-1: SerialNumber: syz [ 350.526318][ T10] usb 7-1: config 0 descriptor?? [ 350.544292][T14498] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 350.552610][T14498] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 350.590754][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.775882][T14498] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 350.796714][T14498] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 350.860727][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.017636][ T10] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 351.250507][ T29] audit: type=1400 audit(1778177916.037:861): avc: denied { write } for pid=14516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.319972][T14542] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 1048592) [ 351.341638][T14542] SELinux: failed to load policy [ 351.390748][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.392032][T14548] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 351.437984][T14552] netlink: 'syz.8.3440': attribute type 13 has an invalid length. [ 351.454855][ T29] audit: type=1400 audit(1778177916.247:862): avc: denied { write } for pid=14549 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.477232][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3440'. [ 351.495596][T14544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.513785][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.522164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.541367][T14552] netlink: 'syz.8.3440': attribute type 13 has an invalid length. [ 351.541597][ T1098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.557593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.557653][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3440'. [ 351.824228][ T10] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 351.857849][ T10] asix 7-1:0.34: probe with driver asix failed with error -71 [ 351.884901][ T10] usb 7-1: USB disconnect, device number 26 [ 352.052187][ T29] audit: type=1400 audit(1778177916.847:863): avc: denied { write } for pid=14556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.193125][ T29] audit: type=1400 audit(1778177916.987:864): avc: denied { write } for pid=14579 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.465899][ T29] audit: type=1400 audit(1778177917.247:865): avc: denied { connect } for pid=14591 comm="syz.8.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 352.969632][ T29] audit: type=1400 audit(1778177917.757:866): avc: denied { write } for pid=14587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.254584][ T29] audit: type=1400 audit(1778177918.047:867): avc: denied { write } for pid=14622 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.250044][ T29] audit: type=1400 audit(1778177919.037:868): avc: denied { write } for pid=14631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.555604][ T29] audit: type=1400 audit(1778177919.347:869): avc: denied { write } for pid=14674 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.592313][T14677] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 354.779283][ T5799] libceph: connect (1)[c::]:6789 error -101 [ 354.815989][ T5799] libceph: mon0 (1)[c::]:6789 connect error [ 354.885776][ T10] libceph: connect (1)[c::]:6789 error -101 [ 354.935794][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 355.083946][T14698] netlink: 'syz.7.3482': attribute type 8 has an invalid length. [ 355.093274][ T5799] libceph: connect (1)[c::]:6789 error -101 [ 355.101976][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3482'. [ 355.113866][ T5799] libceph: mon0 (1)[c::]:6789 connect error [ 355.142605][T14698] bond0: entered promiscuous mode [ 355.153487][T14698] bond_slave_0: entered promiscuous mode [ 355.164044][T14698] bond_slave_1: entered promiscuous mode [ 355.184158][T14698] gretap0: entered promiscuous mode [ 355.207785][T14698] ip6gretap0: entered promiscuous mode [ 355.217600][T14698] debugfs: 'hsr1' already exists in 'hsr' [ 355.225035][T14698] Cannot create hsr debugfs directory [ 355.232366][T14698] hsr1: entered promiscuous mode [ 355.244120][ T5747] libceph: connect (1)[c::]:6789 error -101 [ 355.264319][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 355.279071][T14675] ceph: No mds server is up or the cluster is laggy [ 355.280798][T14681] ceph: No mds server is up or the cluster is laggy [ 355.417239][T14705] kvm: kvm [14704]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 355.425836][ T5815] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 355.437251][T14705] kvm: kvm [14704]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 355.531126][ T5799] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 355.576329][ T5799] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 355.590732][ C0] net_ratelimit: 18 callbacks suppressed [ 355.590747][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.605421][ T5815] usb 7-1: Using ep0 maxpacket: 16 [ 355.623511][ T5815] usb 7-1: config 0 has no interfaces? [ 355.646150][ T5815] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 355.674119][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.682603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.689173][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.729050][ T5815] usb 7-1: Product: syz [ 355.743770][ T5815] usb 7-1: Manufacturer: syz [ 355.760046][ T5815] usb 7-1: SerialNumber: syz [ 355.793298][ T5815] usb 7-1: config 0 descriptor?? [ 355.800711][ T46] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 355.964374][ T46] usb 10-1: config 0 has no interfaces? [ 355.976480][ T46] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 355.991199][T14723] tipc: Started in network mode [ 355.994381][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 356.001130][T14723] tipc: Node identity 2007ff, cluster identity 4711 [ 356.015516][ T46] usb 10-1: SerialNumber: syz [ 356.021509][ T5799] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 356.029520][T14723] tipc: Node number set to 2099199 [ 356.039672][ T46] usb 10-1: config 0 descriptor?? [ 356.174865][ T5799] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 356.195203][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.226885][ T5799] usb 3-1: config 0 descriptor?? [ 356.311912][ T5713] usb 10-1: USB disconnect, device number 3 [ 356.387658][ T5706] usb 7-1: USB disconnect, device number 27 [ 356.528433][ T5747] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 356.555472][ T5747] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 356.630719][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.719831][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.728160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.752542][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.760788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.267182][ T5799] usb 3-1: Cannot set autoneg [ 357.282769][ T5799] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 357.322187][ T5799] usb 3-1: USB disconnect, device number 48 [ 357.351504][ T5747] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 357.523077][ T5747] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 357.556148][ T5747] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 357.586112][ T5747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.600953][ T5747] usb 7-1: Product: syz [ 357.607542][ T5747] usb 7-1: Manufacturer: syz [ 357.613497][ T5747] usb 7-1: SerialNumber: syz [ 357.629733][ T5747] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 357.670729][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.839783][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.868012][T14768] netlink: 'syz.7.3509': attribute type 10 has an invalid length. [ 357.950576][T14771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.055227][ T5747] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 358.081859][ T5747] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 358.121952][ T5747] usb 7-1: media controller created [ 358.168449][ T5747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.431733][ T5799] usb 7-1: USB disconnect, device number 28 [ 358.443112][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3516'. [ 358.466802][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3516'. [ 358.492891][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3516'. [ 358.502098][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3516'. [ 358.663736][ C1] ================================================================== [ 358.671853][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0xa51/0xb30 [ 358.679848][ C1] Read of size 2 at addr ffff88816a8813f4 by task syz.7.3518/14796 [ 358.687741][ C1] [ 358.690072][ C1] CPU: 1 UID: 0 PID: 14796 Comm: syz.7.3518 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.690107][ C1] Tainted: [L]=SOFTLOCKUP [ 358.690115][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.690139][ C1] Call Trace: [ 358.690147][ C1] [ 358.690156][ C1] dump_stack_lvl+0x100/0x190 [ 358.690187][ C1] print_report+0x13d/0x4b0 [ 358.690224][ C1] ? __virt_addr_valid+0x239/0x430 [ 358.690252][ C1] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 358.690277][ C1] kasan_report+0xdf/0x1d0 [ 358.690303][ C1] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 358.690331][ C1] qdisc_pkt_len_segs_init+0xa51/0xb30 [ 358.690360][ C1] __dev_queue_xmit+0x270/0x4950 [ 358.690392][ C1] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 358.690429][ C1] ? __asan_memcpy+0x3c/0x60 [ 358.690463][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 358.690496][ C1] ? __pskb_pull_tail+0x86f/0x19b0 [ 358.690521][ C1] ? __asan_memcpy+0x3c/0x60 [ 358.690559][ C1] ? __asan_memset+0x23/0x50 [ 358.690589][ C1] ? __skb_pad+0x252/0x600 [ 358.690617][ C1] ? hsr_create_tagged_frame+0x795/0xf00 [ 358.690642][ C1] hsr_forward_skb+0xdcf/0x28a0 [ 358.690663][ C1] ? __pfx_hsr_drop_frame+0x10/0x10 [ 358.690683][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 358.690708][ C1] hsr_handle_frame+0x82f/0xac0 [ 358.690743][ C1] ? __pfx_hsr_handle_frame+0x10/0x10 [ 358.690780][ C1] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 358.690814][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 358.690858][ C1] ? __lock_acquire+0x4a5/0x2630 [ 358.690885][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 358.690919][ C1] ? __lock_acquire+0x4a5/0x2630 [ 358.690945][ C1] ? lock_acquire+0x1b1/0x370 [ 358.690977][ C1] ? find_held_lock+0x2b/0x80 [ 358.690998][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 358.691032][ C1] __netif_receive_skb_list_core+0x353/0x940 [ 358.691069][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 358.691104][ C1] ? lock_acquire+0x1b1/0x370 [ 358.691136][ C1] ? rcu_core+0x5a2/0x10d0 [ 358.691169][ C1] netif_receive_skb_list_internal+0x722/0xd40 [ 358.691212][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 358.691250][ C1] ? __lock_acquire+0x4a5/0x2630 [ 358.691281][ C1] ? dev_gro_receive+0x238/0x3060 [ 358.691319][ C1] napi_complete_done+0x221/0x940 [ 358.691353][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 358.691385][ C1] ? find_held_lock+0x2b/0x80 [ 358.691407][ C1] ? gro_cell_poll+0x441/0x690 [ 358.691440][ C1] ? gro_cell_poll+0x441/0x690 [ 358.691475][ C1] gro_cell_poll+0x46e/0x690 [ 358.691512][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 358.691548][ C1] net_rx_action+0xa40/0xf20 [ 358.691582][ C1] ? find_held_lock+0x2b/0x80 [ 358.691605][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 358.691636][ C1] ? trace_rcu_utilization+0x146/0x240 [ 358.691665][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 358.691691][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 358.691716][ C1] ? sched_clock+0x38/0x60 [ 358.691741][ C1] ? sched_clock_cpu+0x6c/0x570 [ 358.691777][ C1] ? rcu_is_watching+0x12/0xc0 [ 358.691813][ C1] handle_softirqs+0x1ea/0xa00 [ 358.691850][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 358.691883][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 358.691907][ C1] ? tun_rx_batched.isra.0+0x402/0x750 [ 358.691935][ C1] do_softirq+0xac/0xe0 [ 358.691967][ C1] [ 358.691974][ C1] [ 358.691982][ C1] __local_bh_enable_ip+0xf8/0x120 [ 358.692017][ C1] tun_rx_batched.isra.0+0x407/0x750 [ 358.692048][ C1] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 358.692082][ C1] ? rcu_is_watching+0x12/0xc0 [ 358.692116][ C1] ? tun_get_user+0x1cc8/0x3c20 [ 358.692149][ C1] tun_get_user+0x1e31/0x3c20 [ 358.692185][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 358.692220][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 358.692250][ C1] ? find_held_lock+0x2b/0x80 [ 358.692271][ C1] ? tun_get+0x191/0x370 [ 358.692297][ C1] ? tun_get+0x191/0x370 [ 358.692326][ C1] tun_chr_write_iter+0xdc/0x200 [ 358.692357][ C1] vfs_write+0x6ac/0x1070 [ 358.692383][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 358.692415][ C1] ? __pfx_vfs_write+0x10/0x10 [ 358.692438][ C1] ? find_held_lock+0x2b/0x80 [ 358.692469][ C1] ksys_write+0x12a/0x250 [ 358.692494][ C1] ? __pfx_ksys_write+0x10/0x10 [ 358.692521][ C1] ? rcu_is_watching+0x12/0xc0 [ 358.692560][ C1] do_syscall_64+0x10b/0xf80 [ 358.692588][ C1] ? clear_bhb_loop+0x40/0x90 [ 358.692616][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.692642][ C1] RIP: 0033:0x7f08fdf9cdd9 [ 358.692662][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.692685][ C1] RSP: 002b:00007f08fef34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.692708][ C1] RAX: ffffffffffffffda RBX: 00007f08fe215fa0 RCX: 00007f08fdf9cdd9 [ 358.692725][ C1] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000003 [ 358.692741][ C1] RBP: 00007f08fe032d69 R08: 0000000000000000 R09: 0000000000000000 [ 358.692756][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.692771][ C1] R13: 00007f08fe216038 R14: 00007f08fe215fa0 R15: 00007fffcb47f238 [ 358.692795][ C1] [ 358.692803][ C1] [ 359.210872][ C1] The buggy address belongs to the physical page: [ 359.217261][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16a881 [ 359.226087][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 359.233269][ C1] raw: 057ff00000000000 ffffea0005aa2048 ffffea0005aa2048 0000000000000000 [ 359.241844][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 359.250417][ C1] page dumped because: kasan: bad access detected [ 359.256811][ C1] page_owner info is not present (never set?) [ 359.262849][ C1] [ 359.265150][ C1] Memory state around the buggy address: [ 359.270763][ C1] ffff88816a881280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 359.278808][ C1] ffff88816a881300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 359.286849][ C1] >ffff88816a881380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 359.294883][ C1] ^ [ 359.302575][ C1] ffff88816a881400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 359.310613][ C1] ffff88816a881480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 359.318647][ C1] ================================================================== [ 359.326758][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 359.333948][ C1] CPU: 1 UID: 0 PID: 14796 Comm: syz.7.3518 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.344888][ C1] Tainted: [L]=SOFTLOCKUP [ 359.349202][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 359.359251][ C1] Call Trace: [ 359.362515][ C1] [ 359.365341][ C1] dump_stack_lvl+0x100/0x190 [ 359.370006][ C1] vpanic+0x552/0x970 [ 359.373969][ C1] ? __pfx_vpanic+0x10/0x10 [ 359.378452][ C1] ? mark_held_locks+0x40/0x70 [ 359.383206][ C1] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 359.388824][ C1] panic+0xd1/0xe0 [ 359.392524][ C1] ? __pfx_panic+0x10/0x10 [ 359.396925][ C1] ? check_panic_on_warn+0x1f/0x90 [ 359.402023][ C1] check_panic_on_warn.cold+0x19/0x34 [ 359.407380][ C1] end_report.part.0+0x3a/0x90 [ 359.412133][ C1] kasan_report.cold+0xe/0x18 [ 359.416803][ C1] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 359.422422][ C1] qdisc_pkt_len_segs_init+0xa51/0xb30 [ 359.427865][ C1] __dev_queue_xmit+0x270/0x4950 [ 359.432792][ C1] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 359.438853][ C1] ? __asan_memcpy+0x3c/0x60 [ 359.443435][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 359.448795][ C1] ? __pskb_pull_tail+0x86f/0x19b0 [ 359.453889][ C1] ? __asan_memcpy+0x3c/0x60 [ 359.458472][ C1] ? __asan_memset+0x23/0x50 [ 359.463048][ C1] ? __skb_pad+0x252/0x600 [ 359.467454][ C1] ? hsr_create_tagged_frame+0x795/0xf00 [ 359.473072][ C1] hsr_forward_skb+0xdcf/0x28a0 [ 359.477904][ C1] ? __pfx_hsr_drop_frame+0x10/0x10 [ 359.483084][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 359.488356][ C1] hsr_handle_frame+0x82f/0xac0 [ 359.493199][ C1] ? __pfx_hsr_handle_frame+0x10/0x10 [ 359.498563][ C1] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 359.505229][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 359.511381][ C1] ? __lock_acquire+0x4a5/0x2630 [ 359.516306][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 359.523409][ C1] ? __lock_acquire+0x4a5/0x2630 [ 359.528341][ C1] ? lock_acquire+0x1b1/0x370 [ 359.533007][ C1] ? find_held_lock+0x2b/0x80 [ 359.537665][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 359.542853][ C1] __netif_receive_skb_list_core+0x353/0x940 [ 359.548826][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 359.555315][ C1] ? lock_acquire+0x1b1/0x370 [ 359.559979][ C1] ? rcu_core+0x5a2/0x10d0 [ 359.564383][ C1] netif_receive_skb_list_internal+0x722/0xd40 [ 359.570530][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 359.577198][ C1] ? __lock_acquire+0x4a5/0x2630 [ 359.582122][ C1] ? dev_gro_receive+0x238/0x3060 [ 359.587146][ C1] napi_complete_done+0x221/0x940 [ 359.592161][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 359.597693][ C1] ? find_held_lock+0x2b/0x80 [ 359.602355][ C1] ? gro_cell_poll+0x441/0x690 [ 359.607108][ C1] ? gro_cell_poll+0x441/0x690 [ 359.611867][ C1] gro_cell_poll+0x46e/0x690 [ 359.616449][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 359.621814][ C1] net_rx_action+0xa40/0xf20 [ 359.626398][ C1] ? find_held_lock+0x2b/0x80 [ 359.631059][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 359.636158][ C1] ? trace_rcu_utilization+0x146/0x240 [ 359.641603][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 359.646790][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 359.651977][ C1] ? sched_clock+0x38/0x60 [ 359.656378][ C1] ? sched_clock_cpu+0x6c/0x570 [ 359.661222][ C1] ? rcu_is_watching+0x12/0xc0 [ 359.665988][ C1] handle_softirqs+0x1ea/0xa00 [ 359.670749][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 359.676028][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 359.681643][ C1] ? tun_rx_batched.isra.0+0x402/0x750 [ 359.687093][ C1] do_softirq+0xac/0xe0 [ 359.691242][ C1] [ 359.694154][ C1] [ 359.697066][ C1] __local_bh_enable_ip+0xf8/0x120 [ 359.702172][ C1] tun_rx_batched.isra.0+0x407/0x750 [ 359.707453][ C1] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 359.713250][ C1] ? rcu_is_watching+0x12/0xc0 [ 359.718015][ C1] ? tun_get_user+0x1cc8/0x3c20 [ 359.722856][ C1] tun_get_user+0x1e31/0x3c20 [ 359.727526][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 359.732538][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 359.737991][ C1] ? find_held_lock+0x2b/0x80 [ 359.742651][ C1] ? tun_get+0x191/0x370 [ 359.746881][ C1] ? tun_get+0x191/0x370 [ 359.751114][ C1] tun_chr_write_iter+0xdc/0x200 [ 359.756150][ C1] vfs_write+0x6ac/0x1070 [ 359.760484][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 359.766024][ C1] ? __pfx_vfs_write+0x10/0x10 [ 359.770776][ C1] ? find_held_lock+0x2b/0x80 [ 359.775444][ C1] ksys_write+0x12a/0x250 [ 359.779757][ C1] ? __pfx_ksys_write+0x10/0x10 [ 359.784591][ C1] ? rcu_is_watching+0x12/0xc0 [ 359.789350][ C1] do_syscall_64+0x10b/0xf80 [ 359.793930][ C1] ? clear_bhb_loop+0x40/0x90 [ 359.798591][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.804465][ C1] RIP: 0033:0x7f08fdf9cdd9 [ 359.808868][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.828457][ C1] RSP: 002b:00007f08fef34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 359.836854][ C1] RAX: ffffffffffffffda RBX: 00007f08fe215fa0 RCX: 00007f08fdf9cdd9 [ 359.844806][ C1] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000003 [ 359.852755][ C1] RBP: 00007f08fe032d69 R08: 0000000000000000 R09: 0000000000000000 [ 359.860707][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.868658][ C1] R13: 00007f08fe216038 R14: 00007f08fe215fa0 R15: 00007fffcb47f238 [ 359.876618][ C1] [ 359.880109][ C1] Kernel Offset: disabled [ 359.884417][ C1] Rebooting in 86400 seconds..