last executing test programs: 24m23.972717412s ago: executing program 32 (id=801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c1063", 0x17}], 0x2) 5m52.513710204s ago: executing program 33 (id=4909): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2', 0x1) 2m47.891646877s ago: executing program 0 (id=5549): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='J', 0x1}], 0x1}, 0x2000c8c0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 2m46.262978058s ago: executing program 0 (id=5554): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m44.044435374s ago: executing program 0 (id=5558): close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) 2m43.849199492s ago: executing program 0 (id=5563): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x2}, 0x10) close(0xffffffffffffffff) 2m42.8161586s ago: executing program 0 (id=5565): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz \x00\x00000000'], 0x2a, 0x0) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000540), 0x0, 0xfffffffffffffffd) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r3, 0x0, 0x0) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='jif', 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ffff65c5efa6d0d642a9075c47e451f9a944ed939b3d241049c1"], 0x64}, 0x1, 0x0, 0x0, 0x4080000}, 0x2890) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x803}}, 0x10) r5 = socket(0x1e, 0x4, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m40.991199386s ago: executing program 0 (id=5569): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, 0x0, 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x24181, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r4, 0x40186f40, 0x0) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev\x00', 0x1ff) mount(&(0x7f0000000f00)=@filename='devtmpfs\x00', &(0x7f0000000e00)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, &(0x7f0000000800)='\x00') 2m27.623498823s ago: executing program 34 (id=5561): socket(0x23, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mkdir(&(0x7f0000000000)='./nfsd_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd_dir\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd_dir/threads\x00', 0x2, 0x0) write(r3, 0x0, 0x0) 2m26.025869899s ago: executing program 35 (id=5569): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, 0x0, 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x24181, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r4, 0x40186f40, 0x0) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev\x00', 0x1ff) mount(&(0x7f0000000f00)=@filename='devtmpfs\x00', &(0x7f0000000e00)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, &(0x7f0000000800)='\x00') 1m46.817852063s ago: executing program 3 (id=5721): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 1m45.058345623s ago: executing program 8 (id=5726): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @empty}, {0x2, 0x4e22, @private=0xa010102}, 0x220, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x14) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r2, 0x1, 0xe) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m44.472512102s ago: executing program 3 (id=5729): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) 1m44.237028542s ago: executing program 3 (id=5730): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000540), 0x0, 0xfffffffffffffffd) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000700)='bind', 0x4) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='jif', 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ffff65c5efa6d0d642a9075c47e451f9a944ed939b3d241049c1"], 0x64}, 0x1, 0x0, 0x0, 0x4080000}, 0x2890) r5 = socket(0x1e, 0x4, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m42.76298339s ago: executing program 3 (id=5731): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m42.480686611s ago: executing program 3 (id=5733): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz \x00\x00000000'], 0x2a, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000700)='bind', 0x4) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='jif', 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ffff65c5efa6d0d642a9075c47e451f9a944ed939b3d241049c1"], 0x64}, 0x1, 0x0, 0x0, 0x4080000}, 0x2890) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x803}}, 0x10) r5 = socket(0x1e, 0x4, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m41.631202652s ago: executing program 8 (id=5734): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) 1m41.510685971s ago: executing program 3 (id=5735): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x6, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x5, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0xa, 0x0, 0xf9, 0x7, 0x0, 0x0, 0x2, 0x2, 0x84, 0xd, 0x84, '\x00', 0x4, 0x2}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x0, 0x5, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m41.344974799s ago: executing program 8 (id=5736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020003ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m35.63777154s ago: executing program 8 (id=5743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2152, 0xc000, 0xfffffff, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 1m32.436330712s ago: executing program 6 (id=5749): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vxcan1\x00', &(0x7f0000000000)=@ethtool_channels={0x11, 0x2, 0x0, 0x8c80, 0x0, 0x3, 0x100000, 0x0, 0x7}}) 1m32.432577949s ago: executing program 8 (id=5750): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000540), 0x0, 0xfffffffffffffffd) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000700)='bind', 0x4) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='jif', 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ffff65c5efa6d0d642a9075c47e451f9a944ed939b3d241049c1"], 0x64}, 0x1, 0x0, 0x0, 0x4080000}, 0x2890) r5 = socket(0x1e, 0x4, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.393279198s ago: executing program 6 (id=5752): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r1, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/77, 0x4d}], 0x3, &(0x7f0000000680)=""/224, 0xe0}, 0x6}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000240)=""/64, 0x40}], 0x2, &(0x7f0000000ac0)=""/174, 0xae}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000c00)=""/87, 0x57}, {&(0x7f0000000dc0)=""/209, 0xd1}], 0x2}, 0x81}], 0x3, 0x10120, 0x0) bind$nfc_llcp(r1, &(0x7f0000000280)={0x27, 0x0, 0x1, 0x5, 0x0, 0x6, "23ba4cb148e27a62778ab6e2ad47e2f096dbae5488d838161da26752700a993a9898b753acbbe03034a8e6487bac34f3e95e88aaaafc3788337701a4cd90bb", 0x21}, 0x60) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x20000000) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e4"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001000010029bd7000fbdbdf2500000000", @ANYBLOB="8db20200211a0100140003006e657464657673696d3000000000000014001680100001800c000400070000f7"], 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, 0x2d, 0x1, 0x0, 0xfffffffd, {0xa, 0x0, 0x6e80}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x4008000) unshare(0x2020400) unshare(0x400000c0) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x4084) socket$inet6(0xa, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x0, 0x5, {{0x7, 0x4, 0x3, 0x8, 0x1c, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, {[@noop, @lsrr={0x83, 0x7, 0x1c, [@broadcast]}]}}}}}) 1m31.364883807s ago: executing program 8 (id=5753): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r5, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r6, &(0x7f0000000e00)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000700), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) 1m30.916644612s ago: executing program 6 (id=5754): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00000ac000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000af000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000ab000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffe9a}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x31e1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28efff0511"], 0x28}}, 0x802) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000280)={0x6031, 0x4}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m30.759963057s ago: executing program 6 (id=5755): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='D', 0x1, 0xc8, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1m30.675319612s ago: executing program 6 (id=5756): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz \x00\x00000000'], 0x2a, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000700)='bind', 0x4) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='jif', 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ffff65c5efa6d0d642a9075c47e451f9a944ed939b3d241049c1"], 0x64}, 0x1, 0x0, 0x0, 0x4080000}, 0x2890) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x803}}, 0x10) r5 = socket(0x1e, 0x4, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.487723982s ago: executing program 6 (id=5758): pipe(&(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80984120, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1m26.150678579s ago: executing program 36 (id=5735): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x6, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x5, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0xa, 0x0, 0xf9, 0x7, 0x0, 0x0, 0x2, 0x2, 0x84, 0xd, 0x84, '\x00', 0x4, 0x2}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x0, 0x5, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m16.121275817s ago: executing program 37 (id=5753): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r5, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r6, &(0x7f0000000e00)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000700), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) 1m16.074260078s ago: executing program 4 (id=5783): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8fc, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') 1m15.107676647s ago: executing program 4 (id=5784): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x50000, 0x14000}) close_range(r0, 0xffffffffffffffff, 0x0) 1m14.843836739s ago: executing program 4 (id=5785): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 1m14.712048628s ago: executing program 4 (id=5786): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x4}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4048004) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000) 1m14.578822344s ago: executing program 4 (id=5787): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0xecf86c37d53049cc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz \x00\x00000000'], 0x2a, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000700)='bind', 0x4) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='jif', 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ffff65c5efa6d0d642a9075c47e451f9a944ed939b3d241049c1"], 0x64}, 0x1, 0x0, 0x0, 0x4080000}, 0x2890) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x803}}, 0x10) r5 = socket(0x1e, 0x4, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m13.492037566s ago: executing program 38 (id=5758): pipe(&(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80984120, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1m13.441941546s ago: executing program 4 (id=5790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x48810) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 58.110601171s ago: executing program 39 (id=5790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x48810) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 15.692504443s ago: executing program 2 (id=5904): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x31e1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28efff0511"], 0x28}}, 0x802) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000280)={0x6031, 0x4}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15.608660805s ago: executing program 2 (id=5906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x72) setrlimit(0xa, &(0x7f00000000c0)={0x6, 0x3ff}) fsopen(&(0x7f0000001240)='hugetlbfs\x00', 0x0) fchdir(0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 14.71867417s ago: executing program 2 (id=5907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000002c0)=0x401, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xb87, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="80010000100001000000000000000000e000000200"/32, @ANYRES32=0x0, @ANYRES32=0x0], 0x180}}, 0x0) 13.747464378s ago: executing program 2 (id=5908): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x800, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) r1 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) recvfrom$inet(r1, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) 12.524532523s ago: executing program 2 (id=5912): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="74010000"], 0x174}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 11.765317782s ago: executing program 2 (id=5913): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x5) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 8.527449094s ago: executing program 7 (id=5924): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0495c200000000000109022d00010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) 7.825568072s ago: executing program 5 (id=5807): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x40008000) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01}, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 6.3487665s ago: executing program 5 (id=5927): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 6.123775784s ago: executing program 1 (id=5928): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x731, 0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020) 5.912705658s ago: executing program 9 (id=5930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000002c0)=0x401, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xb87, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="80010000100001000000000000000000e000000200"/32, @ANYRES32=0x0, @ANYRES32=0x0], 0x180}}, 0x0) 4.937011686s ago: executing program 1 (id=5931): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0a010910", @ANYRESOCT=0x0], 0xd) 4.872542081s ago: executing program 7 (id=5932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r3) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r4, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 4.733842461s ago: executing program 5 (id=5933): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1d", 0x1}], 0x1}}], 0x1, 0x40000) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="12", 0x1}], 0x1}, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 4.340157443s ago: executing program 1 (id=5934): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x17e}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593a2dc", 0x6}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be", 0x2f}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3f", 0x20}], 0x3) write(r0, &(0x7f0000001e00)="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", 0x3b9) 4.230994147s ago: executing program 1 (id=5935): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8fc, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r4 = msgget(0x2, 0x12) msgctl$MSG_INFO(r4, 0xc, &(0x7f0000000400)=""/131) write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb) 3.982792013s ago: executing program 9 (id=5936): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz \x00\x00000000'], 0x2a, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000700)='bind', 0x4) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='jif', 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ffff65c5efa6d0d642a9075c47e451f9a944ed939b3d241049c1"], 0x64}, 0x1, 0x0, 0x0, 0x4080000}, 0x2890) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x803}}, 0x10) r5 = socket(0x1e, 0x4, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.740203661s ago: executing program 7 (id=5937): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x2, 0x3, 0x46d, 0xc082, 0x0, 0x0, "0600"}}, 0x11a) 3.338514606s ago: executing program 1 (id=5938): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpriority(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) r4 = openat$comedi(0xffffff9c, 0x0, 0x63a1ffeb966d5d6, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000640)={'das16m1\x00', [0xc, 0x4, 0x18c, 0x9, 0x7a23fb2a, 0x9, 0x4, 0x2, 0xd6, 0xfff, 0x101, 0x8, 0x1, 0x2, 0xb, 0x0, 0xc724, 0x5, 0x8, 0x9, 0x80, 0x0, 0x200, 0x4acb, 0x40, 0x3885ed69, 0x286, 0x7, 0x2, 0x3, 0x1ff]}) socket$netlink(0x10, 0x3, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r5, &(0x7f0000000880)='3', 0x1) 2.578246922s ago: executing program 5 (id=5939): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/90, 0x5a}], 0x1, 0x3, 0x0) 2.496731617s ago: executing program 7 (id=5940): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000300)="91f8a9848519def38491bbc46110e4e0a3e2c2227886946806173c3cf90e41f7a34d942225517620514bf62a6f357d0272270a1da1b7240030feaab952ac3003cad04be68807e50e997fc26e40a1f55ceb93", 0x52}, {&(0x7f0000000e80)="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", 0x120}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de2145", 0x26}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b", 0x8a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287311e8828dfd3e3dd67", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6ba", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec9191578240878db51753dbc15f7852f7e1614e75c90c1a0440a4cb3df109e647bf01db42", 0x7c}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07f", 0x47}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)="91ca950729ebf29f5a41cc90a5065840ec8f54b43d8bd82722416e3c2450aaee884dd371267a17136253266e9eeda602b8d4e12bdd7853c5983ebf0afa9afaabe79bcb856fcb7810c986a4ec20123e11a6413c63e25f760ede6679e6826bad40819ae5a58da35ae22367454a28a8d820c29870", 0x73}, {&(0x7f0000000840)="ab65faa98379b3ed763097c555c7d8a8eef38de8f453a57cf07384460b8062f874f81ed4234c94554df2f82d2c99e848be9abd5a338b35aa8bc73eef282c18", 0x3f}], 0x2}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 2.45440461s ago: executing program 5 (id=5941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r4 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/165, 0xa5, 0x1, 0x0}, &(0x7f0000000180)=0x22) syz_emit_ethernet(0x26, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x3, 0xc, 0x18, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @private=0xa010100, {[@generic={0x83, 0x2}]}}}}}}, 0x0) 2.445157676s ago: executing program 9 (id=5942): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x731, 0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020) 2.253567139s ago: executing program 1 (id=5943): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0495c200000000000109022d00010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) 1.162130831s ago: executing program 5 (id=5944): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @empty}, {0x2, 0x4e22, @private=0xa010102}, 0x220, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x14) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.146579613s ago: executing program 9 (id=5945): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="74010000"], 0x174}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.089194833s ago: executing program 7 (id=5946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000002c0)=0x401, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xb87, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="80010000100001000000000000000000e000000200"/32, @ANYRES32=0x0, @ANYRES32=0x0], 0x180}}, 0x0) 1.029325118s ago: executing program 9 (id=5947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r3) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r4, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 103.262374ms ago: executing program 7 (id=5948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0xa) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000600), 0x100, 0x3f00) 0s ago: executing program 9 (id=5949): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x40008000) bind$inet(r3, 0x0, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01}, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) socket(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): s interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1707.037761][T25141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1707.118890][T25141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1707.118924][T25141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1707.118957][T25141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.385035][T16129] Bluetooth: hci3: command tx timeout [ 1707.522306][T25156] team0: Port device team_slave_0 added [ 1707.542604][T17282] net_ratelimit: 1 callbacks suppressed [ 1707.542625][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.676141][T25156] team0: Port device team_slave_1 added [ 1707.705370][T25156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1707.712621][T25156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1707.739355][T25156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1707.752366][T25156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1707.759872][T25156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1707.786689][T25156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.813053][T25072] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1707.826014][T25072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1708.021829][T16129] Bluetooth: hci7: command tx timeout [ 1708.040285][ T30] audit: type=1400 audit(1787934355.898:1030): avc: denied { getopt } for pid=25294 comm="syz.4.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1708.291312][T25141] hsr_slave_0: entered promiscuous mode [ 1708.299571][T25141] hsr_slave_1: entered promiscuous mode [ 1708.318256][T25072] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1708.331308][T25072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1708.337035][T25072] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1708.350560][ T30] audit: type=1400 audit(1787934356.268:1031): avc: denied { write } for pid=25288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1708.352464][T25072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1708.476039][T25072] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1708.485303][T25072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1708.528117][T23305] dvmrp8: left allmulticast mode [ 1708.584113][T13988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.615209][ T30] audit: type=1400 audit(1787934356.538:1032): avc: denied { write } for pid=25310 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1708.800274][T23305] bond1 (unregistering): (slave bridge1): Removing an active aggregator [ 1708.806753][T23305] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1708.806784][T23305] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - fe:1a:97:7c:ee:8f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1708.809456][T23305] bridge1 (unregistering): left promiscuous mode [ 1708.809478][T23305] bridge1 (unregistering): left allmulticast mode [ 1708.848782][T23305] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1708.861592][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1708.869884][T23305] bridge2 (unregistering): left promiscuous mode [ 1708.869926][T23305] bridge2 (unregistering): left allmulticast mode [ 1708.888741][T23305] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 1708.897413][T23305] bridge3 (unregistering): left promiscuous mode [ 1708.897460][T23305] bridge3 (unregistering): left allmulticast mode [ 1708.916710][T23305] bond0 (unregistering): Released all slaves [ 1708.921915][T23305] bond1 (unregistering): Released all slaves [ 1708.933930][T23305] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1708.949908][T23305] bond2 (unregistering): Released all slaves [ 1708.959352][T23305] bond3 (unregistering): Released all slaves [ 1708.998952][T25156] hsr_slave_0: entered promiscuous mode [ 1708.999748][T25156] hsr_slave_1: entered promiscuous mode [ 1709.000242][T25156] debugfs: 'hsr0' already exists in 'hsr' [ 1709.000257][T25156] Cannot create hsr debugfs directory [ 1709.012390][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1709.013171][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1709.014132][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.014154][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1709.014173][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1709.014204][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.032753][ T10] usb 5-1: config 0 descriptor?? [ 1709.172315][ T30] audit: type=1400 audit(1787934357.088:1033): avc: denied { write } for pid=25317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1709.266413][ T30] audit: type=1400 audit(1787934357.188:1034): avc: denied { write } for pid=25336 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1709.276613][T23305] tipc: Left network mode [ 1709.487810][ T10] hid_parser_main: 30 callbacks suppressed [ 1709.489694][ T10] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1709.489729][ T10] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1709.489748][ T10] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1709.489767][ T10] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1709.489786][ T10] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1709.489805][ T10] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1709.489824][ T10] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1709.489841][ T10] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1709.489865][ T10] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1709.489883][ T10] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1709.530242][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001C/input/input43 [ 1709.621485][ T10] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1709.623453][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.692089][ T10] usb 5-1: USB disconnect, device number 39 [ 1709.716281][T25347] fido_id[25347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1709.838078][ T30] audit: type=1400 audit(1787934357.758:1035): avc: denied { write } for pid=25338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1709.940834][ T30] audit: type=1400 audit(1787934357.858:1036): avc: denied { write } for pid=25350 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1709.956304][T25072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1709.989997][T23305] hsr_slave_0: left promiscuous mode [ 1710.201646][T25156] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1710.224900][T25156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1710.246442][T25072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1710.258374][T25156] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1710.284184][T25156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1710.284855][T25156] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1710.296158][T25156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1710.310788][T25156] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1710.351248][T25156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1710.352317][T17434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.354641][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.354718][ T270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1710.459217][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.459318][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1710.591502][T25072] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1710.602360][T25072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1710.648047][T25141] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1710.664760][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.681848][T17282] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1710.692861][T25141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1710.708259][T25141] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1710.718378][T25141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1710.728471][T25141] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1710.740626][T25141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1710.750620][T25141] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1710.764118][T25141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1710.843487][T17282] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1710.851844][T17282] usb 5-1: not running at top speed; connect to a high speed hub [ 1710.859708][T17282] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1710.870131][T17282] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.882694][T17282] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1710.894886][T17282] usb 5-1: string descriptor 0 read error: -22 [ 1710.895003][T17282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.923447][T17282] usb 5-1: 0:1 : does not exist [ 1710.923487][T17282] usb 5-1: 0:2 : does not exist [ 1710.959708][ T30] audit: type=1400 audit(1787934358.878:1037): avc: denied { write } for pid=25357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.011229][T25156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1711.047219][T25156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1711.056706][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.056779][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1711.076964][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.077069][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1711.085344][T25141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1711.105692][ T30] audit: type=1400 audit(1787934359.028:1038): avc: denied { write } for pid=25385 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.126351][T25359] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1711.127414][T25359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.127731][T25359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.148190][T25141] 8021q: adding VLAN 0 to HW filter on device team0 [ 1711.155266][T25359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.155556][T25359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.183077][T25359] misc userio: Invalid payload size [ 1711.193862][T23305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.193958][T23305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1711.220882][T23291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.220986][T23291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1711.285455][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1711.507380][T25072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1711.589936][T17282] usb 5-1: 6:0: failed to get current value for ch 1 (-22) [ 1711.610882][T17282] usb 5-1: 6:0: failed to get current value for ch 0 (-22) [ 1711.637430][T25072] veth0_vlan: entered promiscuous mode [ 1711.675548][T25072] veth1_vlan: entered promiscuous mode [ 1711.704622][T17282] usb 5-1: USB disconnect, device number 40 [ 1711.711774][T13988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.799198][T25072] veth0_macvtap: entered promiscuous mode [ 1711.820090][T25072] veth1_macvtap: entered promiscuous mode [ 1711.883854][T25072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1711.890423][T25072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1711.947043][T16164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.051650][ T130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.063644][T23291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.064336][ T30] audit: type=1400 audit(1787934359.988:1039): avc: denied { write } for pid=25399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1712.079452][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.079473][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.107684][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.278326][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.278371][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.304772][T25156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.344133][T25141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.747688][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.084995][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1713.383696][T17434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.781994][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.884255][T25141] veth0_vlan: entered promiscuous mode [ 1713.905187][T25141] veth1_vlan: entered promiscuous mode [ 1713.978744][T25141] veth0_macvtap: entered promiscuous mode [ 1713.992039][T25141] veth1_macvtap: entered promiscuous mode [ 1714.022312][T13978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.030630][T25141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1714.165679][T25141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1714.211712][T16164] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.211767][T16164] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.211897][T16164] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.240716][T16164] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.825505][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.837722][T16164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.837754][T16164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.908178][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1714.908221][ T30] audit: type=1400 audit(1787934362.828:1041): avc: denied { write } for pid=25450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1714.910334][T25156] veth0_vlan: entered promiscuous mode [ 1714.937886][T25156] veth1_vlan: entered promiscuous mode [ 1715.050601][T16164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.050641][T16164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.143674][T25156] veth0_macvtap: entered promiscuous mode [ 1715.283808][T25156] veth1_macvtap: entered promiscuous mode [ 1715.325380][ T30] audit: type=1400 audit(1787934363.248:1042): avc: denied { write } for pid=25479 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1715.343117][T25156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1715.375657][T25156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1715.418701][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.418883][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.418912][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.493066][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1715.521676][ T51] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.765174][T23291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.765211][T23291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.830360][T23291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.830411][T23291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.861874][T17275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.035342][T25494] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1716.036162][T25494] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1716.039427][T25494] udc dummy_udc.0: failed to start g1: -22 [ 1716.039544][T25494] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1716.048695][T25494] UDC core: g1: couldn't find an available UDC or it's busy [ 1716.434829][T17434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.695314][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5602'. [ 1716.902088][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.185116][ T30] audit: type=1400 audit(1787934365.108:1043): avc: denied { write } for pid=25495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.273286][T25507] 8021q: VLANs not supported on gre0 [ 1717.592868][ T30] audit: type=1400 audit(1787934365.518:1044): avc: denied { write } for pid=25529 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.949428][T25538] futex_wake_op: syz.7.5645 tries to shift op by -1; fix this program [ 1718.313257][T17275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.320384][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1718.591710][T17434] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1718.740584][T25552] netlink: 'syz.7.5650': attribute type 13 has an invalid length. [ 1718.748871][T17434] usb 9-1: Using ep0 maxpacket: 16 [ 1718.758617][T17434] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1718.758674][T17434] usb 9-1: New USB device found, idVendor=045e, idProduct=02d5, bcdDevice=20.40 [ 1718.780340][T17434] usb 9-1: config 9 has an invalid interface number: 225 but max is 0 [ 1718.780383][T17434] usb 9-1: config 9 has no interface number 0 [ 1718.780420][T17434] usb 9-1: config 9 interface 225 has no altsetting 0 [ 1718.811374][T17434] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.811416][T17434] usb 9-1: Product: syz [ 1718.811443][T17434] usb 9-1: Manufacturer: syz [ 1718.811461][T17434] usb 9-1: SerialNumber: syz [ 1719.125879][T25552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.126330][T25552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.383681][T13988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.418070][T25552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1719.447833][T25552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1719.463098][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.484459][T17434] dvb-usb: found a 'Microsoft Xbox One Digital TV Tuner' in warm state. [ 1719.516014][T17434] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1719.527148][T17434] dvbdev: DVB: registering new adapter (Microsoft Xbox One Digital TV Tuner) [ 1719.538581][T17434] usb 9-1: media controller created [ 1719.593998][T17434] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1719.752585][T25562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5652'. [ 1719.802766][T25563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5652'. [ 1719.981363][T17434] dvb-usb: no frontend was attached by 'Microsoft Xbox One Digital TV Tuner' [ 1719.990896][T17434] dvb-usb: Microsoft Xbox One Digital TV Tuner successfully initialized and connected. [ 1720.025126][T17434] usb 9-1: USB disconnect, device number 2 [ 1720.243509][T16164] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.243583][T16164] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.243610][T16164] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.243635][T16164] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.296486][T17434] dvb-usb: Microsoft Xbox One Digital TV Tuner successfully deinitialized and disconnected. [ 1720.422709][T17275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.456524][T25577] tipc: Enabled bearer , priority 0 [ 1720.464391][T25577] syzkaller0: entered promiscuous mode [ 1720.470043][T25577] syzkaller0: entered allmulticast mode [ 1720.485409][T25577] tipc: Resetting bearer [ 1720.496461][T25576] tipc: Resetting bearer [ 1720.499757][T25579] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5655'. [ 1720.553550][T25576] tipc: Disabling bearer [ 1721.053932][ T30] audit: type=1800 audit(1787934368.938:1045): pid=25594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5660" name="memory_backed" dev="configfs" ino=101056 res=0 errno=0 [ 1721.054239][ T30] audit: type=1800 audit(1787934368.958:1046): pid=25594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5660" name="zone_nr_conv" dev="configfs" ino=101057 res=0 errno=0 [ 1721.463024][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.678254][T25602] syzkaller0: entered promiscuous mode [ 1721.678281][T25602] syzkaller0: entered allmulticast mode [ 1722.501948][T17434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.507590][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.666265][T25621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5670'. [ 1722.675591][T25621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5670'. [ 1722.709010][T25623] tipc: Started in network mode [ 1722.709053][T25623] tipc: Node identity cac98aebae2a, cluster identity 4711 [ 1722.709469][T25623] tipc: Enabled bearer , priority 0 [ 1722.712085][T25623] syzkaller0: entered promiscuous mode [ 1722.712105][T25623] syzkaller0: entered allmulticast mode [ 1722.728515][T25623] tipc: Resetting bearer [ 1722.749434][T25622] tipc: Resetting bearer [ 1722.800149][T25622] tipc: Disabling bearer [ 1723.551022][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.675286][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.902561][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1724.902629][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1725.305416][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.586142][T17434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.799249][T25642] syzkaller0: entered promiscuous mode [ 1725.805298][T25642] syzkaller0: entered allmulticast mode [ 1726.356950][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.522513][T25664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5684'. [ 1726.995638][ T30] audit: type=1800 audit(1787934374.898:1047): pid=25675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5687" name="memory_backed" dev="configfs" ino=101168 res=0 errno=0 [ 1726.995958][ T30] audit: type=1800 audit(1787934374.918:1048): pid=25675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5687" name="zone_nr_conv" dev="configfs" ino=101169 res=0 errno=0 [ 1727.382523][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.660139][T25683] CacheFiles: No cache directory specified [ 1728.450451][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.661798][T17434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.824055][T25699] input: syz0 as /devices/virtual/input/input45 [ 1728.972626][T25417] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1729.617404][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.629385][T25417] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1729.632982][T25417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1729.633009][T25417] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1729.633033][T25417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1729.633052][T25417] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1729.633092][T25417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.645657][T25713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5700'. [ 1729.650979][T25713] capability: warning: `syz.8.5700' uses deprecated v2 capabilities in a way that may be insecure [ 1729.765789][T25417] usb 5-1: config 0 descriptor?? [ 1729.883540][ T30] audit: type=1800 audit(1787934377.798:1049): pid=25716 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.5701" name="memory_backed" dev="configfs" ino=101234 res=0 errno=0 [ 1729.906209][ T30] audit: type=1800 audit(1787934377.798:1050): pid=25716 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.5701" name="zone_nr_conv" dev="configfs" ino=101235 res=0 errno=0 [ 1730.142874][T25417] hdpvr 5-1:0.0: firmware version 0x1e dated [ 1730.434940][T25725] CacheFiles: No cache directory specified [ 1730.770506][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.345859][T25417] hdpvr 5-1:0.0: Could not setup controls [ 1731.346314][T25417] hdpvr 5-1:0.0: registering videodev failed [ 1731.410229][T25417] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 1731.459821][T25417] usb 5-1: USB disconnect, device number 41 [ 1731.618457][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057315c00: rx timeout, send abort [ 1731.658393][ T30] audit: type=1400 audit(1787934379.578:1051): avc: denied { write } for pid=25715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.703126][T25417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.714718][T23306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.715281][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.735412][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.781986][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.118530][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057315c00: abort rx timeout. Force session deactivation [ 1732.118670][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057314800: rx timeout, send abort [ 1732.571816][ T30] audit: type=1400 audit(1787934380.488:1052): avc: denied { write } for pid=25748 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1732.618725][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057314800: abort rx timeout. Force session deactivation [ 1732.836460][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.540412][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.743655][T25771] CacheFiles: No cache directory specified [ 1733.919018][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.821714][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.981842][T17275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.188533][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.157490][T17275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.297817][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1737.305894][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1737.311168][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1737.326373][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1737.337409][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1737.345174][ T30] audit: type=1400 audit(1787934385.268:1053): avc: denied { write } for pid=25759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1737.656250][T25798] CacheFiles: No cache directory specified [ 1737.777321][T13986] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1737.873148][T17434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.944172][T13986] usb 9-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1737.961951][T13986] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.961994][T13986] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.962019][T13986] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1737.962040][T13986] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1737.962064][T13986] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1737.962091][T13986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.107566][T13986] usb 9-1: config 0 descriptor?? [ 1738.184326][T25418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.571628][ T10] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 1738.582119][ T30] audit: type=1400 audit(1787934386.468:1054): avc: denied { write } for pid=25799 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1738.718326][T13986] usbhid 9-1:0.0: can't add hid device: -71 [ 1738.718423][T13986] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1738.737021][T13986] usb 9-1: USB disconnect, device number 3 [ 1738.742338][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1738.746177][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1738.746210][ T10] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1738.746239][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1738.746261][ T10] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1738.746282][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1738.746304][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1738.746326][ T10] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1738.746348][ T10] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1738.747139][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1738.747164][ T10] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1738.747192][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1738.747215][ T10] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1738.747236][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1738.747257][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1738.747279][ T10] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1738.747299][ T10] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1738.748070][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1738.748093][ T10] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1738.748119][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1738.748141][ T10] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1738.748160][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1738.748179][ T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1738.748199][ T10] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1738.748219][ T10] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1738.751006][ T10] usb 4-1: string descriptor 0 read error: -22 [ 1738.751091][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.781200][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1738.986166][ T10] usb 4-1: USB disconnect, device number 32 [ 1739.232082][T25418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.333809][T25826] syzkaller0: entered promiscuous mode [ 1739.342039][T25826] syzkaller0: entered allmulticast mode [ 1739.460229][ T30] audit: type=1400 audit(1787934387.368:1055): avc: denied { write } for pid=25819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1739.485797][ T5603] Bluetooth: hci2: command tx timeout [ 1739.640116][ T30] audit: type=1400 audit(1787934387.558:1056): avc: denied { write } for pid=25838 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1740.262489][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.284960][T17275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.362845][T25859] CacheFiles: No cache directory specified [ 1740.419984][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.354180][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.546124][ T5603] Bluetooth: hci2: command tx timeout [ 1741.566839][T25809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1741.662111][T25783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.662319][T25783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.662741][T25783] bridge_slave_0: entered allmulticast mode [ 1741.688247][T25783] bridge_slave_0: entered promiscuous mode [ 1741.751249][T23298] bridge_slave_1: left allmulticast mode [ 1741.751301][T23298] bridge_slave_1: left promiscuous mode [ 1741.751456][T23298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.784752][T23298] bridge_slave_0: left allmulticast mode [ 1741.784783][T23298] bridge_slave_0: left promiscuous mode [ 1741.785189][T23298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.039679][T25878] CacheFiles: No cache directory specified [ 1742.421924][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.871605][ T30] audit: type=1400 audit(1787934390.778:1057): avc: denied { write } for pid=25858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1743.145927][ T30] audit: type=1400 audit(1787934391.058:1058): avc: denied { write } for pid=25888 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1743.370910][T23298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.405268][T23298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.420697][T23298] bond0 (unregistering): Released all slaves [ 1743.447754][T23298] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1743.464740][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.477576][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.502273][T23298] bond1 (unregistering): Released all slaves [ 1743.545294][T25783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.553485][T25783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.561074][T25783] bridge_slave_1: entered allmulticast mode [ 1743.570101][T25783] bridge_slave_1: entered promiscuous mode [ 1743.624319][ T5603] Bluetooth: hci2: command tx timeout [ 1743.676019][T25893] syzkaller0: entered promiscuous mode [ 1743.681814][T25893] syzkaller0: entered allmulticast mode [ 1743.705187][T23298] tipc: Left network mode [ 1744.463537][T25913] CacheFiles: No cache directory specified [ 1744.508931][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.542772][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.714812][ T5603] Bluetooth: hci2: command tx timeout [ 1746.509187][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.582334][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.671963][T25417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.628809][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.595520][T25783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1748.648619][T25914] tipc: Started in network mode [ 1748.648665][T25914] tipc: Node identity 3a4a863a2f3e, cluster identity 4711 [ 1748.648806][T25914] tipc: Enabled bearer , priority 0 [ 1748.661804][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.717802][T25909] tipc: Disabling bearer [ 1748.749728][T25783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.908697][T25940] CacheFiles: No cache directory specified [ 1749.542286][T25417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.701762][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.258756][T25783] team0: Port device team_slave_0 added [ 1750.281192][T25783] team0: Port device team_slave_1 added [ 1750.327649][T25783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1750.340708][T25783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1750.368120][T25783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1750.483235][T23298] hsr_slave_0: left promiscuous mode [ 1750.483800][T23298] hsr_slave_1: left promiscuous mode [ 1750.556534][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.989013][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.287210][T23298] team0 (unregistering): Port device team_slave_1 removed [ 1751.307548][T23298] team0 (unregistering): Port device team_slave_0 removed [ 1751.605483][T25783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.605513][T25783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1751.605547][T25783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1751.610344][T25953] pim6reg: entered allmulticast mode [ 1751.944499][T25783] hsr_slave_0: entered promiscuous mode [ 1751.945192][T25783] hsr_slave_1: entered promiscuous mode [ 1751.945615][T25783] debugfs: 'hsr0' already exists in 'hsr' [ 1751.945629][T25783] Cannot create hsr debugfs directory [ 1752.028802][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.143306][T25970] CacheFiles: No cache directory specified [ 1753.010320][T25977] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5752'. [ 1753.064977][T25981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5752'. [ 1753.066357][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.187818][ T30] audit: type=1400 audit(1787934401.108:1059): avc: denied { write } for pid=25960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1753.409160][ T30] audit: type=1400 audit(1787934401.328:1060): avc: denied { write } for pid=25995 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1753.515378][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1753.625978][T25417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.875131][T26005] CacheFiles: No cache directory specified [ 1754.150151][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.221845][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.352556][ T30] audit: type=1400 audit(1787934403.268:1061): avc: denied { write } for pid=26008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1755.630949][ T30] audit: type=1400 audit(1787934403.548:1062): avc: denied { write } for pid=26027 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1756.262293][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.262348][T17434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.588332][ T30] audit: type=1400 audit(1787934404.508:1063): avc: denied { write } for pid=26033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1756.661921][T25417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.898632][ T30] audit: type=1400 audit(1787934404.818:1064): avc: denied { write } for pid=26045 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1756.915005][T25783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1756.929988][T25783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1756.936437][T25783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1756.948642][T25783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1756.958732][T25783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1756.992419][T25783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1756.996262][T25783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1757.010396][T25783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1757.306195][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.343625][T26059] syzkaller0: entered promiscuous mode [ 1757.349401][T26059] syzkaller0: entered allmulticast mode [ 1757.379931][T25783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1757.485931][ T30] audit: type=1400 audit(1787934405.408:1065): avc: denied { write } for pid=26054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1757.546666][T25783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1757.567211][T23298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.567315][T23298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1757.607017][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.607124][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1757.651482][ T30] audit: type=1400 audit(1787934405.568:1066): avc: denied { write } for pid=26067 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1758.362742][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.554493][T16129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1758.572054][T16129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1758.591971][T16129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1758.606222][T16129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1758.606781][T16129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1758.661157][T25783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1759.167245][T26101] CacheFiles: No cache directory specified [ 1759.383591][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.061749][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.125880][T25783] veth0_vlan: entered promiscuous mode [ 1760.135841][T25783] veth1_vlan: entered promiscuous mode [ 1760.161231][T25783] veth0_macvtap: entered promiscuous mode [ 1760.165573][T25783] veth1_macvtap: entered promiscuous mode [ 1760.179886][T25783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1760.183994][T25783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1760.422049][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.674260][T16129] Bluetooth: hci1: command tx timeout [ 1760.715217][T23305] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.907985][ T130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.909321][ T130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.909518][ T130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.909568][ T130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.135619][T23305] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.237797][T23291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.245931][T23291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1761.317676][T23305] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.463254][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.497976][T23305] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.574582][T23306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.582910][T23306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.686152][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.741888][T16129] Bluetooth: hci1: command tx timeout [ 1763.561662][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.642461][T23305] bridge_slave_1: left allmulticast mode [ 1763.642499][T23305] bridge_slave_1: left promiscuous mode [ 1763.642685][T23305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.687753][T23305] bridge_slave_0: left allmulticast mode [ 1763.695259][ T30] audit: type=1400 audit(1787934411.618:1067): avc: denied { write } for pid=26128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1763.719253][T23305] bridge_slave_0: left promiscuous mode [ 1763.719433][T23305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.735343][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.737603][T23290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.752420][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.752961][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.814696][ T30] audit: type=1400 audit(1787934411.738:1068): avc: denied { write } for pid=26147 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1764.494009][T23305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1764.519475][T23305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1764.538401][T23305] bond0 (unregistering): Released all slaves [ 1764.573066][T26083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.573159][T26083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.573306][T26083] bridge_slave_0: entered allmulticast mode [ 1764.605550][T26083] bridge_slave_0: entered promiscuous mode [ 1764.656758][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1764.664373][T26083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.664451][T26083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.664586][T26083] bridge_slave_1: entered allmulticast mode [ 1764.688336][T26083] bridge_slave_1: entered promiscuous mode [ 1764.821752][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.821856][T16129] Bluetooth: hci1: command tx timeout [ 1764.883993][T26083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1764.903049][T26083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1765.012092][T26083] team0: Port device team_slave_0 added [ 1765.090415][T26083] team0: Port device team_slave_1 added [ 1765.160748][T23305] hsr_slave_0: left promiscuous mode [ 1765.166387][T23305] hsr_slave_1: left promiscuous mode [ 1765.167033][T23305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1765.167049][T23305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1765.176029][T23305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1765.176048][T23305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1765.375191][T23305] veth1_macvtap: left promiscuous mode [ 1765.375310][T23305] veth0_macvtap: left promiscuous mode [ 1765.375383][T23305] veth1_vlan: left promiscuous mode [ 1765.375913][T23305] veth0_vlan: left promiscuous mode [ 1765.863295][T25419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.873455][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.022753][T26164] CacheFiles: No cache directory specified [ 1766.816838][T13978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.901658][T16129] Bluetooth: hci1: command tx timeout [ 1766.907249][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.039204][ T30] audit: type=1400 audit(1787934414.958:1069): avc: denied { write } for pid=26154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1767.221328][ T30] audit: type=1400 audit(1787934415.138:1070): avc: denied { write } for pid=26175 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1767.404233][T23305] team0 (unregistering): Port device team_slave_1 removed [ 1767.430494][T23305] team0 (unregistering): Port device team_slave_0 removed [ 1767.787025][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1767.833605][T26083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1767.833721][T26083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1767.833758][T26083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1767.835090][T26083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1767.835100][T26083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1767.835118][T26083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1767.962761][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.990411][T26083] hsr_slave_0: entered promiscuous mode [ 1767.993624][T26083] hsr_slave_1: entered promiscuous mode [ 1767.996661][T26083] debugfs: 'hsr0' already exists in 'hsr' [ 1767.996678][T26083] Cannot create hsr debugfs directory [ 1768.953971][ T30] audit: type=1400 audit(1787934416.878:1071): avc: denied { write } for pid=26186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1768.981749][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.987857][ T5603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1768.997566][ T5603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1768.998398][ T5603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1768.999933][ T5603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1769.002286][ T5603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1769.182186][ T30] audit: type=1400 audit(1787934417.108:1072): avc: denied { write } for pid=26206 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1769.361788][ T5263] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1769.711818][T26083] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1769.739409][T26083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1769.747629][T26083] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1769.756414][T26083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1769.771170][T26083] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1769.791574][T26083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1769.800231][T26083] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1769.813531][T26083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1769.969575][T26231] CacheFiles: No cache directory specified [ 1770.021666][T25419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.817068][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.069628][ T5603] Bluetooth: hci6: command tx timeout [ 1771.254193][T23290] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.272180][ T30] audit: type=1400 audit(1787934419.188:1073): avc: denied { write } for pid=26222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1771.372697][T16129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1771.381818][T16129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1771.389569][T16129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1771.404957][T16129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1771.412916][T16129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1771.516773][ T30] audit: type=1400 audit(1787934419.438:1074): avc: denied { write } for pid=26248 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1771.720026][T23290] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.821209][T26255] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5791'. [ 1771.840347][T26255] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5791'. [ 1771.904627][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.981234][ T5263] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1772.076777][T23290] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.700942][T23290] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.875595][T26083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1772.984195][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.062979][T13978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.066549][T26083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1773.141838][ T5603] Bluetooth: hci6: command tx timeout [ 1773.476484][ T5603] Bluetooth: hci5: command tx timeout [ 1773.790300][T23305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.790392][T23305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1773.889120][T23305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.889255][T23305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1773.947563][T23290] bridge_slave_1: left allmulticast mode [ 1773.954878][T23290] bridge_slave_1: left promiscuous mode [ 1773.955079][T23290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.974867][T23290] bridge_slave_0: left allmulticast mode [ 1773.980871][T23290] bridge_slave_0: left promiscuous mode [ 1773.989224][T23290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.099664][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.260994][T23290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1774.273884][T23290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1774.284062][T23290] bond0 (unregistering): Released all slaves [ 1774.301192][T26201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.301277][T26201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.301406][T26201] bridge_slave_0: entered allmulticast mode [ 1774.302544][T26201] bridge_slave_0: entered promiscuous mode [ 1774.304919][T26201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.305012][T26201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.305094][T26201] bridge_slave_1: entered allmulticast mode [ 1774.306336][T26201] bridge_slave_1: entered promiscuous mode [ 1774.396046][T26201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1774.404367][T26201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1774.472063][T23290] tipc: Left network mode [ 1774.614815][T26201] team0: Port device team_slave_0 added [ 1774.660205][T26201] team0: Port device team_slave_1 added [ 1774.761221][T26201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1774.761265][T26201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1774.761299][T26201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1774.879903][T26201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1774.879948][T26201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1774.886214][T26201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1774.951296][ T30] audit: type=1400 audit(1787934422.868:1075): avc: denied { write } for pid=26296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1775.058790][ T30] audit: type=1400 audit(1787934422.978:1076): avc: denied { write } for pid=26311 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1775.078044][T26201] hsr_slave_0: entered promiscuous mode [ 1775.080361][T26201] hsr_slave_1: entered promiscuous mode [ 1775.083549][T26201] debugfs: 'hsr0' already exists in 'hsr' [ 1775.083568][T26201] Cannot create hsr debugfs directory [ 1775.106938][T23290] hsr_slave_0: left promiscuous mode [ 1775.113667][T23290] hsr_slave_1: left promiscuous mode [ 1775.114284][T23290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1775.114300][T23290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1775.117721][T23290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1775.117738][T23290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1775.146025][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.166264][T23290] veth1_macvtap: left promiscuous mode [ 1775.166340][T23290] veth0_macvtap: left promiscuous mode [ 1775.166453][T23290] veth1_vlan: left promiscuous mode [ 1775.166509][T23290] veth0_vlan: left promiscuous mode [ 1775.222161][ T5603] Bluetooth: hci6: command tx timeout [ 1775.459768][T23290] team0 (unregistering): Port device team_slave_1 removed [ 1775.468492][T17436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.477414][T23290] team0 (unregistering): Port device team_slave_0 removed [ 1775.543316][ T5603] Bluetooth: hci5: command tx timeout [ 1775.679538][ T5263] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1776.039714][T26245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.039805][T26245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.039936][T26245] bridge_slave_0: entered allmulticast mode [ 1776.063763][T26245] bridge_slave_0: entered promiscuous mode [ 1776.091147][T26245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.091255][T26245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.091379][T26245] bridge_slave_1: entered allmulticast mode [ 1776.095288][T26245] bridge_slave_1: entered promiscuous mode [ 1776.107360][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.107498][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.181743][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.276992][T26245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1776.295213][T26245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.443830][T26245] team0: Port device team_slave_0 added [ 1776.450579][T26245] team0: Port device team_slave_1 added [ 1776.456610][T26083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1776.631636][ T30] audit: type=1400 audit(1787934424.538:1077): avc: denied { write } for pid=26327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.694774][T23290] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.730799][ T30] audit: type=1400 audit(1787934424.648:1078): avc: denied { write } for pid=26342 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.744688][T26245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.744704][T26245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.744722][T26245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.745980][T26245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.745991][T26245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.746009][T26245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.075921][T26245] hsr_slave_0: entered promiscuous mode [ 1777.076612][T26245] hsr_slave_1: entered promiscuous mode [ 1777.077053][T26245] debugfs: 'hsr0' already exists in 'hsr' [ 1777.077067][T26245] Cannot create hsr debugfs directory [ 1777.080268][ T5263] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1777.196046][T23290] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.222694][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.301844][ T5603] Bluetooth: hci6: command tx timeout [ 1777.413477][T23290] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.621841][ T5603] Bluetooth: hci5: command tx timeout [ 1777.762720][T23290] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.889375][ T30] audit: type=1400 audit(1787934425.808:1079): avc: denied { write } for pid=26349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1778.056150][ T30] audit: type=1400 audit(1787934425.978:1080): avc: denied { write } for pid=26366 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1778.206421][T26083] veth0_vlan: entered promiscuous mode [ 1778.214447][ T5263] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1778.267366][T25418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.305629][T26083] veth1_vlan: entered promiscuous mode [ 1778.479982][T26083] veth0_macvtap: entered promiscuous mode [ 1778.484056][T26083] veth1_macvtap: entered promiscuous mode [ 1778.511042][T26083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1778.549075][T26083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1779.030122][T23290] bridge_slave_1: left allmulticast mode [ 1779.030174][T23290] bridge_slave_1: left promiscuous mode [ 1779.030585][T23290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.043546][T23290] bridge_slave_0: left allmulticast mode [ 1779.043568][T23290] bridge_slave_0: left promiscuous mode [ 1779.043731][T23290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.066063][T23290] pim6reg: left allmulticast mode [ 1779.143799][T17437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.190178][ T30] audit: type=1400 audit(1787934427.108:1081): avc: denied { write } for pid=26373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1779.303253][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.455513][ T30] audit: type=1400 audit(1787934427.378:1082): avc: denied { write } for pid=26386 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1779.584559][T23290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1779.597229][T23290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1779.628345][T23290] bond0 (unregistering): Released all slaves [ 1779.663682][ T5263] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1779.721667][ T5603] Bluetooth: hci5: command tx timeout [ 1779.875334][T23290] tipc: Left network mode [ 1779.890445][T16164] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.890522][T16164] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.890563][T16164] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.890593][T16164] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.074561][ T270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1780.074603][ T270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.271174][ T30] audit: type=1400 audit(1787934428.188:1083): avc: denied { write } for pid=26392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1780.344446][T25418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.382443][ T30] audit: type=1400 audit(1787934428.298:1084): avc: denied { write } for pid=26403 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1780.440703][ T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1780.440745][ T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.443609][T26201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1780.465278][T26201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1780.477671][T26201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1780.495683][T26201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1780.560348][T23290] hsr_slave_0: left promiscuous mode [ 1780.703608][T23290] hsr_slave_1: left promiscuous mode [ 1780.704965][T23290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1780.704982][T23290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1780.720174][T23290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1780.720192][T23290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1780.965454][T23290] veth1_macvtap: left promiscuous mode [ 1780.978981][T23290] veth0_macvtap: left promiscuous mode [ 1780.988197][T23290] veth1_vlan: left promiscuous mode [ 1780.996151][T23290] veth0_vlan: left promiscuous mode [ 1781.350721][ T30] audit: type=1400 audit(1787934429.268:1085): avc: denied { write } for pid=26405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.411757][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.496199][ T30] audit: type=1400 audit(1787934429.418:1086): avc: denied { write } for pid=26420 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.759672][T23290] team0 (unregistering): Port device team_slave_1 removed [ 1781.779005][T23290] team0 (unregistering): Port device team_slave_0 removed [ 1781.842485][ T30] audit: type=1400 audit(1787934429.758:1087): avc: denied { write } for pid=26424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.944270][ T30] audit: type=1400 audit(1787934429.868:1088): avc: denied { write } for pid=26435 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1782.106949][T26245] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.124997][T26201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1782.137397][T26201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1782.157212][T26201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1782.173271][T26201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1782.194249][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.340980][T26245] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.431780][T25418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.536109][ T30] audit: type=1400 audit(1787934430.458:1089): avc: denied { mount } for pid=26447 comm="syz.9.5765" name="/" dev="ramfs" ino=104239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1782.673337][T26245] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.845117][T26245] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.961891][ T30] audit: type=1400 audit(1787934430.888:1090): avc: denied { write } for pid=26440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1783.045864][T26201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1783.110886][T26201] 8021q: adding VLAN 0 to HW filter on device team0 [ 1783.148182][T23290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.148271][T23290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1783.178255][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.178339][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1783.260274][ T30] audit: type=1400 audit(1787934431.178:1091): avc: denied { write } for pid=26460 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1783.462644][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.764274][ T30] audit: type=1400 audit(1787934431.688:1092): avc: denied { write } for pid=26462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1783.924784][T26245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1783.936622][T26245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1783.939460][T26245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1783.944242][T13992] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1783.946746][T26245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1783.947852][T26245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1783.957855][T26245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1783.964340][T26245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1783.975410][T26245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1784.126779][T13992] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1784.136667][T13992] usb 10-1: not running at top speed; connect to a high speed hub [ 1784.136711][T13992] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1784.158274][T13992] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1784.158312][T13992] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1784.183647][T13992] usb 10-1: string descriptor 0 read error: -22 [ 1784.183763][T13992] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.210911][T13992] usb 10-1: 0:1 : does not exist [ 1784.210948][T13992] usb 10-1: 0:2 : does not exist [ 1784.254800][T26245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1784.319597][T26245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1784.334396][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.334479][ T270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1784.370078][T23290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.370167][T23290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1784.434442][T26474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1784.442742][T26474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.443402][T26474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.459672][T26474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.459973][T26474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.486406][T26245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1784.511877][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.529350][T26503] misc userio: Invalid payload size [ 1784.637120][T26201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1784.664049][T26506] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5805'. [ 1784.856854][T26201] veth0_vlan: entered promiscuous mode [ 1784.882213][T26201] veth1_vlan: entered promiscuous mode [ 1784.925043][T26201] veth0_macvtap: entered promiscuous mode [ 1784.932284][T26201] veth1_macvtap: entered promiscuous mode [ 1785.048040][T26201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1785.070081][T26201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1785.084480][T13992] usb 10-1: 6:0: failed to get current value for ch 1 (-22) [ 1786.036899][T26509] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1786.036996][T26509] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1786.051262][T11051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.055117][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.059805][T17436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.090640][ T7197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.091357][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.100990][T23306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.105183][T13992] usb 10-1: 6:0: failed to get current value for ch 0 (-22) [ 1786.108518][T26509] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1786.109842][T26509] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1786.110052][T26509] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1786.137054][T26509] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1786.248311][T26509] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1786.254510][T26509] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1786.352761][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1786.352829][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1786.414395][T13992] usb 10-1: USB disconnect, device number 2 [ 1786.507231][T26509] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1786.564058][ T7197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.574733][T26509] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1786.574809][T26509] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1786.579215][T23304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.579719][T16164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.579970][T16164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1786.632292][T26509] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1786.682939][T26509] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1786.689066][T26509] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1786.727471][T26509] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1786.806026][T26509] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1786.813072][T26509] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1786.822848][ T5603] Bluetooth: hci0: command 0x0406 tx timeout [ 1786.860230][T26509] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1786.917486][T16129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1786.933283][T16129] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1786.946242][T16129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1786.970749][T16129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1786.988281][T16129] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1787.182759][T23306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1787.190735][T23306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1787.367890][T23306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1787.367933][T23306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1787.450950][T26245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1787.532709][T26245] veth0_vlan: entered promiscuous mode [ 1787.565717][T26245] veth1_vlan: entered promiscuous mode [ 1787.798060][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1787.798080][ T30] audit: type=1400 audit(1787934435.708:1096): avc: denied { write } for pid=26522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1788.451607][T16129] Bluetooth: hci3: command 0x0c1a tx timeout [ 1788.451677][T16129] Bluetooth: hci4: command 0x0406 tx timeout [ 1788.505189][T13992] net_ratelimit: 4 callbacks suppressed [ 1788.505232][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.581960][ T5603] Bluetooth: hci1: command 0x0c1a tx timeout [ 1788.665782][T26245] veth0_macvtap: entered promiscuous mode [ 1788.684609][T26245] veth1_macvtap: entered promiscuous mode [ 1788.741937][ T5603] Bluetooth: hci6: command 0x0c1a tx timeout [ 1788.817919][T26245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1788.825445][ T5603] Bluetooth: hci5: command 0x0c1a tx timeout [ 1788.848326][T26245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.903052][ T5603] Bluetooth: hci0: command 0x0406 tx timeout [ 1788.915400][T23304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.915701][T23304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.915826][T23304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.923606][ T30] audit: type=1400 audit(1787934436.838:1097): avc: denied { write } for pid=26562 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1789.004357][ T7197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.073441][ T5603] Bluetooth: hci7: command tx timeout [ 1789.543610][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.757318][T17437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.454948][T23298] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.511650][ T5603] Bluetooth: hci3: command 0x0c1a tx timeout [ 1790.594474][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.671832][ T5603] Bluetooth: hci1: command 0x0c1a tx timeout [ 1790.692040][T17437] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1790.760098][T23298] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.836826][ T5603] Bluetooth: hci6: command 0x0c1a tx timeout [ 1790.842230][T23306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1790.842250][T23306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.863119][T17437] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1790.871479][T17437] usb 10-1: not running at top speed; connect to a high speed hub [ 1790.879582][T17437] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1790.889780][T17437] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.900284][T17437] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1790.911789][ T5603] Bluetooth: hci5: command 0x0c1a tx timeout [ 1790.921853][T17437] usb 10-1: string descriptor 0 read error: -22 [ 1790.928343][T17437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.943275][T17437] usb 10-1: 0:1 : does not exist [ 1790.948434][T17437] usb 10-1: 0:2 : does not exist [ 1791.098632][T23298] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.142759][ T5603] Bluetooth: hci7: command tx timeout [ 1791.147665][T16164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.159137][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.162361][T26573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1791.170243][T26573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1791.170562][T26573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1791.174023][T26573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1791.174324][T26573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1791.228429][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.235290][ T7197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.237427][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.256513][T26583] misc userio: Invalid payload size [ 1791.381249][ T30] audit: type=1400 audit(1787934439.298:1098): avc: denied { write } for pid=26574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1791.453955][T15133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1791.454049][T15133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1791.602384][ T30] audit: type=1400 audit(1787934439.528:1099): avc: denied { write } for pid=26589 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1791.611670][T23298] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.783409][T17437] usb 10-1: 6:0: failed to get current value for ch 1 (-22) [ 1791.805056][T17437] usb 10-1: 6:0: failed to get current value for ch 0 (-22) [ 1791.864512][T17437] usb 10-1: USB disconnect, device number 3 [ 1792.581583][ T5603] Bluetooth: hci3: command 0x0c1a tx timeout [ 1792.901738][T16129] Bluetooth: hci6: command 0x0c1a tx timeout [ 1792.943998][ T5603] Bluetooth: hci1: command 0x0c1a tx timeout [ 1792.981585][ T5603] Bluetooth: hci5: command 0x0c1a tx timeout [ 1793.221962][ T5603] Bluetooth: hci7: command tx timeout [ 1793.265968][ T30] audit: type=1400 audit(1787934441.188:1100): avc: denied { write } for pid=26591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1793.590332][ T30] audit: type=1400 audit(1787934441.508:1101): avc: denied { write } for pid=26614 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1793.747144][T26527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.755630][T26527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.755795][T26527] bridge_slave_0: entered allmulticast mode [ 1793.789138][T26527] bridge_slave_0: entered promiscuous mode [ 1794.420839][T17282] net_ratelimit: 6 callbacks suppressed [ 1794.420883][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.607312][T26631] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1794.607485][T26631] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1794.608571][T26631] udc dummy_udc.0: failed to start g1: -22 [ 1794.608694][T26631] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1794.613128][T26631] UDC core: g1: couldn't find an available UDC or it's busy [ 1794.817650][T17437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.940391][T26527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.940484][T26527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.940618][T26527] bridge_slave_1: entered allmulticast mode [ 1794.973806][T26527] bridge_slave_1: entered promiscuous mode [ 1795.203116][T26621] syzkaller0: entered promiscuous mode [ 1795.203163][T26621] syzkaller0: entered allmulticast mode [ 1795.245049][T23298] bridge_slave_1: left allmulticast mode [ 1795.245092][T23298] bridge_slave_1: left promiscuous mode [ 1795.245301][T23298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.268471][T23298] bridge_slave_0: left allmulticast mode [ 1795.268512][T23298] bridge_slave_0: left promiscuous mode [ 1795.270539][T23298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.304439][ T5603] Bluetooth: hci7: command tx timeout [ 1795.361023][ T30] audit: type=1400 audit(1787934443.278:1102): avc: denied { write } for pid=26627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1795.472151][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.526400][ T30] audit: type=1400 audit(1787934443.438:1103): avc: denied { write } for pid=26653 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1795.645489][T23298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1795.659997][T23298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1795.674004][T23298] bond0 (unregistering): Released all slaves [ 1795.689153][T26527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1795.693517][T26527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1795.713847][T17282] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1795.881687][T17282] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1795.882142][T17282] usb 2-1: not running at top speed; connect to a high speed hub [ 1795.882182][T17282] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1795.883304][T17282] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1795.883329][T17282] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1795.886132][T17282] usb 2-1: string descriptor 0 read error: -22 [ 1795.886236][T17282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.921445][T17282] usb 2-1: 0:1 : does not exist [ 1795.921468][T17282] usb 2-1: 0:2 : does not exist [ 1797.087318][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.091456][T26652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1797.093004][T26652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.093362][T26652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.101830][T26652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.102198][T26652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.217328][T26661] misc userio: Invalid payload size [ 1797.594236][T17282] usb 2-1: 6:0: failed to get current value for ch 1 (-22) [ 1797.609470][T17282] usb 2-1: 6:0: failed to get current value for ch 0 (-22) [ 1797.723162][T17282] usb 2-1: USB disconnect, device number 33 [ 1797.877762][T17437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.019734][T26666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5828'. [ 1798.122418][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.142060][T25418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.182968][T25418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.903287][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.092097][T17437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.441685][T26681] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1801.442029][T26681] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1801.444777][T26681] udc dummy_udc.0: failed to start g1: -22 [ 1801.444863][T26681] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1801.453566][T26681] UDC core: g1: couldn't find an available UDC or it's busy [ 1801.667809][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.741995][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.942468][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.982373][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.332540][T13992] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1804.545456][T13992] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1804.584376][T13992] usb 3-1: not running at top speed; connect to a high speed hub [ 1804.584438][T13992] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1804.658590][T13992] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.658645][T13992] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1804.983833][T25418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.266384][T13992] usb 3-1: string descriptor 0 read error: -22 [ 1805.266502][T13992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.275860][T13992] usb 3-1: 0:1 : does not exist [ 1805.275889][T13992] usb 3-1: 0:2 : does not exist [ 1806.151824][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.231769][T26701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1806.289514][T26701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.292081][T26701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.296490][T26701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.296786][T26701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.404333][T26714] misc userio: Invalid payload size [ 1807.062439][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.260245][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.748337][T26527] team0: Port device team_slave_0 added [ 1808.289498][T26294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.566962][T26527] team0: Port device team_slave_1 added [ 1808.612868][T13992] usb 3-1: 6:0: failed to get current value for ch 1 (-22) [ 1808.633799][T13992] usb 3-1: 6:0: failed to get current value for ch 0 (-22) [ 1808.843335][T26527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1808.843361][T26527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1808.843417][T26527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1808.858716][T26527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1808.858732][T26527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1808.858753][T26527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1809.017270][T13992] usb 3-1: USB disconnect, device number 30 [ 1809.071649][T26294] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1809.222852][T26294] usb 10-1: Using ep0 maxpacket: 32 [ 1809.223712][T26294] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1809.224597][T26294] usb 10-1: config index 0 descriptor too short (expected 19, got 18) [ 1809.224617][T26294] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.224632][T26294] usb 10-1: config 0 has no interfaces? [ 1809.230416][T26294] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.230438][T26294] usb 10-1: Product: syz [ 1809.230451][T26294] usb 10-1: Manufacturer: syz [ 1809.230464][T26294] usb 10-1: SerialNumber: syz [ 1809.239303][T26294] usb 10-1: config 0 descriptor?? [ 1809.312064][T26294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.351038][T26527] hsr_slave_0: entered promiscuous mode [ 1809.358633][T26527] hsr_slave_1: entered promiscuous mode [ 1809.360650][T26527] debugfs: 'hsr0' already exists in 'hsr' [ 1809.360668][T26527] Cannot create hsr debugfs directory [ 1809.395707][T23298] hsr_slave_0: left promiscuous mode [ 1809.403266][T23298] hsr_slave_1: left promiscuous mode [ 1809.405957][T23298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1809.405975][T23298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1809.416790][T23298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1809.416809][T23298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1809.438952][T23298] veth1_macvtap: left promiscuous mode [ 1809.439008][T23298] veth0_macvtap: left promiscuous mode [ 1809.439093][T23298] veth1_vlan: left promiscuous mode [ 1809.439143][T23298] veth0_vlan: left promiscuous mode [ 1809.511251][ T30] audit: type=1400 audit(1787934457.428:1104): avc: denied { write } for pid=26718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1809.778996][ T30] audit: type=1400 audit(1787934457.698:1105): avc: denied { write } for pid=26749 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1810.101940][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.167093][ T30] audit: type=1400 audit(1787934458.088:1106): avc: denied { audit_write } for pid=26762 comm="syz.1.5851" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1810.226962][ T30] audit: type=1400 audit(1787934458.148:1107): avc: denied { watch watch_reads } for pid=26762 comm="syz.1.5851" path="/proc/39/task" dev="proc" ino=107241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1810.341802][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.380355][T23298] team0 (unregistering): Port device team_slave_1 removed [ 1810.525358][T23298] team0 (unregistering): Port device team_slave_0 removed [ 1810.677937][T25419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.396384][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1812.395197][T26787] syzkaller0: entered promiscuous mode [ 1812.395231][T26787] syzkaller0: entered allmulticast mode [ 1812.422256][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1812.815389][ T30] audit: type=1400 audit(1787934460.738:1108): avc: denied { write } for pid=26777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1813.032648][T26527] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.101613][T17282] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1813.104295][T26294] usb 10-1: USB disconnect, device number 4 [ 1813.118583][ T30] audit: type=1400 audit(1787934461.028:1109): avc: denied { write } for pid=26799 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1813.143474][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1813.271627][T17282] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1813.273664][T17282] usb 3-1: not running at top speed; connect to a high speed hub [ 1813.273691][T17282] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1813.276602][T17282] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.276622][T17282] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1813.278997][T17282] usb 3-1: string descriptor 0 read error: -22 [ 1813.279099][T17282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.303483][T17282] usb 3-1: 0:1 : does not exist [ 1813.303506][T17282] usb 3-1: 0:2 : does not exist [ 1813.437050][T26527] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.463343][T26662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1813.510324][T26796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1813.523823][T26796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1813.524264][T26796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.539912][T26796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1813.548285][T26796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.614219][T26817] misc userio: Invalid payload size [ 1813.643840][T26527] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.283564][T17282] usb 3-1: 6:0: failed to get current value for ch 1 (-22) [ 1814.295882][T17282] usb 3-1: 6:0: failed to get current value for ch 0 (-22) [ 1814.348250][T26527] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.486168][T17282] usb 3-1: USB disconnect, device number 31 [ 1814.507113][T26831] syzkaller0: entered promiscuous mode [ 1814.507150][T26831] syzkaller0: entered allmulticast mode [ 1814.509700][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.514773][T26831] tipc: Enabling of bearer rejected, failed to enable media [ 1814.727510][ T30] audit: type=1400 audit(1787934462.648:1110): avc: denied { write } for pid=26814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1815.880157][T26294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.935246][T26842] syzkaller0: entered promiscuous mode [ 1815.935290][T26842] syzkaller0: entered allmulticast mode [ 1816.137867][ T30] audit: type=1400 audit(1787934464.058:1111): avc: denied { write } for pid=26847 comm="syz.2.5868" name="720p" dev="configfs" ino=90647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1816.183225][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.198732][ T30] audit: type=1400 audit(1787934464.118:1112): avc: denied { write } for pid=26846 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1816.902135][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.275884][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.293464][T26527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1818.299302][ T30] audit: type=1400 audit(1787934466.218:1113): avc: denied { write } for pid=26869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1818.338020][T26527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1818.339153][T26527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1819.488026][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.503761][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.561775][T26527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1819.562510][T26527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1819.580681][T26527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1819.591267][T26527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1819.615207][T26527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1819.641286][T26890] syzkaller0: entered promiscuous mode [ 1819.647089][T26890] syzkaller0: entered allmulticast mode [ 1819.663847][T26890] tipc: Enabling of bearer rejected, failed to enable media [ 1819.665114][ T30] audit: type=1400 audit(1787934467.588:1114): avc: denied { write } for pid=26888 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1819.815202][ T30] audit: type=1400 audit(1787934467.738:1115): avc: denied { write } for pid=26900 comm="syz.2.5879" name="720p" dev="configfs" ino=90647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1819.895470][T26527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1819.923931][T26904] syzkaller0: entered promiscuous mode [ 1819.929571][T26904] syzkaller0: entered allmulticast mode [ 1819.965812][T26527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1820.049545][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 1820.049635][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1820.062739][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 1820.062812][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1820.067953][T26906] syzkaller0: entered promiscuous mode [ 1820.067972][T26906] syzkaller0: entered allmulticast mode [ 1820.262231][T17437] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1820.308516][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1820.474053][T17437] usb 10-1: Using ep0 maxpacket: 32 [ 1820.504236][T17437] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1820.560847][T17437] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1820.574398][T17437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1820.574570][T17437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1820.589337][T17437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1820.675316][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1820.705593][T17437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.705631][T17437] usb 10-1: Product: syz [ 1820.705659][T17437] usb 10-1: Manufacturer: syz [ 1820.705676][T17437] usb 10-1: SerialNumber: syz [ 1820.738370][T17437] usb 10-1: config 0 descriptor?? [ 1821.739076][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.831359][ T30] audit: type=1400 audit(1787934469.748:1116): avc: denied { write } for pid=26902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1821.954529][ T30] audit: type=1400 audit(1787934469.878:1117): avc: denied { write } for pid=26938 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1822.345268][T17282] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1822.526227][T17437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.756700][T17282] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1822.771048][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.795182][T17282] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.795244][T17282] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1822.795284][T17282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.002290][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.779798][T17282] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1825.062815][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1825.094327][T17437] usb 10-1: USB disconnect, device number 5 [ 1825.127135][T25419] usb 3-1: USB disconnect, device number 32 [ 1825.227385][T26527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1825.280660][ T30] audit: type=1400 audit(1787934473.198:1118): avc: denied { write } for pid=26960 comm="syz.2.5890" name="720p" dev="configfs" ino=90647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1825.315213][T26965] syzkaller0: entered promiscuous mode [ 1825.320979][T26965] syzkaller0: entered allmulticast mode [ 1825.335778][T26965] tipc: Enabling of bearer rejected, failed to enable media [ 1825.544196][T25419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1825.545973][T26975] syzkaller0: entered promiscuous mode [ 1825.545991][T26975] syzkaller0: entered allmulticast mode [ 1825.639900][T26968] syzkaller0: entered promiscuous mode [ 1825.647605][T26968] syzkaller0: entered allmulticast mode [ 1826.239199][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1826.297588][ T30] audit: type=1400 audit(1787934474.218:1119): avc: denied { write } for pid=26955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1827.303345][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1827.405089][ T30] audit: type=1400 audit(1787934475.328:1120): avc: denied { write } for pid=26997 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1828.342274][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1828.597395][T25419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1828.606000][ T30] audit: type=1400 audit(1787934476.518:1121): avc: denied { write } for pid=27012 comm="syz.9.5901" name="720p" dev="configfs" ino=90647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1829.003932][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1829.133773][ T10] usb 10-1: device descriptor read/64, error -71 [ 1829.390686][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.402849][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1829.533701][ T10] usb 10-1: device descriptor read/64, error -71 [ 1829.644621][ T10] usb usb10-port1: attempt power cycle [ 1829.873147][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1830.119022][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1830.148660][ T10] usb 10-1: device descriptor read/8, error -71 [ 1830.401974][ T10] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1830.433352][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1830.436728][ T10] usb 10-1: device descriptor read/8, error -71 [ 1830.583457][ T10] usb usb10-port1: unable to enumerate USB device [ 1830.990054][T27031] FAULT_INJECTION: forcing a failure. [ 1830.990054][T27031] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1830.990102][T27031] CPU: 1 UID: 0 PID: 27031 Comm: syz.7.5909 Tainted: G L syzkaller #0 PREEMPT(full) [ 1830.990129][T27031] Tainted: [L]=SOFTLOCKUP [ 1830.990136][T27031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1830.990147][T27031] Call Trace: [ 1830.990154][T27031] [ 1830.990161][T27031] dump_stack_lvl+0x100/0x190 [ 1830.990195][T27031] should_fail_ex.cold+0x5/0xa [ 1830.990225][T27031] get_futex_key+0x1d0/0x14f0 [ 1830.990253][T27031] ? __pfx_get_futex_key+0x10/0x10 [ 1830.990279][T27031] futex_wait_setup+0x91/0x540 [ 1830.990307][T27031] __futex_wait+0x19f/0x300 [ 1830.990331][T27031] ? __pfx___futex_wait+0x10/0x10 [ 1830.990353][T27031] ? __pfx_try_to_wake_up+0x10/0x10 [ 1830.990370][T27031] ? futex_hash+0x311/0x400 [ 1830.990389][T27031] ? __pfx_futex_wake_mark+0x10/0x10 [ 1830.990415][T27031] ? find_held_lock+0x2b/0x80 [ 1830.990435][T27031] ? futex_wake+0x4ea/0x5e0 [ 1830.990463][T27031] futex_wait+0xe6/0x370 [ 1830.990486][T27031] ? __pfx_futex_wait+0x10/0x10 [ 1830.990514][T27031] ? rcu_read_lock_any_held+0x6a/0x90 [ 1830.990535][T27031] ? find_held_lock+0x2b/0x80 [ 1830.990555][T27031] ? ksys_write+0x190/0x250 [ 1830.990579][T27031] ? ksys_write+0x190/0x250 [ 1830.990603][T27031] do_futex+0x265/0x440 [ 1830.990623][T27031] ? __pfx_do_futex+0x10/0x10 [ 1830.990644][T27031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1830.990665][T27031] __x64_sys_futex+0x34f/0x4d0 [ 1830.990685][T27031] ? fput+0x7c/0x100 [ 1830.990702][T27031] ? __pfx___x64_sys_futex+0x10/0x10 [ 1830.990721][T27031] ? ksys_write+0x1ac/0x250 [ 1830.990744][T27031] ? __pfx_ksys_write+0x10/0x10 [ 1830.990772][T27031] do_syscall_64+0x123/0x790 [ 1830.990789][T27031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.990806][T27031] RIP: 0033:0x7fa3ae59e159 [ 1830.990819][T27031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1830.990836][T27031] RSP: 002b:00007fa3af5490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1830.990853][T27031] RAX: ffffffffffffffda RBX: 00007fa3ae825fa8 RCX: 00007fa3ae59e159 [ 1830.990863][T27031] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa3ae825fa8 [ 1830.990872][T27031] RBP: 00007fa3ae825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1830.990892][T27031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1830.990902][T27031] R13: 00007fa3ae826038 R14: 00007ffd759648b0 R15: 00007ffd75964998 [ 1830.990924][T27031] [ 1831.470272][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1831.622602][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1832.055903][T27038] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=27038 comm=syz.2.5912 [ 1832.506439][T26294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1832.939198][ T30] audit: type=1400 audit(1787934480.858:1122): avc: denied { write } for pid=27042 comm="syz.9.5914" name="720p" dev="configfs" ino=90647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1833.567145][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1833.593621][T27048] usbip-vudc usbip-vudc.0: gadget not bound [ 1834.582921][T26294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.664180][T25419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1835.075256][T26527] veth0_vlan: entered promiscuous mode [ 1835.477374][T26527] veth1_vlan: entered promiscuous mode [ 1835.561587][ T30] audit: type=1400 audit(1787934483.478:1123): avc: denied { write } for pid=27062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1835.622736][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1835.632967][T26527] veth0_macvtap: entered promiscuous mode [ 1835.657402][T26527] veth1_macvtap: entered promiscuous mode [ 1835.774373][T26527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.787842][T26527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.867994][ T30] audit: type=1400 audit(1787934483.788:1124): avc: denied { write } for pid=27086 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1835.974076][T27095] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1835.974128][T27095] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1835.974247][T27095] udc dummy_udc.0: failed to start g1: -22 [ 1835.974271][T27095] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1835.974858][T27095] UDC core: g1: couldn't find an available UDC or it's busy [ 1836.310404][ T130] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.319541][ T130] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.319591][ T130] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.319621][ T130] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.381578][T17437] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1836.418466][T15133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.418521][T15133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.456172][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1836.467807][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.467849][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.533106][T17437] usb 10-1: descriptor type invalid, skip [ 1836.533139][T17437] usb 10-1: descriptor type invalid, skip [ 1836.533169][T17437] usb 10-1: descriptor type invalid, skip [ 1836.533190][T17437] usb 10-1: descriptor type invalid, skip [ 1836.545718][T17437] usb 10-1: not running at top speed; connect to a high speed hub [ 1836.545751][T17437] usb 10-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 1836.576801][T17437] usb 10-1: config 11 has an invalid interface number: 31 but max is 2 [ 1836.576829][T17437] usb 10-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 1836.576849][T17437] usb 10-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 1836.576867][T17437] usb 10-1: config 11 has 1 interface, different from the descriptor's value: 3 [ 1836.576886][T17437] usb 10-1: config 11 has no interface number 0 [ 1836.576933][T17437] usb 10-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 1836.576954][T17437] usb 10-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1836.576978][T17437] usb 10-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 1836.577001][T17437] usb 10-1: config 11 interface 31 altsetting 10 has an endpoint descriptor with address 0x4D, changing to 0xD [ 1836.577025][T17437] usb 10-1: config 11 interface 31 altsetting 10 endpoint 0xD has invalid maxpacket 16490, setting to 64 [ 1836.577049][T17437] usb 10-1: config 11 interface 31 altsetting 10 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 1836.577071][T17437] usb 10-1: config 11 interface 31 has no altsetting 0 [ 1836.617874][T17437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.617901][T17437] usb 10-1: Product: 㰁 [ 1836.617916][T17437] usb 10-1: Manufacturer: 䕂掻삅䖒滓嫴톌䮄祂臑椽떯鷉Ψ赹箢㰱坄娫Ἔ輞鐹Ĉ뤟ᆹ窏䳻跐Ꮔ俣ẉ旄鞗ᦣළÚ෧ⱁ啻㢢蠡嘿죨峁锒苫喒෥ጯ䝏跱஘⪺逍⒘廡ᄘ⿩밦洬昐ꑨ䟇珲評쉿鍁扌‖ૡꌄ왉횮㜞㓯ꑟ叴崠솹窎耈梗쿇窥Ꚃ㧨 [ 1836.617948][T17437] usb 10-1: SerialNumber: ఇ [ 1836.672801][T13992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.707875][T27088] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1837.147361][T23304] IPVS: starting estimator thread 0... [ 1837.197590][T17437] usb 10-1: USB disconnect, device number 10 [ 1837.242678][ T30] audit: type=1400 audit(1787934485.168:1125): avc: denied { write } for pid=27110 comm="syz.1.5925" name="720p" dev="configfs" ino=90647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1837.291614][T27107] IPVS: using max 44 ests per chain, 105600 per kthread [ 1837.389406][ T30] audit: type=1400 audit(1787934485.308:1126): avc: denied { write } for pid=27099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1837.486526][ T30] audit: type=1400 audit(1787934485.408:1127): avc: denied { write } for pid=27120 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1837.603309][T27121] usbip-vudc usbip-vudc.0: gadget not bound [ 1837.878352][T26294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1837.937604][T17437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1838.010815][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1838.042265][ T30] audit: type=1400 audit(1787934485.968:1128): avc: denied { read } for pid=27123 comm="syz.5.5927" lport=34912 faddr=::ffff:172.30.0.6 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1839.390154][T17282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.433610][ T30] audit: type=1400 audit(1787934487.358:1129): avc: denied { write } for pid=27128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1839.507580][ T5603] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1839.723634][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1840.148763][ T30] audit: type=1400 audit(1787934488.068:1130): avc: denied { write } for pid=27151 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1840.332851][T27165] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1840.332900][T27165] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1840.334924][T27165] udc dummy_udc.0: failed to start g1: -22 [ 1840.334951][T27165] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1840.335636][T27165] UDC core: g1: couldn't find an available UDC or it's busy [ 1840.376011][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1840.491196][T26294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1840.981760][T25387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1841.062282][T27171] CacheFiles: No cache directory specified [ 1841.706399][T26294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1841.730182][T12157] logitech-hidpp-device 0003:046D:C082.001D: item fetching failed at offset 0/2 [ 1841.744594][T12157] logitech-hidpp-device 0003:046D:C082.001D: hidpp_probe:parse failed [ 1841.744674][T12157] logitech-hidpp-device 0003:046D:C082.001D: probe with driver logitech-hidpp-device failed with error -22 [ 1842.070978][ T30] audit: type=1400 audit(1787934489.988:1131): avc: denied { write } for pid=27181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1842.751792][T17275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.264275][T27208] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=27208 comm=syz.9.5945 [ 1843.278943][ T30] audit: type=1400 audit(1787934491.198:1132): avc: denied { write } for pid=27201 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1843.452719][T13978] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1843.814954][T26294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.952245][T13978] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1843.962572][T13978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.962600][T13978] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1843.962634][T13978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.996683][T13978] usb 2-1: config 0 descriptor?? [ 1844.021723][T13978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.067592][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1844.593507][ T32] INFO: task syz.5.5561:24998 blocked for more than 143 seconds. [ 1844.593725][ T32] Tainted: G L syzkaller #0 [ 1844.593885][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1844.594026][ T32] task:syz.5.5561 state:D stack:26016 pid:24998 tgid:24991 ppid:19107 task_flags:0x400140 flags:0x00080002 [ 1844.594661][ T32] Call Trace: [ 1844.594734][ T32] [ 1844.594799][ T32] __schedule+0x1259/0x6920 [ 1844.594922][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 1844.595158][ T32] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1844.634992][ T32] ? __pfx___schedule+0x10/0x10 [ 1844.635064][ T32] ? find_held_lock+0x2b/0x80 [ 1844.635124][ T32] ? schedule+0x225/0x2c0 [ 1844.635254][ T32] schedule+0xdd/0x2c0 [ 1844.635314][ T32] schedule_preempt_disabled+0x13/0x30 [ 1844.635372][ T32] __mutex_lock+0xcbf/0x1bc0 [ 1844.635422][ T32] ? nfsd_nrthreads+0x57/0xd0 ** replaying previous printk message ** [ 1844.635422][ T32] ? nfsd_nrthreads+0x57/0xd0 [ 1844.635549][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1844.635605][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1844.635665][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 1844.635716][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1844.635846][ T32] ? rcu_is_watching+0x13/0xc0 [ 1844.635939][ T32] ? __rcu_read_unlock+0x27f/0x5e0 [ 1844.636044][ T32] ? nfsd_nrthreads+0x57/0xd0 [ 1844.636126][ T32] nfsd_nrthreads+0x57/0xd0 [ 1844.636195][ T32] write_threads+0x34a/0x600 [ 1844.636288][ T32] ? __pfx_write_threads+0x10/0x10 [ 1844.636344][ T32] ? __might_fault+0xc5/0x140 [ 1844.636405][ T32] ? __might_fault+0xc5/0x140 [ 1844.636466][ T32] ? __might_fault+0xc5/0x140 [ 1844.636534][ T32] ? __pfx_write_threads+0x10/0x10 [ 1844.636557][ T32] ? __pfx_write_threads+0x10/0x10 [ 1844.636578][ T32] ? _copy_from_user+0x59/0xd0 [ 1844.643949][ T32] ? __pfx_write_threads+0x10/0x10 [ 1844.644027][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 1844.644128][ T32] vfs_write+0x2aa/0x1050 [ 1844.644240][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1844.644302][ T32] ? lock_acquire+0x1d1/0x380 [ 1844.644363][ T32] ? __fget_files+0x34/0x3d0 [ 1844.644429][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1844.644493][ T32] ? find_held_lock+0x2b/0x80 [ 1844.792485][ T32] ? __fget_files+0x215/0x3d0 [ 1844.793602][ T32] ? __fget_files+0x21f/0x3d0 [ 1845.091731][ T32] ksys_write+0x12a/0x250 [ 1845.091771][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1845.091803][ T32] do_syscall_64+0x123/0x790 [ 1845.091823][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.091841][ T32] RIP: 0033:0x7f681799e159 [ 1845.091856][ T32] RSP: 002b:00007f6818818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1845.091874][ T32] RAX: ffffffffffffffda RBX: 00007f6817c26180 RCX: 00007f681799e159 [ 1845.091885][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1845.091895][ T32] RBP: 00007f6817a35024 R08: 0000000000000000 R09: 0000000000000000 [ 1845.091905][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1845.091915][ T32] R13: 00007f6817c26218 R14: 00007f6817c26180 R15: 00007ffcdfd38b68 [ 1845.091938][ T32] [ 1845.091987][ T32] [ 1845.091987][ T32] Showing all locks held in the system: [ 1845.091995][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 1845.092007][ T32] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1845.092050][ T32] #1: ffffffff9bc5bb38 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 1845.092093][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1845.092105][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1845.092151][ T32] locks held by kworker/u8:3/51: 3, last CPU#1: [ 1845.092162][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1845.092207][ T32] #1: ffffc90000bb7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1845.092253][ T32] #2: ffff8880344cd258 (&devlink->lock_key#20){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1845.092318][ T32] locks held by getty/5368: 2, on CPU#1: [ 1845.092334][ T32] #0: ffff8880326c30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1845.104956][T17275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.123989][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1845.124046][ T32] locks held by kworker/u8:13/7197: 3, last CPU#0: [ 1845.124058][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1845.124105][ T32] #1: ffffc9001b78fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1845.124150][ T32] #2: ffff88805fee07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1845.124192][ T32] locks held by kworker/u8:17/7609: 3, last CPU#0: [ 1845.124204][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1845.124249][ T32] #1: ffffc90004da7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1845.124295][ T32] #2: ffff88805dfd7258 (&devlink->lock_key#19){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1845.124343][ T32] locks held by kworker/u8:19/16164: 3, last CPU#0: [ 1845.124355][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1845.124399][ T32] #1: ffffc9000621fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1845.124444][ T32] #2: ffff88805d0707a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1845.124489][ T32] locks held by syz.1.4909/22706: 3, on CPU#1: [ 1845.124501][ T32] #0: ffff88802d06c9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1845.124548][ T32] #1: ffff888035380460 (sb_writers#27){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1845.124596][ T32] #2: ffffffff8f287500 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 1845.124637][ T32] locks held by kworker/u8:7/23291: 3, last CPU#1: [ 1845.124649][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1845.124693][ T32] #1: ffffc9000f29fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1845.124738][ T32] #2: ffff88807c994258 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 1845.124780][ T32] locks held by kworker/u8:24/23298: 3, last CPU#0: [ 1845.124791][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1845.124835][ T32] #1: ffffc90010eafd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1845.124880][ T32] #2: ffff8880334307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1845.124921][ T32] locks held by kworker/u8:30/23304: 2, last CPU#1: [ 1845.124933][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1845.124978][ T32] #1: ffffc9000f22fd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1845.145943][ T32] locks held by syz.5.5561/24998: 3, on CPU#0: [ 1845.145962][ T32] #0: ffff88807d3762b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1845.146012][ T32] #1: ffff88802d338460 (sb_writers#27){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1845.146062][ T32] #2: ffffffff8f287500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nrthreads+0x57/0xd0 [ 1845.146123][ T32] locks held by syz.2.5913/27040: 3, on CPU#0: [ 1845.146135][ T32] #0: ffff888078d5f430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1845.146175][ T32] #1: ffff88802e8ae460 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1845.146222][ T32] #2: ffff888055f26c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1845.150563][ T32] locks held by dhcpcd-run-hook/27232: 1, last CPU#0: [ 1845.150582][ T32] #0: ffff88807c2f5038 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1845.150628][ T32] locks held by syz.7.5948/27233: 2, last CPU#0: [ 1845.150641][ T32] #0: ffff88807dc00460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 1845.150693][ T32] #1: ffff888059d95cf8 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x151/0xad0 [ 1845.150740][ T32] [ 1845.150743][ T32] ============================================= [ 1845.150743][ T32] [ 1845.150749][ T32] NMI backtrace for cpu 0 [ 1845.150759][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.150775][ T32] Tainted: [L]=SOFTLOCKUP [ 1845.150779][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1845.150786][ T32] Call Trace: [ 1845.150790][ T32] [ 1845.150794][ T32] dump_stack_lvl+0x100/0x190 [ 1845.150812][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1845.150829][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1845.150842][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1845.150860][ T32] sys_info+0x141/0x190 [ 1845.150874][ T32] watchdog+0xcb1/0x1030 [ 1845.150889][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1845.150906][ T32] ? __pfx_watchdog+0x10/0x10 [ 1845.150918][ T32] ? __kthread_parkme+0x18f/0x230 [ 1845.150932][ T32] ? kthread+0x13a/0x450 [ 1845.150946][ T32] ? __pfx_watchdog+0x10/0x10 [ 1845.150957][ T32] kthread+0x373/0x450 [ 1845.150971][ T32] ? __pfx_kthread+0x10/0x10 [ 1845.150987][ T32] ret_from_fork+0x730/0xd60 [ 1845.151000][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1845.151012][ T32] ? __switch_to+0x800/0x10f0 [ 1845.151027][ T32] ? __pfx_kthread+0x10/0x10 [ 1845.151042][ T32] ret_from_fork_asm+0x1a/0x30 [ 1845.151059][ T32] [ 1845.151063][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1845.151093][ C1] NMI backtrace for cpu 1 [ 1845.151104][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.151123][ C1] Tainted: [L]=SOFTLOCKUP [ 1845.151128][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1845.151136][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1845.151160][ C1] Code: 18 9d 02 e9 43 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 66 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1845.151173][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 00000246 [ 1845.151190][ C1] RAX: 00000000035bac7d RBX: ffff88801fa84b00 RCX: ffffffff8bce5115 [ 1845.151204][ C1] RDX: 0000000000000001 RSI: ffffffff8e3e98e5 RDI: ffffffff8c620380 [ 1845.151214][ C1] RBP: ffffed1003f50960 R08: 0000000000000001 R09: ffffed10170a67bd [ 1845.151224][ C1] R10: ffff8880b8533deb R11: 0000000000000001 R12: 0000000000000000 [ 1845.151234][ C1] R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 [ 1845.151243][ C1] FS: 0000000000000000(0000) GS:ffff888123c69000(0000) knlGS:0000000000000000 [ 1845.151258][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1845.151267][ C1] CR2: 0000001b3310eff8 CR3: 0000000078c25000 CR4: 00000000003526f0 [ 1845.151277][ C1] Call Trace: [ 1845.151282][ C1] [ 1845.151287][ C1] default_idle+0x9/0x10 [ 1845.151302][ C1] default_idle_call+0x6c/0xb0 [ 1845.151318][ C1] do_idle+0x3ae/0x5b0 [ 1845.151335][ C1] ? __pfx_do_idle+0x10/0x10 [ 1845.151349][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 1845.151370][ C1] cpu_startup_entry+0x4f/0x60 [ 1845.151388][ C1] start_secondary+0x21d/0x2d0 [ 1845.151402][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1845.151417][ C1] common_startup_64+0x13e/0x158 [ 1845.151439][ C1] [ 1845.155851][ T130] IPVS: starting estimator thread 0... [ 1845.155893][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1846.197243][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1846.207915][ T32] Tainted: [L]=SOFTLOCKUP [ 1846.212244][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1846.222305][ T32] Call Trace: [ 1846.225565][ T32] [ 1846.228469][ T32] dump_stack_lvl+0x100/0x190 [ 1846.233182][ T32] vpanic+0x553/0x970 [ 1846.237159][ T32] ? __pfx_vpanic+0x10/0x10 [ 1846.241678][ T32] panic+0xd1/0xe0 [ 1846.245401][ T32] ? __pfx_panic+0x10/0x10 [ 1846.249820][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1846.255964][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1846.262105][ T32] ? watchdog.cold+0x1ec/0x234 [ 1846.266855][ T32] watchdog.cold+0x1fd/0x234 [ 1846.271419][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1846.277204][ T32] ? __pfx_watchdog+0x10/0x10 [ 1846.281954][ T32] ? __kthread_parkme+0x18f/0x230 [ 1846.287000][ T32] ? kthread+0x13a/0x450 [ 1846.291765][ T32] ? __pfx_watchdog+0x10/0x10 [ 1846.296432][ T32] kthread+0x373/0x450 [ 1846.300501][ T32] ? __pfx_kthread+0x10/0x10 [ 1846.305098][ T32] ret_from_fork+0x730/0xd60 [ 1846.309712][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1846.314815][ T32] ? __switch_to+0x800/0x10f0 [ 1846.319509][ T32] ? __pfx_kthread+0x10/0x10 [ 1846.324181][ T32] ret_from_fork_asm+0x1a/0x30 [ 1846.328932][ T32] [ 1846.332143][ T32] Kernel Offset: disabled [ 1846.336446][ T32] Rebooting in 86400 seconds..