last executing test programs: 25m33.633796432s ago: executing program 3 (id=481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) 25m32.632510418s ago: executing program 3 (id=483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071110400000000008510000002000000850000000500000095000000000000009500a505000020"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000d40)=[{r4}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 25m31.097075642s ago: executing program 3 (id=486): ioperm(0x6, 0x4, 0x8008000000003) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x981, 0x100) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) add_key(&(0x7f0000000ac0)='asymmetric\x00', &(0x7f0000000b00)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) 25m29.242447331s ago: executing program 3 (id=489): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x8) fcntl$setlease(r0, 0x400, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24060400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x0, 0x301001, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 25m28.523573131s ago: executing program 3 (id=495): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffead, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x3}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x28c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10001, 0xf84, 0x3}, 0x1c) 25m27.337014649s ago: executing program 3 (id=499): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$video(0x0, 0xa7, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) connect$bt_sco(r5, &(0x7f0000000280), 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 25m26.970548093s ago: executing program 32 (id=499): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$video(0x0, 0xa7, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) connect$bt_sco(r5, &(0x7f0000000280), 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 25m22.496445904s ago: executing program 0 (id=509): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000640), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r5, 0x1) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000280), 0x0) 25m21.438087408s ago: executing program 0 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x64, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4c}}}}, [@NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x20, 0x3, 0x6, 0x0, {0x9, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x8, 0x0, 0x32}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x10}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2fe6}, @NL80211_ATTR_IE={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20020) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@perf_event={0x4}}, 0x18) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000140)) process_vm_readv(0x0, &(0x7f0000000140), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14001300009e8a5767a6bcc737834469eec89acf206540983d2060b67b39982e6656fdde869aecba7984e5bce55ff35e6aba5c42c895c97d644d5244b8296b8bad5dadef", @ANYRES16=r7, @ANYBLOB="ad43000000000100000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) 25m21.121465132s ago: executing program 0 (id=514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) 25m20.131479444s ago: executing program 0 (id=516): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffead, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x3}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 25m16.144111243s ago: executing program 0 (id=523): syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, &(0x7f0000000500)="f415078807f6d8e5d630008956beb76bb69d8aae5ee308748adc607af549c702a83b4e2c6d42bac509bb61603783667f4af91eb3b9cfa4eeb06d4aa5c05e48b51e143c50256f9500866d2abb5ad49d65869cef56edd0f8d76af4035859583e756da45b432d606a72e43c202565388f843619e08fd0876e0973438b3f4df68bddf77ce3950c739f4c947605ed5f0b52e08fd5e72dc6864278ef87ceb0b612ff28f97c2d5c2c0eaf149a2f3edd9a70a2e1c04b19484870354f63c6a81db93033f32fc8a91c13b49ef4db855568cf28774e23ea55d688ebc68c6c587d130fc4ea56edcf7497554f6685", 0xe8, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) poll(&(0x7f0000000080)=[{r5, 0x8024}], 0x1, 0xfffffff9) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) 25m13.011535967s ago: executing program 0 (id=526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x1, 0x0, 0xffff7002}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x5) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) 24m57.361709866s ago: executing program 33 (id=526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x1, 0x0, 0xffff7002}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x5) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) 9m20.424355897s ago: executing program 2 (id=2952): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x80000000, 0x902, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x6, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008000000141000", @ANYRES32, @ANYBLOB="0000000000000000000200", @ANYRES32], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) creat(0x0, 0x26) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe80000000000000000000000000000014000400fc0200000000000000000000000000003c000380060001"], 0x164}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0) 9m19.274096678s ago: executing program 2 (id=2954): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 9m19.047092397s ago: executing program 2 (id=2957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) 9m16.205724901s ago: executing program 2 (id=2959): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 9m16.089772424s ago: executing program 2 (id=2961): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffead, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x3}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10001, 0xf84, 0x3}, 0x1c) 9m13.765371838s ago: executing program 2 (id=2972): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x4c31}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x439}}, {0xb3, &(0x7f0000000480)=@string={0xb3, 0x3, "fe0def1446a6e49314e71b6a925679f8952ac8ec1c46e84f042b9afa9ec34ff8605431a869e59815657d1aa0cdce810cb5991e9d0ce6d61d366bdaf21df6366a75ec01a8a6405b4b21a56f8459dab6b0de2ce4e238710840d1540e6c8a6c0ef07e609af485755f6621a61e98720df27fc626aee676edd4f84efb36f404f36f37582b61955550d8a6d97341f7aa8af6483b0b476678890d37e265b782acca138b0ceebe76a8ef548c879ffb17db5e6c7c8b"}}, {0xe2, &(0x7f0000000540)=@string={0xe2, 0x3, "e448f9987b8614622d0665e3c41d6c0f8f59375a489b89c196e341f9d89d4ee506a3fabd39e31d281382acf3c06ab0930c0ca86d8203fe9579ea7c86267171179266338cc15e511223664a5145515721943a5554e9c781db52e1f27b1ad829333584443bee3c2776f4be3024927c6dcdb2b3c83dc90ba2ed3a0d3478788f87f88fb2602c7a05c97ddf4282bae399cf9fa7e5bdb841f042fedfef1a37bef3266c1068951476795666864092e1ad8aa45f5870c825cdcde9408591ad6679e13dd946098d94c668d0971f354e26746de464499796e9afbe90cab6d622640f810604"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x810}}, {0x3, &(0x7f00000006c0)=@string={0x3, 0x3, 'g'}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0xbed}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x60008045, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 8m58.300450761s ago: executing program 34 (id=2972): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x1, 0x3, 0x0, 0x20, 0x6}, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x4c31}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x439}}, {0xb3, &(0x7f0000000480)=@string={0xb3, 0x3, "fe0def1446a6e49314e71b6a925679f8952ac8ec1c46e84f042b9afa9ec34ff8605431a869e59815657d1aa0cdce810cb5991e9d0ce6d61d366bdaf21df6366a75ec01a8a6405b4b21a56f8459dab6b0de2ce4e238710840d1540e6c8a6c0ef07e609af485755f6621a61e98720df27fc626aee676edd4f84efb36f404f36f37582b61955550d8a6d97341f7aa8af6483b0b476678890d37e265b782acca138b0ceebe76a8ef548c879ffb17db5e6c7c8b"}}, {0xe2, &(0x7f0000000540)=@string={0xe2, 0x3, "e448f9987b8614622d0665e3c41d6c0f8f59375a489b89c196e341f9d89d4ee506a3fabd39e31d281382acf3c06ab0930c0ca86d8203fe9579ea7c86267171179266338cc15e511223664a5145515721943a5554e9c781db52e1f27b1ad829333584443bee3c2776f4be3024927c6dcdb2b3c83dc90ba2ed3a0d3478788f87f88fb2602c7a05c97ddf4282bae399cf9fa7e5bdb841f042fedfef1a37bef3266c1068951476795666864092e1ad8aa45f5870c825cdcde9408591ad6679e13dd946098d94c668d0971f354e26746de464499796e9afbe90cab6d622640f810604"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x810}}, {0x3, &(0x7f00000006c0)=@string={0x3, 0x3, 'g'}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0xbed}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x60008045, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 6.873951934s ago: executing program 6 (id=5000): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x400, 0x0, 0x7, 0x9, 0x8, 0xfffffffc}) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x25, 0x1, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x1, 0x8000, 0x10, 0x20, 0x5, 0x3}}]}}]}, 0x14c}}, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000300)=ANY=[@ANYBLOB="120100005ad1be40422cf81620300102030109021200010000005e4d2256f4d60380180076ed249567c05c6cab2802b1626f424607c9729816a8262c2eaa66d23fca82a121e25efa0f9c324ec1e7fc496c4b4094a39e631d7039a3eaafcc56439bfd688deea35b7fa81c8c9e62402e67e72a037a0a520293"], 0x0) 4.822443825s ago: executing program 1 (id=5013): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ppoll(&(0x7f0000000200)=[{r1, 0x4000}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 4.402138027s ago: executing program 5 (id=5015): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.351342838s ago: executing program 4 (id=5016): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x200000, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @null, 0x1000002}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r1, 0x1ad72f7) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000400)=""/190, 0xbe) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf258300000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x44010}, 0x1) 4.3507675s ago: executing program 5 (id=5017): syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@random="6f4191a252dc", @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x200, 0x8}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@delqdisc={0x264, 0x25, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xf, 0xfff2}, {0xb, 0x10}, {0xfff1}}, [@TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xf1, 0xf, 0xb8, 0x1, 0xe5, 0x0, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x8, 0x7f, 0x9, 0x27, 0x0, 0xf, 0xdd, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0x1, 0x35, 0xbc, 0x2, 0xc, 0x1, 0x1}}, {0x6, 0x2, [0x84]}}, {{0x1c, 0x1, {0x4, 0x4, 0x8001, 0x1, 0x2, 0x8000, 0x5, 0x5}}, {0xe, 0x2, [0xb, 0x2, 0x9, 0xe4, 0x0]}}, {{0x1c, 0x1, {0x2, 0x7, 0x5, 0x4, 0x0, 0x7, 0x401, 0x3}}, {0xa, 0x2, [0x6, 0x1, 0x10]}}, {{0x1c, 0x1, {0x3, 0x7, 0x6, 0x0, 0x0, 0x9, 0x8001, 0x3}}, {0xa, 0x2, [0xe3, 0xae, 0xff9d]}}, {{0x1c, 0x1, {0x7, 0x9f, 0x7, 0xe, 0x3, 0xffffffff, 0x80, 0x1}}, {0x6, 0x2, [0xfffb]}}, {{0x1c, 0x1, {0x6, 0x4, 0x9, 0x6, 0x1, 0x7, 0x7a, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x5, 0x80, 0x1, 0x0, 0x2, 0x7, 0x2, 0x7}}, {0x12, 0x2, [0x5, 0x0, 0xd, 0x0, 0x0, 0x40, 0x8]}}]}, @TCA_STAB={0x94, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0x200, 0x6, 0x1, 0x7, 0x2, 0x1}}, {0x6, 0x2, [0xa]}}, {{0x1c, 0x1, {0x1, 0x8, 0x5, 0x81, 0x0, 0x86a, 0xffff, 0x1}}, {0x6, 0x2, [0x1b60]}}, {{0x1c, 0x1, {0x6, 0x7f, 0xb, 0x862, 0x1, 0x22f, 0x2, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x7, 0xff, 0x800, 0xc, 0x0, 0x0, 0xf0, 0x1}}, {0x6, 0x2, [0xf6c9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x105d}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x54, 0x0, 0x4, 0x1, 0x8, 0x2, 0x6}}, {0x10, 0x2, [0x400, 0x7, 0x7052, 0x7, 0x16, 0x1]}}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000804}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.269602708s ago: executing program 5 (id=5018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) 3.879887134s ago: executing program 1 (id=5019): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000002c0)={0x58, 0xa, 0x1, "b50404cf3d04d7ad1ce6caa4751ea58fc78e9e22956841e87000", 0x3032344d}) 3.84628219s ago: executing program 5 (id=5021): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x46, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) open(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x3c00, 0x960, 0xf00, 0x4b0, 0x8, 0x2, 0x18, 0x0, {0xf57dc900, 0x401, 0x1}, {0xffff, 0x72, 0x1}, {0x0, 0x4}, {0x0, 0xf}, 0x1, 0x100, 0x0, 0x1, 0x1, 0x6, 0x6, 0x9, 0x7, 0x9, 0xb030, 0x8, 0x6, 0x100, 0x2, 0x2}) 3.705760292s ago: executing program 6 (id=5022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x14}}, 0xc000) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 3.705554054s ago: executing program 1 (id=5023): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c00010002000000000000000c000100bf000000000400000c00010002000300ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c00010002000000a400000014000300766c616e30"], 0xd0}}, 0x0) 3.608027723s ago: executing program 1 (id=5025): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x798634ff4bd2b472}, 0x4004040) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902a2000301ab00000904000000010100000a24010000000201020c240703000000ed129e8430072408000000000924030000000302000904010000010200000904010101010200000824020100"], 0x0) 3.524702626s ago: executing program 7 (id=5026): syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 3.403335919s ago: executing program 7 (id=5027): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400001, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) 3.344185278s ago: executing program 7 (id=5028): syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@random="6f4191a252dc", @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x200, 0x8}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@delqdisc={0x264, 0x25, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xf, 0xfff2}, {0xb, 0x10}, {0xfff1}}, [@TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xf1, 0xf, 0xb8, 0x1, 0xe5, 0x0, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x8, 0x7f, 0x9, 0x27, 0x0, 0xf, 0xdd, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0x1, 0x35, 0xbc, 0x2, 0xc, 0x1, 0x1}}, {0x6, 0x2, [0x84]}}, {{0x1c, 0x1, {0x4, 0x4, 0x8001, 0x1, 0x2, 0x8000, 0x5, 0x5}}, {0xe, 0x2, [0xb, 0x2, 0x9, 0xe4, 0x0]}}, {{0x1c, 0x1, {0x2, 0x7, 0x5, 0x4, 0x0, 0x7, 0x401, 0x3}}, {0xa, 0x2, [0x6, 0x1, 0x10]}}, {{0x1c, 0x1, {0x3, 0x7, 0x6, 0x0, 0x0, 0x9, 0x8001, 0x3}}, {0xa, 0x2, [0xe3, 0xae, 0xff9d]}}, {{0x1c, 0x1, {0x7, 0x9f, 0x7, 0xe, 0x3, 0xffffffff, 0x80, 0x1}}, {0x6, 0x2, [0xfffb]}}, {{0x1c, 0x1, {0x6, 0x4, 0x9, 0x6, 0x1, 0x7, 0x7a, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x5, 0x80, 0x1, 0x0, 0x2, 0x7, 0x2, 0x7}}, {0x12, 0x2, [0x5, 0x0, 0xd, 0x0, 0x0, 0x40, 0x8]}}]}, @TCA_STAB={0x94, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0x200, 0x6, 0x1, 0x7, 0x2, 0x1}}, {0x6, 0x2, [0xa]}}, {{0x1c, 0x1, {0x1, 0x8, 0x5, 0x81, 0x0, 0x86a, 0xffff, 0x1}}, {0x6, 0x2, [0x1b60]}}, {{0x1c, 0x1, {0x6, 0x7f, 0xb, 0x862, 0x1, 0x22f, 0x2, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x7, 0xff, 0x800, 0xc, 0x0, 0x0, 0xf0, 0x1}}, {0x6, 0x2, [0xf6c9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x105d}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x54, 0x0, 0x4, 0x1, 0x8, 0x2, 0x6}}, {0x10, 0x2, [0x400, 0x7, 0x7052, 0x7, 0x2, 0x1]}}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000804}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.229256406s ago: executing program 7 (id=5029): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000190c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[r1], 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 2.833159245s ago: executing program 5 (id=5030): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a5f14a204319502201000102030109021200"], 0x0) 2.832800504s ago: executing program 7 (id=5031): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ppoll(&(0x7f0000000200)=[{r1, 0x4000}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.809232078s ago: executing program 6 (id=5032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x301}, 0x14}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/wakeup_count', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = syz_open_procfs(r4, &(0x7f0000000040)='net/ipv6_route\x00') r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) preadv(r7, &(0x7f0000002240)=[{&(0x7f0000001100)=""/4101, 0x1005}], 0x1, 0x2, 0x6) 2.705730895s ago: executing program 4 (id=5033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 2.705470017s ago: executing program 4 (id=5034): r0 = open(0x0, 0x14927e, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20, 0xfffffffffffffff5, 0x0, {0x8, 0x0, 0xffd, 0x2}}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @local}}}, 0x84) 2.263809877s ago: executing program 4 (id=5035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c00010002000000000000000c000100bf000000000400000c00010002000300ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c00010002000000a400000014000300766c616e30"], 0xd0}}, 0x0) 2.042746316s ago: executing program 4 (id=5036): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r2}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14e15, 0x28812}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}]}, 0x44}}, 0x20040840) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 1.835629038s ago: executing program 6 (id=5037): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$bpf(0x0, 0x0, 0x0, 0x66000, &(0x7f0000000240)={[{@mode={'mode', 0x3d, 0xe5}}], [{@euid_eq}, {@permit_directio}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = getpid() syz_pidfd_open(r2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x8, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) 1.818076208s ago: executing program 1 (id=5038): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400001, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) 1.760471483s ago: executing program 7 (id=5039): syz_open_procfs(0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x42020200) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 816.979145ms ago: executing program 4 (id=5040): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x46, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) open(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x3c00, 0x960, 0xf00, 0x4b0, 0x8, 0x2, 0x18, 0x0, {0xf57dc900, 0x401, 0x1}, {0xffff, 0x72, 0x1}, {0x0, 0x4}, {0x0, 0xf}, 0x1, 0x100, 0x0, 0x1, 0x1, 0x6, 0x6, 0x9, 0x7, 0x9, 0xb030, 0x8, 0x6, 0x100, 0x2, 0x2}) 780.444424ms ago: executing program 1 (id=5041): sched_setscheduler(0x0, 0x2, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40a04) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 697.020028ms ago: executing program 6 (id=5042): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 675.800859ms ago: executing program 6 (id=5043): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1, 0x2, 0x100, 0x4}) fcntl$lock(r1, 0x26, &(0x7f00000002c0)={0x0, 0x0, 0xff34}) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r0, {0x7}}, './cgroup/../file0\x00'}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000fc0)=0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r7, 0xf09, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x8084) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="200029bd7000fbdbdf2531000000080001005500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990004000000520000000800db00", @ANYRES32=r3, @ANYBLOB="0800010800db00"/20, @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xd7ecd36814b87d08}, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r8 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 5 (id=5044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090200000000000000000f000000050030000000000008000300", @ANYRES32=r2], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): nitialized): couldn't initialize controller: -22 [ 1655.637619][T17028] ems_usb 2-1:0.0: probe with driver ems_usb failed with error -22 [ 1655.646785][ T30] audit: type=1400 audit(1742556793.363:3439): avc: denied { bind } for pid=23006 comm="syz.7.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1655.647223][T18381] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1655.681600][T23008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4384'. [ 1655.700492][T18381] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1655.709850][T18381] usb 5-1: Manufacturer: syz [ 1655.717896][T18381] usb 5-1: config 0 descriptor?? [ 1655.834972][T17028] usb 2-1: USB disconnect, device number 43 [ 1656.043048][T18381] rc_core: IR keymap rc-hauppauge not found [ 1656.049409][T18381] Registered IR keymap rc-empty [ 1656.056596][T18381] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1656.115950][T18381] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1656.172253][T18381] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1656.425910][T18381] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input112 [ 1656.491652][ T30] audit: type=1400 audit(1742556794.203:3440): avc: denied { read } for pid=5180 comm="acpid" name="event4" dev="devtmpfs" ino=3554 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1656.494703][T18381] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1656.530832][ T30] audit: type=1400 audit(1742556794.203:3441): avc: denied { open } for pid=5180 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3554 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1656.554553][T18381] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1656.563266][ T30] audit: type=1400 audit(1742556794.203:3442): avc: denied { ioctl } for pid=5180 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3554 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1656.572157][T18381] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1656.650906][T18381] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1656.684795][T18381] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1656.795564][T18381] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1656.822902][T18381] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1656.840933][T18381] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1656.881999][T18381] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1656.890795][ T46] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1656.900850][T18381] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1656.934878][T18381] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1656.944167][T18381] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1656.971159][T18381] usb 5-1: USB disconnect, device number 58 [ 1657.151503][ T46] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1657.166529][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.177267][ T46] usb 8-1: config 0 descriptor?? [ 1657.192932][ T46] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1657.266106][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.277129][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.287058][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.297552][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.307464][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.317934][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.327822][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.338414][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.348347][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.380164][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.466528][ T30] audit: type=1400 audit(1742556795.183:3443): avc: denied { append } for pid=23027 comm="syz.6.4391" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1657.690129][T15619] usb 6-1: USB disconnect, device number 42 [ 1657.766174][ T30] audit: type=1400 audit(1742556795.483:3444): avc: denied { read write } for pid=23036 comm="syz.4.4395" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1657.799845][ T30] audit: type=1400 audit(1742556795.483:3445): avc: denied { open } for pid=23036 comm="syz.4.4395" path="/283/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1657.825412][ T30] audit: type=1800 audit(1742556795.493:3446): pid=23037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4395" name="/" dev="9p" ino=2 res=0 errno=0 [ 1657.914033][ T46] cpia1 8-1:0.0: unexpected state after lo power cmd: 00 [ 1658.257348][T23046] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1658.284541][T23046] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1658.550476][ T30] audit: type=1400 audit(1742556795.933:3447): avc: denied { bind } for pid=23041 comm="syz.6.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1658.611865][ T46] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 1658.652605][ T30] audit: type=1400 audit(1742556795.953:3448): avc: denied { create } for pid=23041 comm="syz.6.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1658.691106][ T30] audit: type=1400 audit(1742556795.963:3449): avc: denied { write } for pid=23041 comm="syz.6.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1658.701787][T23040] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1658.719776][T23040] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1658.939956][ T30] audit: type=1400 audit(1742556796.653:3450): avc: denied { ioctl } for pid=23048 comm="syz.4.4398" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1658.948703][T17028] usb 8-1: USB disconnect, device number 12 [ 1659.229787][ T30] audit: type=1400 audit(1742556796.813:3451): avc: denied { write } for pid=23048 comm="syz.4.4398" laddr=127.0.0.1 lport=38230 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1659.453320][ T46] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1659.470901][T15619] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1659.615516][ T46] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1659.628702][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.637131][T15619] usb 7-1: Using ep0 maxpacket: 8 [ 1659.646264][ T46] usb 2-1: Product: syz [ 1659.650833][ T46] usb 2-1: Manufacturer: syz [ 1659.656054][T15619] usb 7-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 1659.667014][T15619] usb 7-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 1659.676733][ T46] usb 2-1: SerialNumber: syz [ 1659.691770][ T46] usb 2-1: config 0 descriptor?? [ 1659.707052][T15619] usb 7-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 1659.716726][T15619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.760892][T15619] usb 7-1: Product: syz [ 1659.765121][T15619] usb 7-1: Manufacturer: syz [ 1659.771708][T15619] usb 7-1: SerialNumber: syz [ 1660.022459][T15619] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 1660.075092][T15619] dvb-usb: bulk message failed: -22 (3/0) [ 1660.322696][T15619] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1660.564831][T15619] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 1660.579592][ T46] airspy 2-1:0.0: Board ID: 00 [ 1660.587073][ T46] airspy 2-1:0.0: Firmware version: [ 1660.592725][T15619] usb 7-1: media controller created [ 1660.867594][T15619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1660.950108][T15619] dvb-usb: bulk message failed: -22 (6/0) [ 1660.974452][T15619] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 1661.012809][T15619] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input113 [ 1661.055677][T15619] dvb-usb: schedule remote query interval to 150 msecs. [ 1661.075485][T15619] dvb-usb: bulk message failed: -22 (3/0) [ 1661.789645][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1661.789675][ T30] audit: type=1400 audit(1742556799.103:3455): avc: denied { ioctl } for pid=23069 comm="syz.4.4405" path="socket:[85385]" dev="sockfs" ino=85385 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1662.081808][ T46] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 1662.102022][ T30] audit: type=1400 audit(1742556799.233:3456): avc: denied { write } for pid=23069 comm="syz.4.4405" path="socket:[85379]" dev="sockfs" ino=85379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1662.111442][ T46] airspy 2-1:0.0: Registered as swradio24 [ 1662.672880][T23081] tty tty34: ldisc open failed (-12), clearing slot 33 [ 1662.680008][T18975] dvb-usb: bulk message failed: -22 (1/0) [ 1662.690189][T18975] dvb-usb: error while querying for an remote control event. [ 1662.699126][T15619] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 1662.721029][ T30] audit: type=1400 audit(1742556800.413:3457): avc: denied { append } for pid=23085 comm="syz.5.4408" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1662.749205][ T46] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1662.786863][T15619] usb 7-1: USB disconnect, device number 37 [ 1662.917183][T23090] ubi: mtd0 is already attached to ubi31 [ 1663.059628][ T46] usb 2-1: USB disconnect, device number 44 [ 1663.325771][T23091] xt_cgroup: path and classid specified [ 1663.371114][T23091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4409'. [ 1663.587846][T15619] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 1663.705470][ T30] audit: type=1400 audit(1742556801.423:3458): avc: denied { ioctl } for pid=23101 comm="syz.1.4413" path="socket:[85524]" dev="sockfs" ino=85524 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1663.862000][T17209] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1663.873847][ T9] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 1663.973980][T15619] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1664.082561][T23111] loop2: detected capacity change from 0 to 7 [ 1664.107561][T23111] Dev loop2: unable to read RDB block 7 [ 1664.114357][T23111] loop2: unable to read partition table [ 1664.123984][T23111] loop2: partition table beyond EOD, truncated [ 1664.130395][T23111] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1664.253943][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1664.268608][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1664.298237][ T9] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1664.317663][T15619] usb 7-1: device descriptor read/all, error -71 [ 1664.397239][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.426296][ T9] usb 8-1: config 0 descriptor?? [ 1664.684351][T23119] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1665.260000][ T30] audit: type=1400 audit(1742556802.413:3459): avc: denied { open } for pid=23114 comm="syz.6.4416" path="/dev/ttyr1" dev="devtmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1665.627941][ T9] kone 0003:1E7D:2CED.0003: unknown main item tag 0x2 [ 1665.646430][ T9] kone 0003:1E7D:2CED.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.7-1/input0 [ 1666.298512][T17209] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1666.307600][T17209] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1666.402267][T17209] usb 6-1: can't read configurations, error -71 [ 1666.459759][ T46] usb 8-1: USB disconnect, device number 13 [ 1666.902278][ T30] audit: type=1400 audit(1742556804.613:3460): avc: denied { mount } for pid=23134 comm="syz.6.4422" name="/" dev="rpc_pipefs" ino=85563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1666.925512][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.434728][ T30] audit: type=1400 audit(1742556805.153:3461): avc: denied { bind } for pid=23140 comm="syz.4.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1667.454315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.462009][T23141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4427'. [ 1667.477770][T23141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.652572][T23141] bridge_slave_1 (unregistering): left allmulticast mode [ 1668.659665][T23141] bridge_slave_1 (unregistering): left promiscuous mode [ 1668.686505][T23141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.977217][T23159] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1668.987714][T23159] team0: Device ipvlan2 is already an upper device of the team interface [ 1669.628045][ T30] audit: type=1400 audit(1742556807.343:3462): avc: denied { read write } for pid=23161 comm="syz.6.4431" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1669.665724][ T30] audit: type=1400 audit(1742556807.343:3463): avc: denied { open } for pid=23161 comm="syz.6.4431" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1670.665194][T23175] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1671.043183][ T30] audit: type=1400 audit(1742556808.753:3464): avc: denied { read } for pid=23177 comm="syz.5.4436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1672.031677][T18975] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1672.121419][T17209] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1672.258218][T18975] usb 2-1: Using ep0 maxpacket: 8 [ 1672.318391][T17209] usb 7-1: config 0 has an invalid descriptor of length 238, skipping remainder of the config [ 1672.343631][T18975] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1672.386998][T18975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1672.404657][T17209] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1672.426924][T18975] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1672.448229][T17209] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1672.463868][T18975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1672.475199][T17209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.487376][T17209] usb 7-1: Product: syz [ 1672.492543][T18975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1672.507208][T17209] usb 7-1: Manufacturer: syz [ 1672.512083][T17209] usb 7-1: SerialNumber: syz [ 1672.517713][T18975] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1672.528056][T17209] usb 7-1: config 0 descriptor?? [ 1672.533259][T18975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1672.546959][T18975] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1672.558915][T18975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1672.576583][T18975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1672.776679][T18975] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1672.784246][T18975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1672.799352][T18975] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1672.811937][T18975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1673.371083][T18975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1673.385000][T18975] usb 2-1: string descriptor 0 read error: -22 [ 1673.517110][T23214] ptrace attach of "./syz-executor exec"[18065] was attempted by "./syz-executor exec"[23214] [ 1673.949568][T18975] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1673.959120][T18975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.002957][T18975] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1674.115660][T18975] usb 2-1: USB disconnect, device number 45 [ 1675.101035][ T46] usb 7-1: USB disconnect, device number 40 [ 1675.480729][ T46] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1675.590779][T17209] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1675.670518][T23255] mkiss: ax0: crc mode is auto. [ 1675.675847][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 1675.693890][ T46] usb 7-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1675.713570][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.732292][ T46] usb 7-1: Product: syz [ 1675.741559][ T46] usb 7-1: Manufacturer: syz [ 1675.746228][ T46] usb 7-1: SerialNumber: syz [ 1675.756912][ T46] usb 7-1: config 0 descriptor?? [ 1675.763585][T17209] usb 2-1: config 253 has an invalid interface number: 222 but max is 0 [ 1675.773817][T17209] usb 2-1: config 253 has no interface number 0 [ 1675.780337][T17209] usb 2-1: config 253 interface 222 has no altsetting 0 [ 1675.789314][ T46] go7007 7-1:0.0: Sensoray 2250 found [ 1675.795583][ T46] go7007 7-1:0.0: probe with driver go7007 failed with error -12 [ 1675.805716][T17209] usb 2-1: New USB device found, idVendor=0830, idProduct=0002, bcdDevice=be.59 [ 1675.818770][T17209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.836454][T17209] usb 2-1: Product: syz [ 1675.841573][T17209] usb 2-1: Manufacturer: syz [ 1675.846225][T17209] usb 2-1: SerialNumber: syz [ 1676.089304][T17209] usb 2-1: active config #253 != 1 ?? [ 1676.101903][T17209] usb 2-1: USB disconnect, device number 46 [ 1676.157594][ T30] audit: type=1400 audit(1742556813.873:3465): avc: denied { write } for pid=23262 comm="syz.7.4466" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1676.882075][ T9] usb 7-1: USB disconnect, device number 41 [ 1676.972733][ T30] audit: type=1400 audit(1742556814.563:3466): avc: denied { mount } for pid=23259 comm="syz.4.4465" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1678.669625][ T30] audit: type=1400 audit(1742556816.383:3467): avc: denied { create } for pid=23291 comm="syz.1.4474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1679.552256][ T30] audit: type=1400 audit(1742556817.263:3468): avc: denied { unmount } for pid=20111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1680.807903][ T30] audit: type=1400 audit(1742556818.513:3469): avc: denied { read } for pid=23315 comm="syz.7.4479" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1680.831721][T23322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.843085][ T30] audit: type=1400 audit(1742556818.513:3470): avc: denied { open } for pid=23315 comm="syz.7.4479" path="/277/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1680.866413][T23322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.884236][T23322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.905242][ T30] audit: type=1400 audit(1742556818.513:3471): avc: denied { ioctl } for pid=23315 comm="syz.7.4479" path="/277/file0/file0" dev="fuse" ino=0 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1680.944705][T23322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.963444][T23322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.990518][T23322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.026361][T23322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.045014][T23322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.087843][T23322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.108017][T23322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.366074][T23376] vlan0: entered promiscuous mode [ 1682.433187][T23384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.482018][T23384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.496506][T23384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.510971][T23384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.536249][T23384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.568130][T23384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.578349][T23384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.622757][T23384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.650748][T23384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.669291][T23384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.680740][ T30] audit: type=1400 audit(1742556820.383:3472): avc: denied { connect } for pid=23392 comm="syz.1.4503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1682.706724][ T30] audit: type=1400 audit(1742556820.393:3473): avc: denied { write } for pid=23392 comm="syz.1.4503" path="socket:[87206]" dev="sockfs" ino=87206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1683.547518][T23428] evm: overlay not supported [ 1684.020139][ T30] audit: type=1400 audit(1742556821.283:3474): avc: denied { append } for pid=23423 comm="syz.6.4512" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1684.222678][ T30] audit: type=1400 audit(1742556821.943:3475): avc: denied { setopt } for pid=23429 comm="syz.7.4514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1684.247989][ T30] audit: type=1400 audit(1742556821.943:3476): avc: denied { shutdown } for pid=23429 comm="syz.7.4514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1685.040552][T17028] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1685.203265][T17028] usb 7-1: Using ep0 maxpacket: 32 [ 1685.226222][T17028] usb 7-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1685.242380][T17028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.280919][T17028] usb 7-1: Product: syz [ 1685.289316][T17028] usb 7-1: Manufacturer: syz [ 1685.310758][T17028] usb 7-1: SerialNumber: syz [ 1685.330329][T17028] usb 7-1: config 0 descriptor?? [ 1685.355389][T17028] go7007 7-1:0.0: Sensoray 2250 found [ 1685.377594][T17028] go7007 7-1:0.0: probe with driver go7007 failed with error -12 [ 1685.590910][T18381] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1685.638712][ T46] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1685.735759][T15619] usb 7-1: USB disconnect, device number 42 [ 1685.784554][T18381] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.807818][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 1685.857132][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1685.872754][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1685.884488][T18381] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1685.884518][T18381] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1685.897370][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1685.908648][T18381] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1685.941193][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1685.983686][ T46] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1685.995402][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.008311][ T46] usb 5-1: Product: syz [ 1686.009471][T18381] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1686.012849][ T46] usb 5-1: Manufacturer: syz [ 1686.033423][T18381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.038723][ T46] usb 5-1: SerialNumber: syz [ 1686.074349][ T46] usb 5-1: config 0 descriptor?? [ 1686.122866][T18381] usb 2-1: Product: syz [ 1686.135594][T18381] usb 2-1: Manufacturer: syz [ 1686.139822][ T46] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input115 [ 1686.162444][T18381] usb 2-1: SerialNumber: syz [ 1686.301144][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 1686.442348][ T46] rc_core: IR keymap rc-imon-pad not found [ 1686.460730][ T46] Registered IR keymap rc-empty [ 1686.462118][T18381] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1686.465695][ T46] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1686.498901][T18381] usb 2-1: MIDIStreaming interface descriptor not found [ 1686.510778][ T46] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1686.741550][ T46] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1686.753030][ T46] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input116 [ 1686.774065][T18381] usb 2-1: USB disconnect, device number 47 [ 1687.627418][ T30] audit: type=1400 audit(1742556825.183:3477): avc: denied { ioctl } for pid=23472 comm="syz.5.4532" path="socket:[87316]" dev="sockfs" ino=87316 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1687.766475][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.774441][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.782395][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.790282][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.798196][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.806123][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.814026][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.822030][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.830468][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.838380][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.846294][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.854199][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.862104][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.870041][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.877969][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.885904][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.893824][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.901747][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.909651][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.917564][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.925494][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.933424][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.941361][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.949290][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.957215][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.965141][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.973042][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.980955][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.988852][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1687.996774][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.004687][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.012589][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.020495][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.028411][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.036328][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.044236][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.052134][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.060037][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.067996][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.075923][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.083868][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.092692][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.100601][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.108535][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.116459][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.124424][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.132339][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.140266][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.148199][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.156139][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.164159][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.172060][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.179968][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.187869][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.195807][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.203765][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.211665][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.219557][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.227482][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.235371][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.243255][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.251147][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.259061][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.266955][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.274842][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.282806][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.290717][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.298617][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.306548][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.314454][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.322360][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.330246][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.338140][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.346028][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.353911][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.361820][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.369718][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.377620][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.385688][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.393612][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.401511][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.409396][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.417320][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.425378][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.433275][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.441166][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.449117][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.457065][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.464979][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.472868][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.480753][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.488639][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.496527][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.504408][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.512353][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.520272][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.528178][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.536061][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.543955][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.551853][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.559738][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.567629][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.575523][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.583406][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.591299][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.599180][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.607393][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.615295][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.623175][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.631142][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.639062][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.646949][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.654855][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.662778][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.670686][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.678570][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.686489][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.694372][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.702262][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.710161][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.718044][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.725937][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.733822][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.741701][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.749592][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.757486][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.765396][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.773279][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.781263][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.789153][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.797043][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.804925][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.812821][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.820727][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.828621][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.836504][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.844405][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.852288][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.860171][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.868170][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.876072][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.883956][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.891866][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.899760][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.907647][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.915543][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.923428][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.931320][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.939214][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.948091][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.956008][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.963906][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.971791][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.979677][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.987571][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1688.995457][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.003345][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.011226][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.019147][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.027152][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.035077][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.042973][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.050857][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.058750][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.066644][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.074620][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.082540][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.090450][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.098368][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.106276][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.114187][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.122159][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.130073][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.137991][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.145991][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.153891][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.161782][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.169667][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.177559][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.185471][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.193405][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.201295][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.209171][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.217081][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.224990][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.232887][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.240775][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.248657][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.256679][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.264629][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.272556][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.280440][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.288380][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.296274][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.304180][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.312062][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.319939][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.327840][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.335729][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.343621][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.351505][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.359383][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.367283][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.375186][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.383116][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.391007][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.398923][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.406861][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.414746][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.422684][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.430576][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.438461][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.446339][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.454225][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.462126][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.470007][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.477890][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.485779][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.493661][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.501587][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.509477][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.517429][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.525427][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.533346][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.541217][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.549114][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.557035][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.564916][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.572813][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.587688][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.595683][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.603607][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.611513][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.619410][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.627333][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.635275][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.643193][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.643452][T23488] udevd[23488]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1689.651071][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.674781][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.682705][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.690631][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.698476][ T46] imon 5-1:0.0: iMON device (15c2:003b, intf0) on usb<5:59> initialized [ 1689.707922][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.715883][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.723796][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.731694][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.739610][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.747500][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.755395][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.763283][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.771171][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.779055][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.787096][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.794997][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.802909][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.810824][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.818742][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.828054][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.835946][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.843833][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.851715][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.859625][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.867540][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.875463][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.883368][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.891354][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.899267][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.907207][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.916295][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.924203][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.932159][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.940059][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.948038][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.955978][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.963926][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.971858][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.979785][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1689.987732][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.000701][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.008633][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.016656][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.024555][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.032487][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.040397][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.048286][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.056195][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.064124][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.073908][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.081888][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.089787][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.097693][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.105607][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.113499][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.121447][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1690.122585][T18381] usb 5-1: USB disconnect, device number 59 [ 1691.250939][ T46] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1691.610812][ T46] usb 7-1: Using ep0 maxpacket: 16 [ 1691.620197][ T46] usb 7-1: config 8 has an invalid interface number: 39 but max is 0 [ 1691.628472][ T46] usb 7-1: config 8 has no interface number 0 [ 1691.634843][ T46] usb 7-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1691.657342][ T46] usb 7-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1691.667457][ T46] usb 7-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1691.787264][ T46] usb 7-1: config 8 interface 39 has no altsetting 0 [ 1691.836868][ T46] usb 7-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1691.848326][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.902914][ T46] usb 7-1: Product: syz [ 1691.928696][ T46] usb 7-1: Manufacturer: syz [ 1691.964869][ T46] usb 7-1: SerialNumber: syz [ 1692.030823][T17028] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1692.191436][T17028] usb 2-1: Using ep0 maxpacket: 32 [ 1692.200301][ T46] ipheth 7-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1692.227490][ T30] audit: type=1326 audit(1742556829.943:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23519 comm="syz.5.4545" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6515b8d169 code=0x0 [ 1692.351552][ T30] audit: type=1400 audit(1742556830.013:3479): avc: denied { write } for pid=23519 comm="syz.5.4545" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1692.622069][T17028] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1692.646828][ T46] ipheth 7-1:8.39: probe with driver ipheth failed with error -71 [ 1692.651902][T17028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.677090][T17028] usb 2-1: Product: syz [ 1692.696387][T17028] usb 2-1: Manufacturer: syz [ 1692.715914][T17028] usb 2-1: SerialNumber: syz [ 1692.735000][T17028] usb 2-1: config 0 descriptor?? [ 1692.757700][T17028] go7007 2-1:0.0: Sensoray 2250 found [ 1692.779743][T17028] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 1692.893693][ T46] usb 7-1: USB disconnect, device number 43 [ 1692.920778][T18381] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1693.196615][T18381] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.274912][T18381] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1693.287900][T18381] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1693.300109][T18381] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1693.309083][T18381] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1693.406663][T18381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.414916][T18381] usb 5-1: Product: syz [ 1693.418649][ T46] usb 2-1: USB disconnect, device number 48 [ 1693.419428][T18381] usb 5-1: Manufacturer: syz [ 1693.430608][T18381] usb 5-1: SerialNumber: syz [ 1693.518741][T23537] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4548'. [ 1693.542372][ T30] audit: type=1400 audit(1742556831.253:3480): avc: denied { mount } for pid=23530 comm="syz.7.4548" name="/" dev="autofs" ino=86736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1693.593791][ T30] audit: type=1400 audit(1742556831.253:3481): avc: denied { bind } for pid=23530 comm="syz.7.4548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1693.656083][T18381] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1693.663741][T18381] usb 5-1: MIDIStreaming interface descriptor not found [ 1693.711355][T18381] usb 5-1: USB disconnect, device number 60 [ 1693.942112][T23488] udevd[23488]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1694.382192][ T30] audit: type=1400 audit(1742556832.093:3482): avc: denied { bind } for pid=23548 comm="syz.1.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1694.748567][T23558] netlink: 'syz.4.4557': attribute type 16 has an invalid length. [ 1694.756460][T23558] netlink: 'syz.4.4557': attribute type 17 has an invalid length. [ 1694.776314][T23558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.069104][ T30] audit: type=1400 audit(1742556832.753:3483): avc: denied { read } for pid=23548 comm="syz.1.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1695.594255][T18381] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1696.270860][ T30] audit: type=1400 audit(1742556833.983:3484): avc: denied { unmount } for pid=18065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1696.380822][T18381] usb 7-1: Using ep0 maxpacket: 16 [ 1696.387590][T18381] usb 7-1: config 8 has an invalid interface number: 39 but max is 0 [ 1696.397745][T18381] usb 7-1: config 8 has no interface number 0 [ 1696.407914][T18381] usb 7-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1696.439410][T18381] usb 7-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1696.565775][T23554] syz.5.4555: vmalloc error: size 538968064, failed to allocated page array size 1052672, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1696.590383][T18381] usb 7-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1696.600985][T18381] usb 7-1: config 8 interface 39 has no altsetting 0 [ 1696.608289][T23554] CPU: 0 UID: 0 PID: 23554 Comm: syz.5.4555 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 1696.608315][T23554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1696.608325][T23554] Call Trace: [ 1696.608331][T23554] [ 1696.608343][T23554] dump_stack_lvl+0x16c/0x1f0 [ 1696.608373][T23554] warn_alloc+0x24d/0x3a0 [ 1696.608394][T23554] ? __pfx_warn_alloc+0x10/0x10 [ 1696.608422][T23554] ? __get_vm_area_node+0x1b0/0x2f0 [ 1696.608447][T23554] ? __get_vm_area_node+0x1dc/0x2f0 [ 1696.608478][T23554] __vmalloc_node_range_noprof+0x1102/0x1530 [ 1696.608514][T23554] ? hash_ipport_create+0x845/0x1a00 [ 1696.608544][T23554] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1696.608573][T23554] ? rcu_is_watching+0x12/0xc0 [ 1696.608592][T23554] ? trace_kmalloc+0x2d/0xd0 [ 1696.608614][T23554] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 1696.608634][T23554] ? hash_ipport_create+0x845/0x1a00 [ 1696.608658][T23554] __kvmalloc_node_noprof+0x14f/0x1a0 [ 1696.608685][T23554] ? hash_ipport_create+0x845/0x1a00 [ 1696.608709][T23554] hash_ipport_create+0x845/0x1a00 [ 1696.608740][T23554] ? __pfx_hash_ipport_create+0x10/0x10 [ 1696.608768][T23554] ? __pfx_hash_ipport_create+0x10/0x10 [ 1696.608794][T23554] ? ip_set_create+0x7cb/0x14d0 [ 1696.608811][T23554] ? ip_set_create+0x6c8/0x14d0 [ 1696.608827][T23554] ip_set_create+0x7cb/0x14d0 [ 1696.608851][T23554] ? __pfx_ip_set_create+0x10/0x10 [ 1696.608903][T23554] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 1696.608941][T23554] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1696.608971][T23554] ? __pfx___lock_acquire+0x10/0x10 [ 1696.609020][T23554] ? lock_acquire+0x2f/0xb0 [ 1696.609042][T23554] ? avc_has_perm_noaudit+0x61/0x3a0 [ 1696.609070][T23554] netlink_rcv_skb+0x16b/0x440 [ 1696.609095][T23554] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1696.609125][T23554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1696.609161][T23554] ? bpf_lsm_capable+0x9/0x10 [ 1696.609182][T23554] ? security_capable+0x7e/0x260 [ 1696.609203][T23554] ? ns_capable+0xd7/0x110 [ 1696.609228][T23554] nfnetlink_rcv+0x1b4/0x430 [ 1696.609254][T23554] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1696.609280][T23554] ? netlink_deliver_tap+0x1ae/0xd30 [ 1696.609310][T23554] netlink_unicast+0x53c/0x7f0 [ 1696.609338][T23554] ? __pfx_netlink_unicast+0x10/0x10 [ 1696.609371][T23554] netlink_sendmsg+0x8b8/0xd70 [ 1696.609401][T23554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1696.609437][T23554] ____sys_sendmsg+0xaaf/0xc90 [ 1696.609457][T23554] ? copy_msghdr_from_user+0x10b/0x160 [ 1696.609484][T23554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1696.609517][T23554] ___sys_sendmsg+0x135/0x1e0 [ 1696.609545][T23554] ? __pfx____sys_sendmsg+0x10/0x10 [ 1696.609582][T23554] ? __pfx_lock_release+0x10/0x10 [ 1696.609606][T23554] ? trace_lock_acquire+0x14e/0x1f0 [ 1696.609636][T23554] ? __fget_files+0x206/0x3a0 [ 1696.609661][T23554] __sys_sendmsg+0x16e/0x220 [ 1696.609688][T23554] ? __pfx___sys_sendmsg+0x10/0x10 [ 1696.609714][T23554] ? __x64_sys_futex+0x1e1/0x4c0 [ 1696.609753][T23554] do_syscall_64+0xcd/0x250 [ 1696.609780][T23554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.609804][T23554] RIP: 0033:0x7f6515b8d169 [ 1696.609819][T23554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1696.609836][T23554] RSP: 002b:00007f6516a67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1696.609853][T23554] RAX: ffffffffffffffda RBX: 00007f6515da6080 RCX: 00007f6515b8d169 [ 1696.609864][T23554] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1696.609875][T23554] RBP: 00007f6515c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.609886][T23554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1696.609901][T23554] R13: 0000000000000000 R14: 00007f6515da6080 R15: 00007ffe0c5d46b8 [ 1696.609925][T23554] [ 1696.610279][T23554] Mem-Info: [ 1697.133375][T23554] active_anon:54351 inactive_anon:0 isolated_anon:0 [ 1697.133375][T23554] active_file:20679 inactive_file:39598 isolated_file:0 [ 1697.133375][T23554] unevictable:768 dirty:249 writeback:20 [ 1697.133375][T23554] slab_reclaimable:13252 slab_unreclaimable:108914 [ 1697.133375][T23554] mapped:33478 shmem:48028 pagetables:1281 [ 1697.133375][T23554] sec_pagetables:0 bounce:0 [ 1697.133375][T23554] kernel_misc_reclaimable:0 [ 1697.133375][T23554] free:1228588 free_pcp:1124 free_cma:0 [ 1697.529354][T18381] usb 7-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1697.570994][T18381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.581104][T23554] Node 0 active_anon:198988kB inactive_anon:0kB active_file:82716kB inactive_file:158328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118392kB dirty:972kB writeback:0kB shmem:172200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11788kB pagetables:5268kB sec_pagetables:0kB all_unreclaimable? no [ 1697.620709][T18381] usb 7-1: Product: syz [ 1697.632023][T18381] usb 7-1: Manufacturer: syz [ 1697.640991][T18381] usb 7-1: SerialNumber: syz [ 1697.660875][T23554] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1697.730951][T23554] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1697.763595][T23554] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1697.769749][T23554] Node 0 DMA32 free:1005044kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:193888kB inactive_anon:0kB active_file:82716kB inactive_file:158236kB unevictable:1536kB writepending:972kB present:3129332kB managed:2547360kB mlocked:0kB bounce:0kB free_pcp:13600kB local_pcp:11280kB free_cma:0kB [ 1697.808557][T23554] lowmem_reserve[]: 0 0 0 0 0 [ 1697.813874][T23554] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1697.884242][T23554] lowmem_reserve[]: 0 0 0 0 0 [ 1697.889035][T23554] Node 1 Normal free:3903208kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1698.558144][T18381] ipheth 7-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1698.690583][T23591] loop2: detected capacity change from 0 to 7 [ 1698.797458][T23591] Dev loop2: unable to read RDB block 7 [ 1698.813724][T23591] loop2: unable to read partition table [ 1699.111316][T23554] lowmem_reserve[]: 0 0 0 0 0 [ 1699.116087][T23554] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1699.117292][T18381] ipheth 7-1:8.39: probe with driver ipheth failed with error -71 [ 1699.130748][T23591] loop2: partition table beyond EOD, truncated [ 1699.150729][T23591] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1699.189181][T18381] usb 7-1: USB disconnect, device number 44 [ 1699.211106][T23554] Node 0 DMA32: 1249*4kB (UME) 850*8kB (UME) 448*16kB (UME) 339*32kB (UME) 1256*64kB (UME) 1551*128kB (UME) 885*256kB (UME) 400*512kB (UME) 104*1024kB (UME) 43*2048kB (UME) 22*4096kB (UME) = 1024756kB [ 1699.280773][T23554] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1699.779880][T23554] Node 1 Normal: 218*4kB (UME) 56*8kB (UME) 50*16kB (UME) 177*32kB (UME) 82*64kB (UME) 30*128kB (UME) 11*256kB (UM) 9*512kB (UM) 6*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3903208kB [ 1700.089273][T23613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4572'. [ 1700.650786][ T30] audit: type=1326 audit(1742556838.123:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23604 comm="syz.4.4572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a80f8d169 code=0x0 [ 1700.680794][T23554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1700.690358][T23554] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1700.701038][T23554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1700.771344][T23554] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1700.781092][T23554] 101197 total pagecache pages [ 1700.785866][T23554] 0 pages in swap cache [ 1700.790250][T23554] Free swap = 124972kB [ 1700.794746][T23554] Total swap = 124996kB [ 1700.798922][T23554] 2097051 pages RAM [ 1700.802969][T23554] 0 pages HighMem/MovableOnly [ 1700.807753][T23554] 428553 pages reserved [ 1700.844579][T23554] 0 pages cma reserved [ 1700.874462][ T30] audit: type=1400 audit(1742556838.583:3486): avc: denied { read write } for pid=23606 comm="syz.6.4571" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1701.105798][ T30] audit: type=1400 audit(1742556838.583:3487): avc: denied { open } for pid=23606 comm="syz.6.4571" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1701.570766][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1701.722448][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.752044][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1701.841947][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1701.878545][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1701.902721][ T9] usb 2-1: SerialNumber: syz [ 1702.146535][ T9] usb 2-1: 0:2 : does not exist [ 1702.186919][ T9] usb 2-1: USB disconnect, device number 49 [ 1702.278181][ T30] audit: type=1400 audit(1742556839.993:3488): avc: denied { read write } for pid=23630 comm="syz.4.4579" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1702.355120][ T30] audit: type=1400 audit(1742556839.993:3489): avc: denied { open } for pid=23630 comm="syz.4.4579" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1702.388679][T23633] mkiss: ax0: crc mode is auto. [ 1702.423690][T23097] udevd[23097]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1703.611156][T23641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4582'. [ 1703.652089][T23644] No source specified [ 1703.971625][T23645] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1703.985081][T23645] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1705.230779][T23670] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4590'. [ 1705.239859][T23670] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4590'. [ 1707.043868][T23685] loop2: detected capacity change from 0 to 7 [ 1707.063158][T23685] Dev loop2: unable to read RDB block 7 [ 1707.069195][T23685] loop2: unable to read partition table [ 1707.076716][T23685] loop2: partition table beyond EOD, truncated [ 1707.083133][T23685] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1707.246397][ T30] audit: type=1400 audit(1742556844.963:3490): avc: denied { accept } for pid=23676 comm="syz.5.4595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1707.281609][T23674] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1709.031768][ T30] audit: type=1400 audit(1742556846.753:3491): avc: denied { setopt } for pid=23712 comm="syz.5.4607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1709.051251][ C1] vkms_vblank_simulate: vblank timer overrun [ 1710.108073][T23735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4615'. [ 1710.191615][T23736] macvlan1: entered promiscuous mode [ 1710.233692][ T30] audit: type=1400 audit(1742556847.823:3492): avc: denied { write } for pid=23733 comm="syz.6.4615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1710.798107][ T30] audit: type=1400 audit(1742556847.823:3493): avc: denied { nlmsg_write } for pid=23733 comm="syz.6.4615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1711.801495][T18381] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1712.566911][ T30] audit: type=1400 audit(1742556850.233:3494): avc: denied { create } for pid=23753 comm="syz.7.4622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1712.753721][T18381] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.773352][T18381] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1712.794469][T18381] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1712.823902][T18381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1712.948853][ T30] audit: type=1400 audit(1742556850.233:3495): avc: denied { setopt } for pid=23753 comm="syz.7.4622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1712.968725][T18381] usb 7-1: SerialNumber: syz [ 1713.049064][T23767] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4625'. [ 1713.229667][T18381] usb 7-1: 0:2 : does not exist [ 1713.350914][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1713.497889][T18381] usb 7-1: USB disconnect, device number 45 [ 1713.622928][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1713.630369][ T9] usb 6-1: config 2 has an invalid interface number: 66 but max is 0 [ 1713.643195][ T9] usb 6-1: config 2 has no interface number 0 [ 1713.656295][ T9] usb 6-1: config 2 interface 66 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1713.679840][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= b.5d [ 1713.715296][T23771] udevd[23771]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1713.734066][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.757804][ T9] usb 6-1: Product: syz [ 1713.767627][ T9] usb 6-1: Manufacturer: syz [ 1713.797200][ T9] usb 6-1: SerialNumber: syz [ 1713.830236][ T9] usb 6-1: Found UVC 0.00 device syz (046d:08c6) [ 1713.879550][ T9] usb 6-1: No valid video chain found. [ 1714.040477][ T46] usb 6-1: USB disconnect, device number 45 [ 1714.892131][T23783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1715.027200][T23783] batadv_slave_0: entered promiscuous mode [ 1715.030846][ T30] audit: type=1400 audit(1742556852.343:3496): avc: denied { sqpoll } for pid=23777 comm="syz.1.4628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1715.099546][T23783] batadv_slave_0: entered allmulticast mode [ 1715.210935][ T30] audit: type=1326 audit(1742556852.353:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23777 comm="syz.1.4628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22b858d169 code=0x0 [ 1715.372700][ T30] audit: type=1400 audit(1742556853.093:3498): avc: denied { setopt } for pid=23791 comm="syz.5.4632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1715.691735][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1715.925837][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1716.069772][T23804] loop2: detected capacity change from 0 to 7 [ 1716.079936][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1716.095960][T23804] Dev loop2: unable to read RDB block 7 [ 1716.099184][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1716.101631][T23804] loop2: unable to read partition table [ 1716.125434][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.139045][ T9] usb 2-1: config 0 descriptor?? [ 1716.141497][T23804] loop2: partition table beyond EOD, [ 1716.153450][ T5823] Bluetooth: hci0: unexpected event for opcode 0x040e [ 1716.166443][T23804] truncated [ 1716.245874][T23804] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1717.332793][ T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input118 [ 1717.434428][ T9] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input119 [ 1717.470352][ T9] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input120 [ 1718.482782][ T9] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input121 [ 1718.501597][ T9] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1718.517932][ T9] usb 2-1: USB disconnect, device number 50 [ 1718.567072][ T30] audit: type=1326 audit(1742556856.283:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.7.4643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd5eb8d169 code=0x0 [ 1719.082552][T23833] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4646'. [ 1719.225474][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1719.331665][T15619] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1719.375090][T15619] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1719.599078][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1719.751930][T15619] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1719.887478][T23850] mkiss: ax0: crc mode is auto. [ 1719.892493][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1719.931143][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1720.074943][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1720.303294][T23859] netlink: 'syz.5.4653': attribute type 10 has an invalid length. [ 1720.311465][T23859] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4653'. [ 1720.447839][T23861] CUSE: unknown device info "ÿ" [ 1720.452901][T23861] CUSE: zero length info key specified [ 1720.876534][ T30] audit: type=1400 audit(1742556858.163:3500): avc: denied { write } for pid=23855 comm="syz.5.4653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1721.010600][T17028] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1721.079255][T23868] syz.7.4654: attempt to access beyond end of device [ 1721.079255][T23868] nbd7: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1721.104702][T23868] SQUASHFS error: Failed to read block 0x0: -5 [ 1721.114134][T23868] unable to read squashfs_super_block [ 1721.146522][T23871] netlink: 'syz.6.4655': attribute type 4 has an invalid length. [ 1721.173007][T23859] team0: Port device geneve0 added [ 1721.197084][T23867] netlink: 'syz.6.4655': attribute type 4 has an invalid length. [ 1721.199964][T23859] syz.5.4653 (23859) used greatest stack depth: 21328 bytes left [ 1721.213327][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1721.278804][T23867] syz.6.4655 (23867) used greatest stack depth: 21152 bytes left [ 1723.362652][T23895] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1724.829601][T23915] tipc: Started in network mode [ 1725.450249][T23915] tipc: Node identity 4, cluster identity 4711 [ 1725.497497][T23915] tipc: Node number set to 4 [ 1726.071778][ T46] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1726.241014][T15619] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1726.273455][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 1726.336815][ T46] usb 6-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1726.404947][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.500292][ T46] usb 6-1: Product: syz [ 1726.511974][T15619] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.524338][ T46] usb 6-1: Manufacturer: syz [ 1726.532858][ T46] usb 6-1: SerialNumber: syz [ 1726.537599][T15619] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1726.549499][T15619] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1726.561624][ T46] usb 6-1: config 0 descriptor?? [ 1726.710670][T15619] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1726.813220][ T46] go7007 6-1:0.0: Sensoray 2250 found [ 1726.864131][T15619] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1726.894068][ T46] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 1726.981400][T15619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.995456][ T46] usb 6-1: USB disconnect, device number 46 [ 1727.011679][T15619] usb 5-1: Product: syz [ 1727.016937][T15619] usb 5-1: Manufacturer: syz [ 1727.025913][T15619] usb 5-1: SerialNumber: syz [ 1727.256787][T15619] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1727.270410][T15619] usb 5-1: MIDIStreaming interface descriptor not found [ 1727.353243][T23963] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4686'. [ 1727.600972][T15619] usb 5-1: USB disconnect, device number 61 [ 1728.746040][T23971] udevd[23971]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1729.021824][T23976] loop2: detected capacity change from 0 to 7 [ 1729.232976][T23976] Dev loop2: unable to read RDB block 7 [ 1729.240765][T23976] loop2: unable to read partition table [ 1729.261345][T23976] loop2: partition table beyond EOD, truncated [ 1729.267686][T23976] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1730.183494][T24001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4692'. [ 1730.756132][T24017] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4698'. [ 1731.574900][T24025] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4704'. [ 1731.698576][T24028] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1731.707433][T24028] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1731.720736][T18975] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1731.728426][ T46] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1731.795019][T15619] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1731.900934][ T46] usb 8-1: Using ep0 maxpacket: 32 [ 1731.913704][ T46] usb 8-1: config 2 has an invalid interface number: 66 but max is 0 [ 1731.939725][ T46] usb 8-1: config 2 has no interface number 0 [ 1731.946355][T18975] usb 6-1: device descriptor read/64, error -71 [ 1731.954688][ T46] usb 8-1: config 2 interface 66 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1731.994310][T15619] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1732.021616][T15619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.030673][ T46] usb 8-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= b.5d [ 1732.041157][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.077042][ T46] usb 8-1: Product: syz [ 1732.093058][ T46] usb 8-1: Manufacturer: syz [ 1732.098493][T15619] usb 2-1: config 0 descriptor?? [ 1732.104859][ T46] usb 8-1: SerialNumber: syz [ 1732.115701][ T46] usb 8-1: Found UVC 0.00 device syz (046d:08c6) [ 1732.122806][ T46] usb 8-1: No valid video chain found. [ 1732.250765][T18975] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1732.326962][ T9] usb 8-1: USB disconnect, device number 14 [ 1732.427667][T18975] usb 6-1: device descriptor read/64, error -71 [ 1732.583979][T18975] usb usb6-port1: attempt power cycle [ 1732.597559][T15619] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1732.772666][T24011] elan 0003:04F3:0755.0005: pid 24011 passed too short report [ 1732.889476][T24037] loop2: detected capacity change from 0 to 7 [ 1732.895391][T15619] usb 2-1: USB disconnect, device number 51 [ 1732.922586][T24037] Dev loop2: unable to read RDB block 7 [ 1732.928736][T24037] loop2: unable to read partition table [ 1732.937511][T24037] loop2: partition table beyond EOD, truncated [ 1732.943925][T24037] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1733.102548][T18975] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1733.163301][T18975] usb 6-1: device descriptor read/8, error -71 [ 1733.264611][T24041] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4708'. [ 1733.399571][T24048] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4711'. [ 1733.414247][T18975] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1733.444893][T18975] usb 6-1: device descriptor read/8, error -71 [ 1733.572242][T18975] usb usb6-port1: unable to enumerate USB device [ 1733.734638][T15619] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 1734.889135][T15619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1734.900783][T15619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.951639][T15619] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1735.012274][T15619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.106406][T15619] usb 5-1: config 0 descriptor?? [ 1735.173453][T24066] loop2: detected capacity change from 0 to 7 [ 1735.183889][T24066] Dev loop2: unable to read RDB block 7 [ 1735.189648][T24066] loop2: unable to read partition table [ 1735.196829][T24066] loop2: partition table beyond EOD, truncated [ 1735.311559][T24067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4720'. [ 1735.320519][T24067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4720'. [ 1735.330180][T24066] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1735.647932][T24081] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4724'. [ 1735.681072][T15619] usbhid 5-1:0.0: can't add hid device: -71 [ 1735.693488][T15619] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1735.714043][T15619] usb 5-1: USB disconnect, device number 62 [ 1735.810911][ T9] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1735.810927][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1736.020715][T17028] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1736.794917][T18381] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1736.917626][T17028] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.172519][T17028] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1737.183840][T17028] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1737.222696][T24108] loop2: detected capacity change from 0 to 7 [ 1737.291833][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1737.403645][T17028] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1737.777008][T24108] Dev loop2: unable to read RDB block 7 [ 1737.838665][T17028] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1737.851567][T24108] loop2: unable to read partition table [ 1737.925939][T24108] loop2: partition table beyond EOD, truncated [ 1737.932430][T24108] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1737.963384][T17028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.984020][T17028] usb 7-1: Product: syz [ 1737.991714][T17028] usb 7-1: Manufacturer: syz [ 1737.996330][T17028] usb 7-1: SerialNumber: syz [ 1738.205222][T24124] loop2: detected capacity change from 0 to 7 [ 1738.233209][T24124] Dev loop2: unable to read RDB block 7 [ 1738.239611][T24124] loop2: unable to read partition table [ 1738.248451][T24124] loop2: partition table beyond EOD, truncated [ 1738.271479][T24124] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1739.016546][T17028] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1739.036610][T17028] usb 7-1: MIDIStreaming interface descriptor not found [ 1739.184972][T17028] usb 7-1: USB disconnect, device number 46 [ 1740.200682][T17209] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 1740.722949][T17209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1740.737540][T17209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1740.770221][T17209] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1740.864509][T17209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.883245][T17209] usb 2-1: config 0 descriptor?? [ 1740.916013][T23984] udevd[23984]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1740.991120][T18381] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1741.688531][T17209] usbhid 2-1:0.0: can't add hid device: -71 [ 1741.715447][T17209] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1741.723526][T18381] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1741.735532][T18381] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1741.749662][T17209] usb 2-1: USB disconnect, device number 52 [ 1741.753289][T18381] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1741.755708][ T46] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1741.780368][T18381] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.797432][T18381] usb 8-1: config 0 descriptor?? [ 1742.581086][ T46] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1742.836041][T24164] loop2: detected capacity change from 0 to 7 [ 1742.880670][T24164] Dev loop2: unable to read RDB block 7 [ 1742.886684][T24164] loop2: unable to read partition table [ 1742.893957][T24164] loop2: partition table beyond EOD, truncated [ 1742.900216][T24164] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1743.039625][ T46] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1743.155768][ T46] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1743.252019][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.298935][T24150] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1743.310361][ T46] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1743.650461][T18381] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71 [ 1744.090878][T18381] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 1744.098579][T18381] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 1744.333947][T18381] usb 8-1: USB disconnect, device number 15 [ 1744.428623][T24178] loop2: detected capacity change from 0 to 7 [ 1744.661570][T24178] Dev loop2: unable to read RDB block 7 [ 1744.679984][T24178] loop2: unable to read partition table [ 1744.690839][T24178] loop2: partition table beyond EOD, truncated [ 1744.708707][T24178] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1744.840987][T24184] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4760'. [ 1744.997486][T18381] usb 6-1: USB disconnect, device number 51 [ 1745.660849][T18975] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 1745.823228][T18975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1745.834530][T18975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1745.846930][T18975] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1745.856178][T18975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.874285][T18975] usb 5-1: config 0 descriptor?? [ 1746.289268][T18975] usbhid 5-1:0.0: can't add hid device: -71 [ 1746.295763][T18975] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1746.310875][T18975] usb 5-1: USB disconnect, device number 63 [ 1746.320780][ T46] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1746.400870][T18381] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1746.462827][ T46] usb 7-1: device descriptor read/64, error -71 [ 1746.552158][T18381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1746.566858][T18381] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1746.577015][T18381] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1746.590605][T18381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.603302][T18381] usb 6-1: config 0 descriptor?? [ 1746.909794][ T46] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1747.070759][ T46] usb 7-1: device descriptor read/64, error -71 [ 1747.193193][ T46] usb usb7-port1: attempt power cycle [ 1747.491122][T18975] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1747.902106][ T46] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1747.924461][ T46] usb 7-1: device descriptor read/8, error -71 [ 1747.951647][T18381] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 1747.960454][T18381] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 1747.968124][T18381] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 1747.970801][T18975] usb 2-1: device descriptor read/64, error -71 [ 1747.988915][T18381] usb 6-1: USB disconnect, device number 52 [ 1748.265008][T18975] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1748.272777][ T46] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1748.301150][ T46] usb 7-1: device descriptor read/8, error -71 [ 1748.412385][ T46] usb usb7-port1: unable to enumerate USB device [ 1748.431178][T18975] usb 2-1: device descriptor read/64, error -71 [ 1748.552767][T18975] usb usb2-port1: attempt power cycle [ 1748.910873][T18975] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1748.962935][T18975] usb 2-1: device descriptor read/8, error -71 [ 1749.220796][T18975] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1749.409909][T24281] tipc: Started in network mode [ 1749.415392][T24281] tipc: Node identity 4, cluster identity 4711 [ 1749.422335][T24281] tipc: Node number set to 4 [ 1749.428649][T18975] usb 2-1: device descriptor read/8, error -71 [ 1749.800656][ C0] hrtimer: interrupt took 34609 ns [ 1750.025652][T18975] usb usb2-port1: unable to enumerate USB device [ 1750.391950][T24306] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4811'. [ 1750.401185][T24306] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4811'. [ 1750.550983][T18975] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1750.711210][T18975] usb 7-1: device descriptor read/64, error -71 [ 1750.711224][T17028] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1750.954639][T24316] overlayfs: failed to resolve './file0': -2 [ 1750.970884][T18975] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1751.040824][T17028] usb 6-1: device descriptor read/64, error -71 [ 1751.290781][T17028] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1751.427729][T17028] usb 6-1: device descriptor read/64, error -71 [ 1751.470691][T18975] usb 7-1: device descriptor read/64, error -71 [ 1751.540960][T17028] usb usb6-port1: attempt power cycle [ 1751.581058][T18975] usb usb7-port1: attempt power cycle [ 1751.600755][T15619] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1751.740844][T15619] usb 8-1: device descriptor read/64, error -71 [ 1751.882395][T17028] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1751.933110][T17028] usb 6-1: device descriptor read/8, error -71 [ 1751.941989][T18975] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1751.962413][T18975] usb 7-1: device descriptor read/8, error -71 [ 1751.980896][T15619] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1752.120958][T15619] usb 8-1: device descriptor read/64, error -71 [ 1752.214303][T17028] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1752.221447][T18975] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1752.244394][T17028] usb 6-1: device descriptor read/8, error -71 [ 1752.248034][T15619] usb usb8-port1: attempt power cycle [ 1752.292303][T18975] usb 7-1: device descriptor read/8, error -71 [ 1752.400931][T17028] usb usb6-port1: unable to enumerate USB device [ 1752.415389][T18975] usb usb7-port1: unable to enumerate USB device [ 1752.610991][T15619] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1752.673137][T15619] usb 8-1: device descriptor read/8, error -71 [ 1752.950556][T15619] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1753.001872][T15619] usb 8-1: device descriptor read/8, error -71 [ 1753.111384][T15619] usb usb8-port1: unable to enumerate USB device [ 1753.374267][T24344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4823'. [ 1753.383347][T24344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4823'. [ 1753.417099][T24349] netlink: 'syz.5.4825': attribute type 4 has an invalid length. [ 1753.430579][T24349] netlink: 'syz.5.4825': attribute type 4 has an invalid length. [ 1755.163638][T15619] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1755.240893][T18975] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1755.350856][T15619] usb 8-1: device descriptor read/64, error -71 [ 1755.460843][T18975] usb 2-1: device descriptor read/64, error -71 [ 1755.650759][T15619] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1755.730994][T18975] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1755.788059][T15619] usb 8-1: device descriptor read/64, error -71 [ 1755.864928][ T30] audit: type=1326 audit(1742556893.583:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24387 comm="syz.4.4838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a80f8d169 code=0x0 [ 1755.892644][T18975] usb 2-1: device descriptor read/64, error -71 [ 1755.903205][T15619] usb usb8-port1: attempt power cycle [ 1756.002333][T18975] usb usb2-port1: attempt power cycle [ 1756.270860][T15619] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1756.315913][T15619] usb 8-1: device descriptor read/8, error -71 [ 1756.383894][T18975] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1756.425273][T18975] usb 2-1: device descriptor read/8, error -71 [ 1756.560720][T15619] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1756.591791][T15619] usb 8-1: device descriptor read/8, error -71 [ 1756.670721][T18975] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1756.703011][T15619] usb usb8-port1: unable to enumerate USB device [ 1756.703163][T18975] usb 2-1: device descriptor read/8, error -71 [ 1756.843463][T18975] usb usb2-port1: unable to enumerate USB device [ 1756.871989][T24370] Set syz1 is full, maxelem 65536 reached [ 1757.990974][T18975] IPVS: starting estimator thread 0... [ 1758.091766][T24416] IPVS: using max 28 ests per chain, 67200 per kthread [ 1759.250845][T18975] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1759.292739][T24436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4857'. [ 1759.301821][T24436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4857'. [ 1759.424817][T18975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.440067][T18975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.451114][T18975] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1759.513268][T18975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.573979][T17028] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1759.585599][T18975] usb 7-1: config 0 descriptor?? [ 1759.762191][T17028] usb 8-1: Using ep0 maxpacket: 16 [ 1759.819294][T17028] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.831127][T17209] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1759.878098][T17028] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.904616][T17028] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1759.921449][T17028] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1759.941643][T17028] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.956728][T17028] usb 8-1: config 0 descriptor?? [ 1760.000973][T17209] usb 2-1: device descriptor read/64, error -71 [ 1760.244061][T18975] usb 7-1: language id specifier not provided by device, defaulting to English [ 1760.254546][T17209] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1760.390919][T17209] usb 2-1: device descriptor read/64, error -71 [ 1760.434374][T17028] koneplus 0003:1E7D:2E22.0009: unknown main item tag 0x0 [ 1760.474043][T17028] koneplus 0003:1E7D:2E22.0009: unknown main item tag 0x0 [ 1760.508792][T17028] koneplus 0003:1E7D:2E22.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.7-1/input0 [ 1760.527260][T17209] usb usb2-port1: attempt power cycle [ 1760.580064][T17028] koneplus 0003:1E7D:2E22.0009: couldn't init struct koneplus_device [ 1760.663766][T18975] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 1760.666623][T17028] koneplus 0003:1E7D:2E22.0009: couldn't install mouse [ 1760.686249][T18975] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 1760.758322][T18975] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 1760.759029][T17028] koneplus 0003:1E7D:2E22.0009: probe with driver koneplus failed with error -71 [ 1760.783953][T18975] usb 7-1: USB disconnect, device number 55 [ 1760.794264][T17028] usb 8-1: USB disconnect, device number 24 [ 1760.930883][T17209] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1760.976041][T17209] usb 2-1: device descriptor read/8, error -71 [ 1761.220793][T17209] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1761.252596][T17209] usb 2-1: device descriptor read/8, error -71 [ 1761.873311][T17209] usb usb2-port1: unable to enumerate USB device [ 1762.015669][T24431] Set syz1 is full, maxelem 65536 reached [ 1763.047094][T24478] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4870'. [ 1763.139134][ T30] audit: type=1326 audit(1742556900.853:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24482 comm="syz.6.4873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f4bb8d169 code=0x0 [ 1763.274676][T24487] netlink: 'syz.5.4874': attribute type 4 has an invalid length. [ 1763.294582][ T30] audit: type=1400 audit(1742556901.013:3503): avc: denied { connect } for pid=24488 comm="syz.4.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1763.319672][T24487] netlink: 'syz.5.4874': attribute type 4 has an invalid length. [ 1763.400488][ T30] audit: type=1400 audit(1742556901.013:3504): avc: denied { write } for pid=24488 comm="syz.4.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1763.452330][ T30] audit: type=1400 audit(1742556901.043:3505): avc: denied { read } for pid=24488 comm="syz.4.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1765.341123][T17209] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1765.510699][T17209] usb 6-1: device descriptor read/64, error -71 [ 1765.771907][T17209] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1765.910802][T17209] usb 6-1: device descriptor read/64, error -71 [ 1766.545784][T17209] usb usb6-port1: attempt power cycle [ 1767.032220][ T30] audit: type=1400 audit(1742556904.743:3506): avc: denied { bind } for pid=24544 comm="syz.1.4894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1767.484117][ T5823] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 1767.494053][ T30] audit: type=1400 audit(1742556905.203:3507): avc: denied { ioctl } for pid=24546 comm="syz.4.4895" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1767.550941][T24551] macvlan1: entered promiscuous mode [ 1767.574354][T24538] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4892'. [ 1767.590737][T24538] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4892'. [ 1767.770988][T17209] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1767.822063][T17209] usb 6-1: device descriptor read/8, error -71 [ 1768.722698][T17209] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1769.255447][T17209] usb 6-1: device descriptor read/8, error -71 [ 1770.216384][T17209] usb usb6-port1: unable to enumerate USB device [ 1770.559254][T24594] macvlan1: entered promiscuous mode [ 1772.031937][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1772.042447][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.052313][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1772.062984][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.072850][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1772.084146][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.094308][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1772.104937][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.490918][T17028] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1772.820432][T24618] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4915'. [ 1772.829517][T24618] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4915'. [ 1772.890714][T17028] usb 5-1: Using ep0 maxpacket: 32 [ 1772.942149][T17028] usb 5-1: config 2 has an invalid interface number: 66 but max is 0 [ 1772.970863][T17028] usb 5-1: config 2 has no interface number 0 [ 1772.977105][T17028] usb 5-1: config 2 interface 66 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1773.015649][T17028] usb 5-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= b.5d [ 1773.041394][T17028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.049471][T17028] usb 5-1: Product: syz [ 1773.073027][T17028] usb 5-1: Manufacturer: syz [ 1773.077685][T17028] usb 5-1: SerialNumber: syz [ 1773.141471][T17028] usb 5-1: Found UVC 0.00 device syz (046d:08c6) [ 1773.147850][T17028] usb 5-1: No valid video chain found. [ 1773.467977][T17028] usb 5-1: USB disconnect, device number 64 [ 1773.780770][T18381] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1774.657751][T24641] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4924'. [ 1774.688668][ T30] audit: type=1400 audit(1742556912.403:3508): avc: denied { ioctl } for pid=24644 comm="syz.1.4926" path="socket:[90724]" dev="sockfs" ino=90724 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1774.692184][T18381] usb 6-1: device descriptor read/64, error -71 [ 1775.801274][T24647] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4927'. [ 1775.910960][T18381] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1775.954955][T24666] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4931'. [ 1776.006679][T24670] 9pnet_fd: Insufficient options for proto=fd [ 1776.025922][T24670] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 1776.046115][ T30] audit: type=1400 audit(1742556913.763:3509): avc: denied { read write } for pid=24669 comm="syz.1.4935" name="mouse0" dev="devtmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1776.050805][T18381] usb 6-1: device descriptor read/64, error -71 [ 1776.080379][ T30] audit: type=1400 audit(1742556913.793:3510): avc: denied { open } for pid=24669 comm="syz.1.4935" path="/dev/input/mouse0" dev="devtmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1776.081899][T24674] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1776.115238][T24674] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1776.217883][T17028] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1776.749833][T18381] usb usb6-port1: attempt power cycle [ 1777.000765][T17028] usb 5-1: Using ep0 maxpacket: 16 [ 1777.032827][T17028] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 1777.112968][T17028] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.216291][T17028] usb 5-1: config 8 has no interface number 0 [ 1777.289230][T17028] usb 5-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1777.397193][T24687] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4940'. [ 1777.424690][T17028] usb 5-1: config 8 interface 39 has no altsetting 0 [ 1777.494846][T17028] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1777.601157][T17028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.646133][T24689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4941'. [ 1777.694616][T17028] usb 5-1: Product: syz [ 1777.733104][T17028] usb 5-1: Manufacturer: syz [ 1777.737830][T17028] usb 5-1: SerialNumber: syz [ 1777.921651][ T5823] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 1777.983609][T17028] ipheth 5-1:8.39: Unable to find endpoints [ 1779.437615][ T9] usb 5-1: USB disconnect, device number 65 [ 1779.477294][T24727] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4954'. [ 1780.230848][T17028] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1780.600791][T17028] usb 6-1: Using ep0 maxpacket: 32 [ 1780.607349][T17028] usb 6-1: config 2 has an invalid interface number: 66 but max is 0 [ 1780.622688][T17028] usb 6-1: config 2 has no interface number 0 [ 1780.635783][T17028] usb 6-1: config 2 interface 66 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1780.661255][T17028] usb 6-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= b.5d [ 1780.762975][T17028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.781669][T17028] usb 6-1: Product: syz [ 1780.794575][T17028] usb 6-1: Manufacturer: syz [ 1780.799666][T17028] usb 6-1: SerialNumber: syz [ 1781.356061][T17028] usb 6-1: Found UVC 0.00 device syz (046d:08c6) [ 1781.369850][T17028] usb 6-1: No valid video chain found. [ 1781.383871][T17028] usb 6-1: USB disconnect, device number 64 [ 1781.449245][T24751] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4962'. [ 1781.458744][T24751] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4962'. [ 1781.855918][ T30] audit: type=1400 audit(1742556919.473:3511): avc: denied { map } for pid=24752 comm="syz.1.4963" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1782.322412][T24758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1782.328792][T24758] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1782.343633][T24758] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1782.349632][T24758] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1782.370211][T24758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1782.376335][T24758] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1782.399407][T24758] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1782.408539][T24758] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1782.414861][T24758] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1782.420860][T24758] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1782.478116][ T30] audit: type=1400 audit(1742556919.473:3512): avc: denied { execute } for pid=24752 comm="syz.1.4963" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1782.502319][ T30] audit: type=1400 audit(1742556919.553:3513): avc: denied { read } for pid=24752 comm="syz.1.4963" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1782.525446][ T30] audit: type=1400 audit(1742556919.553:3514): avc: denied { open } for pid=24752 comm="syz.1.4963" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1782.563555][T24766] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4967'. [ 1782.780790][T15619] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1783.553244][T24780] mkiss: ax0: crc mode is auto. [ 1783.650786][T15619] usb 8-1: Using ep0 maxpacket: 16 [ 1783.751107][ T5866] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1783.789914][T15619] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.837067][T15619] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.886255][T15619] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1783.965800][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 1783.973752][T15619] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1783.983172][T16233] Bluetooth: hci2: command 0x0405 tx timeout [ 1783.999005][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1784.009435][T15619] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.017560][ T5866] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1784.028879][T15619] usb 8-1: config 0 descriptor?? [ 1784.035068][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.048084][ T5866] usb 6-1: config 0 descriptor?? [ 1784.057615][ T5866] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1785.090894][ T5866] gspca_vc032x: reg_r err -110 [ 1785.122157][ T5866] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 1785.255264][T16233] Bluetooth: hci5: command 0x0406 tx timeout [ 1785.261622][T16233] Bluetooth: hci0: command 0x0406 tx timeout [ 1785.267690][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 1785.267733][T16233] Bluetooth: hci4: command 0x0406 tx timeout [ 1785.390714][T17028] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1785.550677][T17028] usb 7-1: Using ep0 maxpacket: 32 [ 1785.557334][T17028] usb 7-1: config 2 has an invalid interface number: 66 but max is 0 [ 1785.619386][T15619] usbhid 8-1:0.0: can't add hid device: -71 [ 1785.641124][T17028] usb 7-1: config 2 has no interface number 0 [ 1785.670841][T17028] usb 7-1: config 2 interface 66 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1785.672523][T15619] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1785.697454][T17028] usb 7-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= b.5d [ 1785.707801][T15619] usb 8-1: USB disconnect, device number 25 [ 1785.725581][T17028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.756949][T24804] tipc: Started in network mode [ 1785.757835][T17028] usb 7-1: Product: syz [ 1785.764510][T24804] tipc: Node identity 4, cluster identity 4711 [ 1785.766217][T17028] usb 7-1: Manufacturer: syz [ 1785.780960][T24804] tipc: Node number set to 4 [ 1785.787180][T17028] usb 7-1: SerialNumber: syz [ 1785.958230][T17028] usb 7-1: Found UVC 0.00 device syz (046d:08c6) [ 1785.971067][T17028] usb 7-1: No valid video chain found. [ 1785.980557][T24810] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4981'. [ 1786.025002][ T30] audit: type=1400 audit(1742556923.743:3515): avc: denied { read } for pid=24807 comm="syz.7.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1786.061632][T16233] Bluetooth: hci2: command 0x0405 tx timeout [ 1786.158548][T17028] usb 7-1: USB disconnect, device number 56 [ 1787.175629][T15619] usb 6-1: USB disconnect, device number 65 [ 1787.340770][T16233] Bluetooth: hci4: command 0x0406 tx timeout [ 1787.346877][T16233] Bluetooth: hci1: command 0x0406 tx timeout [ 1787.356475][T24797] Bluetooth: hci5: command 0x0406 tx timeout [ 1787.778160][T24827] mkiss: ax0: crc mode is auto. [ 1789.598848][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 1790.814067][T24863] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018aa3f, magic aa != 6b] [ 1790.827266][ T30] audit: type=1400 audit(1742556928.533:3516): avc: denied { read } for pid=24861 comm="syz.4.4996" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1790.911524][ T5866] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1790.965576][ T30] audit: type=1400 audit(1742556928.533:3517): avc: denied { open } for pid=24861 comm="syz.4.4996" path="/417/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1790.996336][ T30] audit: type=1400 audit(1742556928.533:3518): avc: denied { ioctl } for pid=24861 comm="syz.4.4996" path="/417/file0/file0" dev="fuse" ino=0 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1791.025225][ T30] audit: type=1400 audit(1742556928.743:3519): avc: denied { mount } for pid=24870 comm="syz.1.5002" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1791.090785][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 1791.097937][ T5866] usb 8-1: no configurations [ 1791.146438][ T30] audit: type=1400 audit(1742556928.833:3520): avc: denied { create } for pid=24869 comm="syz.6.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1791.317237][ T5866] usb 8-1: can't read configurations, error -22 [ 1791.394827][T24878] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1791.530496][ T30] audit: type=1400 audit(1742556928.833:3521): avc: denied { setopt } for pid=24869 comm="syz.6.5000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1791.559484][T24878] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1791.567146][T17209] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1791.573759][T24882] mkiss: ax0: crc mode is auto. [ 1791.580720][ T5866] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1791.619933][ T30] audit: type=1400 audit(1742556929.333:3522): avc: denied { unmount } for pid=17425 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1791.766073][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 1791.772200][T17209] usb 7-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1791.789593][T17209] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1791.799211][ T5866] usb 8-1: no configurations [ 1791.804428][ T5866] usb 8-1: can't read configurations, error -22 [ 1791.835241][T17209] usb 7-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=30.20 [ 1791.874385][ T5866] usb usb8-port1: attempt power cycle [ 1791.899502][T17209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.947307][T17209] usb 7-1: Product: syz [ 1791.978031][T17209] usb 7-1: Manufacturer: syz [ 1792.019616][T17209] usb 7-1: SerialNumber: syz [ 1792.152960][T17209] usb 7-1: config 0 descriptor?? [ 1792.281064][ T5866] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1792.335414][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 1792.344631][ T5866] usb 8-1: no configurations [ 1792.349662][ T5866] usb 8-1: can't read configurations, error -22 [ 1792.480765][ T5866] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1792.508087][ T30] audit: type=1400 audit(1742556930.223:3523): avc: denied { write } for pid=24896 comm="syz.4.5009" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1792.541541][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 1792.548122][ T5866] usb 8-1: no configurations [ 1792.558830][ T5866] usb 8-1: can't read configurations, error -22 [ 1792.566610][ T5866] usb usb8-port1: unable to enumerate USB device [ 1792.647065][T24901] netlink: 'syz.4.5011': attribute type 4 has an invalid length. [ 1793.167519][T24918] overlayfs: failed to resolve './file0': -2 [ 1793.675851][T17028] usb 7-1: USB disconnect, device number 57 [ 1793.765655][T24926] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5021'. [ 1793.856944][T24933] netlink: 'syz.7.5024': attribute type 4 has an invalid length. [ 1793.871770][T24926] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1793.888612][T24926] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1794.150818][T17028] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1794.544414][T17028] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.554643][T17028] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1794.568931][T17028] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1794.581992][T17028] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1794.597373][T17028] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1794.616603][T17028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.658062][T17028] usb 2-1: Product: syz [ 1794.667336][T17028] usb 2-1: Manufacturer: syz [ 1794.673752][T17028] usb 2-1: SerialNumber: syz [ 1795.373007][T17028] usb 2-1: 0:2 : does not exist [ 1795.392141][T17028] usb 2-1: USB disconnect, device number 65 [ 1795.420874][ T5895] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1795.495874][T24964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1795.506614][T24964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.516506][T24964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1795.527007][T24964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.543470][T24964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1795.553943][T24964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.563827][T24964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1795.574290][T24964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.701178][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 1795.712548][T24585] udevd[24585]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1795.763992][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.598783][ T5895] usb 6-1: config 0 has no interfaces? [ 1796.612729][ T5895] usb 6-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1796.622733][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.631173][ T5895] usb 6-1: Product: syz [ 1796.635345][ T5895] usb 6-1: Manufacturer: syz [ 1796.645719][ T5895] usb 6-1: SerialNumber: syz [ 1796.673009][ T5895] usb 6-1: config 0 descriptor?? [ 1796.703529][T24973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5040'. [ 1796.756732][ T30] audit: type=1326 audit(1742556934.473:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24974 comm="syz.1.5041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22b858d169 code=0x0 [ 1796.872771][T24982] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1796.885830][T24982] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1796.916223][ T5895] usb 6-1: USB disconnect, device number 66 [ 1797.461868][T24983] ------------[ cut here ]------------ [ 1797.467394][T24983] UBSAN: array-index-out-of-bounds in kernel/bpf/core.c:2384:29 [ 1797.475065][T24983] index 16 is out of range for type ' *[16]' [ 1797.481872][T24983] CPU: 1 UID: 0 PID: 24983 Comm: syz.6.5043 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 1797.481894][T24983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1797.481905][T24983] Call Trace: [ 1797.481910][T24983] [ 1797.481916][T24983] dump_stack_lvl+0x16c/0x1f0 [ 1797.481944][T24983] __ubsan_handle_out_of_bounds+0x110/0x150 [ 1797.481969][T24983] bpf_prog_select_runtime+0x665/0x6f0 [ 1797.481986][T24983] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 1797.482009][T24983] bpf_prog_load+0xe70/0x2480 [ 1797.482030][T24983] ? __pfx_bpf_prog_load+0x10/0x10 [ 1797.482043][T24983] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1797.482072][T24983] ? selinux_bpf+0xde/0x130 [ 1797.482092][T24983] __sys_bpf+0x4043/0x49c0 [ 1797.482108][T24983] ? __pfx___sys_bpf+0x10/0x10 [ 1797.482121][T24983] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1797.482145][T24983] ? do_futex+0x123/0x350 [ 1797.482163][T24983] ? __pfx_do_futex+0x10/0x10 [ 1797.482186][T24983] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1797.482206][T24983] ? __pfx___x64_sys_futex+0x10/0x10 [ 1797.482227][T24983] __x64_sys_bpf+0x78/0xc0 [ 1797.482240][T24983] ? lockdep_hardirqs_on+0x7c/0x110 [ 1797.482258][T24983] do_syscall_64+0xcd/0x250 [ 1797.482277][T24983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.482296][T24983] RIP: 0033:0x7f7f4bb8d169 [ 1797.482307][T24983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1797.482320][T24983] RSP: 002b:00007f7f4cab3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1797.482333][T24983] RAX: ffffffffffffffda RBX: 00007f7f4bda6080 RCX: 00007f7f4bb8d169 [ 1797.482342][T24983] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1797.482352][T24983] RBP: 00007f7f4bc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1797.482362][T24983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1797.482370][T24983] R13: 0000000000000000 R14: 00007f7f4bda6080 R15: 00007ffe629dacc8 [ 1797.482388][T24983] [ 1797.482395][T24983] ---[ end trace ]--- [ 1797.616963][T24989] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1797.630132][T24983] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1797.630146][T24983] CPU: 1 UID: 0 PID: 24983 Comm: syz.6.5043 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 1797.630167][T24983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1797.630178][T24983] Call Trace: [ 1797.630183][T24983] [ 1797.630190][T24983] dump_stack_lvl+0x3d/0x1f0 [ 1797.630216][T24983] panic+0x71d/0x800 [ 1797.630234][T24983] ? __pfx_panic+0x10/0x10 [ 1797.630255][T24983] ? __pfx__printk+0x10/0x10 [ 1797.630283][T24983] check_panic_on_warn+0xab/0xb0 [ 1797.630302][T24983] __ubsan_handle_out_of_bounds+0x137/0x150 [ 1797.630322][T24983] bpf_prog_select_runtime+0x665/0x6f0 [ 1797.630339][T24983] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 1797.630358][T24983] bpf_prog_load+0xe70/0x2480 [ 1797.630379][T24983] ? __pfx_bpf_prog_load+0x10/0x10 [ 1797.630394][T24983] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1797.630425][T24983] ? selinux_bpf+0xde/0x130 [ 1797.630443][T24983] __sys_bpf+0x4043/0x49c0 [ 1797.630461][T24983] ? __pfx___sys_bpf+0x10/0x10 [ 1797.630476][T24983] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1797.630502][T24983] ? do_futex+0x123/0x350 [ 1797.630521][T24983] ? __pfx_do_futex+0x10/0x10 [ 1797.630547][T24983] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1797.630566][T24983] ? __pfx___x64_sys_futex+0x10/0x10 [ 1797.630590][T24983] __x64_sys_bpf+0x78/0xc0 [ 1797.630610][T24983] ? lockdep_hardirqs_on+0x7c/0x110 [ 1797.630630][T24983] do_syscall_64+0xcd/0x250 [ 1797.630652][T24983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.630673][T24983] RIP: 0033:0x7f7f4bb8d169 [ 1797.630686][T24983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1797.630701][T24983] RSP: 002b:00007f7f4cab3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1797.630717][T24983] RAX: ffffffffffffffda RBX: 00007f7f4bda6080 RCX: 00007f7f4bb8d169 [ 1797.630727][T24983] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1797.630737][T24983] RBP: 00007f7f4bc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1797.630747][T24983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1797.630757][T24983] R13: 0000000000000000 R14: 00007f7f4bda6080 R15: 00007ffe629dacc8 [ 1797.630777][T24983] [ 1797.638776][T24983] Kernel Offset: disabled