last executing test programs: 5m5.849163022s ago: executing program 1 (id=992): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 5m3.71865896s ago: executing program 1 (id=1018): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x24040084) 5m3.581990949s ago: executing program 1 (id=1020): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000300)={0x40, 0x14, 0x2, "bb4f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="2d0102"], 0x0, 0x0}) 5m1.503887839s ago: executing program 1 (id=1051): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 5m1.120829787s ago: executing program 32 (id=1050): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x9, 0x4, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x223, 0x8, 0x6, 0x38, 0x2, 0x74, 0x7, 0x104}, [{0x60000000, 0x4, 0x400, 0x0, 0x94c5, 0xb, 0x5, 0xffffffff00000001}, {0x6474e551, 0xa68, 0x5, 0xffffffffffffffff, 0x100000001, 0xfffffffffffffffa, 0xa, 0xffffffffffffffff}]}, 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5m1.115465106s ago: executing program 1 (id=1053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x5, @broadcast, 'gre0\x00'}}, 0x1e) 5m0.982235907s ago: executing program 1 (id=1057): close(0x3) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) r0 = syz_io_uring_setup(0xf04, &(0x7f00000002c0)={0x0, 0x57b0, 0x8, 0xfffffffd, 0x37e}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 5m0.635846213s ago: executing program 33 (id=1057): close(0x3) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) r0 = syz_io_uring_setup(0xf04, &(0x7f00000002c0)={0x0, 0x57b0, 0x8, 0xfffffffd, 0x37e}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2m56.157787016s ago: executing program 6 (id=2556): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m55.963257074s ago: executing program 6 (id=2558): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = getpid() r3 = syz_clone(0x1100000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r0, r1) kcmp(r2, r3, 0x0, 0xffffffffffffffff, r4) 2m55.645599253s ago: executing program 6 (id=2562): socketpair(0xa, 0x2, 0x3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m55.407792344s ago: executing program 6 (id=2564): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 2m55.360266503s ago: executing program 6 (id=2565): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000004200)=@delchain={0x112c, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x10fc, 0x2, [@TCA_TCINDEX_ACT={0x10f8, 0x7, [@m_xt={0x154, 0x17, 0x0, 0x0, {{0x7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x120, 0x16, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xd1, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0xfffffffe, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x27e}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x6, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x5}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x9, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1c, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x2000003}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x6, 0x100, 0x1, 0x100000, 0x200005}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x10000007, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x7, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x4, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x7, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x2}, {0xf, 0x5, 0x80, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3fb, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0x7, 0x4}, {0x800005, 0xb0cc, 0x7, 0x80000001, 0x6794, 0x7}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x3, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x5, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x800005, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0xd, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0x7, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x0, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x10001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x3, 0x2, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x1007, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x112c}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m54.930309217s ago: executing program 6 (id=2571): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xff, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831014203010902240001000000000904000002ff47d000090509e6ffdf00000409050d"], 0x0) 2m54.751724759s ago: executing program 34 (id=2571): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xff, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831014203010902240001000000000904000002ff47d000090509e6ffdf00000409050d"], 0x0) 2m6.818685205s ago: executing program 5 (id=3114): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI\x18\x9d\a\xae{\xd7e\r[\x04\xa2\xebi\xcd+\f\xbc\x92\xccfnG;\x94YX\x10W\xa4e\x95\x11\x06\x19\xc1\xdb\xae\x81\xf0d\x8ab\xf5\x89\xf3\xd0s\xf2\xc9l\x10\x80\x9fzf\xc9l\x1eq\a\xb8'}]}, 0xc1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x11000, 0x0, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2m6.386173426s ago: executing program 5 (id=3121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r0, r0, 0x2e}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r1}, 0x5) 2m6.189755199s ago: executing program 5 (id=3127): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 2m5.963831587s ago: executing program 5 (id=3132): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 2m5.912154398s ago: executing program 5 (id=3133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x1}, 0x10, {0x2, 0x2, @multicast2}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) 2m5.336103525s ago: executing program 5 (id=3138): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m5.004933763s ago: executing program 35 (id=3138): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 53.556747958s ago: executing program 7 (id=4013): syz_extract_tcp_res(0x0, 0x4, 0xfffffffe) getpid() mmap(&(0x7f0000889000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x56ed4000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x24}, @hci_rp_read_local_oob_data={{0x9}, {0xe, "eb87eddb94c3a9e35597e1307b091a89", "1073f3512a2a8ad64dc8412ed7ec85f6"}}}}, 0x27) 53.312078083s ago: executing program 7 (id=4015): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa}}}}}}, 0x0) 52.775069467s ago: executing program 7 (id=4018): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0xe6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xff, 0x50, 0x6, {0x8, 0xb, 0x1, 0x0, 0x1, 0x25, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x24, 0x2, 0xf9, {0xa, 0x25, 0x25, 0xfffffff1, 0x1, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xd8, 0x7f, 0xff, {0xa, 0x25, 0x25, 0x5, 0xe, 0x1000}}}}}}}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x10d, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f0d0800d91004aa1f808057b917ac0189aa13"]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 49.643469944s ago: executing program 7 (id=4065): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x8) 49.297804363s ago: executing program 7 (id=4072): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x17d, &(0x7f00000008c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x16f, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0x4, 0x0, 0x0, 0x100, {[@timestamp={0x8, 0xa, 0xf, 0x3}, @generic={0x13, 0x7, "e11169b5e6"}, @mptcp=@generic={0x47, 0x0, "258508f9dad9f7e128"}, @window={0x3, 0xffffffffffffff33, 0x8}, @sack={0x5, 0x1e}, @exp_fastopen={0xfe, 0x4, 0xf989, "5fdaa7190b14279c580525b57a80f7e7"}]}}, {"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"}}}}}}, 0x0) 48.656130988s ago: executing program 7 (id=4081): r0 = socket$kcm(0x29, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) 48.332529044s ago: executing program 36 (id=4081): r0 = socket$kcm(0x29, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) 31.463301737s ago: executing program 9 (id=4247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r2, r1}, 0x14) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) 31.295132651s ago: executing program 9 (id=4250): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @random="8d81e3403687", @val={@val={0x88a8, 0x4, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x30, 0x2c, 0x65, 0x0, 0x9, 0x6, 0x0, @rand_addr=0x64010100, @multicast1, {[@end]}}, {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x25, 0x200, 0x0, 0x1ff}}}}}}, 0x0) 31.103122146s ago: executing program 9 (id=4252): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x8, 0x0) 30.756815796s ago: executing program 9 (id=4258): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 30.450636885s ago: executing program 9 (id=4260): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 29.539988647s ago: executing program 9 (id=4265): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x40, 0xc) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000180)=""/132, 0x84}], 0x1) 29.370648188s ago: executing program 37 (id=4265): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x40, 0xc) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000180)=""/132, 0x84}], 0x1) 12.430609198s ago: executing program 3 (id=4430): r0 = socket$inet6(0xa, 0x80002, 0x0) setreuid(0xee01, 0xee01) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb4ea, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 12.279213592s ago: executing program 3 (id=4431): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f00000000c0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x80, {0x0, 0xfb}, {}, @result={0x0, 0x2}}], 0x1c) 12.025596517s ago: executing program 3 (id=4432): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)='O', 0xfe6a, 0x80, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r1, 0xffffffffffffffff, 0x0) 11.882507278s ago: executing program 3 (id=4433): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2125099, 0x0) unshare(0x20400) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000040)=[{r0, 0x208}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10010, 0x0) 11.649444927s ago: executing program 3 (id=4435): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 11.131079849s ago: executing program 3 (id=4442): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 10.900373693s ago: executing program 38 (id=4442): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 4.431395884s ago: executing program 2 (id=4499): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.418168861s ago: executing program 4 (id=4501): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) 3.658327153s ago: executing program 4 (id=4505): unshare(0x22020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009080)={&(0x7f00000090c0)=@newtaction={0x14, 0x4e, 0x334239e91bf4481f, 0x24000, 0x0, {0x0, 0x1b}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x12a, 0x14, 0x17, 0x0, 0x0) 3.508285128s ago: executing program 2 (id=4506): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.022545832s ago: executing program 4 (id=4508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000580)=r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 2.693761937s ago: executing program 4 (id=4510): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "b79e5e602970a4f9", "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x0, 0x3aa, 0x7, 0x1, 0x7, 0x40000000009, 0x40000000080a90, 0x800000000009], 0x6000, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.429449457s ago: executing program 4 (id=4512): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 2.357761023s ago: executing program 2 (id=4513): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf114f49, 0x9a64, 0x8002, 0x200, 0xffeffffd, 0x0, 0x0, 0x10, 0x103}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.033326205s ago: executing program 8 (id=4514): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x1, 0x12000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x2], [0x0, 0x1001000, 0x800001], [0x0, 0x401, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 1.987946147s ago: executing program 2 (id=4515): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.913673499s ago: executing program 8 (id=4516): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="9e7eafc0e8f2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xf, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0xb05f81eacc83a4c1, 0xff80, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.8985284s ago: executing program 0 (id=4517): r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x3) fchdir(r1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = fspick(r2, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.705593992s ago: executing program 0 (id=4518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x2, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) 1.632403884s ago: executing program 8 (id=4519): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005740)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x1}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.496707976s ago: executing program 0 (id=4520): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) poll(0x0, 0x0, 0x9) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 1.419424347s ago: executing program 8 (id=4521): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 1.104567072s ago: executing program 2 (id=4522): kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x12008000, 0x1008000}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 722.798583ms ago: executing program 0 (id=4523): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r0, &(0x7f0000000280)="02", 0x1, 0x14, 0x0, 0x0) shutdown(r0, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 451.83943ms ago: executing program 0 (id=4524): epoll_create1(0x80000) eventfd2(0x9, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 255.805145ms ago: executing program 4 (id=4525): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) fsopen(0x0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 254.319592ms ago: executing program 8 (id=4526): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x0, 0x3, 0x500, 0x1010000000, 0x4400046, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x3, 0x0, 0x0, 0x400, 0x0, 0x6}) 219.995692ms ago: executing program 2 (id=4527): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002b75aab37900000002"], 0x38}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 177.192647ms ago: executing program 0 (id=4528): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 0s ago: executing program 8 (id=4529): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={r3, @in={{0x2, 0x0, @empty}}, 0x2, 0x0, 0x6bc, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0xcd, 0x0, 0x4}, 0x9c) kernel console output (not intermixed with test programs): 1:0.0: USB YUREX device now attached to Yurex #1 [ 355.603593][ T5811] usb 3-1: USB disconnect, device number 48 [ 355.635170][ T5811] usblp0: removed [ 355.689287][ T5729] usb 1-1: USB disconnect, device number 33 [ 355.710097][ T5729] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 355.889644][ T6365] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 355.941697][T14708] tipc: Enabled bearer , priority 0 [ 355.953640][T14708] tipc: Disabling bearer [ 356.249981][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.284229][T14722] SELinux: unknown common  [ 356.289164][T14722] SELinux: invalid class [ 356.293687][T14722] SELinux: failed to load policy [ 356.443191][T14727] ucsi-stm32g0-i2c 0-0035: i2c read 35, 00 error: 0 [ 356.468790][T14727] ucsi-stm32g0-i2c 0-0035: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 356.501167][T14727] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x35 [ 356.670361][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 356.670378][ T29] audit: type=1400 audit(1785155698.587:1397): avc: denied { mounton } for pid=14740 comm="syz.2.3490" path="/692/file1/file0" dev="autofs" ino=56717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 356.708530][T14741] overlay: filesystem on ./file0 not supported [ 357.152678][ T29] audit: type=1400 audit(1785155699.067:1398): avc: denied { read } for pid=14766 comm="syz.0.3501" name="video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 357.197705][ T29] audit: type=1400 audit(1785155699.087:1399): avc: denied { open } for pid=14766 comm="syz.0.3501" path="/dev/video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 357.538715][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 357.608705][ T5811] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 357.690505][ T10] usb 3-1: config 0 has no interfaces? [ 357.696110][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 357.705790][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.720936][ T10] usb 3-1: config 0 descriptor?? [ 357.770230][ T5811] usb 1-1: Using ep0 maxpacket: 32 [ 357.771138][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.795441][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 357.819156][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 357.831080][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 357.842716][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 357.855671][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 357.869478][ T5811] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 357.878964][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.886996][ T5811] usb 1-1: Product: syz [ 357.891483][ T5811] usb 1-1: Manufacturer: syz [ 357.896107][ T5811] usb 1-1: SerialNumber: syz [ 357.904865][ T5811] usb 1-1: config 0 descriptor?? [ 357.974029][ T10] usb 3-1: USB disconnect, device number 49 [ 358.078762][ T5619] Bluetooth: hci5: command 0x1003 tx timeout [ 358.082317][ T5617] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 358.325317][ T5811] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 358.338674][ T5811] input input61: Device does not respond to id packet M [ 358.346807][ T5811] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 358.357512][ T5811] input input61: Device does not respond to id packet P [ 358.366933][ T5811] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 358.373266][ T5811] input input61: Device does not respond to id packet B [ 358.393155][ T5811] input input61: Limiting number of effects to 32 (device reports 230) [ 358.600728][ T5811] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 358.614418][ T5811] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 358.630684][ T5811] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 358.639767][ T5811] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 358.655914][ T5811] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input61 [ 358.698868][ T5811] usb 1-1: USB disconnect, device number 34 [ 358.702428][ T4964] iforce 1-1:0.0: usb_submit_urb failed -19 [ 358.727691][ T29] audit: type=1400 audit(1785155700.627:1400): avc: denied { sqpoll } for pid=14795 comm="syz.8.3513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 358.767523][ T4964] iforce 1-1:0.0: usb_submit_urb failed -19 [ 359.280773][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.325468][T14809] syzkaller1: entered allmulticast mode [ 359.488897][T14816] binder: 14815:14816 ioctl c0306201 2000000001c0 returned -14 [ 359.551566][ T29] audit: type=1800 audit(1785155701.467:1401): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3522" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 359.680293][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.688671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.927423][T14844] usbip-vudc usbip-vudc.0: gadget not bound [ 359.948648][ T187] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 360.121627][ T187] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.143167][ T187] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 360.154912][ T187] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 360.173579][ T187] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 360.186675][ T187] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 360.191838][ T5716] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 360.198071][ T187] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.240420][ T187] usb 9-1: config 0 descriptor?? [ 360.248128][T14827] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 360.330038][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.338368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.371679][ T5716] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.385598][ T5716] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 360.397609][ T5716] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 360.410632][ T5716] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 360.420320][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.434695][T14846] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 360.683112][ T187] plantronics 0003:047F:FFFF.003D: reserved main item tag 0xd [ 360.722033][T14871] loop9: detected capacity change from 0 to 2640 [ 360.724164][ T187] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 360.741081][T14871] buffer_io_error: 23 callbacks suppressed [ 360.741096][T14871] Buffer I/O error on dev loop9, logical block 0, async page read [ 360.741126][T14871] Buffer I/O error on dev loop9, logical block 0, async page read [ 360.741150][T14871] Buffer I/O error on dev loop9, logical block 0, async page read [ 360.741175][T14871] Buffer I/O error on dev loop9, logical block 0, async page read [ 360.741218][T14871] Buffer I/O error on dev loop9, logical block 0, async page read [ 360.741254][T14871] Buffer I/O error on dev loop9, logical block 0, async page read [ 360.800203][ T29] audit: type=1400 audit(1785155702.717:1402): avc: denied { append } for pid=14868 comm="syz.2.3541" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.850610][T14874] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 360.865736][T14871] Buffer I/O error on dev loop9, logical block 1, async page read [ 360.899352][T14871] loop9: unable to read partition table [ 360.912153][T14874] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 360.938297][T14871] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 360.953222][ T29] audit: type=1400 audit(1785155702.867:1403): avc: denied { write } for pid=14875 comm="syz.2.3543" name="file0" dev="tmpfs" ino=3712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 360.961580][T14874] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 361.519582][ T6392] wlan1: Trigger new scan to find an IBSS to join [ 361.698458][T14904] netlink: 'syz.0.3555': attribute type 1 has an invalid length. [ 361.710107][T14904] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.3555'. [ 361.958192][ T5708] usb 9-1: USB disconnect, device number 4 [ 362.030825][ T5716] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 362.049628][ T5716] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input62 [ 362.145123][ T5716] usb 5-1: USB disconnect, device number 49 [ 362.151188][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 362.321716][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.507886][ T29] audit: type=1400 audit(1785155704.417:1404): avc: denied { write } for pid=14929 comm="syz.8.3567" name="video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 362.528676][ T5708] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 362.532447][ T29] audit: type=1400 audit(1785155704.437:1405): avc: denied { ioctl } for pid=14929 comm="syz.8.3567" path="/dev/video7" dev="devtmpfs" ino=952 ioctlcmd=0x5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 362.709283][ T5708] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 362.719257][ T5708] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.728254][ T5708] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.741227][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.749277][ T5708] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.759044][ T5708] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.770727][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.778522][ T5708] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.787828][ T5708] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.800163][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.807946][ T5708] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.817294][ T5708] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.840715][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.852987][ T5708] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.871499][ T5708] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.901524][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.920092][ T5708] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.930179][ T5708] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.948461][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.959234][ T5708] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.968468][ T5708] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.979622][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.999058][ T5708] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.019431][ T5708] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.052646][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.062937][ T5708] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 363.073935][ T5708] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 363.082630][ T5708] usb 3-1: Product: syz [ 363.090159][ T5708] usb 3-1: Manufacturer: syz [ 363.097855][ T5708] usb 3-1: SerialNumber: syz [ 363.127418][ T5708] usb 3-1: config 0 descriptor?? [ 363.168103][ T5708] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 363.550107][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 363.562360][ T10] usb 3-1: USB disconnect, device number 50 [ 363.600782][ T10] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 363.787629][ T29] audit: type=1800 audit(1785155705.697:1406): pid=14980 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3588" name="p_chmask" dev="configfs" ino=57812 res=0 errno=0 [ 364.409509][ T5716] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 364.481036][ T6392] wlan1: Trigger new scan to find an IBSS to join [ 364.588624][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 364.596022][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.607577][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.618006][ T5716] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 364.632139][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.661398][ T5716] usb 3-1: config 0 descriptor?? [ 364.882862][T15003] overlayfs: upper fs does not support file handles, falling back to index=off. [ 364.911962][T15003] overlayfs: failed to set uuid (141/file2, err=-1); falling back to uuid=null. [ 365.084953][ T5716] savu 0003:1E7D:2D5A.003E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 365.317492][ T29] audit: type=1400 audit(1785155707.227:1407): avc: denied { read write } for pid=15011 comm="syz.4.3599" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 365.349921][ T29] audit: type=1400 audit(1785155707.227:1408): avc: denied { open } for pid=15011 comm="syz.4.3599" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 365.350521][ T187] usb 3-1: USB disconnect, device number 51 [ 365.389804][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.430210][ T29] audit: type=1400 audit(1785155707.227:1409): avc: denied { map } for pid=15011 comm="syz.4.3599" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 365.477941][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.486345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.548725][ T29] audit: type=1400 audit(1785155707.227:1410): avc: denied { execute } for pid=15011 comm="syz.4.3599" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 365.574294][T15025] batman_adv: batadv0: Adding interface: dummy0 [ 365.582508][T15025] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.625284][T15025] batman_adv: batadv0: Interface activated: dummy0 [ 365.758095][T15031] batadv0: mtu less than device minimum [ 365.771897][T15031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.788467][T15031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.799749][T15031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.811106][T15031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.822412][T15031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 365.833727][T15031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 366.078404][T15049] evm: overlay not supported [ 366.273052][T15057] netlink: 'syz.2.3616': attribute type 1 has an invalid length. [ 366.301515][T15057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.366328][T15057] bond1: (slave geneve3): making interface the new active one [ 366.392480][T15057] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 366.408852][ T10] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 366.420305][ T6392] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 366.456269][ T6392] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 366.475200][ T6392] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 366.498276][ T6392] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 366.596228][ T5811] bridge0: entered promiscuous mode [ 366.611613][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 366.629951][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 366.648415][ T10] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 366.658343][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.689451][ T10] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 366.711517][ T10] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 366.973860][ T10] usb 9-1: USB disconnect, device number 5 [ 366.994373][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 367.018364][ T10] garmin_gps 9-1:1.0: device disconnected [ 367.519444][ T13] wlan1: Trigger new scan to find an IBSS to join [ 367.603216][T15106] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 367.908119][ T29] audit: type=1400 audit(1785155709.817:1411): avc: denied { write } for pid=15088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.154824][ T29] audit: type=1400 audit(1785155710.067:1412): avc: denied { write } for pid=15133 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.884508][ T6385] wlan1: Creating new IBSS network, BSSID f6:07:a8:69:24:de [ 369.392146][ T29] audit: type=1400 audit(1785155711.297:1413): avc: denied { write } for pid=15153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.490959][ T5617] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 369.595256][ T29] audit: type=1400 audit(1785155711.507:1414): avc: denied { write } for pid=15184 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.990184][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 370.168492][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 370.190411][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.208028][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.229901][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 370.251700][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.274799][ T10] usb 3-1: config 0 descriptor?? [ 370.318956][ T10] hub 3-1:0.0: USB hub found [ 370.560711][ T10] hub 3-1:0.0: 1 port detected [ 370.645476][ T42] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 370.808728][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 370.820199][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.842668][ T42] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 370.862077][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.890603][ T42] usb 5-1: config 0 descriptor?? [ 370.940515][ T29] audit: type=1400 audit(1785155712.857:1415): avc: denied { read } for pid=15216 comm="syz.8.3655" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 371.003579][ T29] audit: type=1400 audit(1785155712.887:1416): avc: denied { open } for pid=15216 comm="syz.8.3655" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 371.052657][ T29] audit: type=1400 audit(1785155712.887:1417): avc: denied { ioctl } for pid=15216 comm="syz.8.3655" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 371.116567][ T42] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 371.179354][ T5729] hub 3-1:0.0: activate --> -90 [ 371.199247][ T6385] net_ratelimit: 16 callbacks suppressed [ 371.199266][ T6385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.213314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.222510][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.230799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.446583][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.641058][ T5708] usb 5-1: USB disconnect, device number 50 [ 371.648107][ T187] usb 3-1: USB disconnect, device number 52 [ 371.858828][ T5729] usb 3-1-port1: config error [ 372.328542][ T29] audit: type=1400 audit(1785155714.237:1418): avc: denied { setopt } for pid=15238 comm="syz.2.3665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 372.528662][ T5708] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 372.578237][T15251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.698785][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 372.717779][ T5708] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 372.745151][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.768724][ T5708] usb 5-1: Product: syz [ 372.779150][ T5708] usb 5-1: Manufacturer: syz [ 372.794545][ T5708] usb 5-1: SerialNumber: syz [ 372.854359][T15122] Set syz1 is full, maxelem 65536 reached [ 373.043384][ T5708] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 373.074385][ T5708] usb 5-1: found format II with max.bitrate = 6, frame size=3 [ 373.089978][ T5708] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 373.102182][ T5708] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 373.125242][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.132550][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.223304][ T5708] usb 5-1: USB disconnect, device number 51 [ 373.472942][T15292] tls_set_device_offload_rx: netdev not found [ 373.518981][ T5617] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 373.533745][ T5617] Bluetooth: hci4: Injecting HCI hardware error event [ 373.546020][ T5617] Bluetooth: hci4: hardware error 0x00 [ 373.643204][ T29] audit: type=1400 audit(1785155715.557:1419): avc: denied { accept } for pid=15298 comm="syz.7.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 374.479001][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.512399][T15316] misc userio: Can't change port proto on an already running userio instance [ 374.533318][T15318] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3695'. [ 375.325078][T15350] netlink: 'syz.0.3708': attribute type 1 has an invalid length. [ 375.357618][T15350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.405684][T15350] bond1: (slave geneve3): making interface the new active one [ 375.415774][T15350] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 375.438201][T15320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.602474][ T5617] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 375.760636][T15362] ref_ctr_offset mismatch. inode: 0xf66 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa0000000a00000a [ 376.324368][ T6343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.332627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.959480][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.967741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.530101][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.693393][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3729'. [ 377.885247][T15414] netlink: 'syz.8.3732': attribute type 1 has an invalid length. [ 378.006683][T15414] bond1: entered promiscuous mode [ 378.015397][T15414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.535621][T15428] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 378.543210][T15428] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 378.578141][T15414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.581949][T15428] vhci_hcd vhci_hcd.0: Device attached [ 378.603062][T15414] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 378.729603][T15433] vhci_hcd: connection closed [ 378.735265][ T6365] vhci_hcd vhci_hcd.7: stop threads [ 378.753063][T15414] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 378.784193][T15414] bond1: (slave ipip0): making interface the new active one [ 378.794773][ T6365] vhci_hcd vhci_hcd.7: release socket [ 378.804550][T15414] ipip0: entered promiscuous mode [ 378.821384][T15414] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 378.836651][ T6365] vhci_hcd vhci_hcd.7: disconnect device [ 378.848879][ T10] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 378.857568][ T10] usb 47-1: enqueue for inactive port 0 [ 378.941544][ T10] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 379.106766][T15451] netlink: 'syz.0.3747': attribute type 1 has an invalid length. [ 379.233637][T15451] bond2: entered promiscuous mode [ 379.282879][T15451] bond2: entered allmulticast mode [ 379.311876][ T187] hid_parser_main: 8 callbacks suppressed [ 379.311896][ T187] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 379.329526][T15451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.367085][T15455] erspan2: entered allmulticast mode [ 379.375372][ T187] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 379.450261][T15455] bond2: (slave erspan2): making interface the new active one [ 379.485192][T15455] erspan2: entered promiscuous mode [ 379.532492][T15455] bond2: (slave erspan2): Enslaving as an active interface with an up link [ 379.778759][ T5716] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 379.938702][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 379.957760][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.991886][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.029665][ T5716] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 380.070467][ T5716] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 380.081891][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.107686][ T5716] usb 3-1: config 0 descriptor?? [ 380.555709][ T5716] shield 0003:0955:7214.0040: unknown main item tag 0x0 [ 380.569422][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.593894][ T5716] shield 0003:0955:7214.0040: unknown main item tag 0x0 [ 380.627728][ T5716] shield 0003:0955:7214.0040: unknown main item tag 0x0 [ 380.655826][ T5716] shield 0003:0955:7214.0040: unknown main item tag 0x0 [ 380.683206][ T5716] shield 0003:0955:7214.0040: unknown main item tag 0x0 [ 380.723639][ T5716] input: HID 0955:7214 Haptics as /devices/virtual/input/input65 [ 380.740661][T15464] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3752'. [ 380.935185][ T5716] shield 0003:0955:7214.0040: Registered Thunderstrike controller [ 380.964870][ T5716] shield 0003:0955:7214.0040: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 381.060611][ T5708] shield 0003:0955:7214.0040: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 381.128943][ T5716] usb 3-1: USB disconnect, device number 53 [ 381.135940][ T5708] shield 0003:0955:7214.0040: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 381.199552][ T5708] shield 0003:0955:7214.0040: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 381.254151][ T5708] shield 0003:0955:7214.0040: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 381.334020][ T29] audit: type=1400 audit(1785155723.247:1420): avc: denied { write } for pid=15504 comm="syz.7.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 381.561651][ T29] audit: type=1326 audit(1785155723.477:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1019de99 code=0x7ffc0000 [ 381.653158][ T29] audit: type=1326 audit(1785155723.477:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1019de99 code=0x7ffc0000 [ 381.729887][ T29] audit: type=1326 audit(1785155723.477:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1019de99 code=0x7ffc0000 [ 381.810644][ T29] audit: type=1326 audit(1785155723.477:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1019de99 code=0x7ffc0000 [ 381.907719][ T29] audit: type=1326 audit(1785155723.517:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7e1019de99 code=0x7ffc0000 [ 381.987406][ T29] audit: type=1326 audit(1785155723.527:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e1015e6ce code=0x7ffc0000 [ 382.064764][ T29] audit: type=1326 audit(1785155723.527:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e1015e6ce code=0x7ffc0000 [ 382.104820][ T6343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.113282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.162727][ T29] audit: type=1326 audit(1785155723.527:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e1015e6ce code=0x7ffc0000 [ 382.296624][ T29] audit: type=1326 audit(1785155723.537:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15510 comm="syz.2.3767" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e1015e6ce code=0x7ffc0000 [ 382.539313][T15523] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input66 [ 382.662017][ T5867] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 382.730932][ T6343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.739307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.860569][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 382.878364][ T5867] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 382.914869][ T5867] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 382.945934][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.983139][ T5867] usb 3-1: Product: syz [ 383.001233][ T5867] usb 3-1: Manufacturer: syz [ 383.014826][ T5867] usb 3-1: SerialNumber: syz [ 383.048627][ T5867] usb 3-1: config 0 descriptor?? [ 383.066168][T15530] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 383.161271][ T5867] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 383.484082][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 383.490302][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 383.502257][ T10] usb 3-1: USB disconnect, device number 54 [ 383.603917][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.620433][ T10] mcba_usb 3-1:0.0 can0: device disconnected [ 384.036046][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'. [ 384.838294][T15609] netlink: 'syz.2.3801': attribute type 39 has an invalid length. [ 385.506303][T15632] netlink: 820 bytes leftover after parsing attributes in process `syz.8.3809'. [ 385.531195][T15632] netlink: 820 bytes leftover after parsing attributes in process `syz.8.3809'. [ 385.708966][ T5867] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 385.905603][ T5867] usb 5-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 385.932748][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.958222][ T5867] usb 5-1: Product: syz [ 385.971407][ T5867] usb 5-1: Manufacturer: syz [ 385.986195][ T5867] usb 5-1: SerialNumber: syz [ 386.005723][ T5867] r8152-cfgselector 5-1: Unknown version 0x0000 [ 386.234576][T15639] SELinux: failed to load policy [ 386.642100][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.814363][ T6392] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 387.167107][T15680] xt_hashlimit: size too large, truncated to 1048576 [ 387.275353][ T5867] r8152-cfgselector 5-1: Unknown version 0x0000 [ 387.324717][ T5867] r8152-cfgselector 5-1: USB disconnect, device number 52 [ 387.531651][ T5617] block nbd2: Receive control failed (result -107) [ 387.620223][T15692] nbd2: detected capacity change from 0 to 8589934592 [ 387.665008][ T25] block nbd2: Dead connection, failed to find a fallback [ 387.672200][ T25] block nbd2: shutting down sockets [ 387.679855][ T25] blk_print_req_error: 24 callbacks suppressed [ 387.679873][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.697373][ T25] buffer_io_error: 328 callbacks suppressed [ 387.697395][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 387.797622][ T1704] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.807956][ T1704] Buffer I/O error on dev nbd2, logical block 0, async page read [ 387.811141][T15689] nbd2: detected capacity change from 8589934592 to 24 [ 387.816935][ T1704] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.832462][ T1704] Buffer I/O error on dev nbd2, logical block 0, async page read [ 387.840259][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.840419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.857911][ T1704] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.867444][ T1704] Buffer I/O error on dev nbd2, logical block 0, async page read [ 387.875420][ T1704] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.884941][ T1704] Buffer I/O error on dev nbd2, logical block 0, async page read [ 387.892958][ T1704] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.902476][ T1704] Buffer I/O error on dev nbd2, logical block 0, async page read [ 387.910521][ T1704] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.920406][ T1704] Buffer I/O error on dev nbd2, logical block 0, async page read [ 387.932616][ T1704] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.943610][ T1704] Buffer I/O error on dev nbd2, logical block 0, async page read [ 387.951459][ T5621] ldm_validate_partition_table(): Disk read failed. [ 387.968469][ T1704] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.978790][ T1704] Buffer I/O error on dev nbd2, logical block 0, async page read [ 387.987783][ T1704] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.997594][ T1704] Buffer I/O error on dev nbd2, logical block 0, async page read [ 388.006034][ T5621] Dev nbd2: unable to read RDB block 0 [ 388.014818][ T5621] nbd2: unable to read partition table [ 388.022002][ T5621] nbd2: partition table beyond EOD, truncated [ 388.038859][ T5621] ldm_validate_partition_table(): Disk read failed. [ 388.054958][ T5621] Dev nbd2: unable to read RDB block 0 [ 388.068080][ T5621] nbd2: unable to read partition table [ 388.085271][ T5621] nbd2: partition table beyond EOD, truncated [ 388.131000][ T5867] Process accounting resumed [ 388.340594][T15725] batman_adv: batadv0: Adding interface: dummy0 [ 388.358794][T15725] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.401479][T15725] batman_adv: batadv0: Interface activated: dummy0 [ 388.419848][T15735] overlayfs: upper fs does not support file handles, falling back to index=off. [ 388.453373][T15734] batadv0: mtu less than device minimum [ 388.473873][T15734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.485292][T15734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.496685][T15734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.508047][T15734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.519396][T15734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.530782][T15734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.542093][T15734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.615750][T15739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.059892][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 389.059909][ T29] audit: type=1326 audit(1785155730.977:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15755 comm="syz.4.3848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f435b59de99 code=0x0 [ 389.153263][T15759] SELinux: failed to load policy [ 389.221659][T15766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3851'. [ 389.421196][ T29] audit: type=1400 audit(1785155731.337:1483): avc: denied { create } for pid=15776 comm="syz.7.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 389.545910][ T29] audit: type=1400 audit(1785155731.457:1484): avc: denied { ioctl } for pid=15776 comm="syz.7.3857" path="socket:[63346]" dev="sockfs" ino=63346 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 390.298646][ T5708] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 390.424343][ T29] audit: type=1326 audit(1785155732.337:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15811 comm="syz.2.3870" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e1019de99 code=0x0 [ 390.492001][ T5708] usb 5-1: Using ep0 maxpacket: 8 [ 390.504598][ T5708] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 390.534110][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.552211][ T5708] usb 5-1: Product: syz [ 390.556512][ T5708] usb 5-1: Manufacturer: syz [ 390.562687][ T5708] usb 5-1: SerialNumber: syz [ 390.879983][ T5716] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 391.004915][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3881'. [ 391.041197][ T5716] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 391.052838][ T5716] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 391.065274][ T5716] usb 9-1: config 220 has no interface number 2 [ 391.071641][ T5716] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 391.084890][ T5716] usb 9-1: config 220 interface 0 has no altsetting 0 [ 391.091750][ T5716] usb 9-1: config 220 interface 76 has no altsetting 0 [ 391.098732][ T5716] usb 9-1: config 220 interface 1 has no altsetting 0 [ 391.107605][ T5716] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 391.117153][ T5716] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.125231][ T5716] usb 9-1: Product: syz [ 391.129618][ T5716] usb 9-1: Manufacturer: syz [ 391.134243][ T5716] usb 9-1: SerialNumber: syz [ 391.183404][ T5708] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 391.192459][ T5708] usb 5-1: clock source 0 is not valid, cannot use [ 391.199966][ T5708] usb 5-1: 1:1: cannot get freq (v2/v3): err -32 [ 391.369017][ T5716] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 391.379838][ T5716] uvcvideo 9-1:220.0: No valid video chain found. [ 391.387396][ T5716] usb 9-1: selecting invalid altsetting 0 [ 391.411619][ T5716] usb 9-1: selecting invalid altsetting 0 [ 391.417998][ T5708] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 391.426978][ T5716] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 391.435131][ T5708] usb 5-1: clock source 0 is not valid, cannot use [ 391.445789][ T5716] usb 9-1: USB disconnect, device number 6 [ 391.454872][ T5708] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 391.467052][ T5708] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 391.539983][ T5708] usb 5-1: USB disconnect, device number 53 [ 392.270689][ T5867] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 392.398895][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 392.431615][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 392.443860][ T5867] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 392.462128][ T5867] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.472489][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.482397][ T5867] usb 3-1: Product: syz [ 392.486699][ T5867] usb 3-1: Manufacturer: syz [ 392.492893][ T5867] usb 3-1: SerialNumber: syz [ 392.569601][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 392.573331][ T6385] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 392.580450][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 392.598359][ T10] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 392.607835][ T10] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 392.616665][ T10] usb 1-1: Product: syz [ 392.622071][ T10] usb 1-1: Manufacturer: syz [ 392.626723][ T10] usb 1-1: SerialNumber: syz [ 392.633566][ T10] usb 1-1: config 0 descriptor?? [ 392.639268][T15862] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 392.647894][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 392.655289][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 392.960388][ T6385] net_ratelimit: 16 callbacks suppressed [ 392.960409][ T6385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.974418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.077868][ T5729] usb 1-1: USB disconnect, device number 35 [ 393.338245][T15885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.518485][ T5867] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 393.537457][ T5867] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 393.545506][ T5867] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 393.585066][T15914] netlink: 'syz.7.3908': attribute type 1 has an invalid length. [ 393.622868][ T29] audit: type=1400 audit(1785155735.537:1486): avc: denied { connect } for pid=15915 comm="syz.8.3909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 393.644069][T15914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.691066][T15914] bond2: (slave bridge1): making interface the new active one [ 393.703327][T15914] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 393.720673][ T5867] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 393.795990][ T5867] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 393.884933][T15923] FAULT_FLAG_ALLOW_RETRY missing 801 [ 393.905655][T15925] gretap1: entered promiscuous mode [ 393.914203][T15923] CPU: 1 UID: 0 PID: 15923 Comm: syz.7.3912 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.914234][T15923] Tainted: [L]=SOFTLOCKUP [ 393.914241][T15923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 393.914252][T15923] Call Trace: [ 393.914260][T15923] [ 393.914267][T15923] dump_stack_lvl+0x100/0x190 [ 393.914296][T15923] handle_userfault.cold+0x54/0x65 [ 393.914321][T15923] ? do_raw_spin_unlock+0x145/0x1e0 [ 393.914347][T15923] ? _raw_spin_unlock+0x28/0x50 [ 393.914377][T15923] ? __free_frozen_pages+0x751/0x1090 [ 393.914406][T15923] ? __pfx_handle_userfault+0x10/0x10 [ 393.914443][T15923] ? rcu_read_unlock+0x2d/0xb0 [ 393.914461][T15923] ? rcu_read_unlock+0x2d/0xb0 [ 393.914483][T15923] do_anonymous_page+0x1a56/0x2080 [ 393.914520][T15923] __handle_mm_fault+0x1d2c/0x2a00 [ 393.914551][T15923] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 393.914579][T15923] ? __pfx___handle_mm_fault+0x10/0x10 [ 393.914608][T15923] ? pte_offset_map_lock+0x174/0x320 [ 393.914629][T15923] ? find_held_lock+0x2b/0x80 [ 393.914671][T15923] ? follow_page_pte+0x4d0/0x13f0 [ 393.914700][T15923] handle_mm_fault+0x37b/0xa30 [ 393.914733][T15923] __get_user_pages+0x1178/0x32a0 [ 393.914764][T15923] ? __pfx___get_user_pages+0x10/0x10 [ 393.914789][T15923] populate_vma_page_range+0x267/0x3f0 [ 393.914812][T15923] ? __pfx_populate_vma_page_range+0x10/0x10 [ 393.914839][T15923] ? vma_set_page_prot+0xb1/0x120 [ 393.914863][T15923] mprotect_fixup+0x955/0xe30 [ 393.914892][T15923] ? __pfx_mprotect_fixup+0x10/0x10 [ 393.914943][T15923] do_mprotect_pkey+0xa4b/0xef0 [ 393.914976][T15923] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 393.915036][T15923] __x64_sys_mprotect+0x78/0xc0 [ 393.915051][T15923] ? lockdep_hardirqs_on+0x78/0x100 [ 393.915071][T15923] do_syscall_64+0x115/0x870 [ 393.915091][T15923] ? clear_bhb_loop+0x40/0x90 [ 393.915114][T15923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.915133][T15923] RIP: 0033:0x7f73add9de99 [ 393.915150][T15923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.915166][T15923] RSP: 002b:00007f73aecaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 393.915187][T15923] RAX: ffffffffffffffda RBX: 00007f73ae025fa0 RCX: 00007f73add9de99 [ 393.915199][T15923] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 393.915211][T15923] RBP: 00007f73ade33eaf R08: 0000000000000000 R09: 0000000000000000 [ 393.915222][T15923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.915234][T15923] R13: 00007f73ae026038 R14: 00007f73ae025fa0 R15: 00007ffe89b14698 [ 393.915261][T15923] [ 394.243766][ T6385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.252152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.332884][ T5867] usb 3-1: USB disconnect, device number 55 [ 394.354594][ T5867] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 394.484078][ T29] audit: type=1400 audit(1785155736.397:1487): avc: denied { write } for pid=15928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.515474][ T10] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 394.566307][ T10] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.715704][ T29] audit: type=1400 audit(1785155736.617:1488): avc: denied { write } for pid=15947 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.769876][T15948] fido_id[15948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 395.554278][ T29] audit: type=1400 audit(1785155737.457:1489): avc: denied { write } for pid=15963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.669648][ T29] audit: type=1400 audit(1785155737.587:1490): avc: denied { mount } for pid=15986 comm="syz.8.3926" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 395.691223][ T29] audit: type=1400 audit(1785155737.607:1491): avc: denied { search } for pid=15986 comm="syz.8.3926" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 395.761975][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.868248][ T29] audit: type=1400 audit(1785155737.767:1492): avc: denied { write } for pid=15993 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.938612][ T29] audit: type=1400 audit(1785155737.847:1493): avc: denied { unmount } for pid=13789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 396.008259][T13789] svc: failed to register nfsdv3 RPC service (errno 111). [ 396.045663][T13789] svc: failed to register nfsaclv3 RPC service (errno 111). [ 396.045686][T13789] failed to unregister tcp with rpcbind [ 396.268195][T15999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.296194][T15999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.462378][T15999] geneve2: left promiscuous mode [ 396.481628][T15999] geneve2: left allmulticast mode [ 396.527264][T15999] bond2: left promiscuous mode [ 396.538610][T15999] erspan2: left promiscuous mode [ 396.547685][T15999] bond2: left allmulticast mode [ 396.559675][T15999] erspan2: left allmulticast mode [ 396.577827][T15999] gretap1: left promiscuous mode [ 396.601824][ T6380] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.635254][ T6380] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.699258][ T6380] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.712710][ T6380] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.857831][ T29] audit: type=1400 audit(1785155738.767:1494): avc: denied { read } for pid=16037 comm="syz.4.3939" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 396.926350][ T29] audit: type=1400 audit(1785155738.767:1495): avc: denied { open } for pid=16037 comm="syz.4.3939" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 396.953845][ T29] audit: type=1400 audit(1785155738.807:1496): avc: denied { write } for pid=16037 comm="syz.4.3939" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 397.127763][T16048] netlink: 'syz.4.3941': attribute type 10 has an invalid length. [ 397.273864][T16053] input: syz0 as /devices/virtual/input/input67 [ 397.753192][T16040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.969741][T16020] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 398.006805][T16078] xt_hashlimit: size too large, truncated to 1048576 [ 398.140128][T16020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.151531][T16020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.162045][T16020] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 398.171390][T16020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.183335][T16020] usb 5-1: config 0 descriptor?? [ 398.724308][ T6348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.732719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.802398][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.897578][ T6380] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 399.001461][T16118] netlink: 'syz.2.3972': attribute type 34 has an invalid length. [ 399.063180][T16119] netlink: 'syz.8.3974': attribute type 10 has an invalid length. [ 399.079546][T16119] vxlan0: entered promiscuous mode [ 399.088282][T16119] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 399.293701][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3979'. [ 399.367207][T16131] erspan0: entered promiscuous mode [ 399.403287][T16131] macvtap1: entered promiscuous mode [ 399.411009][T16131] macvtap1: entered allmulticast mode [ 399.415594][T16020] uclogic 0003:256C:006D.0042: v1 frame probing failed: -71 [ 399.416572][T16131] erspan0: entered allmulticast mode [ 399.441242][T16020] uclogic 0003:256C:006D.0042: failed probing parameters: -71 [ 399.455203][T16136] erspan0: left allmulticast mode [ 399.464121][T16020] uclogic 0003:256C:006D.0042: probe with driver uclogic failed with error -71 [ 399.472366][T16136] erspan0: left promiscuous mode [ 399.493292][T16020] usb 5-1: USB disconnect, device number 54 [ 399.515395][T16136] macvtap1: left promiscuous mode [ 399.530802][T16136] macvtap1: left allmulticast mode [ 399.960230][ T5616] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 400.023487][ T6348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.032093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.122276][ T5616] usb 1-1: Using ep0 maxpacket: 32 [ 400.142578][ T5616] usb 1-1: config 8 has an invalid interface number: 97 but max is 0 [ 400.169599][ T5616] usb 1-1: config 8 has no interface number 0 [ 400.183991][ T5616] usb 1-1: config 8 interface 97 altsetting 9 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 400.188011][T16155] team0 (unregistering): Port device team_slave_0 removed [ 400.208887][ T5616] usb 1-1: config 8 interface 97 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 400.235775][ T5616] usb 1-1: config 8 interface 97 has no altsetting 0 [ 400.242031][T16155] team0 (unregistering): Port device team_slave_1 removed [ 400.253618][ T5616] usb 1-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 400.270356][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.280742][ T5616] usb 1-1: Product: syz [ 400.285261][ T5616] usb 1-1: Manufacturer: syz [ 400.290980][ T5616] usb 1-1: SerialNumber: syz [ 400.437944][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 400.437964][ T29] audit: type=1400 audit(1785155742.347:1499): avc: denied { setopt } for pid=16163 comm="syz.2.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 400.539018][ T5867] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 400.572061][ T5616] hub 1-1:8.97: bad descriptor, ignoring hub [ 400.596089][ T5616] hub 1-1:8.97: probe with driver hub failed with error -5 [ 400.617697][ T5616] sierra 1-1:8.97: Sierra USB modem converter detected [ 400.636356][ T5616] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 400.653376][ T5616] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 400.692473][ T5616] usb 1-1: USB disconnect, device number 36 [ 400.714899][ T5867] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 400.747129][ T5867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.793066][ T5867] usb 9-1: Product: syz [ 400.805629][ T5616] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 400.824553][ T5867] usb 9-1: Manufacturer: syz [ 400.844267][ T5867] usb 9-1: SerialNumber: syz [ 400.865786][ T5616] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 400.891442][ T5616] sierra 1-1:8.97: device disconnected [ 400.903579][ T5867] usb 9-1: config 0 descriptor?? [ 400.927919][ T5867] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 007 [ 401.147147][T16161] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 401.596415][ T5867] i2c i2c-1: failure reading functionality [ 401.678647][ T5867] i2c i2c-1: connected i2c-tiny-usb device [ 401.732939][ T5867] usb 9-1: USB disconnect, device number 7 [ 401.841667][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.855385][T16198] xt_hashlimit: size too large, truncated to 1048576 [ 402.897194][ T29] audit: type=1800 audit(1785155744.807:1500): pid=16228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.4014" name="/0//deleted" dev="devpts" ino=3 res=0 errno=0 [ 403.697097][T16258] binder: 16257:16258 ioctl c0306201 2000000003c0 returned -14 [ 403.761385][ T6380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.769816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.840401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.936439][T16271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.085538][T16277] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 404.094470][T16277] overlayfs: failed to set xattr on upper [ 404.100632][T16277] overlayfs: ...falling back to redirect_dir=nofollow. [ 404.107602][T16277] overlayfs: ...falling back to uuid=null. [ 404.155313][T16283] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4036'. [ 404.170961][T16283] netlink: 'syz.8.4036': attribute type 7 has an invalid length. [ 404.180786][T16283] netlink: 'syz.8.4036': attribute type 8 has an invalid length. [ 404.209956][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4036'. [ 404.258183][T16283] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4036'. [ 404.295349][T16283] netlink: 'syz.8.4036': attribute type 7 has an invalid length. [ 404.305862][T16283] netlink: 'syz.8.4036': attribute type 8 has an invalid length. [ 404.335640][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4036'. [ 404.401423][T16295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4041'. [ 404.501529][ T29] audit: type=1400 audit(1785155746.417:1501): avc: denied { append } for pid=16300 comm="syz.8.4044" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 404.753425][ T29] audit: type=1400 audit(1785155746.667:1502): avc: denied { sys_admin } for pid=16313 comm="syz.2.4050" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 404.883925][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.196528][T16329] kvm: emulating exchange as write [ 405.457980][T16336] netlink: 'syz.8.4057': attribute type 1 has an invalid length. [ 405.483360][T16336] netlink: 'syz.8.4057': attribute type 4 has an invalid length. [ 405.506189][T16336] netlink: 9491 bytes leftover after parsing attributes in process `syz.8.4057'. [ 405.695082][T16346] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4060'. [ 405.722952][T16346] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4060'. [ 405.762834][ T6410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.771193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.924390][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 407.054899][T16386] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 407.072508][T16386] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 407.102693][T16018] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 407.124387][T16386] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 407.132674][T16386] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 407.141670][T16386] overlayfs: d_ino too big (876, ino=9223372036854780366, xinobits=3) [ 407.150954][T16386] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 407.160496][T16386] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 407.170187][T16386] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 407.178658][ T5811] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 407.188531][T16386] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 407.201600][T16386] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 407.211491][T16386] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 407.220455][T16386] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 407.261054][T16018] usb 3-1: config 0 has an invalid interface number: 91 but max is 0 [ 407.269859][T16018] usb 3-1: config 0 has no interface number 0 [ 407.277475][T16018] usb 3-1: too many endpoints for config 0 interface 91 altsetting 24: 159, using maximum allowed: 30 [ 407.291294][T16018] usb 3-1: config 0 interface 91 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 159 [ 407.306175][T16018] usb 3-1: config 0 interface 91 has no altsetting 0 [ 407.315575][T16018] usb 3-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 407.328638][T16018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.328700][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 407.337140][T16018] usb 3-1: Product: syz [ 407.347241][T16018] usb 3-1: Manufacturer: syz [ 407.352148][T16018] usb 3-1: SerialNumber: syz [ 407.359599][T16018] usb 3-1: config 0 descriptor?? [ 407.396223][ T5811] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 407.435441][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.467294][ T5811] usb 1-1: Product: syz [ 407.480932][ T5811] usb 1-1: Manufacturer: syz [ 407.500279][ T5811] usb 1-1: SerialNumber: syz [ 407.518255][ T5811] usb 1-1: config 0 descriptor?? [ 407.536009][ T5811] gspca_main: spca508-2.14.0 probing 041e:4018 [ 407.663747][ T29] audit: type=1400 audit(1785155749.567:1503): avc: denied { read } for pid=16375 comm="syz.2.4074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 407.723328][T16018] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 407.738001][ T5811] gspca_spca508: reg_read err -32 [ 407.746159][ T5617] Bluetooth: hci0: link tx timeout [ 407.766607][ T5811] gspca_spca508: reg_read err -32 [ 407.770155][ T5617] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 407.792530][ T5811] gspca_spca508: reg_read err -32 [ 407.818200][ T5811] gspca_spca508: reg_read err -32 [ 407.833357][ T5811] gspca_spca508: reg_read err -32 [ 407.844453][T16018] usb 3-1: USB disconnect, device number 56 [ 407.918881][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.985250][ T4929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.004023][ T4929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.019978][ T4929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.037066][ T4929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.045367][ T4929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.053139][ T5811] gspca_spca508: reg write: error -71 [ 408.077361][ T5811] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 408.147714][ T5811] usb 1-1: USB disconnect, device number 37 [ 408.173068][T16407] xt_hashlimit: size too large, truncated to 1048576 [ 408.424644][T16419] loop6: detected capacity change from 0 to 2640 [ 408.442547][ T5621] buffer_io_error: 25 callbacks suppressed [ 408.442563][ T5621] Buffer I/O error on dev loop6, logical block 0, async page read [ 408.468113][ T5621] Buffer I/O error on dev loop6, logical block 0, async page read [ 408.482165][ T5621] Buffer I/O error on dev loop6, logical block 0, async page read [ 408.519581][ T5621] Buffer I/O error on dev loop6, logical block 0, async page read [ 408.549325][ T5621] Buffer I/O error on dev loop6, logical block 0, async page read [ 408.660917][ T5811] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 408.853765][ T5811] usb 5-1: config 1 interface 0 has no altsetting 0 [ 408.873508][ T5811] usb 5-1: string descriptor 0 read error: -22 [ 408.881000][ T5811] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 408.891224][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.008130][T16430] SELinux: failed to load policy [ 409.043615][T16401] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.064079][T16401] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.083416][T16401] bridge_slave_0: entered allmulticast mode [ 409.100188][T16401] bridge_slave_0: entered promiscuous mode [ 409.117247][T16401] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.138168][T16401] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.150087][T16401] bridge_slave_1: entered allmulticast mode [ 409.172046][T16401] bridge_slave_1: entered promiscuous mode [ 409.223404][T16401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.237636][T16401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.311970][T16401] team0: Port device team_slave_0 added [ 409.323284][T16401] team0: Port device team_slave_1 added [ 409.387470][T16401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.394711][T16401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.425588][T16401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.459106][T16401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.478955][T16401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.507510][ T5811] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 409.517703][ T5811] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 409.525616][ T5811] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 409.543193][T16401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.546929][ T5811] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 409.578635][ T5811] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 409.595260][ T5811] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 409.619189][ T5811] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 409.628856][ T5811] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 409.636824][ T5811] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 409.659931][ T5811] topre 0003:0853:0148.0043: unknown main item tag 0x0 [ 409.682189][T16401] hsr_slave_0: entered promiscuous mode [ 409.699071][T16401] hsr_slave_1: entered promiscuous mode [ 409.710352][T16401] debugfs: 'hsr0' already exists in 'hsr' [ 409.726380][T16401] Cannot create hsr debugfs directory [ 409.734335][ T5811] topre 0003:0853:0148.0043: hidraw0: USB HID vff.7f Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 409.774580][ T5811] usb 5-1: USB disconnect, device number 55 [ 409.859174][ T4929] Bluetooth: hci0: command 0x0406 tx timeout [ 409.920292][T16451] fido_id[16451]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 410.092389][T16459] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16459 comm=syz.0.4103 [ 410.108399][T16459] netlink: 'syz.0.4103': attribute type 12 has an invalid length. [ 410.118511][T16459] netlink: 'syz.0.4103': attribute type 29 has an invalid length. [ 410.126659][T16459] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4103'. [ 410.138930][T16459] netlink: 'syz.0.4103': attribute type 1 has an invalid length. [ 410.146771][T16459] netlink: 'syz.0.4103': attribute type 2 has an invalid length. [ 410.155702][T16459] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4103'. [ 410.162666][ T5617] Bluetooth: hci1: command tx timeout [ 410.577821][ T29] audit: type=1400 audit(1785155752.487:1504): avc: denied { create } for pid=16476 comm="syz.0.4111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 410.638402][ T29] audit: type=1400 audit(1785155752.517:1505): avc: denied { write } for pid=16476 comm="syz.0.4111" path="socket:[68142]" dev="sockfs" ino=68142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 410.943855][T16401] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 410.959423][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.984670][T16401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.999541][T16401] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 411.023391][T16401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.052850][T16401] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 411.086917][T16401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.103265][T16401] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 411.217257][T16401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.520779][ T6385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.529192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.558035][T16401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.664015][T16401] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.680405][T16512] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4125'. [ 411.698736][T16512] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4125'. [ 411.713216][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.720444][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.742722][ T29] audit: type=1326 audit(1785155753.657:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16513 comm="syz.0.4126" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1dc19de99 code=0x0 [ 411.816824][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.824050][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.002527][T16520] syzkaller0: entered promiscuous mode [ 412.023256][T16520] syzkaller0: entered allmulticast mode [ 412.059468][T16520] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 412.238989][ T5617] Bluetooth: hci1: command tx timeout [ 412.255732][T16535] xt_hashlimit: size too large, truncated to 1048576 [ 412.589998][ T29] audit: type=1326 audit(1785155754.507:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16530 comm="syz.8.4132" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff08d59de99 code=0x0 [ 413.076176][T16401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.561186][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4142'. [ 413.587722][T16578] netlink: 'syz.8.4142': attribute type 5 has an invalid length. [ 413.598989][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4142'. [ 413.612153][T16401] veth0_vlan: entered promiscuous mode [ 413.653472][T16581] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4142'. [ 413.658518][T16401] veth1_vlan: entered promiscuous mode [ 413.695484][T16581] netlink: 'syz.8.4142': attribute type 5 has an invalid length. [ 413.724157][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4142'. [ 413.783775][T16401] veth0_macvtap: entered promiscuous mode [ 413.790829][T16585] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 413.809940][T16401] veth1_macvtap: entered promiscuous mode [ 413.854110][T16401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.877844][T16401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.904779][T16592] misc userio: Invalid payload size [ 413.910527][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.921446][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.932489][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.945705][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.001042][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.096615][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.203121][ T6410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.215370][ T6410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.250372][ T6348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.264470][ T6348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.318975][ T5617] Bluetooth: hci1: command tx timeout [ 414.363658][ T29] audit: type=1326 audit(1785155756.277:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.4.4151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b59de99 code=0x7ffc0000 [ 414.419011][ T29] audit: type=1326 audit(1785155756.307:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.4.4151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b59de99 code=0x7ffc0000 [ 414.479006][ T29] audit: type=1326 audit(1785155756.307:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.4.4151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b59de99 code=0x7ffc0000 [ 414.563098][ T29] audit: type=1326 audit(1785155756.307:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.4.4151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b59de99 code=0x7ffc0000 [ 414.612410][ T29] audit: type=1326 audit(1785155756.307:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.4.4151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f435b59de99 code=0x7ffc0000 [ 414.659192][ T29] audit: type=1326 audit(1785155756.307:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.4.4151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b59de99 code=0x7ffc0000 [ 414.708647][ T29] audit: type=1326 audit(1785155756.307:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.4.4151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b59de99 code=0x7ffc0000 [ 414.804885][ T29] audit: type=1326 audit(1785155756.307:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.4.4151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b59de99 code=0x7ffc0000 [ 414.866538][ T29] audit: type=1326 audit(1785155756.307:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.4.4151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f435b59de99 code=0x7ffc0000 [ 414.899315][T16622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.938538][T16622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.949584][ T29] audit: type=1326 audit(1785155756.307:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16599 comm="syz.4.4151" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b59de99 code=0x7ffc0000 [ 415.195802][T16622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.219190][T16622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.401097][ T5617] Bluetooth: hci1: command tx timeout [ 416.650816][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.659194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.119659][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.406722][T16672] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 417.493301][T16647] kexec: Could not allocate control_code_buffer [ 417.815726][T16680] netlink: 'syz.9.4181': attribute type 1 has an invalid length. [ 417.825461][T16680] netlink: 'syz.9.4181': attribute type 1 has an invalid length. [ 417.842148][ T6401] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 417.935840][T16688] batadv_slave_0: entered promiscuous mode [ 417.937287][T16689] fuse: Bad value for 'fd' [ 417.954621][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4183'. [ 417.973623][T16688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.016903][T16688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.275709][T16734] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4203'. [ 419.304581][T16734] netlink: 75 bytes leftover after parsing attributes in process `syz.8.4203'. [ 419.456783][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 419.456847][ T29] audit: type=1326 audit(1785155761.367:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16738 comm="syz.9.4205" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdc839de99 code=0x0 [ 420.067491][T16748] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.160668][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.781949][T16768] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input68 [ 421.232954][T16784] comedi comedi3: comedi_config --init_data is deprecated [ 421.428512][T16796] overlayfs: failed to clone upperpath [ 421.627359][T16804] xt_hashlimit: size too large, truncated to 1048576 [ 421.760111][ T6370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.768438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.227304][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.235683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.396650][T16015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.323795][T16020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.468946][T16023] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 424.524693][T16854] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4248'. [ 424.632066][T16023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.645194][T16023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.667014][T16023] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.693507][T16023] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.713368][T16023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.743414][T16023] usb 3-1: config 0 descriptor?? [ 425.215861][T16872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.245717][T16023] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 425.247445][T16872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.995584][T16786] Set syz1 is full, maxelem 65536 reached [ 426.093613][T16023] usb 3-1: USB disconnect, device number 57 [ 426.189582][ T6405] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.452076][ T6405] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.684098][ T4929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 426.705893][ T4929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 426.715145][ T4929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 426.723166][ T6405] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.737849][ T4929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 426.757231][ T4929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 426.919139][ T6361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.927459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.985316][ T6405] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.372107][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.495619][ T6370] netdevsim netdevsim9 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.607873][ T6412] netdevsim netdevsim9 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.857940][ T6370] netdevsim netdevsim9 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.281812][ T6370] netdevsim netdevsim9 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.448891][ T6405] bridge_slave_1: left allmulticast mode [ 428.492348][ T6405] bridge_slave_1: left promiscuous mode [ 428.530772][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.588179][ T6405] bridge_slave_0: left allmulticast mode [ 428.626956][ T6405] bridge_slave_0: left promiscuous mode [ 428.645115][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.799687][ T4929] Bluetooth: hci1: command tx timeout [ 428.829119][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.837416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.005363][ T29] audit: type=1400 audit(1785155770.917:1543): avc: denied { write } for pid=16952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.155384][ T29] audit: type=1400 audit(1785155771.067:1544): avc: denied { write } for pid=16987 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.281434][ T6405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.296724][ T6405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.317180][ T6405] bond0 (unregistering): Released all slaves [ 429.431086][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 429.556862][ T29] audit: type=1400 audit(1785155771.467:1545): avc: denied { cmd } for pid=16985 comm="iou-wrk-16986" path="socket:[71462]" dev="sockfs" ino=71462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 429.928108][ T6361] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 430.213256][ T6405] hsr_slave_0: left promiscuous mode [ 430.245916][ T6405] hsr_slave_1: left promiscuous mode [ 430.257155][ T6405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.277253][T17028] No source specified [ 430.286027][ T6405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.336413][ T6405] veth1_macvtap: left promiscuous mode [ 430.358647][ T6405] veth0_macvtap: left promiscuous mode [ 430.377320][ T6405] veth1_vlan: left promiscuous mode [ 430.398888][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.409527][ T6405] veth0_vlan: left promiscuous mode [ 430.473559][ T29] audit: type=1400 audit(1785155772.387:1546): avc: denied { write } for pid=17008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.668711][T17046] fuse: Bad value for 'fd' [ 430.727242][ T29] audit: type=1400 audit(1785155772.637:1547): avc: denied { write } for pid=17045 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.878796][ T4929] Bluetooth: hci1: command tx timeout [ 430.916739][T17049] overlayfs: failed to clone upperpath [ 431.036643][ T29] audit: type=1400 audit(1785155772.947:1548): avc: denied { bind } for pid=17050 comm="syz.4.4311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.283384][ T6405] team0 (unregistering): Port device team_slave_1 removed [ 431.325039][ T6405] team0 (unregistering): Port device team_slave_0 removed [ 431.407591][T17069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4319'. [ 431.417969][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4319'. [ 431.489190][T17034] batadv_slave_1: entered promiscuous mode [ 431.509324][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11 [ 431.544310][T17034] batadv_slave_1: left promiscuous mode [ 431.721787][T17081] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4322'. [ 431.795327][T16903] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.802747][T16903] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.812001][T16903] bridge_slave_0: entered allmulticast mode [ 431.823021][T16903] bridge_slave_0: entered promiscuous mode [ 431.831643][T16903] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.839227][T16903] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.846548][T16903] bridge_slave_1: entered allmulticast mode [ 431.853921][T16903] bridge_slave_1: entered promiscuous mode [ 431.886170][ T29] audit: type=1804 audit(1785155773.797:1549): pid=17087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.4325" name="/newroot/887/file1" dev="tmpfs" ino=4628 res=1 errno=0 [ 431.943663][T16903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.984152][T16903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.066870][T16903] team0: Port device team_slave_0 added [ 432.122957][T16903] team0: Port device team_slave_1 added [ 432.125226][T17097] fuse: fd is not a fuse device [ 432.236316][T16903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.252816][T16903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.303805][T16903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.353768][T16903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.375605][T16903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.430349][T16903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.515628][T16903] hsr_slave_0: entered promiscuous mode [ 432.530395][T16903] hsr_slave_1: entered promiscuous mode [ 432.538044][T16903] debugfs: 'hsr0' already exists in 'hsr' [ 432.555379][T16903] Cannot create hsr debugfs directory [ 432.585379][ T29] audit: type=1400 audit(1785155774.497:1550): avc: denied { write } for pid=17093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.645214][ T6370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.653748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.687986][ T29] audit: type=1400 audit(1785155774.597:1551): avc: denied { append } for pid=17119 comm="syz.4.4335" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 432.769035][ T29] audit: type=1400 audit(1785155774.637:1552): avc: denied { open } for pid=17119 comm="syz.4.4335" path="/934/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 432.961026][ T4929] Bluetooth: hci1: command tx timeout [ 433.068213][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10 [ 433.096743][T17120] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 433.133913][T17120] block device autoloading is deprecated and will be removed. [ 433.440044][T16018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.826846][T17169] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 433.850367][T17169] overlayfs: failed to set xattr on upper [ 433.875884][T17169] overlayfs: ...falling back to redirect_dir=nofollow. [ 433.899598][T17169] overlayfs: ...falling back to index=off. [ 433.921358][T17169] overlayfs: ...falling back to uuid=null. [ 433.943834][T17169] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 434.116731][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 434.116749][ T29] audit: type=1400 audit(1785155776.027:1555): avc: denied { write } for pid=17176 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.159273][T16903] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.244825][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12 [ 434.387979][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4352'. [ 434.443901][T17192] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4355'. [ 434.463736][T16903] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.493809][T17192] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4355'. [ 434.571431][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.577833][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.586366][ T6398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.594752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.681963][T16903] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.695275][ T29] audit: type=1400 audit(1785155776.597:1556): avc: denied { write } for pid=17181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.785676][ T29] audit: type=1400 audit(1785155776.697:1557): avc: denied { write } for pid=17208 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.927201][T16903] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.038638][ T4929] Bluetooth: hci1: command tx timeout [ 435.322222][ T29] audit: type=1400 audit(1785155777.237:1558): avc: denied { write } for pid=17210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.668050][T16903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 435.732021][ T29] audit: type=1400 audit(1785155777.647:1559): avc: denied { write } for pid=17240 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.774153][T16903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.820162][T16903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 435.893724][T16903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.924400][T16903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 435.958924][T17245] binder: 17242:17245 ioctl c0306201 200000000000 returned -14 [ 435.986981][T16903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.020299][T16903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 436.045690][T16903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 436.207586][ T4929] Bluetooth: hci0: unexpected event for opcode 0x080b [ 436.266712][ T6405] netdevsim netdevsim100 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.285628][ T6405] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.479561][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.493440][T16903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.517455][ T29] audit: type=1400 audit(1785155778.427:1560): avc: denied { write } for pid=17248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.546973][T16903] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.711113][ T29] audit: type=1400 audit(1785155778.617:1561): avc: denied { write } for pid=17283 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.736139][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.743368][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.823146][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.830348][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.026032][T17295] netlink: 'syz.0.4379': attribute type 1 has an invalid length. [ 437.153020][T17295] bond3: entered promiscuous mode [ 437.191734][T17295] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.301883][T17300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.342400][T17300] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 437.364679][T17300] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 437.395700][T17300] bond3: (slave ip6gre2): making interface the new active one [ 437.419652][T16023] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 437.435554][T17300] ip6gre2: entered promiscuous mode [ 437.457291][T17300] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 437.608906][T16023] usb 5-1: Using ep0 maxpacket: 8 [ 437.620565][T16023] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 437.652488][T16023] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 437.684855][T16023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.732004][T16023] usb 5-1: Product: syz [ 437.753358][T16023] usb 5-1: Manufacturer: syz [ 437.767852][T16023] usb 5-1: SerialNumber: syz [ 437.832425][T16023] usb 5-1: config 0 descriptor?? [ 437.885135][T17319] 9pnet_fd: p9_fd_create_unix (17319): problem connecting socket: ./nonexistent: -2 [ 437.956646][T16023] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 438.009350][T16023] usb 5-1: setting power ON [ 438.034132][T16023] dvb-usb: bulk message failed: -22 (2/0) [ 438.067075][ T29] audit: type=1400 audit(1785155779.977:1562): avc: denied { write } for pid=17301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.143465][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4384'. [ 438.143879][T16023] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 438.176751][T17299] dvb-usb: bulk message failed: -22 (3/0) [ 438.232217][T16023] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 438.252098][T17299] dvb-usb: bulk message failed: -22 (4/0) [ 438.308034][T16023] usb 5-1: media controller created [ 438.344572][ T29] audit: type=1400 audit(1785155780.257:1563): avc: denied { write } for pid=17332 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.387095][T16023] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.400709][ T6398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.409093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.427034][T17328] 8021q: adding VLAN 0 to HW filter on device team1 [ 438.436698][T16023] usb 5-1: selecting invalid altsetting 6 [ 438.460387][T17331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4385'. [ 438.497803][T17334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4385'. [ 438.516391][T16023] usb 5-1: digital interface selection failed (-22) [ 438.528432][T16023] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 438.551880][T16023] usb 5-1: setting power OFF [ 438.618485][T16023] dvb-usb: bulk message failed: -22 (2/0) [ 438.675176][T16023] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 438.712878][T16023] (NULL device *): no alternate interface [ 438.744983][T16903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.846551][T17346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.880175][T17346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.938902][T16023] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 439.002652][T16023] usb 5-1: USB disconnect, device number 56 [ 439.076998][T17352] fuse: fd is not a fuse device [ 439.090577][T17350] input: syz0 as /devices/virtual/input/input69 [ 439.112797][T16903] veth0_vlan: entered promiscuous mode [ 439.182872][T16903] veth1_vlan: entered promiscuous mode [ 439.331207][T16903] veth0_macvtap: entered promiscuous mode [ 439.374962][T16903] veth1_macvtap: entered promiscuous mode [ 439.426424][ T29] audit: type=1400 audit(1785155781.337:1564): avc: denied { write } for pid=17337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.484369][T16903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.519977][T16018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.543674][T16903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.605382][ T6361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.635229][ T6361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.652499][ T29] audit: type=1400 audit(1785155781.567:1565): avc: denied { write } for pid=17368 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.681836][ T6401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.683499][ T6361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.699827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.702294][ T6401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.024374][T17374] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 440.076117][T17374] overlayfs: failed to set xattr on upper [ 440.102999][T17374] overlayfs: ...falling back to redirect_dir=nofollow. [ 440.163947][T17374] overlayfs: ...falling back to index=off. [ 440.234040][ T6361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.263198][ T6361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.417072][ T6398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.445984][ T6398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.082645][ T29] audit: type=1400 audit(1785155782.997:1566): avc: denied { write } for pid=17371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.191634][T17404] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4403'. [ 441.400690][ T29] audit: type=1400 audit(1785155783.317:1567): avc: denied { write } for pid=17409 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.676434][ T5708] IPVS: starting estimator thread 0... [ 441.683892][T17413] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 441.695024][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4407'. [ 441.735907][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4407'. [ 441.765933][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4407'. [ 441.800550][T17416] IPVS: using max 45 ests per chain, 108000 per kthread [ 441.825628][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4407'. [ 442.062359][T17431] KVM: debugfs: duplicate directory 17431-5 [ 442.090033][T17410] xt_hashlimit: size too large, truncated to 1048576 [ 442.447244][ T29] audit: type=1400 audit(1785155784.357:1568): avc: denied { write } for pid=17420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.579967][T16015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.693626][ T29] audit: type=1400 audit(1785155784.607:1569): avc: denied { write } for pid=17457 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.315514][T17473] SELinux: ebitmap start bit (536870912) is beyond the end of the bitmap (1472) [ 443.361187][T17473] SELinux: invalid class [ 443.402191][T17473] SELinux: failed to load policy [ 443.435091][T16015] libceph: mon0 (2)127.0.0.1:12345 socket error on write [ 443.573613][ T29] audit: type=1400 audit(1785155785.487:1570): avc: denied { write } for pid=17463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.743100][ T5867] libceph: mon0 (2)127.0.0.1:12345 socket error on write [ 443.775046][ T29] audit: type=1400 audit(1785155785.687:1571): avc: denied { write } for pid=17504 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.162426][ T6398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.170787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.253599][T17489] ceph: No mds server is up or the cluster is laggy [ 444.279308][T16015] libceph: mon0 (2)127.0.0.1:12345 socket error on write [ 444.575762][ T29] audit: type=1400 audit(1785155786.487:1572): avc: denied { write } for pid=17509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.771650][ T29] audit: type=1400 audit(1785155786.687:1573): avc: denied { write } for pid=17537 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.911399][ T5811] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 444.998520][ T6361] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.081038][ T5811] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 445.098411][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.133962][ T5811] usb 3-1: config 0 descriptor?? [ 445.251006][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.281786][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.294182][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.302139][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.309817][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 445.465226][ T6405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.473653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.496053][ T6361] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.607067][T16015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.717660][ T29] audit: type=1400 audit(1785155787.627:1574): avc: denied { write } for pid=17551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.754221][ T6361] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.912888][ T29] audit: type=1400 audit(1785155787.827:1575): avc: denied { write } for pid=17572 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.959510][ T6361] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.089314][T17580] overlayfs: failed to clone upperpath [ 446.362649][ T6401] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.385790][ T5811] usb 3-1: Cannot set autoneg [ 446.398992][ T5811] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 446.485309][ T5811] usb 3-1: USB disconnect, device number 58 [ 446.508957][ T6401] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.594337][ T29] audit: type=1400 audit(1785155788.517:1576): avc: denied { write } for pid=17581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.680702][ T6398] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.746301][ T29] audit: type=1400 audit(1785155788.657:1577): avc: denied { write } for pid=17608 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.795974][ T6398] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.840503][ T6361] bridge_slave_1: left allmulticast mode [ 446.864143][ T6361] bridge_slave_1: left promiscuous mode [ 446.879585][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.915259][T17615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.933629][ T6361] bridge_slave_0: left allmulticast mode [ 446.943810][T17615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.964291][ T6361] bridge_slave_0: left promiscuous mode [ 446.983935][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.236948][T17628] loop5: detected capacity change from 0 to 7 [ 447.268397][T17628] Dev loop5: unable to read RDB block 7 [ 447.284136][T17628] loop5: AHDI p2 [ 447.288072][T17628] loop5: partition table partially beyond EOD, truncated [ 447.369469][ T29] audit: type=1400 audit(1785155789.287:1578): avc: denied { write } for pid=17613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.440361][ T4929] Bluetooth: hci1: command tx timeout [ 447.627722][ T29] audit: type=1400 audit(1785155789.537:1579): avc: denied { write } for pid=17635 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.723948][ T6361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.755145][ T6361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.778197][ T6361] bond0 (unregistering): Released all slaves [ 447.886210][T17649] VFS: Lookup of 'file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' in fuse fuse would have caused loop [ 448.548228][T17552] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.570460][T17552] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.593282][T17552] bridge_slave_0: entered allmulticast mode [ 448.603629][T17552] bridge_slave_0: entered promiscuous mode [ 448.642371][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.653196][T17552] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.670231][T17552] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.694582][T17552] bridge_slave_1: entered allmulticast mode [ 448.714317][T17552] bridge_slave_1: entered promiscuous mode [ 448.741771][ T29] audit: type=1400 audit(1785155790.647:1580): avc: denied { write } for pid=17665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.854410][ T6361] hsr_slave_0: left promiscuous mode [ 448.867414][ T6361] hsr_slave_1: left promiscuous mode [ 448.873853][ T6405] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 448.892569][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.902279][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.910261][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.917746][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.931025][ T29] audit: type=1400 audit(1785155790.847:1581): avc: denied { write } for pid=17687 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.961805][ T6361] veth1_macvtap: left promiscuous mode [ 448.968864][ T6361] veth0_macvtap: left promiscuous mode [ 448.978085][ T6361] veth1_vlan: left promiscuous mode [ 448.988043][ T6361] veth0_vlan: left promiscuous mode [ 449.279110][ T6412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.287430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.491536][T17689] Set syz1 is full, maxelem 65536 reached [ 449.499479][ T6361] team0 (unregistering): Port device team_slave_1 removed [ 449.518327][ T6361] team0 (unregistering): Port device team_slave_0 removed [ 449.525865][ T4929] Bluetooth: hci1: command tx timeout [ 449.732215][T17552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.753789][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 449.782700][T17716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4482'. [ 449.796399][T17715] binder: 17713:17715 ioctl c0306201 2000000004c0 returned -14 [ 449.842534][T16015] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 449.866272][T17719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.882553][ T29] audit: type=1400 audit(1785155791.797:1582): avc: denied { ioctl } for pid=17718 comm="syz.4.4483" path="socket:[75789]" dev="sockfs" ino=75789 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 449.883476][T17719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.913632][T17701] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 449.927838][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4483'. [ 449.957324][T17552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.985741][T17720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.018595][T16015] usb 3-1: Using ep0 maxpacket: 16 [ 450.027303][T16015] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 450.043488][T16015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.047154][T17720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.068796][T16015] usb 3-1: Product: syz [ 450.082903][T16015] usb 3-1: Manufacturer: syz [ 450.104601][T16015] usb 3-1: SerialNumber: syz [ 450.142180][T16015] usb 3-1: config 0 descriptor?? [ 450.168211][T16015] usb 3-1: selecting invalid altsetting 1 [ 450.183616][T16015] technisat-usb2: could not set alternate setting to 0 [ 450.227772][T17552] team0: Port device team_slave_0 added [ 450.246104][T17726] fuse: fd is not a fuse device [ 450.250530][T17552] team0: Port device team_slave_1 added [ 450.361495][T17552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.362154][T16015] technisat-usb2: firmware version: 0.0 [ 450.377600][T17552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.412341][T16015] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 450.464578][T17552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.546937][T17552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.571521][T17552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.617048][T17552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.710793][T16015] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 450.749942][T16015] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 450.761935][T16015] usb 3-1: media controller created [ 450.789092][T17552] hsr_slave_0: entered promiscuous mode [ 450.804310][T16015] technisat-usb2: i2c-error: out failed 53 = -22 [ 450.809863][T17552] hsr_slave_1: entered promiscuous mode [ 450.828654][T16015] dvb-usb: MAC address reading failed. [ 450.849599][T17552] debugfs: 'hsr0' already exists in 'hsr' [ 450.859458][T17552] Cannot create hsr debugfs directory [ 450.890669][T16015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.056864][T16015] DVB: Unable to find symbol stv090x_attach() [ 451.073053][T16015] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 451.200275][T16015] rc_core: IR keymap rc-technisat-usb2 not found [ 451.207418][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.215899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.233794][T16015] Registered IR keymap rc-empty [ 451.247421][T16015] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 451.286078][T16015] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input70 [ 451.314964][ T29] audit: type=1400 audit(1785155793.227:1583): avc: denied { write } for pid=17731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.364723][T16015] dvb-usb: schedule remote query interval to 100 msecs. [ 451.404076][T16015] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 451.457803][T16015] usb 3-1: USB disconnect, device number 59 [ 451.566833][ T29] audit: type=1400 audit(1785155793.477:1584): avc: denied { write } for pid=17771 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.602449][ T4929] Bluetooth: hci1: command tx timeout [ 451.739461][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.762987][T16015] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 452.082948][T17552] netdevsim netdevsim1 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.144013][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 452.490995][T17552] netdevsim netdevsim1 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.802204][T17552] netdevsim netdevsim1 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.997940][ T29] audit: type=1400 audit(1785155794.907:1585): avc: denied { write } for pid=17793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.077427][T17552] netdevsim netdevsim1 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.112821][ T29] audit: type=1400 audit(1785155795.027:1586): avc: denied { write } for pid=17815 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.242291][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 453.678746][ T4929] Bluetooth: hci1: command tx timeout [ 453.702680][T17552] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 453.730967][T17552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.745404][T17552] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 453.750389][ T5729] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 453.764210][T17552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.781122][T17552] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 453.805441][T17552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.816649][T17552] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 453.846447][T17552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.928890][ T5729] usb 5-1: Using ep0 maxpacket: 8 [ 453.941334][ T5729] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 453.954869][ T5729] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 453.974308][ T5729] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 453.986139][ T5729] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.025774][ T5729] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.063741][ T5729] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 454.077644][T17854] bond1: entered allmulticast mode [ 454.088655][ T29] audit: type=1400 audit(1785155795.997:1587): avc: denied { write } for pid=17827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.100731][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.112422][T17854] ipip0: entered allmulticast mode [ 454.167287][T17854] bond1: left allmulticast mode [ 454.181017][T17854] ipip0: left allmulticast mode [ 454.227987][T17552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.277939][T17552] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.303317][ T29] audit: type=1400 audit(1785155796.217:1588): avc: denied { write } for pid=17861 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.345583][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.352853][ T6361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.394143][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.401346][ T6361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.424615][ T5729] usb 5-1: usb_control_msg returned -32 [ 454.435396][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 454.440648][ T5729] usbtmc 5-1:16.0: can't read capabilities [ 454.477472][T17867] netlink: 'syz.0.4520': attribute type 4 has an invalid length. [ 454.535926][T17867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.563256][T17867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.763368][T16023] usb 5-1: USB disconnect, device number 57 [ 454.785973][T17828] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 454.799128][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.813673][T17879] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -19 [ 455.036002][ T29] audit: type=1400 audit(1785155796.947:1589): avc: denied { write } for pid=17870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.043934][ T6338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.067758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.227472][ T29] audit: type=1400 audit(1785155797.137:1590): avc: denied { write } for pid=17896 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.399704][T17552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.759893][T17552] veth0_vlan: entered promiscuous mode [ 455.771744][T17911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4527'. [ 455.818016][T17552] veth1_vlan: entered promiscuous mode [ 455.825629][ T29] audit: type=1400 audit(1785155797.737:1591): avc: denied { append } for pid=17913 comm="syz.0.4528" name="sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 455.869854][T17919] [ 455.872356][T17919] ====================================================== [ 455.879390][T17919] WARNING: possible circular locking dependency detected [ 455.886433][T17919] syzkaller #0 Tainted: G L [ 455.892456][T17919] ------------------------------------------------------ [ 455.899498][T17919] syz.2.4527/17919 is trying to acquire lock: [ 455.905579][T17919] ffffffff90b4e068 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 455.914673][T17919] [ 455.914673][T17919] but task is already holding lock: [ 455.922087][T17919] ffff8880334ff060 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 455.930390][T17919] [ 455.930390][T17919] which lock already depends on the new lock. [ 455.930390][T17919] [ 455.940876][T17919] [ 455.940876][T17919] the existing dependency chain (in reverse order) is: [ 455.949892][T17919] [ 455.949892][T17919] -> #6 (&pipe->mutex){+.+.}-{4:4}: [ 455.957295][T17919] lock_acquire+0x1b9/0x370 [ 455.962347][T17919] __mutex_lock+0x1a4/0x1bd0 [ 455.967456][T17919] pipe_lock+0x69/0x80 [ 455.972063][T17919] iter_file_splice_write+0x1fd/0x10b0 [ 455.978051][T17919] do_splice+0x109c/0x1f90 [ 455.982989][T17919] __do_splice+0x33b/0x370 [ 455.987930][T17919] __x64_sys_splice+0x187/0x250 [ 455.993310][T17919] do_syscall_64+0x115/0x870 [ 455.998416][T17919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.004820][T17919] [ 456.004820][T17919] -> #5 (sb_writers#6){.+.+}-{0:0}: [ 456.012194][T17919] lock_acquire+0x1b9/0x370 [ 456.017223][T17919] mnt_want_write+0x6f/0x410 [ 456.022342][T17919] path_openat+0xad9/0x4280 [ 456.027360][T17919] do_file_open+0x20e/0x430 [ 456.032385][T17919] file_open_name+0x1c3/0x3e0 [ 456.037636][T17919] filp_open+0x2e/0x50 [ 456.042243][T17919] fsg_lun_open+0x6b/0x7b0 [ 456.047188][T17919] fsg_store_file+0x1e7/0x450 [ 456.052402][T17919] configfs_write_iter+0x302/0x4e0 [ 456.058070][T17919] vfs_write+0x6ac/0x1050 [ 456.062919][T17919] ksys_write+0x12a/0x250 [ 456.067778][T17919] do_syscall_64+0x115/0x870 [ 456.072892][T17919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.079318][T17919] [ 456.079318][T17919] -> #4 (&common->filesem){+.+.}-{4:4}: [ 456.087034][T17919] lock_acquire+0x1b9/0x370 [ 456.092048][T17919] down_write+0x8b/0x1f0 [ 456.096801][T17919] fsg_store_file+0x193/0x450 [ 456.101986][T17919] configfs_write_iter+0x302/0x4e0 [ 456.107605][T17919] vfs_write+0x6ac/0x1050 [ 456.112448][T17919] ksys_write+0x12a/0x250 [ 456.117304][T17919] do_syscall_64+0x115/0x870 [ 456.122435][T17919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.128851][T17919] [ 456.128851][T17919] -> #3 (&p->frag_sem){++++}-{4:4}: [ 456.136233][T17919] lock_acquire+0x1b9/0x370 [ 456.141273][T17919] down_read+0x99/0x4c0 [ 456.145963][T17919] configfs_write_iter+0x218/0x4e0 [ 456.151724][T17919] vfs_write+0x6ac/0x1050 [ 456.156603][T17919] ksys_write+0x12a/0x250 [ 456.161484][T17919] do_syscall_64+0x115/0x870 [ 456.166607][T17919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.173040][T17919] [ 456.173040][T17919] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 456.180581][T17919] lock_acquire+0x1b9/0x370 [ 456.185611][T17919] __mutex_lock+0x1a4/0x1bd0 [ 456.190834][T17919] configfs_read_iter+0x79/0x6f0 [ 456.196318][T17919] __kernel_read+0x397/0xad0 [ 456.201469][T17919] integrity_kernel_read+0x7e/0xb0 [ 456.207110][T17919] ima_calc_file_hash_tfm+0x25e/0x350 [ 456.213006][T17919] ima_calc_file_hash+0x1e3/0x380 [ 456.218576][T17919] ima_collect_measurement+0x94f/0xb30 [ 456.224566][T17919] process_measurement+0xdfe/0x2350 [ 456.230291][T17919] ima_file_check+0xc3/0x110 [ 456.235412][T17919] security_file_post_open+0xc4/0x210 [ 456.241323][T17919] path_openat+0x985/0x4280 [ 456.246361][T17919] do_file_open+0x20e/0x430 [ 456.251393][T17919] do_sys_openat2+0x10f/0x1e0 [ 456.256596][T17919] __x64_sys_openat+0x12d/0x210 [ 456.261968][T17919] do_syscall_64+0x115/0x870 [ 456.267065][T17919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.273481][T17919] [ 456.273481][T17919] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 456.282095][T17919] lock_acquire+0x1b9/0x370 [ 456.287132][T17919] __mutex_lock+0x1a4/0x1bd0 [ 456.292266][T17919] process_measurement+0x5ab/0x2350 [ 456.297992][T17919] ima_file_check+0xc3/0x110 [ 456.303110][T17919] security_file_post_open+0xc4/0x210 [ 456.309014][T17919] path_openat+0x985/0x4280 [ 456.314036][T17919] do_file_open_root+0x2f6/0x5a0 [ 456.319491][T17919] file_open_root+0x1c6/0x3f0 [ 456.324673][T17919] kernel_read_file_from_path_initns+0x189/0x260 [ 456.331515][T17919] _request_firmware+0x733/0x13c0 [ 456.337051][T17919] request_firmware+0x35/0x50 [ 456.342254][T17919] reg_reload_regdb+0x85/0x460 [ 456.347545][T17919] genl_family_rcv_msg_doit+0x214/0x300 [ 456.353635][T17919] genl_rcv_msg+0x560/0x800 [ 456.358674][T17919] netlink_rcv_skb+0x159/0x420 [ 456.363974][T17919] genl_rcv+0x28/0x40 [ 456.368476][T17919] netlink_unicast+0x585/0x850 [ 456.373746][T17919] netlink_sendmsg+0x8b0/0xda0 [ 456.379015][T17919] ____sys_sendmsg+0xa4d/0xbe0 [ 456.384290][T17919] ___sys_sendmsg+0x190/0x1e0 [ 456.389479][T17919] __sys_sendmsg+0x160/0x210 [ 456.394578][T17919] do_syscall_64+0x115/0x870 [ 456.399683][T17919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.406083][T17919] [ 456.406083][T17919] -> #0 (cb_lock){++++}-{4:4}: [ 456.413019][T17919] check_prev_add+0xeb/0xe60 [ 456.418122][T17919] __lock_acquire+0x136c/0x1a40 [ 456.423480][T17919] lock_acquire+0x1b9/0x370 [ 456.428505][T17919] down_read+0x99/0x4c0 [ 456.433199][T17919] genl_rcv+0x19/0x40 [ 456.437725][T17919] netlink_unicast+0x585/0x850 [ 456.443024][T17919] netlink_sendmsg+0x8b0/0xda0 [ 456.448315][T17919] sock_sendmsg+0x394/0x410 [ 456.453355][T17919] splice_to_socket+0xb3c/0x11a0 [ 456.458828][T17919] do_splice+0x109c/0x1f90 [ 456.463780][T17919] __do_splice+0x33b/0x370 [ 456.468712][T17919] __x64_sys_splice+0x187/0x250 [ 456.474079][T17919] do_syscall_64+0x115/0x870 [ 456.479188][T17919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.485596][T17919] [ 456.485596][T17919] other info that might help us debug this: [ 456.485596][T17919] [ 456.495809][T17919] Chain exists of: [ 456.495809][T17919] cb_lock --> sb_writers#6 --> &pipe->mutex [ 456.495809][T17919] [ 456.507634][T17919] Possible unsafe locking scenario: [ 456.507634][T17919] [ 456.515064][T17919] CPU0 CPU1 [ 456.520424][T17919] ---- ---- [ 456.525776][T17919] lock(&pipe->mutex); [ 456.529920][T17919] lock(sb_writers#6); [ 456.536605][T17919] lock(&pipe->mutex); [ 456.543276][T17919] rlock(cb_lock); [ 456.547075][T17919] [ 456.547075][T17919] *** DEADLOCK *** [ 456.547075][T17919] [ 456.555199][T17919] 1 lock held by syz.2.4527/17919: [ 456.560299][T17919] #0: ffff8880334ff060 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 456.568989][T17919] [ 456.568989][T17919] stack backtrace: [ 456.574860][T17919] CPU: 1 UID: 0 PID: 17919 Comm: syz.2.4527 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.574881][T17919] Tainted: [L]=SOFTLOCKUP [ 456.574886][T17919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 456.574895][T17919] Call Trace: [ 456.574900][T17919] [ 456.574905][T17919] dump_stack_lvl+0x100/0x190 [ 456.574925][T17919] print_circular_bug.cold+0x178/0x1c7 [ 456.574949][T17919] check_noncircular+0x146/0x160 [ 456.574968][T17919] check_prev_add+0xeb/0xe60 [ 456.574986][T17919] __lock_acquire+0x136c/0x1a40 [ 456.575005][T17919] lock_acquire+0x1b9/0x370 [ 456.575022][T17919] ? genl_rcv+0x19/0x40 [ 456.575037][T17919] ? __pfx___might_resched+0x10/0x10 [ 456.575056][T17919] down_read+0x99/0x4c0 [ 456.575074][T17919] ? genl_rcv+0x19/0x40 [ 456.575088][T17919] ? __pfx_down_read+0x10/0x10 [ 456.575106][T17919] ? netlink_deliver_tap+0x1ae/0xcc0 [ 456.575128][T17919] genl_rcv+0x19/0x40 [ 456.575142][T17919] netlink_unicast+0x585/0x850 [ 456.575157][T17919] ? __pfx_netlink_unicast+0x10/0x10 [ 456.575170][T17919] ? __build_skb_around+0x278/0x390 [ 456.575185][T17919] netlink_sendmsg+0x8b0/0xda0 [ 456.575200][T17919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.575215][T17919] ? selinux_socket_sendmsg+0x198/0x2f0 [ 456.575237][T17919] sock_sendmsg+0x394/0x410 [ 456.575257][T17919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.575271][T17919] ? __pfx_sock_sendmsg+0x10/0x10 [ 456.575296][T17919] splice_to_socket+0xb3c/0x11a0 [ 456.575318][T17919] ? __pfx_splice_to_socket+0x10/0x10 [ 456.575336][T17919] ? inode_has_perm+0x16d/0x1d0 [ 456.575360][T17919] ? bpf_lsm_file_permission+0x9/0x10 [ 456.575382][T17919] ? security_file_permission+0x76/0x210 [ 456.575396][T17919] ? rw_verify_area+0xce/0x6d0 [ 456.575416][T17919] ? __pfx_splice_to_socket+0x10/0x10 [ 456.575433][T17919] do_splice+0x109c/0x1f90 [ 456.575449][T17919] ? __lock_acquire+0x49f/0x1a40 [ 456.575466][T17919] ? __lock_acquire+0x49f/0x1a40 [ 456.575484][T17919] ? __pfx_do_splice+0x10/0x10 [ 456.575499][T17919] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 456.575514][T17919] ? find_held_lock+0x2b/0x80 [ 456.575537][T17919] __do_splice+0x33b/0x370 [ 456.575553][T17919] ? __pfx___do_splice+0x10/0x10 [ 456.575575][T17919] __x64_sys_splice+0x187/0x250 [ 456.575593][T17919] do_syscall_64+0x115/0x870 [ 456.575608][T17919] ? clear_bhb_loop+0x40/0x90 [ 456.575625][T17919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.575639][T17919] RIP: 0033:0x7f7e1019de99 [ 456.575651][T17919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.575665][T17919] RSP: 002b:00007f7e11039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 456.575679][T17919] RAX: ffffffffffffffda RBX: 00007f7e10426090 RCX: 00007f7e1019de99 [ 456.575689][T17919] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 456.575697][T17919] RBP: 00007f7e10233eaf R08: 000200000000622c R09: 0000000000000000 [ 456.575706][T17919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 456.575715][T17919] R13: 00007f7e10426128 R14: 00007f7e10426090 R15: 00007ffe574d12e8 [ 456.575728][T17919] [ 456.898632][ T29] audit: type=1400 audit(1785155798.497:1592): avc: denied { write } for pid=5597 comm="syz-executor" path="pipe:[4575]" dev="pipefs" ino=4575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 456.959164][ T6412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.967443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.050362][ T29] audit: type=1400 audit(1785155798.967:1593): avc: denied { write } for pid=17905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.185968][T17919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4527'. [ 457.274818][ T29] audit: type=1400 audit(1785155799.187:1594): avc: denied { write } for pid=17930 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.805141][ T29] audit: type=1400 audit(1785155799.717:1595): avc: denied { write } for pid=17932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.840085][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.967381][ T29] audit: type=1400 audit(1785155799.877:1596): avc: denied { write } for pid=17943 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.180955][T17917] bond0: (slave syz_tun): Releasing backup interface [ 458.284198][T13915] syz_tun (unregistering): left allmulticast mode [ 458.313403][ T29] audit: type=1400 audit(1785155800.227:1597): avc: denied { write } for pid=17945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.385256][ T29] audit: type=1400 audit(1785155800.297:1598): avc: denied { write } for pid=17956 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.693686][ T6398] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.712934][ T6361] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.730349][ T6361] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.752434][ T6361] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.761184][ T6412] bridge_slave_1: left allmulticast mode [ 458.766866][ T6412] bridge_slave_1: left promiscuous mode [ 458.773388][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.783109][ T6412] bridge_slave_0: left allmulticast mode [ 458.789363][ T6412] bridge_slave_0: left promiscuous mode [ 458.795118][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.859914][ T6412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.870257][ T6412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.880110][ T6412] bond0 (unregistering): Released all slaves [ 458.951827][ T6412] hsr_slave_0: left promiscuous mode [ 458.957797][ T6412] hsr_slave_1: left promiscuous mode [ 458.966411][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.978486][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.989412][ T6412] veth1_vlan: left promiscuous mode [ 458.994718][ T6412] veth0_vlan: left promiscuous mode [ 459.087975][ T6412] team0 (unregistering): Port device team_slave_1 removed [ 459.097418][ T6412] team0 (unregistering): Port device team_slave_0 removed [ 459.463776][ T6412] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.474218][ T6412] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.545530][ T6412] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.570833][ T6412] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.630989][ T6412] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.644432][ T6412] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.692934][ T6412] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.708226][ T6412] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.801678][ T6398] netdevsim netdevsim8 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.835829][ T6398] netdevsim netdevsim8 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.852302][ T6398] netdevsim netdevsim8 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.866030][ T6412] bridge_slave_1: left allmulticast mode [ 459.872087][ T6412] bridge_slave_1: left promiscuous mode [ 459.877831][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.887091][ T6412] bridge_slave_0: left allmulticast mode [ 459.893042][ T6412] bridge_slave_0: left promiscuous mode [ 459.899565][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.016030][ T6412] gretap0 (unregistering): left promiscuous mode [ 460.036579][ T6412] bond1 (unregistering): (slave ipip0): Releasing backup interface [ 460.048153][ T6412] ipip0 (unregistering): left promiscuous mode [ 460.065698][ T6412] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 460.075536][ T6412] vxlan0 (unregistering): left promiscuous mode [ 460.089403][ T6412] bond0 (unregistering): left promiscuous mode [ 460.095618][ T6412] bond_slave_0: left promiscuous mode [ 460.103919][ T6412] bond_slave_1: left promiscuous mode [ 460.115195][ T6412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.125235][ T6412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.136204][ T6412] bond0 (unregistering): Released all slaves [ 460.146707][ T6412] bond1 (unregistering): Released all slaves [ 460.156440][ T6398] netdevsim netdevsim8 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.167556][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 460.167573][ T29] audit: type=1400 audit(1785155802.087:1615): avc: denied { write } for pid=18063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.208515][ T29] audit: type=1400 audit(1785155802.117:1616): avc: denied { write } for pid=18074 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.387967][ T6412] hsr_slave_0: left promiscuous mode [ 460.393852][ T6412] hsr_slave_1: left promiscuous mode [ 460.399969][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.407385][ T6412] batadv0: mtu less than device minimum [ 460.415477][ T6412] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.426278][ T6412] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.437075][ T6412] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.447951][ T6412] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.458748][ T6412] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.469509][ T6412] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.480305][ T6412] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.491164][ T6412] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.502075][ T6412] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 460.517913][ T29] audit: type=1400 audit(1785155802.367:1617): avc: denied { write } for pid=18077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.528828][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.544402][ T29] audit: type=1400 audit(1785155802.417:1618): avc: denied { write } for pid=18088 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.570909][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.583162][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.591113][ T6412] batman_adv: batadv0: Interface deactivated: dummy0 [ 460.597791][ T6412] batman_adv: batadv0: Removing interface: dummy0 [ 460.605829][ T6412] veth1_macvtap: left promiscuous mode [ 460.611448][ T6412] veth0_macvtap: left promiscuous mode [ 460.616977][ T6412] veth1_vlan: left promiscuous mode [ 460.622335][ T6412] veth0_vlan: left promiscuous mode [ 460.693310][ T6412] team0 (unregistering): Port device team_slave_1 removed [ 460.703443][ T6412] team0 (unregistering): Port device team_slave_0 removed [ 460.747624][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 460.947116][ T29] audit: type=1400 audit(1785155802.857:1619): avc: denied { write } for pid=18090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.001215][ T29] audit: type=1400 audit(1785155802.917:1620): avc: denied { write } for pid=18101 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.005215][ T6412] IPVS: stop unused estimator thread 0... [ 461.159520][ T29] audit: type=1400 audit(1785155803.077:1621): avc: denied { write } for pid=18105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.199307][ T29] audit: type=1400 audit(1785155803.117:1622): avc: denied { write } for pid=18116 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.225494][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 461.337850][ T29] audit: type=1400 audit(1785155803.247:1623): avc: denied { write } for pid=18119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.377523][ T29] audit: type=1400 audit(1785155803.287:1624): avc: denied { write } for pid=18130 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.421316][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 461.586283][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8 [ 461.768100][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 461.928041][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15 [ 462.086687][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14 [ 462.247951][ T5274] 8021q: adding VLAN 0 to HW filter on device eth16