last executing test programs: 10m33.513606835s ago: executing program 3 (id=263): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x1612, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a1", @ANYBLOB="3df40100ff050000694957aa0000000000000069d7517efc0a4ab27d"], 0x34}}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400ffea7df0c054b60100000000000000000000000000010c0002800500cb438acac03fced19d0100000000003c0002802c00018014000300fc000000000000000000000001000000140000000000000000010c00028005000100000000"], 0x9c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x13ca, 0x0, &(0x7f0000001a80), 0x0}, 0x20) socket$alg(0x26, 0x5, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000000c0)="b8", 0x1) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) 10m29.237461112s ago: executing program 3 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) pwritev2(r2, 0x0, 0x0, 0x9, 0x0, 0x7) r3 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[@ANYRES32=r4, @ANYRES64=r6, @ANYBLOB='\x00'/20, @ANYRES8=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f00000005c0)=@buf="8e5e53640d0102935511b97754", 0x1}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 10m25.933609222s ago: executing program 3 (id=276): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x808}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) 10m24.838153335s ago: executing program 3 (id=278): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0xc) write(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_SET_PIT2(r5, 0x4c07, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80045510, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = epoll_create1(0x80000) r8 = creat(&(0x7f00000001c0)='./bus\x00', 0x110) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfd', @ANYRESHEX=r7, @ANYBLOB="11"]) 10m23.485162706s ago: executing program 3 (id=280): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_emit_ethernet(0x1e, &(0x7f00000002c0)={@local, @link_local, @void, {@can={0xc, {{0x4}, 0x15, 0x1, 0x0, 0x0, "da3b99121880e22e"}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x7e, 0x0, 0x34324152, 0x4, 0x0, [{0x0, 0xf}, {0x20010}, {}, {0x1000000}, {0x3}, {0x2fe}, {0x0, 0x7ff}], 0xf, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x0, 'team_slave_1\x00', {}, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x4, 0x1, 0x1, 0x93}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x458, 0x9, 0x1, 0x42, 0x1, 0x2}, &(0x7f0000000180)=0x9c) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10m21.278864037s ago: executing program 3 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xa}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000440)=@in6={0xa, 0x4622, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x80, 0x0}, 0x240ce040) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10m5.789762908s ago: executing program 32 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xa}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000440)=@in6={0xa, 0x4622, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x80, 0x0}, 0x240ce040) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m8.705280571s ago: executing program 2 (id=1356): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "b775e7cd"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @local=@item_012={0x1, 0x2, 0x7, ')'}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000180)) 3m5.930984493s ago: executing program 2 (id=1377): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdc01, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x200}, @NL80211_ATTR_SSID={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) 3m4.549646153s ago: executing program 2 (id=1392): syz_usb_connect(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201400051c31010da059400f7f60102030109022d0001000000000904d80003ac2d9000090507041002040f2a0905031040000b0c06"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c000380"], 0x8c}}, 0x0) 3m3.792929692s ago: executing program 33 (id=1392): syz_usb_connect(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201400051c31010da059400f7f60102030109022d0001000000000904d80003ac2d9000090507041002040f2a0905031040000b0c06"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c000380"], 0x8c}}, 0x0) 2m41.242339801s ago: executing program 4 (id=1510): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 2m40.227923192s ago: executing program 4 (id=1514): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) io_uring_setup(0x4779, 0x0) socket(0x10, 0x803, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, 0x0, 0x0, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000100), &(0x7f00000001c0)=r2}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x3}}, '\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=0x1, 0x7, 0x0, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0]}, 0x40) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) 2m40.058988717s ago: executing program 4 (id=1516): openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb83cecb78cef66bafc0ced66ba400066b8ffff66ef0f78d164646565470fc77d9fb9240b0000b809000000ba000000000f3048b805000000000000000f23c00f21f835010004000f23f80f005300364b0fc729360fc77c8ffd0f20c035000000400f22c0", 0x68}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "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", "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"}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2400000076001f"], 0x24}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m39.669628034s ago: executing program 4 (id=1519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x10001, 0x9}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m39.31894642s ago: executing program 4 (id=1522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 2m37.907062831s ago: executing program 4 (id=1527): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_IOCTL(r2, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x80, 0x4, 0x20800, 0xf3}}, 0x20) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) chmod(&(0x7f0000000100)='./file0\x00', 0x180) 2m22.645527761s ago: executing program 34 (id=1527): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_IOCTL(r2, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x80, 0x4, 0x20800, 0xf3}}, 0x20) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) chmod(&(0x7f0000000100)='./file0\x00', 0x180) 14.490707414s ago: executing program 1 (id=1916): socket$alg(0x26, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=r0, 0x12, 0x0, 0x8, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 11.68640159s ago: executing program 7 (id=1924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) syz_open_procfs(r3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000a001"]) 11.667838804s ago: executing program 6 (id=1925): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) connect$can_j1939(r0, &(0x7f0000000140), 0x18) sendmsg$can_j1939(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)="6dd8eed1e3", 0x5}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x2}}], 0x1, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000100)={0x3, 0x0, 0x98, &(0x7f0000000040)={0x2, 0x0, 0x5}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x1c1142) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) 9.588722693s ago: executing program 5 (id=1927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f00000002c0)) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000000d) r7 = open(0x0, 0x1, 0xc32a4cddd557707a) fallocate(r7, 0x0, 0x0, 0x9000f3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x80010, r7, 0x5000) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.480769816s ago: executing program 6 (id=1928): io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xffffffff, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4, 0x800000]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f00000001c0)={'full', 0x20, 0x7, 0x20, 0xfffda}, 0x2f) 8.38938562s ago: executing program 5 (id=1929): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) io_uring_setup(0x71b9, &(0x7f00000000c0)={0x0, 0xc63b, 0x0, 0x0, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f000048c000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) 8.363716382s ago: executing program 0 (id=1930): unshare(0x400) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000006480)=ANY=[@ANYBLOB="02c8201e001a00010004ff1600"], 0x23) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x109702, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x32d, 0x20a03}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) r5 = openat$mixer(0xffffff9c, &(0x7f00000001c0), 0x80002, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="50484f4e454f55540a4d4f4e49544f52202753796e7468272030303030303030303030303030303030303030320a53594e544820274d6173746572204361707475726527203030303030303030303030306b4b8ca79db17ef90a564d495820274361707475726520566f6c756d65272030303030303030303030303030303030303030300a4d4f4e4954"], 0xc1) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0044d03, &(0x7f0000000180)=0x3f) 8.040791634s ago: executing program 7 (id=1931): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x185c0caaa3fc5421, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 7.338679197s ago: executing program 5 (id=1932): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x185c0caaa3fc5421, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 7.279100824s ago: executing program 0 (id=1933): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, 0x0, 0x30002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) shutdown(r4, 0x1) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400"], 0x64}}, 0x0) 7.243472088s ago: executing program 6 (id=1934): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x1612, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="3df40100ff050000694957aa0000000000000069d7517efc0a4ab27d"], 0x34}}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400ffea7df0c054b60100000000000000000000000000010c0002800500cb438acac03fced19d0100000000003c0002802c00018014000300fc000000000000000000000001000000140000000000000000010c00028005000100000000"], 0x9c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x13ca, 0x0, &(0x7f0000001a80), 0x0}, 0x20) socket$alg(0x26, 0x5, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000000c0)="b8", 0x1) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) 6.874932675s ago: executing program 7 (id=1935): socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000275000/0x4000)=nil, 0x4000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0xae, &(0x7f0000000080)=ANY=[], 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) r2 = gettid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'veth1_to_team\x00', {}, 0x4}) 6.427253724s ago: executing program 1 (id=1936): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) sendmsg$alg(r1, 0x0, 0x14000012) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003a40)={0x2020}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value}, 0x10) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=@newchain={0x24, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044800}, 0x40881) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) 6.34477898s ago: executing program 5 (id=1937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, 0x0, &(0x7f0000000200)='\t', 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x5) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c000280040001"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r5) listen(0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 5.363551304s ago: executing program 6 (id=1938): io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xffffffff, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4, 0x800000]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, 0x0, 0x0) 5.266815412s ago: executing program 1 (id=1939): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) chroot(0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1d9}, 0x0, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118) clock_gettime(0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/147, 0x93) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004400)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd, 0x20010, 0xffffffffffffffff, 0x3000) io_uring_enter(r0, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 4.418002807s ago: executing program 5 (id=1940): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001}) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 3.88698787s ago: executing program 0 (id=1941): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0x4, &(0x7f0000000180)={0x5, 0x8000000000000001}, &(0x7f00000001c0)) r4 = epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {}, 0x2c, {[{@access_user}, {@msize={'msize', 0x3d, 0x7ff}}, {@cachetag={'cachetag', 0x3d, '/proc/stat\x00'}}, {@cachetag={'cachetag', 0x3d, '9\x9e\x9f'}}, {@access_any}, {@cache_none}, {@nodevmap}, {@cache_none}, {@version_u}]}}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000340)=0x1) 3.639018834s ago: executing program 1 (id=1942): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 2.693977147s ago: executing program 0 (id=1943): unshare(0x400) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000006480)=ANY=[@ANYBLOB="02c8201e001a00010004ff1600"], 0x23) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x109702, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x32d, 0x20a03}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) r5 = openat$mixer(0xffffff9c, &(0x7f00000001c0), 0x80002, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="50484f4e454f55540a4d4f4e49544f52202753796e7468272030303030303030303030303030303030303030320a53594e544820274d6173746572204361707475726527203030303030303030303030306b4b8ca79db17ef90a564d495820274361707475726520566f6c756d65272030303030303030303030303030303030303030300a4d4f4e4954"], 0xc1) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0044d03, &(0x7f0000000180)=0x3f) 2.656274606s ago: executing program 6 (id=1944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000080000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1}) 2.534667776s ago: executing program 7 (id=1945): io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xffffffff, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4, 0x800000]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f00000001c0)={'full', 0x20, 0x7, 0x20, 0xfffda}, 0x2f) 1.923767262s ago: executing program 0 (id=1946): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000001000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000000)={0x80, 0x4, 0x4, 0xe05, 0xe3, 0x80}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r4, 0x90004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x90004) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) chmod(0x0, 0x23f) 1.62216193s ago: executing program 1 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x185c0caaa3fc5421, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 1.574130693s ago: executing program 6 (id=1948): io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$vsock_stream(r0, &(0x7f0000009c80)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x4, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) r4 = semget$private(0x0, 0x5, 0x0) semop(r4, &(0x7f0000000600)=[{0x3, 0xfff7, 0x1000}, {0x0, 0x6, 0x1800}], 0x2) semop(r4, &(0x7f00000000c0)=[{0x3, 0xa78c, 0x1000}], 0x1) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000380)=[0x4, 0x7, 0xb, 0x10]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 848.086912ms ago: executing program 7 (id=1949): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = io_uring_setup(0x1612, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000140001000000", @ANYBLOB="3df40100ff050000694957aa0000000000000069d7517efc0a4ab27d"], 0x34}}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400ffea7df0c054b60100000000000000000000000000010c0002800500cb438acac03fced19d0100000000003c0002802c00018014000300fc000000000000000000000001000000140000000000000000010c00028005000100000000"], 0x9c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x13ca, 0x0, &(0x7f0000001a80), 0x0}, 0x20) socket$alg(0x26, 0x5, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000000c0)="b8", 0x1) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) 433.534813ms ago: executing program 0 (id=1950): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f00000004c0)="510b80e23457fa21310f5865cb5f41a65a7bcf5e7499e09aa2162eb39667ff38a253313bab2fab95f6e9797a82c473a8a2d6f7c8387e680b32201cff514d9bd528742b89d87a8f930869", 0x4a, 0x0) syncfs(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x94, 0x30, 0xb, 0x70bd2b, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x7}, @TCA_CT_LABELS={0x14, 0x7, "e915b100"}, @TCA_CT_PARMS={0x18, 0x1, {0x10001, 0x8, 0x2, 0x516, 0x8}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d8868359ac759cf3ea39e83e1697e5be"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x45, 0x6, "c5077a99c2fcd6556aa0a3d3773f632855a0f40fef0e6455fcac4544f1eee3"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x94}}, 0x30044800) 417.688169ms ago: executing program 5 (id=1951): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 227.119675ms ago: executing program 1 (id=1952): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = dup(r2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) write$proc_mixer(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITO'], 0x86) socket(0xa, 0x1, 0x0) setregid(0x0, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x2802, 0x0) dup3(r5, r0, 0x0) 0s ago: executing program 7 (id=1953): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x17, "30af0128ffffb70800000000000000ff7800"}) r6 = dup(r0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0xff) kernel console output (not intermixed with test programs): ound no endpoint descriptor for endpoint 81 [ 572.774989][ T5870] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 572.783833][ T5870] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 572.795014][ T5870] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 572.809672][ T5870] usb 5-1: USB disconnect, device number 14 [ 572.836167][ T5870] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 572.875202][ T3079] usb 3-1: Using ep0 maxpacket: 32 [ 572.880577][ T5870] keyspan 5-1:0.133: device disconnected [ 572.914425][ T3079] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 572.946154][ T3079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.078258][ T3079] usb 3-1: Product: syz [ 573.601699][ T3079] usb 3-1: Manufacturer: syz [ 573.606544][ T3079] usb 3-1: SerialNumber: syz [ 573.994022][ T3079] usb 3-1: palm_os_4_probe - error -110 getting connection info [ 574.015455][ T3079] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 574.501151][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 574.501167][ T30] audit: type=1400 audit(2000000276.820:777): avc: denied { create } for pid=10848 comm="syz.4.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 574.538284][ T3079] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 574.551586][ T3079] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 574.566346][ T30] audit: type=1400 audit(2000000276.820:778): avc: denied { write } for pid=10848 comm="syz.4.963" path="socket:[26769]" dev="sockfs" ino=26769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 574.602886][ T30] audit: type=1400 audit(2000000276.830:779): avc: denied { read } for pid=10848 comm="syz.4.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 574.765269][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz.5.964'. [ 574.774243][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz.5.964'. [ 575.065237][ T3079] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 575.437425][ T3079] usb 1-1: unable to get BOS descriptor or descriptor too short [ 575.545201][ T3079] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.608917][ T3079] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 575.818980][ T3079] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 575.839039][ T3079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.230850][ T3079] usb 1-1: Product: syz [ 576.463474][ T3079] usb 1-1: Manufacturer: syz [ 576.485492][ T3079] usb 1-1: SerialNumber: syz [ 576.493808][ T30] audit: type=1400 audit(2000000279.210:780): avc: denied { mount } for pid=10867 comm="syz.4.967" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 576.516069][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.856389][T10891] netlink: 20 bytes leftover after parsing attributes in process `syz.5.971'. [ 577.135054][ T3079] usb 1-1: cannot find UAC_HEADER [ 577.222678][ T3079] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 577.247805][ T3079] usb 1-1: USB disconnect, device number 14 [ 577.335993][T10205] udevd[10205]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.746761][T10901] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 577.937841][ T3079] usb 3-1: USB disconnect, device number 14 [ 578.144519][T10907] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.972'. [ 578.442872][ T3079] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 578.535069][T10902] xt_CT: No such helper "syz1" [ 578.557364][ T3079] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 578.597505][ T3079] visor 3-1:1.0: device disconnected [ 578.607404][ T5821] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 578.629901][ T30] audit: type=1400 audit(2000000281.340:781): avc: denied { create } for pid=10913 comm="syz.0.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 578.806850][ T30] audit: type=1400 audit(2000000281.390:782): avc: denied { getopt } for pid=10913 comm="syz.0.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 578.896609][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 578.926283][T10920] 9pnet_fd: Insufficient options for proto=fd [ 579.224979][ T3079] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 579.388630][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.416058][T10922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.459680][ T5821] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 579.654693][ T5821] usb 2-1: config 1 has no interface number 1 [ 579.667694][ T3079] usb 3-1: Using ep0 maxpacket: 16 [ 579.685663][ T5821] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 579.774533][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.978'. [ 579.794544][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.978'. [ 580.224547][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.979'. [ 580.233775][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.979'. [ 580.237008][ T3079] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 580.540103][ T5821] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.568855][ T3079] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.589515][ T5821] usb 2-1: string descriptor 0 read error: -71 [ 580.599610][ T5821] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.608757][ T3079] usb 3-1: config 0 has no interfaces? [ 580.614413][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.616557][ T3079] usb 3-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 580.658811][ T5821] usb 2-1: can't set config #1, error -71 [ 580.666491][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 580.680513][ T5821] usb 2-1: USB disconnect, device number 14 [ 580.688822][ T3079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 580.699052][T10936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.779125][ T3079] usb 3-1: Product: syz [ 580.783322][ T3079] usb 3-1: Manufacturer: syz [ 580.814982][ T3079] usb 3-1: SerialNumber: syz [ 580.845557][ T3079] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 581.161018][T10947] lo speed is unknown, defaulting to 1000 [ 581.178147][T10947] lo speed is unknown, defaulting to 1000 [ 581.345139][ T30] audit: type=1326 audit(2000000283.830:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10940 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201498e969 code=0x7ffc0000 [ 581.469433][ T30] audit: type=1326 audit(2000000283.830:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10940 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f201498e969 code=0x7ffc0000 [ 581.493831][ T30] audit: type=1326 audit(2000000284.040:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10940 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201498e969 code=0x7ffc0000 [ 581.517653][ T30] audit: type=1326 audit(2000000284.040:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10940 comm="syz.5.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201498e969 code=0x7ffc0000 [ 581.605141][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 582.355490][ T30] audit: type=1400 audit(2000000284.680:787): avc: denied { watch watch_reads } for pid=10946 comm="syz.4.984" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 582.601129][T10945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.983'. [ 582.633801][ T3079] apple-mfi-fastcharge 3-1: USB disconnect, device number 15 [ 582.962998][T10968] bridge0: port 3(batadv0) entered disabled state [ 584.187584][ T3079] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 584.340588][T10968] bridge_slave_1: left allmulticast mode [ 584.352814][T10968] bridge_slave_1: left promiscuous mode [ 584.361860][T10968] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.371953][T10968] bridge_slave_0: left allmulticast mode [ 584.374008][T10975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.990'. [ 584.381474][T10968] bridge_slave_0: left promiscuous mode [ 584.420588][T10968] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.487214][ T3079] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 584.507076][ T3079] usb 2-1: config 0 has no interface number 0 [ 584.541994][ T3079] usb 2-1: config 0 interface 212 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 584.604702][ T5870] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 584.609974][ T3079] usb 2-1: config 0 interface 212 has no altsetting 0 [ 584.685320][ T3079] usb 2-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 584.708112][T10974] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.986'. [ 584.880532][ T3079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.955596][ T3079] usb 2-1: Product: syz [ 584.965716][ T5870] usb 6-1: unable to get BOS descriptor or descriptor too short [ 584.973436][ T3079] usb 2-1: Manufacturer: syz [ 584.988259][ T3079] usb 2-1: SerialNumber: syz [ 585.006591][ T5870] usb 6-1: not running at top speed; connect to a high speed hub [ 585.008676][ T3079] usb 2-1: config 0 descriptor?? [ 585.030840][ T5870] usb 6-1: config 17 has an invalid interface number: 8 but max is 1 [ 585.047868][ T5870] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 585.063588][T10973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 585.089678][ T5870] usb 6-1: config 17 has no interface number 0 [ 585.103538][ T5870] usb 6-1: config 17 interface 8 altsetting 6 has an endpoint descriptor with address 0x61, changing to 0x1 [ 585.119461][ T3079] HFC-S_USB 2-1:0.212: probe with driver HFC-S_USB failed with error -5 [ 585.139888][ T5870] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 585.174112][T10991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.993'. [ 585.197216][ T5870] usb 6-1: config 17 interface 8 has no altsetting 0 [ 585.208119][T10991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.993'. [ 585.223671][ T5870] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 585.243251][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.258950][ T5870] usb 6-1: Product: syz [ 585.263418][ T5870] usb 6-1: Manufacturer: syz [ 585.280898][ T5870] usb 6-1: SerialNumber: syz [ 585.429415][ T5871] usb 2-1: USB disconnect, device number 15 [ 585.435636][ T5869] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 585.542968][ T5870] usb 6-1: selecting invalid altsetting 0 [ 585.553497][ T5870] usb 6-1: 8:6 : no UAC_FORMAT_TYPE desc [ 585.644987][T11014] 9pnet_fd: Insufficient options for proto=fd [ 585.904989][ T5821] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 586.015064][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 586.035758][T11011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.998'. [ 586.044822][ T5870] usb 6-1: selecting invalid altsetting 0 [ 586.047363][ T5869] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 586.108517][ T5870] usb 6-1: USB disconnect, device number 9 [ 586.128952][ T5869] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 586.163996][ T5869] usb 5-1: config 0 has no interface number 0 [ 586.196777][T10205] udevd[10205]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.215023][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 586.222254][ T5869] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 586.252309][ T5821] usb 1-1: config index 0 descriptor too short (expected 8192, got 18) [ 586.273443][ T5821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.297042][ T5869] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 586.322471][ T5821] usb 1-1: config 0 has no interfaces? [ 586.350277][ T5869] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.54 [ 586.356841][ T5821] usb 1-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 586.388041][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.413099][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 586.423145][ T5821] usb 1-1: Product: syz [ 586.428206][ T5821] usb 1-1: Manufacturer: syz [ 586.432803][ T5869] usb 5-1: config 0 descriptor?? [ 586.484168][ T5821] usb 1-1: SerialNumber: syz [ 586.520650][ T5821] apple-mfi-fastcharge 1-1: config 0 descriptor?? [ 586.598950][T11034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1011'. [ 586.608075][T11034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1011'. [ 586.890745][T11035] random: crng reseeded on system resumption [ 587.558586][ T5869] usb 5-1: USB disconnect, device number 15 [ 588.761772][T11050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.827860][ T5821] apple-mfi-fastcharge 1-1: USB disconnect, device number 15 [ 589.195116][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1007'. [ 589.204328][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1007'. [ 593.389214][T11098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1020'. [ 593.554924][ T5869] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 594.246872][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 594.272428][ T5869] usb 2-1: not running at top speed; connect to a high speed hub [ 594.288997][ T5869] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 594.302412][ T5869] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 594.324898][ T5869] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 594.344858][ T5869] usb 2-1: config 2 has no interface number 0 [ 594.350971][ T5869] usb 2-1: config 2 has no interface number 1 [ 594.365226][ T5869] usb 2-1: config 2 interface 212 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.425238][ T5869] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 595.240033][T11118] x_tables: ip_tables: udp match: only valid for protocol 17 [ 595.400487][ T5869] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37729, setting to 64 [ 595.418845][ T5869] usb 2-1: config 2 interface 212 has no altsetting 0 [ 595.599354][ T5869] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 595.609744][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.641417][ T5869] usb 2-1: Product: syz [ 595.672105][ T5869] usb 2-1: Manufacturer: syz [ 595.690608][ T5869] usb 2-1: SerialNumber: syz [ 595.970328][ T5869] usb 2-1: USB disconnect, device number 16 [ 597.155059][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'. [ 598.245652][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 598.247220][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 599.574977][T10793] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 599.942053][T10793] usb 3-1: Using ep0 maxpacket: 32 [ 599.954235][T10793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.979565][T10793] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 599.996199][T10793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.014511][T10793] usb 3-1: Product: syz [ 600.024180][T10793] usb 3-1: Manufacturer: syz [ 600.040287][T10793] usb 3-1: SerialNumber: syz [ 600.069475][T10793] usb 3-1: config 0 descriptor?? [ 600.091580][T10793] usb 3-1: bad CDC descriptors [ 600.102735][T10793] usb 3-1: unsupported MDLM descriptors [ 600.134950][ T5869] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 600.304985][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 600.319259][ T5869] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 600.325217][ T3079] usb 3-1: USB disconnect, device number 16 [ 600.343418][ T5869] usb 1-1: config 0 has no interface number 0 [ 600.369203][ T5869] usb 1-1: config 0 interface 29 has no altsetting 0 [ 600.381027][ T5869] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 600.401747][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.421106][ T5869] usb 1-1: Product: syz [ 600.429263][ T5869] usb 1-1: Manufacturer: syz [ 600.434043][ T5869] usb 1-1: SerialNumber: syz [ 600.451514][ T5869] usb 1-1: config 0 descriptor?? [ 600.497725][T10793] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 600.674856][ T5869] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 600.747084][T11224] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1053'. [ 600.766098][T10793] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 600.774394][T10793] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 600.803237][T10793] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 600.838458][T10793] usb 2-1: config 220 has no interface number 2 [ 600.860867][T10793] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 600.894559][ T5869] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 600.927429][T10793] usb 2-1: config 220 interface 0 has no altsetting 0 [ 600.937794][ T5869] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 600.957674][T10793] usb 2-1: config 220 interface 76 has no altsetting 0 [ 601.009203][T10793] usb 2-1: config 220 interface 1 has no altsetting 0 [ 601.050571][T10793] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 601.072843][T10793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.093328][T10793] usb 2-1: Product: syz [ 601.098277][ T5869] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 601.116595][T10793] usb 2-1: Manufacturer: syz [ 601.122635][ T5869] usb 1-1: USB disconnect, device number 16 [ 601.133974][T10793] usb 2-1: SerialNumber: syz [ 601.398078][T10793] usb 2-1: selecting invalid altsetting 0 [ 601.449537][T10793] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 601.516230][T10793] usb 2-1: No valid video chain found. [ 601.591404][T10793] usb 2-1: selecting invalid altsetting 0 [ 601.618617][T10793] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 601.675374][T10793] usb 2-1: USB disconnect, device number 17 [ 602.067099][T11280] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1072'. [ 602.426839][ T5868] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 602.629003][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 602.681185][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 602.706853][ T5868] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 602.761250][ T5868] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 602.774241][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.805264][ T5868] usb 1-1: Product: syz [ 602.809451][ T5868] usb 1-1: Manufacturer: syz [ 602.814069][ T5868] usb 1-1: SerialNumber: syz [ 602.843202][ T5868] usb 1-1: config 0 descriptor?? [ 602.895032][ T30] audit: type=1400 audit(2000000305.610:788): avc: denied { getopt } for pid=11295 comm="syz.2.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 603.281378][T11311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1083'. [ 603.554330][T10793] usb 1-1: USB disconnect, device number 17 [ 606.869273][ T30] audit: type=1400 audit(2000000309.570:789): avc: denied { read } for pid=11361 comm="syz.4.1098" path="socket:[27640]" dev="sockfs" ino=27640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 607.352849][ T30] audit: type=1400 audit(2000000310.060:790): avc: denied { setopt } for pid=11377 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 608.501946][T11395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1108'. [ 609.923059][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 610.774995][T10793] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 611.032399][T10793] usb 3-1: Using ep0 maxpacket: 32 [ 611.053083][T10793] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.069275][T10793] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 611.078457][T10793] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.094204][T10793] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 611.103681][T10793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.111855][T10793] usb 3-1: Product: syz [ 611.129058][T10793] usb 3-1: Manufacturer: syz [ 611.154292][T10793] usb 3-1: SerialNumber: syz [ 611.170872][T10793] cdc_ncm 3-1:1.0: skipping garbage [ 611.180954][T10793] cdc_ncm 3-1:1.0: skipping garbage [ 611.193123][T10793] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 611.210787][T10793] cdc_ncm 3-1:1.0: bind() failure [ 611.885491][T10793] usb 3-1: USB disconnect, device number 17 [ 611.991611][T11458] netlink: 'syz.1.1133': attribute type 2 has an invalid length. [ 612.017809][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 612.053733][T11458] : entered promiscuous mode [ 614.152072][ T30] audit: type=1400 audit(2000000316.850:791): avc: denied { setopt } for pid=11481 comm="syz.5.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 614.254762][ T30] audit: type=1400 audit(2000000316.920:792): avc: denied { connect } for pid=11483 comm="syz.0.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 616.319344][T11513] usb usb9: usbfs: process 11513 (syz.1.1153) did not claim interface 6 before use [ 616.595209][ T3079] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 616.787044][ T3079] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 616.799881][ T3079] usb 1-1: config 0 has no interface number 0 [ 616.809395][ T3079] usb 1-1: config 0 interface 41 has no altsetting 0 [ 616.821477][ T3079] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 616.831413][ T3079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.842127][ T3079] usb 1-1: Product: syz [ 616.847065][ T3079] usb 1-1: Manufacturer: syz [ 616.851720][ T3079] usb 1-1: SerialNumber: syz [ 616.861560][ T3079] usb 1-1: config 0 descriptor?? [ 617.035143][ T5870] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 617.322841][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 617.349485][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 617.386793][ T5870] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 617.406141][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.414568][ T5870] usb 5-1: Product: syz [ 617.426496][ T5870] usb 5-1: Manufacturer: syz [ 617.432866][ T5870] usb 5-1: SerialNumber: syz [ 617.526780][ T3079] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 617.540773][ T3079] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 617.542804][ T5870] usb 5-1: config 0 descriptor?? [ 617.552833][ T3079] usb 1-1: USB disconnect, device number 18 [ 617.589568][ T5870] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 617.653205][T11537] : entered promiscuous mode [ 617.750753][T11516] usb usb1: usbfs: process 11516 (syz.2.1154) did not claim interface 0 before use [ 618.788134][ T3079] usb 5-1: USB disconnect, device number 16 [ 619.415533][ T5868] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 619.612678][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 619.665231][T11573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1177'. [ 619.674325][T11573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1177'. [ 619.891794][ T5868] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 619.902083][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.021599][ T5868] usb 6-1: config 0 descriptor?? [ 620.913878][ T5868] logitech 0003:046D:C295.0003: ignoring exceeding usage max [ 621.146615][ T5868] logitech 0003:046D:C295.0003: ignoring exceeding usage max [ 621.154030][ T5868] logitech 0003:046D:C295.0003: usage index exceeded [ 621.230382][ T5868] logitech 0003:046D:C295.0003: item 0 0 2 2 parsing failed [ 621.240997][ T5868] logitech 0003:046D:C295.0003: parse failed [ 621.252832][ T5868] logitech 0003:046D:C295.0003: probe with driver logitech failed with error -22 [ 621.335591][ T5868] usb 6-1: USB disconnect, device number 10 [ 621.981326][ T30] audit: type=1400 audit(2000000324.700:793): avc: denied { read } for pid=11605 comm="syz.2.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 622.033617][ T30] audit: type=1400 audit(2000000324.750:794): avc: denied { write } for pid=11605 comm="syz.2.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 622.154960][ T5870] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 622.166987][ T5869] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 622.231422][T11611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1189'. [ 622.240620][T11611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1189'. [ 622.497446][ T5870] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 622.508578][ T5869] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.524486][ T5869] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 622.533854][ T5870] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 622.564585][ T5869] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 622.577759][ T5870] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 622.590509][ T5869] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.600482][ T5870] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 191, setting to 64 [ 622.612038][ T5869] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 622.624961][ T5870] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 622.634450][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.642865][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.654449][ T5869] hub 2-1:1.0: bad descriptor, ignoring hub [ 622.660995][ T5869] hub 2-1:1.0: probe with driver hub failed with error -5 [ 622.670713][T11602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 622.679816][ T5869] cdc_wdm 2-1:1.0: skipping garbage [ 622.685371][T11602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 622.693076][ T5869] cdc_wdm 2-1:1.0: skipping garbage [ 622.705986][ T5870] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 622.718070][ T5869] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 622.726832][ T5869] cdc_wdm 2-1:1.0: Unknown control protocol [ 622.863749][ T30] audit: type=1400 audit(2000000325.580:795): avc: denied { read write } for pid=11603 comm="syz.1.1187" name="cdc-wdm0" dev="devtmpfs" ino=3051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 622.895757][ T30] audit: type=1400 audit(2000000325.580:796): avc: denied { open } for pid=11603 comm="syz.1.1187" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 622.924906][ T5870] usb 5-1: USB disconnect, device number 17 [ 623.802284][T11629] ip6_vti0: entered promiscuous mode [ 624.006176][ T5869] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 624.198165][ T5869] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 624.218107][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.227097][ T5869] usb 1-1: Product: syz [ 624.231353][ T5869] usb 1-1: Manufacturer: syz [ 624.238247][ T5869] usb 1-1: SerialNumber: syz [ 624.258481][ T5869] usb 1-1: config 0 descriptor?? [ 624.435106][ T5868] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 624.460554][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1201'. [ 624.469865][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1201'. [ 624.620898][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.664186][ T5868] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 624.698997][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.723171][ T5868] usb 5-1: config 0 descriptor?? [ 624.742942][ T5868] xbox_remote_probe: Unexpected endpoint_in [ 624.745403][ T5869] usb 1-1: Firmware: major: 0, minor: 97, hardware type: ATUSB (0) [ 624.749850][ T5868] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 624.950276][ T5869] usb 1-1: failed to fetch extended address, random address set [ 625.004450][T11655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 625.011733][T11655] IPv6: NLM_F_CREATE should be set when creating new route [ 625.020463][ T5870] usb 5-1: USB disconnect, device number 18 [ 625.036361][ T5869] usb 1-1: USB disconnect, device number 19 [ 625.436104][T11668] 9pnet_fd: Insufficient options for proto=fd [ 625.694980][ T5868] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 625.905539][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 625.933104][ T5868] usb 6-1: config index 0 descriptor too short (expected 8192, got 18) [ 625.962366][T11676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1212'. [ 625.968193][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.982076][T11676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1212'. [ 626.011708][ T5868] usb 6-1: config 0 has no interfaces? [ 626.053074][ T5868] usb 6-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 626.143372][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 626.230252][ T5868] usb 6-1: Product: syz [ 626.269641][ T5868] usb 6-1: Manufacturer: syz [ 626.274478][ T5868] usb 6-1: SerialNumber: syz [ 626.322135][ T5868] apple-mfi-fastcharge 6-1: config 0 descriptor?? [ 627.048793][T11575] usb 2-1: USB disconnect, device number 18 [ 627.059115][T11604] cdc_wdm 2-1:1.0: Error autopm - -16 [ 627.204189][T11695] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 627.211495][T11695] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 627.525245][T11575] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 627.554434][T11712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1225'. [ 627.563824][T11712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1225'. [ 627.706492][T11575] usb 2-1: Using ep0 maxpacket: 16 [ 627.739877][T11575] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 627.749721][T11575] usb 2-1: config 0 has no interface number 0 [ 627.760688][T11575] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 627.772275][T11575] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 627.795915][T11575] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 627.806110][T11575] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 627.814323][T11575] usb 2-1: Product: syz [ 627.819592][T11575] usb 2-1: SerialNumber: syz [ 627.888614][T11575] usb 2-1: config 0 descriptor?? [ 627.941741][T11575] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 627.959595][T11575] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input58 [ 628.273068][ T5869] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 628.447990][ T5868] apple-mfi-fastcharge 6-1: USB disconnect, device number 11 [ 628.504879][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 628.565165][ T5869] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 628.586318][ T5869] usb 5-1: config 0 has no interface number 0 [ 628.603520][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 628.606245][ T5869] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 628.636748][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.637634][T11727] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 628.654070][ T5869] usb 5-1: Product: syz [ 628.663139][ T5869] usb 5-1: Manufacturer: syz [ 628.672785][ T5869] usb 5-1: SerialNumber: syz [ 628.701118][ T5869] usb 5-1: config 0 descriptor?? [ 628.719647][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1233'. [ 628.720194][ T5869] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 628.745404][ T5869] usb 5-1: selecting invalid altsetting 1 [ 628.751399][ T5869] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 628.773796][ T5869] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 628.793248][ T5869] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 628.811143][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 628.822774][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 628.829935][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 628.837108][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 628.844249][ T5870] usb 2-1: USB disconnect, device number 19 [ 628.850207][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 628.850228][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 628.872697][ T5869] usb 5-1: media controller created [ 628.925967][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 628.979659][ T5870] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 628.991094][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1235'. [ 629.017030][ T5869] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 629.030697][ T5869] zl10353_read_register: readreg error (reg=127, ret==-71) [ 629.045353][ T5869] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 629.191621][ T5869] usb 5-1: USB disconnect, device number 19 [ 629.224619][T11737] block device autoloading is deprecated and will be removed. [ 629.601096][T11751] random: crng reseeded on system resumption [ 629.662756][T11751] Restarting kernel threads ... [ 629.681444][T11751] Done restarting kernel threads. [ 629.785112][ T5869] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 629.944910][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 629.956398][ T5869] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 629.974881][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.987705][ T5869] pvrusb2: Hardware description: Terratec Grabster AV400 [ 630.005079][ T5869] pvrusb2: ********** [ 630.009091][ T5869] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 630.030270][ T5869] pvrusb2: Important functionality might not be entirely working. [ 630.038433][ T5869] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 630.071208][ T5869] pvrusb2: ********** [ 630.201392][ T2337] pvrusb2: Invalid write control endpoint [ 630.360742][ T2337] pvrusb2: Invalid write control endpoint [ 630.385247][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 630.420683][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 630.448282][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 630.478941][ T2337] pvrusb2: Device being rendered inoperable [ 630.501180][ T5870] usb 6-1: USB disconnect, device number 12 [ 630.519723][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 630.535202][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 630.545867][ T2337] pvrusb2: Attached sub-driver cx25840 [ 630.551379][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 630.554999][ T5869] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 630.561539][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 630.774877][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 630.825957][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.841087][T11784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1255'. [ 630.967595][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 630.984907][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 631.000233][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 631.021631][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 631.086539][ T5869] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 631.098898][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 631.107596][ T5869] usb 1-1: Product: syz [ 631.115167][ T5869] usb 1-1: Manufacturer: syz [ 631.133915][ T5869] usb 1-1: SerialNumber: syz [ 631.158515][ T5869] usb 1-1: config 0 descriptor?? [ 631.393609][ T5869] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 631.410079][ T5869] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 631.597189][ T5869] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 631.611610][ T5869] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 631.634106][ T5869] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 631.678206][ T5869] usb 1-1: USB disconnect, device number 20 [ 631.862610][T11802] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 633.638120][T11823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1269'. [ 634.667282][T11850] input: syz1 as /devices/virtual/input/input60 [ 634.944659][T11867] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1285'. [ 634.955477][ T5870] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 635.766474][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 635.793719][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1288'. [ 635.802916][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1288'. [ 635.834438][ T5870] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 635.883264][ T5870] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 635.913409][ T5870] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 635.971696][ T5870] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.055509][ T5870] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.074922][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.514967][ T5870] usb 3-1: GET_CAPABILITIES returned 0 [ 636.544955][ T5870] usbtmc 3-1:16.0: can't read capabilities [ 636.613906][ T30] audit: type=1400 audit(2000000339.330:797): avc: denied { append } for pid=11900 comm="syz.4.1298" name="file2" dev="tmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 636.682450][ T5870] usb 3-1: USB disconnect, device number 18 [ 637.164691][ T30] audit: type=1400 audit(2000000339.880:798): avc: denied { name_connect } for pid=11920 comm="syz.0.1306" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 637.360904][ T30] audit: type=1400 audit(2000000340.080:799): avc: denied { getopt } for pid=11920 comm="syz.0.1306" lport=40468 faddr=::ffff:100.1.1.1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 637.975464][ T30] audit: type=1400 audit(2000000340.700:800): avc: denied { ioctl } for pid=11938 comm="syz.4.1311" path="socket:[30997]" dev="sockfs" ino=30997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 638.649104][T11945] syzkaller1: entered promiscuous mode [ 638.654602][T11945] syzkaller1: entered allmulticast mode [ 639.105223][ T5870] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 639.706344][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 639.728721][ T5870] usb 6-1: config 1 has an invalid interface number: 242 but max is 0 [ 639.749249][ T5870] usb 6-1: config 1 has no interface number 0 [ 639.776032][ T5870] usb 6-1: config 1 interface 242 has no altsetting 0 [ 639.786774][ T5870] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 639.798781][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.814914][ T5870] usb 6-1: Product: syz [ 639.825055][ T5870] usb 6-1: Manufacturer: syz [ 639.832470][ T5870] usb 6-1: SerialNumber: syz [ 640.654545][ T5870] aqc111 6-1:1.242: probe with driver aqc111 failed with error -22 [ 640.671107][ T5870] usb 6-1: USB disconnect, device number 13 [ 640.847959][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'. [ 641.064895][T11575] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 641.165155][ T5870] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 641.253265][T11575] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 641.266911][T11575] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.302024][T11575] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 641.311433][T11575] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 641.321707][T11575] usb 2-1: Manufacturer: syz [ 641.332741][T11575] usb 2-1: config 0 descriptor?? [ 641.335425][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 641.356046][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.377786][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.400301][ T5870] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 641.409532][ T30] audit: type=1400 audit(2000000344.120:801): avc: denied { read } for pid=12028 comm="syz.0.1349" path="socket:[30476]" dev="sockfs" ino=30476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 641.434539][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.445398][ T5870] usb 6-1: config 0 descriptor?? [ 641.518934][T12034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.574972][T10793] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 641.755659][T10793] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 641.764722][T10793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 641.784050][T10793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 641.809549][T11575] cougar 0003:060B:700A.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 641.819942][T10793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 641.832507][T10793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 641.841806][T10793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 641.880644][T10793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 641.888525][T10793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 641.903323][T10793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 641.916078][ T5870] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.0005/input/input64 [ 641.947694][T10793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 641.955438][T10793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 641.964609][T10793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 641.984877][T10793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 642.002585][T10793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.040306][T10793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.077213][ T5870] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 642.093319][T11575] usb 2-1: USB disconnect, device number 20 [ 642.114275][T10793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 642.131220][T12041] fido_id[12041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 642.164452][T10793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.176483][ T5870] usb 6-1: USB disconnect, device number 14 [ 642.183690][T10793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.208195][T10793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 642.219024][T10793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.230626][T10793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.244052][T10793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 642.274454][T10793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.287016][T10793] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.305856][T10793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 642.322946][T12044] fido_id[12044]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 642.324318][T10793] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 642.356623][T10793] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 642.370464][T10793] usb 5-1: Product: syz [ 642.375434][T10793] usb 5-1: Manufacturer: syz [ 642.380084][T10793] usb 5-1: SerialNumber: syz [ 642.408346][T10793] usb 5-1: config 0 descriptor?? [ 642.422683][T10793] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 642.724313][ T5869] usb 5-1: USB disconnect, device number 20 [ 642.733470][T10793] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 642.744484][ T5869] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 642.946425][T10793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.994851][T10793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.038106][T10793] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 643.093917][T10793] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 643.117408][T10793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.151758][T10793] usb 3-1: config 0 descriptor?? [ 643.347477][ T5870] kernel write not supported for file /media1 (pid: 5870 comm: kworker/0:4) [ 643.739669][T10793] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 643.779374][T10793] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 643.940478][T12079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 644.251353][ T5870] usb 3-1: USB disconnect, device number 19 [ 644.535981][T12092] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1372'. [ 645.258185][ T30] audit: type=1400 audit(2000000347.980:802): avc: denied { nosuid_transition } for pid=12100 comm="syz.2.1377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 645.279313][ T30] audit: type=1400 audit(2000000347.990:803): avc: denied { transition } for pid=12100 comm="syz.2.1377" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 645.328419][ T30] audit: type=1400 audit(2000000347.990:804): avc: denied { entrypoint } for pid=12100 comm="syz.2.1377" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=195 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 645.370373][ T30] audit: type=1400 audit(2000000347.990:805): avc: denied { share } for pid=12100 comm="syz.2.1377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 645.424464][ T30] audit: type=1400 audit(2000000347.990:806): avc: denied { noatsecure } for pid=12100 comm="syz.2.1377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 645.860696][T12120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1381'. [ 645.870099][T12120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1381'. [ 646.550039][T12137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.682315][ T193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.734984][ T193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 647.208894][ T193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.225003][ T193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 647.329834][ T193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.350775][ T193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 647.550573][ T193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.579540][ T193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 648.180830][T11896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 648.190626][T11896] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 648.209440][T11896] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 648.219633][T11896] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 648.231585][T11896] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 648.289364][ T30] audit: type=1400 audit(2000000351.010:807): avc: denied { remount } for pid=12169 comm="syz.1.1403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 648.289397][T12170] tracefs: Invalid uid '0x00000000ffffffff' [ 648.322275][T12167] lo speed is unknown, defaulting to 1000 [ 648.397670][ T30] audit: type=1400 audit(2000000351.120:808): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 648.645108][T10793] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 648.823461][T10793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.844912][T10793] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 648.870103][T10793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.034441][T10793] usb 5-1: config 0 descriptor?? [ 649.445063][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 649.687903][ T193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.697846][ T193] bond_slave_0: left allmulticast mode [ 649.787107][T10793] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 649.795859][ T193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.826109][T10793] playstation 0003:054C:0BA0.0007: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 649.852222][ T193] bond_slave_1: left allmulticast mode [ 649.874426][ T193] bond0 (unregistering): Released all slaves [ 649.914273][T10793] playstation 0003:054C:0BA0.0007: Failed to retrieve feature with reportID 18: -71 [ 649.942695][T12167] lo speed is unknown, defaulting to 1000 [ 649.955141][T10793] playstation 0003:054C:0BA0.0007: Failed to retrieve DualShock4 pairing info: -71 [ 649.989862][T10793] playstation 0003:054C:0BA0.0007: Failed to get MAC address from DualShock4 [ 650.012460][T10793] playstation 0003:054C:0BA0.0007: Failed to create dualshock4. [ 650.056313][T10793] playstation 0003:054C:0BA0.0007: probe with driver playstation failed with error -71 [ 650.115803][T10793] usb 5-1: USB disconnect, device number 21 [ 650.328087][ T5824] Bluetooth: hci1: command tx timeout [ 650.644227][T12221] bridge0: entered promiscuous mode [ 650.772744][T12221] bridge0: left promiscuous mode [ 650.858191][ T3079] kernel write not supported for file [eventfd] (pid: 3079 comm: kworker/1:2) [ 653.106502][ T193] hsr_slave_0: left promiscuous mode [ 653.134862][ T5824] Bluetooth: hci1: command tx timeout [ 653.225711][ T5824] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 653.261307][ T193] hsr_slave_1: left promiscuous mode [ 653.283147][ T193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.295645][ T193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.348076][ T193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.372523][ T193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.383649][T12262] input: syz0 as /devices/virtual/input/input72 [ 653.427273][ T193] veth0_macvtap: left allmulticast mode [ 653.434605][ T193] veth1_macvtap: left promiscuous mode [ 653.443129][ T193] veth0_macvtap: left promiscuous mode [ 653.449652][ T193] veth1_vlan: left promiscuous mode [ 653.473467][ T193] veth0_vlan: left promiscuous mode [ 653.911536][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1431'. [ 655.206294][ T5824] Bluetooth: hci1: command tx timeout [ 655.323514][ T5824] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 655.498743][T11575] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 655.661168][ T193] team0 (unregistering): Port device team_slave_1 removed [ 655.684962][T11575] usb 6-1: Using ep0 maxpacket: 16 [ 655.746630][T11575] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.758788][T11575] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.772165][T11575] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 655.783877][T11575] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.912156][T11575] usb 6-1: config 0 descriptor?? [ 655.957577][ T193] team0 (unregistering): Port device team_slave_0 removed [ 656.304964][ T3079] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 656.325894][T12290] sit1: entered allmulticast mode [ 656.348908][T11575] hid (null): unknown global tag 0xe [ 656.376563][T11575] macally 0003:060B:0001.0008: unknown main item tag 0x1 [ 656.383646][T11575] macally 0003:060B:0001.0008: unknown global tag 0xe [ 656.393366][T11575] macally 0003:060B:0001.0008: item 0 0 1 14 parsing failed [ 656.399883][T12167] chnl_net:caif_netlink_parms(): no params data found [ 656.402025][T11575] macally 0003:060B:0001.0008: probe with driver macally failed with error -22 [ 656.476762][ T3079] usb 1-1: Using ep0 maxpacket: 16 [ 656.487515][ T3079] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 656.497910][ T3079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.531535][ T3079] usb 1-1: config 0 descriptor?? [ 656.696778][T10793] usb 6-1: USB disconnect, device number 15 [ 656.857156][T12167] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.879854][T12167] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.897992][T12167] bridge_slave_0: entered allmulticast mode [ 656.916304][T12167] bridge_slave_0: entered promiscuous mode [ 656.940300][T12167] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.952441][ T193] IPVS: stop unused estimator thread 0... [ 656.966270][T12167] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.984094][T12167] bridge_slave_1: entered allmulticast mode [ 657.001717][T12167] bridge_slave_1: entered promiscuous mode [ 657.061058][ T3079] asus 0003:0B05:1822.0009: unknown main item tag 0x0 [ 657.077469][ T3079] asus 0003:0B05:1822.0009: unknown main item tag 0x0 [ 657.084322][ T3079] asus 0003:0B05:1822.0009: unknown main item tag 0x0 [ 657.091533][ T3079] asus 0003:0B05:1822.0009: unknown main item tag 0x0 [ 657.098767][ T3079] asus 0003:0B05:1822.0009: unknown main item tag 0x0 [ 657.285891][ T5824] Bluetooth: hci1: command tx timeout [ 657.307162][ T3079] asus 0003:0B05:1822.0009: hidraw0: USB HID v1.01 Device [HID 0b05:1822] on usb-dummy_hcd.0-1/input0 [ 657.526889][ T3079] asus 0003:0B05:1822.0009: Asus input not registered [ 657.537073][ T3079] asus 0003:0B05:1822.0009: probe with driver asus failed with error -12 [ 657.548841][ T3079] usb 1-1: USB disconnect, device number 21 [ 657.633835][T12167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.658395][ T5824] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 657.681636][T12167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.781305][T12330] fido_id[12330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 658.029771][T12167] team0: Port device team_slave_0 added [ 658.059410][T12167] team0: Port device team_slave_1 added [ 658.547255][T12167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.567422][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.642082][T12167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.660323][T12349] netlink: 'syz.4.1449': attribute type 3 has an invalid length. [ 658.674577][T12349] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1449'. [ 658.699172][T12167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.706481][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.732912][T12167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.895574][T12359] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1453'. [ 658.905425][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 658.909060][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1453'. [ 658.923681][T12167] hsr_slave_0: entered promiscuous mode [ 658.936407][T12167] hsr_slave_1: entered promiscuous mode [ 658.949217][T12167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.011687][T12361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1452'. [ 659.135119][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 659.216056][T12167] Cannot create hsr debugfs directory [ 659.734937][ T30] audit: type=1400 audit(2000000362.440:809): avc: denied { execute } for pid=12371 comm="syz.4.1456" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 659.968764][T12167] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 660.019316][T12167] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 660.049416][T12167] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 660.097844][T12167] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 660.389062][T12167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.431062][T12167] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.465074][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.472238][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.680641][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.687808][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.698295][ T30] audit: type=1400 audit(2000000363.420:810): avc: denied { sendto } for pid=3079 comm="kworker/1:2" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 660.717513][T12167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 660.720286][ C0] vkms_vblank_simulate: vblank timer overrun [ 660.770708][T12167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.985581][ T30] audit: type=1400 audit(2000000364.680:811): avc: denied { name_connect } for pid=12418 comm="syz.0.1467" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 662.323142][ T30] audit: type=1400 audit(2000000365.040:812): avc: denied { write } for pid=12418 comm="syz.0.1467" lport=36869 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 662.596949][T12167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.747107][ T30] audit: type=1400 audit(2000000365.470:813): avc: denied { bind } for pid=12443 comm="syz.0.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 663.242619][T12464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1477'. [ 663.251883][T12464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1477'. [ 663.277216][T12466] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 663.277254][T12167] veth0_vlan: entered promiscuous mode [ 663.300178][T12167] veth1_vlan: entered promiscuous mode [ 663.427346][T12167] veth0_macvtap: entered promiscuous mode [ 663.490178][T12167] veth1_macvtap: entered promiscuous mode [ 663.617219][T12167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.635641][T12479] input: syz1 as /devices/virtual/input/input74 [ 663.647756][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 663.668453][T12167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.710637][T12167] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.744887][T12167] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.753616][T12167] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.763260][T12167] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.827678][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 663.842210][ T9] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 663.861076][ T9] usb 1-1: config 0 has no interface number 0 [ 663.891614][ T9] usb 1-1: config 0 interface 86 altsetting 29 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 663.936172][ T9] usb 1-1: config 0 interface 86 altsetting 29 has an endpoint descriptor with address 0x2D, changing to 0xD [ 663.967540][ T3079] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 663.974313][ T9] usb 1-1: config 0 interface 86 altsetting 29 endpoint 0xD has invalid maxpacket 61412, setting to 64 [ 664.023355][ T9] usb 1-1: config 0 interface 86 altsetting 29 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 664.057851][ T9] usb 1-1: config 0 interface 86 has no altsetting 0 [ 664.078959][ T9] usb 1-1: New USB device found, idVendor=08e3, idProduct=0102, bcdDevice=68.7d [ 664.097450][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.118750][ T9] usb 1-1: Product: syz [ 664.129400][ T9] usb 1-1: Manufacturer: syz [ 664.160320][ T5943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.179046][ T9] usb 1-1: SerialNumber: syz [ 664.179653][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.195756][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.633082][T12486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1484'. [ 664.642134][T12486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1484'. [ 664.652306][ T3079] usb 6-1: Using ep0 maxpacket: 32 [ 664.662460][ T5943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.668356][ T3079] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 664.678511][ T9] usb 1-1: config 0 descriptor?? [ 664.698045][ T3079] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 664.709713][ T3079] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 664.734255][ T30] audit: type=1400 audit(2000000367.450:814): avc: denied { mounton } for pid=12167 comm="syz-executor" path="/root/syzkaller.PmQp42/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 664.737869][ T3079] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 664.761947][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.791521][ T3079] usb 6-1: config 0 interface 0 has no altsetting 0 [ 664.888641][ T3079] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 664.901418][ T3079] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 664.946583][ T9] cxacru 1-1:0.86: usbatm_usb_probe: bind failed: -19! [ 664.977695][ T3079] usb 6-1: Product: syz [ 664.981885][ T3079] usb 6-1: Manufacturer: syz [ 665.004572][ T9] usb 1-1: USB disconnect, device number 22 [ 665.012574][ T30] audit: type=1400 audit(2000000367.510:815): avc: denied { mounton } for pid=12167 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 665.017801][ T3079] usb 6-1: SerialNumber: syz [ 665.036501][ C0] vkms_vblank_simulate: vblank timer overrun [ 665.145868][ T3079] usb 6-1: config 0 descriptor?? [ 665.161940][ T3079] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 665.216645][ T3079] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 665.245192][ T5868] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 665.403479][ T5868] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 665.411867][ T5868] usb 2-1: config 0 has no interface number 0 [ 665.420228][ T5868] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 665.435043][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 665.443999][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.470947][ T5868] usb 2-1: Product: syz [ 665.480467][ T5868] usb 2-1: Manufacturer: syz [ 665.488459][ T5868] usb 2-1: SerialNumber: syz [ 665.505724][ T5868] usb 2-1: config 0 descriptor?? [ 665.617392][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.635790][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.657519][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1488'. [ 665.666662][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1488'. [ 665.703082][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 665.728879][ T5868] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 665.752378][ T24] usb 5-1: New USB device strings: Mfr=104, Product=1, SerialNumber=0 [ 665.777136][ T24] usb 5-1: Product: syz [ 665.781326][ T24] usb 5-1: Manufacturer: syz [ 665.795840][ T5868] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 665.828687][ T5868] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 665.876600][ T24] usb 5-1: config 0 descriptor?? [ 665.928725][ T5868] usb 2-1: media controller created [ 666.249912][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 666.348181][ T5868] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 666.503848][ T5868] usb 2-1: USB disconnect, device number 21 [ 666.827641][ T24] uclogic 0003:256C:006D.000B: interface is invalid, ignoring [ 666.875003][ T6526] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 667.080729][ T6526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 667.086746][ T9] usb 5-1: USB disconnect, device number 22 [ 667.105941][ T6526] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 667.119738][T12544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.141499][ T6526] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 667.224305][ T6526] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 667.245197][ T5868] usb 6-1: USB disconnect, device number 16 [ 667.251147][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 667.380748][ T6526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.394316][ T5868] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 667.415597][ T6526] usb 1-1: Product: syz [ 667.420985][ T6526] usb 1-1: Manufacturer: syz [ 667.434175][ T6526] usb 1-1: SerialNumber: syz [ 667.455044][ T6526] usb 1-1: config 0 descriptor?? [ 667.460544][T12533] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 667.478238][T12533] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 667.540197][ T6526] usb 1-1: ucan: probing device on interface #0 [ 668.781187][ T6526] ucan 1-1:0.0: probe with driver ucan failed with error -22 [ 668.934379][T10793] usb 1-1: USB disconnect, device number 23 [ 669.165055][ T6526] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 669.325178][ T6526] usb 6-1: Using ep0 maxpacket: 16 [ 669.331996][ T6526] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 669.341872][ T6526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.374178][ T6526] usb 6-1: config 0 descriptor?? [ 669.398444][ T6526] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 669.694214][ T30] audit: type=1800 audit(2000000372.410:816): pid=12581 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1503" name="/" dev="fuse" ino=0 res=0 errno=0 [ 670.116613][T10793] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 670.144489][T10793] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 670.185596][T10793] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0 [ 670.249465][T10793] hid-generic 0000:0004:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 670.796836][T12625] fido_id[12625]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 671.611515][ T6526] gspca_sonixj: reg_r err -71 [ 671.616510][ T6526] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 671.636558][ T6526] usb 6-1: USB disconnect, device number 17 [ 672.291529][ T30] audit: type=1326 audit(2000000375.010:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12661 comm="syz.0.1521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa6e18e969 code=0x0 [ 672.322262][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 673.245039][ T6526] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 673.275864][ T30] audit: type=1400 audit(2000000375.990:818): avc: denied { read write } for pid=12688 comm="syz.4.1527" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 673.335224][ T30] audit: type=1400 audit(2000000376.000:819): avc: denied { open } for pid=12688 comm="syz.4.1527" path="/297/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 673.417280][ T6526] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 673.514437][ T6526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.523654][ T6526] usb 2-1: Product: syz [ 673.532399][ T6526] usb 2-1: Manufacturer: syz [ 673.537092][ T6526] usb 2-1: SerialNumber: syz [ 673.553092][ T6526] usb 2-1: config 0 descriptor?? [ 673.575540][ T6526] usb 2-1: selecting invalid altsetting 3 [ 673.581622][ T6526] comedi comedi0: could not set alternate setting 3 in high speed [ 673.600429][ T6526] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 673.627718][ T6526] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 673.765711][T12703] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1531'. [ 673.813083][T10793] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 673.934994][T11575] usb 2-1: USB disconnect, device number 22 [ 674.096657][T10793] usb 1-1: config index 0 descriptor too short (expected 2084, got 36) [ 674.114166][T10793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.130639][T10793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.141622][T10793] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 674.158274][T10793] usb 1-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 674.169489][T10793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.184688][T10793] usb 1-1: config 0 descriptor?? [ 674.757891][T10793] itetech 0003:048D:8595.000D: reserved main item tag 0xd [ 674.787903][T10793] itetech 0003:048D:8595.000D: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.0-1/input0 [ 674.837841][T12712] netlink: 'syz.6.1533': attribute type 10 has an invalid length. [ 674.920212][T12712] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.934075][T12712] bond0: (slave team0): Enslaving as an active interface with an up link [ 674.986594][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1534'. [ 674.996845][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1534'. [ 675.303299][ T5870] usb 1-1: USB disconnect, device number 24 [ 675.424890][ T30] audit: type=1326 audit(2000000378.140:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12720 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77eb38e969 code=0x7ffc0000 [ 675.469375][ T30] audit: type=1326 audit(2000000378.170:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12720 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77eb38e969 code=0x7ffc0000 [ 675.494766][ T30] audit: type=1326 audit(2000000378.180:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12720 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77eb38e969 code=0x7ffc0000 [ 675.614211][ T30] audit: type=1326 audit(2000000378.180:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12720 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77eb38e969 code=0x7ffc0000 [ 675.719272][ T30] audit: type=1326 audit(2000000378.180:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12720 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77eb38e969 code=0x7ffc0000 [ 675.750269][ T30] audit: type=1326 audit(2000000378.180:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12720 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f77eb38e969 code=0x7ffc0000 [ 675.786587][ T30] audit: type=1326 audit(2000000378.180:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12720 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77eb38e969 code=0x7ffc0000 [ 676.897911][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1542'. [ 677.326773][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 677.326787][ T30] audit: type=1400 audit(2000000380.050:873): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 677.353268][ T5870] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 677.967448][ T5870] usb 6-1: config 0 has no interfaces? [ 677.974318][ T5870] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 677.986293][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 677.994527][ T5870] usb 6-1: Product: syz [ 677.998938][ T5870] usb 6-1: Manufacturer: syz [ 678.006036][ T5870] usb 6-1: config 0 descriptor?? [ 678.075004][T10793] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 678.258957][T10793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.282592][T10793] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.313676][T10793] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 678.336969][T10793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 678.351727][T10793] usb 1-1: SerialNumber: syz [ 678.575490][T10793] usb 1-1: 0:2 : does not exist [ 678.580375][T10793] usb 1-1: unit 1 not found! [ 678.600603][T10793] usb 1-1: USB disconnect, device number 25 [ 678.632554][T10205] udevd[10205]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 678.714930][ T5870] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 678.828670][ T5868] usb 6-1: USB disconnect, device number 18 [ 678.883674][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.906023][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.923029][ T5870] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 678.933253][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.947814][ T5870] usb 7-1: config 0 descriptor?? [ 679.283724][ T30] audit: type=1400 audit(2000000382.000:874): avc: denied { listen } for pid=12791 comm="syz.1.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 679.397158][ T5870] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 679.404581][ T5870] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 679.511765][ T30] audit: type=1400 audit(2000000382.000:875): avc: denied { accept } for pid=12791 comm="syz.1.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 679.532362][ T5870] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 679.551037][ T5870] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 679.726808][ T5870] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 679.740291][ T5870] playstation 0003:054C:0DF2.000E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 680.366941][ T5870] playstation 0003:054C:0DF2.000E: Failed to retrieve feature with reportID 5: -71 [ 680.419518][ T5870] playstation 0003:054C:0DF2.000E: Failed to retrieve DualSense calibration info: -71 [ 680.441286][ T5870] playstation 0003:054C:0DF2.000E: Failed to get calibration data from DualSense [ 680.466226][ T5870] playstation 0003:054C:0DF2.000E: Failed to create dualsense. [ 680.479724][ T5870] playstation 0003:054C:0DF2.000E: probe with driver playstation failed with error -71 [ 680.503643][ T5870] usb 7-1: USB disconnect, device number 2 [ 680.701121][T12809] netlink: 'syz.0.1559': attribute type 10 has an invalid length. [ 680.710218][T12809] veth0_macvtap: left promiscuous mode [ 680.743146][T12809] batman_adv: batadv0: Adding interface: macvtap0 [ 680.757796][T12809] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.940905][T12809] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 682.184863][T10793] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 682.334866][T10793] usb 2-1: Using ep0 maxpacket: 16 [ 682.347136][T10793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.361400][T10793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.389928][T10793] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 682.403846][T10793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.420995][T10793] usb 2-1: config 0 descriptor?? [ 682.438577][T10793] usb 2-1: Found UVC 0.00 device (10c4:ea90) [ 682.445532][ T5869] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 682.460020][T10793] usb 2-1: No valid video chain found. [ 682.664869][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 682.671816][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 682.689689][T10793] usb 2-1: USB disconnect, device number 23 [ 682.697489][ T5869] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 682.711917][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.720414][ T5869] usb 1-1: Product: syz [ 682.724578][ T5869] usb 1-1: Manufacturer: syz [ 682.731835][ T5869] usb 1-1: SerialNumber: syz [ 682.754434][ T5869] usb 1-1: config 0 descriptor?? [ 682.770163][ T5869] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 682.785024][ T5869] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 683.478083][ T5869] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 683.522611][T12871] binder: 12870:12871 ioctl c0306201 200000000280 returned -14 [ 683.640894][ T30] audit: type=1400 audit(2000000386.360:876): avc: denied { write } for pid=12880 comm="syz.1.1571" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 683.685592][ T30] audit: type=1400 audit(2000000386.390:877): avc: denied { create } for pid=12880 comm="syz.1.1571" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 683.805252][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 683.975051][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 684.000709][ T5869] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 684.038954][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 684.495491][ T5869] em28xx 1-1:0.0: board has no eeprom [ 684.502383][ T9] usb 6-1: config 0 has no interface number 0 [ 684.511103][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 684.521521][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 684.530953][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.542621][ T9] usb 6-1: Product: syz [ 684.547249][ T9] usb 6-1: Manufacturer: syz [ 684.551869][ T9] usb 6-1: SerialNumber: syz [ 684.562533][ T9] usb 6-1: config 0 descriptor?? [ 684.572990][ T9] smsc75xx v1.0.0 [ 684.665019][ T5869] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 684.672875][ T5869] em28xx 1-1:0.0: dvb set to bulk mode. [ 684.682618][T10793] em28xx 1-1:0.0: Binding DVB extension [ 684.714482][ T5869] usb 1-1: USB disconnect, device number 26 [ 684.746661][ T5869] em28xx 1-1:0.0: Disconnecting em28xx [ 684.775455][ T5868] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 684.824579][T10793] em28xx 1-1:0.0: Registering input extension [ 684.860816][ T5869] em28xx 1-1:0.0: Closing input extension [ 684.886810][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 684.921171][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 684.936222][ T5869] em28xx 1-1:0.0: Freeing device [ 684.955345][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 684.962463][ T9] usb 6-1: USB disconnect, device number 19 [ 685.012611][ T5868] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 685.045642][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.060346][ T5868] usb 7-1: Product: syz [ 685.064527][ T5868] usb 7-1: Manufacturer: syz [ 685.069518][ T5868] usb 7-1: SerialNumber: syz [ 685.085713][ T5868] usb 7-1: config 0 descriptor?? [ 685.298082][ T5868] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 686.030507][ T30] audit: type=1400 audit(2000000388.750:878): avc: denied { create } for pid=12936 comm="syz.0.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 686.058907][ T30] audit: type=1400 audit(2000000388.750:879): avc: denied { read } for pid=12936 comm="syz.0.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 687.215988][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 687.421781][ T5868] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 687.433431][ T5868] usb 7-1: USB disconnect, device number 3 [ 687.505300][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 687.515992][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 687.531494][ T9] usb 1-1: config 0 has no interface number 0 [ 687.566886][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.579915][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.590012][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 687.599207][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.610246][ T9] usb 1-1: config 0 descriptor?? [ 688.511945][ T9] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.000F/input/input78 [ 688.734119][ T9] uclogic 0003:28BD:0094.000F: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 688.795386][ T9] usb 1-1: USB disconnect, device number 27 [ 689.711281][T12999] fido_id[12999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 689.866932][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1589'. [ 689.877016][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1589'. [ 690.660209][T11896] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 690.687934][T11896] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 690.714588][T11896] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 690.722998][T11896] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 690.730998][T11896] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 690.794869][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 690.916581][T13024] lo speed is unknown, defaulting to 1000 [ 691.002921][T11575] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 691.024657][T13024] lo speed is unknown, defaulting to 1000 [ 691.035374][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 691.058555][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 691.071684][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 691.097706][ T9] usb 1-1: config 1 has no interface number 1 [ 691.147597][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 691.176400][T11575] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.186905][T11575] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 691.189227][ T9] usb 1-1: string descriptor 0 read error: -22 [ 691.228512][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 691.260772][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.348212][ T9] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 691.369789][ T9] usb 1-1: 2:1 : invalid channels 0 [ 691.380904][T11575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.422409][T11575] usb 2-1: config 0 descriptor?? [ 691.473304][T11575] pwc: Askey VC010 type 2 USB webcam detected. [ 691.800694][ T9] usb 1-1: USB disconnect, device number 28 [ 691.881153][T11575] pwc: recv_control_msg error -32 req 02 val 2b00 [ 691.899418][T11575] pwc: recv_control_msg error -32 req 02 val 2700 [ 691.919096][T11575] pwc: recv_control_msg error -32 req 02 val 2c00 [ 691.937275][T13024] chnl_net:caif_netlink_parms(): no params data found [ 691.955779][T11575] pwc: recv_control_msg error -32 req 04 val 1000 [ 691.970358][T11575] pwc: recv_control_msg error -32 req 04 val 1300 [ 691.983443][T11575] pwc: recv_control_msg error -32 req 04 val 1400 [ 692.001297][T11575] pwc: recv_control_msg error -32 req 02 val 2000 [ 692.009116][T11575] pwc: recv_control_msg error -32 req 02 val 2100 [ 692.017200][T11575] pwc: recv_control_msg error -32 req 04 val 1500 [ 692.455879][T11575] pwc: recv_control_msg error -71 req 02 val 2600 [ 692.465211][T11575] pwc: recv_control_msg error -71 req 02 val 2900 [ 692.474206][T11575] pwc: recv_control_msg error -71 req 02 val 2800 [ 692.481185][T11575] pwc: recv_control_msg error -71 req 04 val 1100 [ 692.492607][T11575] pwc: recv_control_msg error -71 req 04 val 1200 [ 692.520688][T11575] pwc: Registered as video103. [ 692.547979][T13024] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.556056][T11575] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input80 [ 692.676014][T13024] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.697426][T13024] bridge_slave_0: entered allmulticast mode [ 692.770585][T13072] program syz.0.1599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 692.781191][T13072] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 692.866217][ T5824] Bluetooth: hci2: command tx timeout [ 693.145163][T11575] usb 2-1: USB disconnect, device number 24 [ 693.154023][T13024] bridge_slave_0: entered promiscuous mode [ 693.192264][T13024] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.217356][T13024] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.237170][T13024] bridge_slave_1: entered allmulticast mode [ 693.461178][T13024] bridge_slave_1: entered promiscuous mode [ 693.812057][T13024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.824279][T13024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.350731][T13024] team0: Port device team_slave_0 added [ 694.364370][T13024] team0: Port device team_slave_1 added [ 694.414620][T13024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.422324][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.451969][T13024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.471731][T13024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.506618][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.533076][T13024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.584929][ T5869] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 694.707784][T13086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1603'. [ 694.717298][T13086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1603'. [ 694.835475][ T5869] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 694.895250][ T5824] Bluetooth: hci2: command tx timeout [ 694.897655][T13024] hsr_slave_0: entered promiscuous mode [ 694.937154][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.996995][T13024] hsr_slave_1: entered promiscuous mode [ 695.002904][T13024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.013199][ T5869] usb 2-1: Product: syz [ 695.030255][ T5869] usb 2-1: Manufacturer: syz [ 695.035207][ T5869] usb 2-1: SerialNumber: syz [ 695.044641][T13024] Cannot create hsr debugfs directory [ 695.060602][ T5869] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 695.407286][ T5870] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 695.816386][ T30] audit: type=1400 audit(2000000398.520:880): avc: denied { relabelfrom } for pid=13081 comm="syz.1.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 695.927658][ T9] usb 2-1: USB disconnect, device number 25 [ 695.960598][ T30] audit: type=1400 audit(2000000398.520:881): avc: denied { relabelto } for pid=13081 comm="syz.1.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 696.487691][ T5870] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 696.598078][ T5870] ath9k_htc: Failed to initialize the device [ 696.612328][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 696.677540][T13024] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 696.715681][T13024] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 696.744431][T13024] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 696.785975][T13024] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 697.003805][ T5824] Bluetooth: hci2: command tx timeout [ 697.400991][ T30] audit: type=1400 audit(2000000400.110:882): avc: denied { shutdown } for pid=13118 comm="syz.6.1611" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 697.468000][T13024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.477491][ T30] audit: type=1400 audit(2000000400.110:883): avc: denied { read } for pid=13118 comm="syz.6.1611" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 697.707419][T13024] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.186239][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.193383][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.218634][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.225732][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.224950][ T5824] Bluetooth: hci2: command tx timeout [ 699.341779][T13143] bridge1: entered allmulticast mode [ 700.153364][ T5871] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 701.021023][T13024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.198093][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 702.027453][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 702.038968][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 702.050470][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 702.064296][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.206140][ T5871] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 702.441978][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.462273][ T5871] usb 6-1: Product: syz [ 702.469922][ T5871] usb 6-1: Manufacturer: syz [ 702.479039][ T5871] usb 6-1: SerialNumber: syz [ 703.562535][ T5871] usb 6-1: config 0 descriptor?? [ 703.575356][ T5871] usb 6-1: can't set config #0, error -71 [ 703.592523][ T5871] usb 6-1: USB disconnect, device number 20 [ 704.724330][T13024] veth0_vlan: entered promiscuous mode [ 704.755108][T11575] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 704.760469][T13024] veth1_vlan: entered promiscuous mode [ 704.868775][T13024] veth0_macvtap: entered promiscuous mode [ 704.889001][T13024] veth1_macvtap: entered promiscuous mode [ 704.915250][T13024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.917093][T11575] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 704.952950][T11575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.003791][T13024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.015440][T11575] usb 1-1: config 0 descriptor?? [ 705.015568][T13024] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.025666][ T6526] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 705.040583][T13024] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.062244][T11575] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 705.081750][T13024] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.137165][T13024] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.197761][ T6526] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 705.222540][ T6526] usb 2-1: config 0 has no interface number 0 [ 705.271101][T13215] Cannot find set identified by id 0 to match [ 705.305920][T11575] gp8psk: usb in 128 operation failed. [ 705.326371][ T6526] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 705.348280][T11575] gp8psk: usb in 137 operation failed. [ 705.357714][T11575] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 705.384271][ T6526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.397896][T11575] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 705.410228][T11575] usb 1-1: media controller created [ 705.422228][ T6526] usb 2-1: Product: syz [ 705.429477][ T6526] usb 2-1: Manufacturer: syz [ 705.434254][ T6526] usb 2-1: SerialNumber: syz [ 705.698551][ T6526] usb 2-1: config 0 descriptor?? [ 705.714420][T11575] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 705.743458][ T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.786362][T11575] gp8psk_fe: Frontend attached [ 705.792375][T11575] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 705.802636][T11575] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 705.806349][ T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.886644][T11575] gp8psk: usb in 138 operation failed. [ 705.896381][T11575] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 705.917849][T11575] gp8psk: found Genpix USB device pID = 203 (hex) [ 705.924365][ T6526] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 705.938298][T11575] usb 1-1: USB disconnect, device number 29 [ 706.006567][ T6526] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 706.222877][ T6526] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 706.324354][ T6526] usb 2-1: media controller created [ 706.334108][T13220] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1634'. [ 706.347267][T13220] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1634'. [ 706.388433][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.406567][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.411007][ T6526] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 706.442319][T11575] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 706.535864][ T6526] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 706.614176][ T5824] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 706.626568][ T30] audit: type=1400 audit(2000000409.350:884): avc: denied { connect } for pid=13222 comm="syz.6.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 706.641339][T13229] input: syz0 as /devices/virtual/input/input81 [ 706.649985][ T6526] usb 2-1: USB disconnect, device number 26 [ 708.734959][ T5869] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 708.742861][ T5871] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 708.930859][ T5869] usb 1-1: config 0 has no interfaces? [ 708.937116][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 708.954174][ T5869] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 708.994709][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 709.043534][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 709.096243][ T5871] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 709.107211][ T5869] usb 1-1: Product: syz [ 709.111430][ T5869] usb 1-1: Manufacturer: syz [ 709.119047][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.130286][ T5869] usb 1-1: config 0 descriptor?? [ 709.139834][ T5871] usb 6-1: config 0 descriptor?? [ 709.385757][ T5871] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 709.645064][ T5870] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 709.793208][ T5869] usb 1-1: USB disconnect, device number 30 [ 709.967529][ T5870] usb 8-1: config 0 has no interfaces? [ 709.973095][ T5870] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 709.984610][ T5870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.997946][ T5870] usb 8-1: config 0 descriptor?? [ 710.235618][ T6526] usb 6-1: USB disconnect, device number 21 [ 710.244505][ T5870] usb 8-1: USB disconnect, device number 2 [ 710.434060][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1647'. [ 710.444326][T13270] IPVS: Error joining to the multicast group [ 710.709285][ T30] audit: type=1400 audit(2000000413.430:885): avc: denied { create } for pid=13267 comm="syz.0.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 710.773415][ T30] audit: type=1400 audit(2000000413.460:886): avc: denied { write } for pid=13267 comm="syz.0.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 712.152776][ T30] audit: type=1400 audit(2000000414.870:887): avc: denied { write } for pid=13294 comm="syz.6.1655" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 713.876571][ T5824] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 713.928851][ T30] audit: type=1326 audit(2000000416.650:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13312 comm="syz.1.1661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77eb38e969 code=0x0 [ 714.284872][ T5871] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 714.627818][ T5871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 714.654971][ T5871] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 714.688183][ T5871] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 714.747710][ T5871] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 714.757630][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.784891][ T5871] usb 6-1: Product: syz [ 714.789148][ T5871] usb 6-1: Manufacturer: syz [ 714.799906][ T5871] usb 6-1: SerialNumber: syz [ 714.857161][T13319] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 715.176880][ T5871] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 715.853394][ T30] audit: type=1400 audit(2000000418.570:889): avc: denied { read write } for pid=13318 comm="syz.5.1663" name="lp0" dev="devtmpfs" ino=3230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 715.884851][ C1] usblp0: nonzero read bulk status received: -71 [ 715.917097][ T5821] usb 6-1: USB disconnect, device number 22 [ 715.927288][ T5821] usblp0: removed [ 715.989458][ T30] audit: type=1400 audit(2000000418.570:890): avc: denied { open } for pid=13318 comm="syz.5.1663" path="/dev/usb/lp0" dev="devtmpfs" ino=3230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 716.983112][ T30] audit: type=1400 audit(2000000419.690:891): avc: denied { node_bind } for pid=13343 comm="syz.0.1669" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 719.393523][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 719.402561][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 721.426683][ T30] audit: type=1400 audit(2000000424.150:892): avc: denied { execute } for pid=13392 comm="syz.6.1682" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 721.855827][T13404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.126199][T13447] kvm: kvm [13446]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 726.142791][T13447] kvm: kvm [13446]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x80 [ 727.755222][T13462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1698'. [ 727.766297][T13462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1698'. [ 729.644930][T13474] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1700'. [ 730.933007][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1705'. [ 732.581607][T13510] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 735.638284][ T30] audit: type=1400 audit(2000000438.360:893): avc: denied { setopt } for pid=13536 comm="syz.5.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 736.991054][T13550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1721'. [ 737.618886][T13552] binder: 13549:13552 ioctl c0306201 200000000300 returned -14 [ 739.415018][ T5871] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 739.642027][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 739.673952][ T5871] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 739.694906][ T5871] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 739.712447][ T5871] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 739.734682][ T5871] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 739.762617][ T5871] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 739.783521][ T5871] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 739.802093][ T5871] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 739.811835][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.825728][ T5871] usb 6-1: Product: syz [ 739.829974][ T5871] usb 6-1: Manufacturer: syz [ 739.834720][ T5871] usb 6-1: SerialNumber: syz [ 742.331097][ T5871] adutux 6-1:168.0: interrupt endpoints not found [ 742.355284][ T5871] usb 6-1: USB disconnect, device number 23 [ 744.498128][ T30] audit: type=1400 audit(2000000447.200:894): avc: denied { write } for pid=13602 comm="syz.7.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 745.687389][T13608] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 745.695966][T13608] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 749.335861][ T30] audit: type=1400 audit(2000000452.050:895): avc: denied { ioctl } for pid=13646 comm="syz.6.1748" path="socket:[41421]" dev="sockfs" ino=41421 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 749.911644][T13657] trusted_key: syz.6.1750 sent an empty control message without MSG_MORE. [ 750.681714][T13661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 754.758059][ T30] audit: type=1400 audit(2000000456.430:896): avc: denied { execute } for pid=13688 comm="syz.7.1758" path="/dev/audio1" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 755.408674][T13705] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1762'. [ 759.685200][T13753] Can't find a SQUASHFS superblock on nullb0 [ 759.702098][ T30] audit: type=1400 audit(2000000462.400:897): avc: denied { mounton } for pid=13750 comm="syz.1.1773" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 761.865439][ T30] audit: type=1400 audit(2000000463.950:898): avc: denied { listen } for pid=13760 comm="syz.6.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 764.241965][ T30] audit: type=1400 audit(2000000466.960:899): avc: denied { connect } for pid=13774 comm="syz.0.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 764.838439][ T30] audit: type=1400 audit(2000000467.560:900): avc: denied { accept } for pid=13799 comm="syz.1.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 765.842810][T13829] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 765.849348][T13829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 765.857406][T13829] vhci_hcd vhci_hcd.0: Device attached [ 766.275232][ T5869] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 766.619517][T13830] vhci_hcd: connection reset by peer [ 766.643428][ T12] vhci_hcd: stop threads [ 766.673807][ T12] vhci_hcd: release socket [ 766.704528][ T12] vhci_hcd: disconnect device [ 770.605851][T13874] hub 8-0:1.0: USB hub found [ 770.610958][T13874] hub 8-0:1.0: 1 port detected [ 771.288699][ T30] audit: type=1400 audit(2000000003.790:901): avc: denied { create } for pid=13867 comm="syz.1.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 771.488293][ T5869] vhci_hcd: vhci_device speed not set [ 771.963018][T13882] syz.1.1796: attempt to access beyond end of device [ 771.963018][T13882] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 773.912084][T13909] vti0: entered promiscuous mode [ 774.645277][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 775.509310][T13917] 9pnet_fd: Insufficient options for proto=fd [ 776.057929][T13928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 777.445181][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 778.440756][T13941] overlayfs: failed to resolve './file0': -2 [ 778.713624][T13950] xt_CT: You must specify a L4 protocol and not use inversions on it [ 780.594945][ T3079] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 780.731683][ T3079] usb 7-1: device descriptor read/64, error -71 [ 781.160622][ T3079] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 781.538987][ T3079] usb 7-1: device descriptor read/64, error -71 [ 781.696726][ T3079] usb usb7-port1: attempt power cycle [ 782.407357][ T3079] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 782.466251][ T3079] usb 7-1: device descriptor read/8, error -71 [ 782.724955][ T3079] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 782.765543][ T3079] usb 7-1: device descriptor read/8, error -71 [ 782.846813][ T9634] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 782.883962][ T3079] usb usb7-port1: unable to enumerate USB device [ 783.691560][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1829'. [ 783.700679][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1829'. [ 783.764297][T14008] afs: Unknown parameter '' [ 783.878923][T14008] netlink: 'syz.6.1831': attribute type 10 has an invalid length. [ 783.905454][T14008] veth0_macvtap: left promiscuous mode [ 784.382300][T14008] batman_adv: batadv0: Adding interface: macvtap0 [ 784.389045][T14008] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.415521][T14008] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 785.913076][ T30] audit: type=1400 audit(2000000018.400:902): avc: denied { listen } for pid=14027 comm="syz.7.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 785.933886][ T30] audit: type=1400 audit(2000000018.400:903): avc: denied { accept } for pid=14027 comm="syz.7.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 787.039840][ T30] audit: type=1400 audit(2000000019.540:904): avc: denied { setopt } for pid=14041 comm="syz.7.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 787.395067][T14047] futex_wake_op: syz.1.1838 tries to shift op by 144; fix this program [ 787.620703][ T30] audit: type=1400 audit(2000000019.930:905): avc: denied { create } for pid=14040 comm="syz.1.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 787.825925][T14052] ubi: mtd0 is already attached to ubi31 [ 787.989326][ T30] audit: type=1400 audit(2000000020.320:906): avc: denied { setopt } for pid=14050 comm="syz.6.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 788.687235][T14062] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1842'. [ 790.013092][T14077] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1845'. [ 790.980224][T14084] fuse: root generation should be zero [ 791.927885][T14089] afs: Unknown parameter '' [ 791.968802][T14089] netlink: 'syz.7.1849': attribute type 10 has an invalid length. [ 792.829133][T14089] veth0_macvtap: left promiscuous mode [ 793.018861][T14089] batman_adv: batadv0: Adding interface: macvtap0 [ 793.025491][T14089] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.035081][ T30] audit: type=1400 audit(2000000025.520:907): avc: denied { bind } for pid=14111 comm="syz.0.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 793.070320][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.077762][T14089] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 793.661125][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 794.149992][T14128] mkiss: ax0: crc mode is auto. [ 795.428573][ T30] audit: type=1400 audit(2000000027.570:908): avc: denied { bind } for pid=14135 comm="syz.6.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 796.758611][ T30] audit: type=1804 audit(2000000029.240:909): pid=14154 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1863" name="/newroot/82/file0" dev="tmpfs" ino=439 res=1 errno=0 [ 799.946395][T14185] usb usb8: usbfs: process 14185 (syz.0.1871) did not claim interface 0 before use [ 801.697879][T14206] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1876'. [ 802.103373][T14212] netlink: 'syz.1.1877': attribute type 10 has an invalid length. [ 802.529694][T14215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.654942][ T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 804.234509][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 804.247850][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.455345][ T9] usb 8-1: config 0 descriptor?? [ 804.970169][ T9] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 804.986515][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 805.043131][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 805.055209][T14224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.064268][T14224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.073566][ T9] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 805.146188][ T9] usb 8-1: media controller created [ 805.151902][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 805.159341][ T9] dvb-usb: MAC address reading failed. [ 805.167647][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 805.182351][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 805.235745][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 805.241503][ T9] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 805.265117][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input92 [ 805.382121][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 805.389549][ T9] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 805.629769][ T5871] dvb-usb: bulk message failed: -22 (2/0) [ 805.994442][ T5871] dvb-usb: error while querying for an remote control event. [ 806.147537][ T5871] dvb-usb: bulk message failed: -22 (2/0) [ 806.203481][ T5871] dvb-usb: error while querying for an remote control event. [ 806.548409][ T3079] usb 8-1: USB disconnect, device number 3 [ 806.621073][T14250] sp0: Synchronizing with TNC [ 807.093075][ T3079] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 808.363340][T14267] dvmrp1: entered allmulticast mode [ 815.218596][T14336] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1908'. [ 815.228115][T14336] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1908'. [ 815.415968][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 816.378570][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1914'. [ 817.634295][T11896] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 818.223985][T14372] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 819.931597][T14391] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 819.938139][T14391] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 819.945789][T14391] vhci_hcd vhci_hcd.0: Device attached [ 821.245055][ T9] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 821.641081][T14392] vhci_hcd: connection reset by peer [ 821.704777][ T193] vhci_hcd: stop threads [ 821.740609][ T193] vhci_hcd: release socket [ 821.790580][ T193] vhci_hcd: disconnect device [ 824.848211][ T30] audit: type=1400 audit(2000000057.350:910): avc: denied { ioctl } for pid=14441 comm="syz.1.1936" path="socket:[43989]" dev="sockfs" ino=43989 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 824.904546][T14442] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 824.936766][T14442] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 825.461000][ T30] audit: type=1400 audit(2000000057.590:911): avc: denied { shutdown } for pid=14429 comm="syz.0.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 825.858524][T14442] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 825.927692][T14442] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 826.532267][ T30] audit: type=1400 audit(2000000058.640:912): avc: denied { create } for pid=14448 comm="syz.5.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 826.647563][ T9] vhci_hcd: vhci_device speed not set [ 827.192591][T14442] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 827.216711][ T30] audit: type=1400 audit(2000000058.710:913): avc: denied { bind } for pid=14448 comm="syz.5.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 827.254995][T14442] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 827.483690][T14442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 827.655151][T14442] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 828.015589][T14442] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 828.168943][T14442] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 828.812345][T14489] hub 8-0:1.0: USB hub found [ 828.818058][T14489] hub 8-0:1.0: 1 port detected [ 830.942766][T14510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1950'. [ 830.951936][T14510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1950'. [ 831.844938][ T31] INFO: task syz.4.1527:12689 blocked for more than 143 seconds. [ 832.214313][T14518] ALSA: mixer_oss: invalid OSS volume 'MONITO' [ 832.454937][ T31] Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 [ 832.462254][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 832.480652][ T31] task:syz.4.1527 state:D stack:23816 pid:12689 tgid:12688 ppid:5826 task_flags:0x400140 flags:0x00004006 [ 832.504772][ T31] Call Trace: [ 832.504789][ T31] [ 832.504800][ T31] __schedule+0x116a/0x5de0 [ 832.504838][ T31] ? __lock_acquire+0x622/0x1c90 [ 832.504873][ T31] ? __pfx___schedule+0x10/0x10 [ 832.504904][ T31] ? find_held_lock+0x2b/0x80 [ 832.504927][ T31] ? schedule+0x2d7/0x3a0 [ 832.504956][ T31] schedule+0xe7/0x3a0 [ 832.504982][ T31] netfs_wait_for_request+0x161/0x5a0 [ 832.505008][ T31] ? __pfx_netfs_write_collection+0x10/0x10 [ 832.505029][ T31] ? __pfx_netfs_wait_for_request+0x10/0x10 [ 832.505055][ T31] ? netfs_wake_collector+0x114/0x160 [ 832.505080][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 832.505112][ T31] ? netfs_unbuffered_write+0x19c/0x230 [ 832.505138][ T31] netfs_unbuffered_write_iter_locked+0x8c3/0xc80 [ 832.505171][ T31] netfs_unbuffered_write_iter+0x414/0x6d0 [ 832.505202][ T31] v9fs_file_write_iter+0xbf/0x100 [ 832.505236][ T31] do_iter_readv_writev+0x657/0x950 [ 832.505261][ T31] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 832.505297][ T31] vfs_writev+0x35f/0xde0 [ 832.505317][ T31] ? __pfx___mutex_trylock_common+0x10/0x10 [ 832.505352][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 832.505374][ T31] ? __mutex_lock+0x1ca/0xb90 [ 832.505390][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 832.505418][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 832.505445][ T31] ? __fget_files+0x20e/0x3c0 [ 832.505477][ T31] ? do_writev+0x132/0x340 [ 832.505496][ T31] do_writev+0x132/0x340 [ 832.505518][ T31] ? __pfx_do_writev+0x10/0x10 [ 832.505548][ T31] do_syscall_64+0xcd/0x4c0 [ 832.505568][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.505586][ T31] RIP: 0033:0x7f46f538e969 [ 832.505602][ T31] RSP: 002b:00007f46f610e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 832.505621][ T31] RAX: ffffffffffffffda RBX: 00007f46f55b5fa0 RCX: 00007f46f538e969 [ 832.505633][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000006 [ 832.505645][ T31] RBP: 00007f46f5410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 832.505656][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.505668][ T31] R13: 0000000000000000 R14: 00007f46f55b5fa0 R15: 00007ffdce9c1e28 [ 832.505693][ T31] [ 832.505720][ T31] [ 832.505720][ T31] Showing all locks held in the system: [ 832.505730][ T31] 2 locks held by rcu_tasks_trace/29: [ 832.505741][ T31] 1 lock held by khungtaskd/31: [ 832.505751][ T31] #0: ffffffff8e5c4e40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 832.505800][ T31] 2 locks held by kworker/u8:5/193: [ 832.505827][ T31] 2 locks held by getty/5580: [ 832.505837][ T31] #0: ffff8880366da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 832.505890][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 832.505944][ T31] 7 locks held by syz-executor/7319: [ 832.505957][ T31] 2 locks held by kworker/u8:17/9631: [ 832.505967][ T31] #0: ffff888146288148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 832.506012][ T31] #1: ffffc9001b987d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 832.506062][ T31] 3 locks held by syz.4.1527/12689: [ 832.506072][ T31] #0: ffff888068ee1cf8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 832.506124][ T31] #1: ffff8880345be428 (sb_writers#25){.+.+}-{0:0}, at: do_writev+0x132/0x340 [ 832.506176][ T31] #2: ffff88805b8f87b8 (&sb->s_type->i_mutex_key#33){++++}-{4:4}, at: netfs_start_io_direct+0x116/0x260 [ 832.506240][ T31] 2 locks held by syz.7.1953/14520: [ 832.506251][ T31] [ 832.506255][ T31] ============================================= [ 832.506255][ T31] [ 832.506262][ T31] NMI backtrace for cpu 0 [ 832.506273][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 832.506293][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 832.506303][ T31] Call Trace: [ 832.506309][ T31] [ 832.506315][ T31] dump_stack_lvl+0x116/0x1f0 [ 832.506342][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 832.506365][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 832.506389][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 832.506413][ T31] watchdog+0xf70/0x12c0 [ 832.506439][ T31] ? __pfx_watchdog+0x10/0x10 [ 832.506456][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 832.506483][ T31] ? __kthread_parkme+0x19e/0x250 [ 832.506509][ T31] ? __pfx_watchdog+0x10/0x10 [ 832.506527][ T31] kthread+0x3c5/0x780 [ 832.506544][ T31] ? __pfx_kthread+0x10/0x10 [ 832.506561][ T31] ? rcu_is_watching+0x12/0xc0 [ 832.506582][ T31] ? __pfx_kthread+0x10/0x10 [ 832.506599][ T31] ret_from_fork+0x5d4/0x6f0 [ 832.506622][ T31] ? __pfx_kthread+0x10/0x10 [ 832.506638][ T31] ret_from_fork_asm+0x1a/0x30 [ 832.506671][ T31] [ 832.506677][ T31] Sending NMI from CPU 0 to CPUs 1: [ 832.506699][ C1] NMI backtrace for cpu 1 [ 832.506709][ C1] CPU: 1 UID: 0 PID: 7319 Comm: syz-executor Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 832.506725][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 832.506732][ C1] RIP: 0010:lookup_page_ext+0xd5/0x1d0 [ 832.506752][ C1] Code: 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 ee 00 00 00 48 8b 6d 00 48 85 ed 0f 84 bf 00 00 00 e8 4b a5 8d ff <41> 83 e4 7f 49 c1 e4 05 4c 01 e5 e8 3b a5 8d ff 48 8d 7d 10 48 b8 [ 832.506765][ C1] RSP: 0018:ffffc90003dd7588 EFLAGS: 00000293 [ 832.506776][ C1] RAX: 0000000000000000 RBX: 0000000000027f05 RCX: ffffffff822e71a1 [ 832.506785][ C1] RDX: ffff888031924880 RSI: ffffffff822e7215 RDI: 0000000000000006 [ 832.506793][ C1] RBP: ffff88813fffa400 R08: 0000000000000006 R09: 0000000000001000 [ 832.506801][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 832.506809][ C1] R13: ffff88823ffef400 R14: 0000000000000000 R15: 0000000000000000 [ 832.506818][ C1] FS: 000055558ecee500(0000) GS:ffff888124865000(0000) knlGS:0000000000000000 [ 832.506832][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 832.506841][ C1] CR2: 00007f20156e56c0 CR3: 0000000049b62000 CR4: 00000000003526f0 [ 832.506849][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 832.506857][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 832.506865][ C1] Call Trace: [ 832.506870][ C1] [ 832.506875][ C1] page_table_check_set+0x1e6/0x750 [ 832.506895][ C1] __page_table_check_ptes_set+0x318/0x420 [ 832.506915][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 832.506933][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 832.506949][ C1] copy_page_range+0x234d/0x5d90 [ 832.506976][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 832.506993][ C1] ? __pfx___might_resched+0x10/0x10 [ 832.507009][ C1] ? __pfx_mas_store+0x10/0x10 [ 832.507021][ C1] ? __vma_enter_locked+0x163/0x3f0 [ 832.507038][ C1] ? dup_mmap+0xe38/0x21d0 [ 832.507051][ C1] ? down_write+0x14d/0x200 [ 832.507066][ C1] ? up_write+0x1b2/0x520 [ 832.507079][ C1] dup_mmap+0xe88/0x21d0 [ 832.507096][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 832.507117][ C1] copy_process+0x4081/0x76a0 [ 832.507134][ C1] ? do_wp_page+0x1aa7/0x4f20 [ 832.507150][ C1] ? __pfx_copy_process+0x10/0x10 [ 832.507171][ C1] kernel_clone+0xfc/0x960 [ 832.507188][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 832.507207][ C1] ? css_rstat_updated+0x9d/0xd30 [ 832.507226][ C1] __do_sys_clone+0xce/0x120 [ 832.507241][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 832.507257][ C1] ? handle_mm_fault+0x2ab/0xd10 [ 832.507276][ C1] ? do_user_addr_fault+0x843/0x1370 [ 832.507297][ C1] do_syscall_64+0xcd/0x4c0 [ 832.507310][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.507322][ C1] RIP: 0033:0x7f20149851d3 [ 832.507332][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 832.507344][ C1] RSP: 002b:00007ffd9fef7528 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 832.507356][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20149851d3 [ 832.507365][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 832.507372][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 832.507380][ C1] R10: 000055558ecee7d0 R11: 0000000000000246 R12: 0000000000000000 [ 832.507388][ C1] R13: 00000000000927c0 R14: 00000000000cb147 R15: 00007ffd9fef76c0 [ 832.507402][ C1] [ 832.507695][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 832.507707][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 832.507727][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 832.507737][ T31] Call Trace: [ 832.507743][ T31] [ 832.507750][ T31] dump_stack_lvl+0x3d/0x1f0 [ 832.507778][ T31] panic+0x71c/0x800 [ 832.507803][ T31] ? __pfx_panic+0x10/0x10 [ 832.507826][ T31] ? __pfx__printk+0x10/0x10 [ 832.507841][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 832.507861][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 832.507889][ T31] ? irq_work_queue+0xce/0x100 [ 832.507913][ T31] ? watchdog+0xdda/0x12c0 [ 832.507932][ T31] ? watchdog+0xdcd/0x12c0 [ 832.507954][ T31] watchdog+0xdeb/0x12c0 [ 832.507979][ T31] ? __pfx_watchdog+0x10/0x10 [ 832.507996][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 832.508024][ T31] ? __kthread_parkme+0x19e/0x250 [ 832.508049][ T31] ? __pfx_watchdog+0x10/0x10 [ 832.508068][ T31] kthread+0x3c5/0x780 [ 832.508085][ T31] ? __pfx_kthread+0x10/0x10 [ 832.508103][ T31] ? rcu_is_watching+0x12/0xc0 [ 832.508125][ T31] ? __pfx_kthread+0x10/0x10 [ 832.508142][ T31] ret_from_fork+0x5d4/0x6f0 [ 832.508165][ T31] ? __pfx_kthread+0x10/0x10 [ 832.508182][ T31] ret_from_fork_asm+0x1a/0x30 [ 832.508212][ T31] [ 832.508402][ T31] Kernel Offset: disabled