last executing test programs: 5m56.939634126s ago: executing program 0 (id=3055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 5m55.796928639s ago: executing program 0 (id=3059): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x600540, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) 5m54.978164919s ago: executing program 0 (id=3061): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x0) mkdir(0x0, 0x0) 5m53.966345417s ago: executing program 0 (id=3066): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}}, 0x0) 5m49.101363948s ago: executing program 0 (id=3074): fanotify_init(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @remote, 0xfffffffe}}, {{0xa, 0xfffc, 0x0, @private2}}]}, 0x190) syz_emit_ethernet(0xf87, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c40)=""/102376, 0x18fe8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5m47.976538232s ago: executing program 0 (id=3079): r0 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendmsg(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000800)={0x2, {{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}}, 0x0, 0x6, [{{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, {{0xa, 0x4e24, 0x7, @mcast2}}, {{0xa, 0x4e24, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x480000}}, {{0xa, 0x4e24, 0x37d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {{0xa, 0x4e20, 0x2a, @mcast2, 0x9}}]}, 0x390) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390440bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) socket(0x40000000015, 0x5, 0x0) close(r3) 5m31.820098536s ago: executing program 32 (id=3079): r0 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendmsg(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000800)={0x2, {{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}}, 0x0, 0x6, [{{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, {{0xa, 0x4e24, 0x7, @mcast2}}, {{0xa, 0x4e24, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x480000}}, {{0xa, 0x4e24, 0x37d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {{0xa, 0x4e20, 0x2a, @mcast2, 0x9}}]}, 0x390) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390440bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) socket(0x40000000015, 0x5, 0x0) close(r3) 1m19.531335748s ago: executing program 2 (id=3693): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="a7", 0x1, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 1m17.555307096s ago: executing program 2 (id=3704): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x43, &(0x7f0000000180)=[{0x0, 0xae, 0x40, 0x2}, {0x100, 0x4, 0x31, 0x10000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffc, 0x6, 0xffffffffffffffff, 0x8000000000000000, 0x7, 0x9, 0x652, 0xc, 0x8000009657, 0xffeffffffffffffd, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x6, 0x1, 0x94d6, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x3, 0x9}) 1m17.443613336s ago: executing program 2 (id=3707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}}, 0x20000000) 1m16.23822657s ago: executing program 2 (id=3712): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 1m16.184101339s ago: executing program 2 (id=3714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, @local, {[@dstopts={0x2c}]}}}}}, 0x0) 1m10.774613778s ago: executing program 2 (id=3730): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 1m9.987898262s ago: executing program 33 (id=3730): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 21.741516157s ago: executing program 5 (id=3893): socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0xa) openat(r5, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 18.690102708s ago: executing program 4 (id=3900): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x3000, 0x8080000, 0x3, 0x0, 0xb, 0x2, 0x0, 0x1, 0x4, 0x81, 0x59, 0x59}, {0x7000, 0x60000, 0xa, 0x2, 0x2, 0x3, 0x2d, 0x3, 0xff, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0x6e000, 0x30000, 0x2, 0x7, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x9, 0x4}, {0x70000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x0, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x4, 0x3d01, 0x70000, [0x8000000000000000, 0x5, 0x280f, 0x9]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x4, 0x2004cb, 0x0, 0xa1d, 0x4068ff, 0x5, 0x0, 0x3, 0xa], 0xdddd0000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.288312447s ago: executing program 4 (id=3902): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 16.695566659s ago: executing program 6 (id=3908): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001480), 0x189901, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000f73000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="1846db9c640f7a042be567e53ca0a6b99597a39147bb0f63d6630f4b515132d58ba761c6ff440e73e70b", 0x2a}, 0x68) 16.097407228s ago: executing program 4 (id=3909): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capset(&(0x7f0000000100)={0x20071026}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040814) 15.698170307s ago: executing program 6 (id=3911): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(r1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, r4, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x20, r4, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLL', 0x19, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000280)={0x18, r4}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r4, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000340)={0x18, r4, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x18, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r5, r4, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000540)={0x8, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000580)={0x18, r4}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) 15.613230886s ago: executing program 5 (id=3913): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x240000d5}, 0x41) mknod$loop(0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 14.626283716s ago: executing program 1 (id=3914): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r5, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x2000000, 0x0, 0x8000}, 0x4040020) r6 = dup(r0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGWINSZ(r7, 0x545d, &(0x7f0000000340)) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000000080)=@svm={0x0, 0x1, 0x1080, {0xdddd0000}, {"a035ae149d44fc48530c7a1aab513ff3485c247901fc12e5b1e55f5c8382e84ea5fbe54487a1678d8661a07eef7ba4e4ff7e34964322909d3298af6f0928b2ea99b97dc9ae787a861df4960ac3c549d632b1b55a4284f1bb088a2a26f2037a616726803b99d674d0cf49d37e148b33dca2949ff1dc0eff312138f116ad9364f2af7fdac87d224bf4126dc29f31dff42799b70a386717059bb0e9b681098ec2347fdd01027fa4ee20a712ca4f74c1f2493d2f69ab1c55cd6d4bd27ee79109220d7770992f8809f13c20cc4ac741193c88c71c8991affe34eb998ee6579b11ce3c10e8826ba74fcbbac0a676c4c679a81db84732f43c9b9a0bf4ed23d718874cbc1cd993ab9b20b36d4448a662fdd92ab0dd8782cfcfffa9128d94cf438652300f3ba40e550f146d8f13f916d27ab43cff82898ba045ec0b44f83852bbc4af60d177322fb8e11503985eea7019f0467c2fdf7b4225cfa3b7a52baeb1815c7d44493728622c8cca094984b2ffa9955f08f28da21f392ac22a1e70899979bee6031d8147b4695397506da616f7ef804c97de60e8fa3b01cdd313e7cd4ee53006fb364ac5cf4545a476102abbbca5c4a67f55266929b521147a8f3674093c68b377e9aa8b3d9f2ed1e366212ab8164dca9640e39fc9ad3ded41c74554ada33d27f59f057a6a75e6fb477d1518cd0667187dbaa1637ad601fd2ff19bd6d48b4db396252a22940d92174f78f7a0c527b04234ecda014684a90f393a32bb2308700554cd34e5046f659816b34d9343a430a79b68b5f8de7be98479e48f9aaf02b83ba0d05804827e6f308a72a754421481ff6b7ed4a32e2f4fd3b873c204734a6e1ed31d658d90e069ccec0bb2a5c85cd29c708ca55ca164299eafbb2ee30f832c7eaeaeee73e6a6db9150b07f110789f563ca029cb6ddf88ce33582065685001832363198ddb2a9b47c53f0087dd712aa79dd2ee8ff1f12c9375f7e9a54e2aea93f07e67ba6a4c28c96e44ad809f21dc79b8f197e4a7d1aad2d03049f124166a9b2bc46bfbd6746d089e1543508f3de82314e8f570fb2d28cec97f866cb99d695294cfc98a366f97aef1dd7046526494d3ffcd45493cdb16360859b4b75875730d24fac5c7431cf8e9a4b59077c826421ad8d1ce9bd76b36d9983af4134ebdeb6fee3ab51386385cbb43f398a055e757b605959178af8bf190a3b7e60cb2c5b9bcdbb8758674fca500240fcbc6966712398cfb0a4e85c5fdf13df7a9f81e84faf02abab30b3b1b078962ec3b444b68937687d30387a132b93e7d648e8d2cccc3955344134cc6ebe0d8f7b946d76707546946215addb03824d6b217e9fb9ff338feec214564b2cabdcd380e4319afe770eb13295899be0cf85b6b455d37283b103cab9116133b4d0b2fd9baa1b9602c1b241901c2fbaf96913a39dc92183ed23e57e6899542654f77602fcc1b422715e7c147f7366c259880ef57f534b0da18efcc429a75f9232fc8346c6a6c5048bd521c712324b25226fbdd06291aeb420c08b174d929654335daeb51699c70f3a52f633b9840fcc0e6482fba6da105f90ab281286837bac988bd76983321e26f2dc9dd0b995899fecf9d9893c73b7df71d77678660395a857c2f7f5c72c0de22619f64a6b61a40f2f9a35f17bbd5d64476fc4d739d534bbf8835c1d597e9d2be64dcba4d408e563fbbe92c5033e98e1c0de941ab1c7a33dbb6c4e3976d4246816d1cf007b6871f8af554a8c8eafc8411d2bf5bc6020096f42bc61d5673466dbfb7814cecc56c73e2b40b4e780a101a0971af3e97229f9e163ade66793a547f996989dc2ac509973391e2fd681971696d11b9e84fbfb190b84e61ef33f585d3e2b682a8cdea8f1dcace029864b65b9076a3587dd0ed2f0b36cf2f99e249799a193a2f2daa6a4a14926bf4946ad7d6561e6d07c4330522876c58954a0d2aa3f36a8deeb25e7da17495dfbec5c04cea8a67d23afec7c1509ba6f7b9325e343ef3a43938503954fc10c5cc45b7ba40861f8c0dc17daf6bd9a0795fb4f742b05c2bcd9c3d01e3150602d7a128e989cb949c986821b862b2d6f342d4cc1d2c2bfa8ff52e47763cb56af009c9a802db315550db7c5d47bacab1c22a927ec794f43f37eca549473ec989a1c9bd6a3371d4f0633a834ce4910012236fd39d0307ced177116deae56ff1f04fc63b11808e5335f462d258760d7039bc51f16f2afbab331150edfccd0198496fada0a9cd34813cae1ef2f33e49d3fdba6ad5fdec43166fcbbc81d7618f93d8ce91d80959668461b87c578215a73fbcbf6419dc2460761a0d7c063e4fbb6961482fed47fd4f41eb8e1c5a5a214cd466c4945e141b203cad2347c9eebc21fc83b2c292c4bf6b691f80ffacfaad2962ba4f4690b7a72156c189c4ab710d05f0689a86c17f7f54e3b64536802d556a1acfdf8b9517b12cabbdf3ba62353d41cb4cc5c2d07d6fe467a9f19d7c85ddd6760ff06c2948f475ac1f77b26ae1040dd50ba4cbcde196737ada73bee8f2ccd49215393a0f7f4fcb5ba7bed8073d9a351f6641ef58fffd36e14ced84faaf8601ea25cbf69b2ea8edc0a9b7618fc2602c948fb4a1b69a2805e82f44e40049b2df023f4d8b63bdf0407aeefc65904feff3a647e07e661475e65320693d5bc06e841f31ef09603e7293caf3fb120633bceaa0c6e0415707444dd1ef871f25ee7e0f6d0a199681dc8bf2c525ce349f03181bcbf23192a6f678c18bdd13d69037bf9940f7ca81e22cb6f8d50338bb2ecaa51763875cbb4b35127ef7acefe6cc6fa4122877d4f32c0b8caa08e720d315328bd31b8f65bf3a5ae7fe072615c5f5610d0ea266f3cd7c12cb94235b4e2ac5cccf22d286c5ccb1e0f3450bbb9b8583d8806fd77574f480b52446df96a81febead5d1ea94ecda52f9090b6fe8401709cfa04d0c12b916ab662c192161421bdc70dc3b7cda2f85ae9df9ea43117533bec78d2aee56aa57208e3f2c45201bfa3d47787c68b4090af5a72fd540ee197fb274d0e005d9b7b40b691c34c7da31d718412050746f082a1ae0bcd5d9bf56cd7a7c313d145d28e1a07202ef70f330750bf2e01648dcb7ba305f110d2f7334c127cd4cfc19865d179083399f31578995ae01b753621f99928b4b833b6a8d8f904d4471e4c412eb66876f9598990518e6150c2b1d837097c23b194ace8586f37b3d467f5049d023c3c3558b149b3a6defa4a182f992652986822b7e24a3a45afb2572e621ed11dd667459025a068570470690ee70d8620c4673f01a180d24dd383d4144f0a1ba2081f20415a4b953a2b25c47117b99d1d599840b5a83b3230ebe91aa57424b6d4658cea31395f9cad3d014b2c5522683227838c701aa06b8def4ecfa2c0a8191ee088a35727b7cffc620bd4ca9f05657b900b3f8a00d81a55f3c86ae431a8640659348c3de8d7f8120d69fdaa8c5bcd90eef8bd887eb1ec5d740becec1f24586682b78209f9bfc2bd8c51107c0f333f9f4c32c06699cbfaa84e5661c85d6855128f9c10ddf5e2f659f85c40a2f12bbb454427ddbad777820144ed4830b88279d07299eb70c1fe453bb928e45624b427b72caba4c1716e1bf010e17644ad3f15ce71bb339245327ec6f89c5da9a59b939dd189b96d809f6e66c3cb6aaa316f8ad652852009a22ff2e07f26ac914507007796adcda022cdadf2998135955b3d28d9f51ac4faf7def015dd47b60cd29d9112a0839c1e81f51855067b8a522acd7ab87a32d6d1dd140bec8badfc2dc06af7e7c31018330d263cd06dff06d99b6130f6e6466d001d16ec3c13bad62e9cfe4a5c6043142ae21aee4c4dfae2cf5872c67202f6dbaf4cd1b2ab01488373b2ab64e815dc297f5d07a15ab9b49f1f7d6dcfbbdf03c483b2166e171ad26967d0a458d8b33ea8dd3a91d86230a01f537337fd4a604c470bb2e6aa8952031b4a95454df573778afc43b832924e36fcb417bc1af93035de3db486e7b44bf0fdeb7bcf39aef625746649ed0a77cacce37bf6e6ca4a06488212f710f1fdc7148d1c82687806f9041accf2fa9f2a93548ea295e30a3cb3cb067fe9d5748bede499652e8190c14218d2a74532239fc73576182ba4bb677ae614c1bfea4c1dc56f89725fb1ed3e20b9347751b061de705fc24b37dc0cff07e451727fa36067f531701d93387f898f27fb163c4f47d7252d5f4a5252d3b0e94a754e897fc72c4d992737f2c1a4edf68f66f550b85fa2fad1eb441cccca4571b83351372c0404658e7f3e24e2e85fc71e8dc45ccd6c62df85b79a0f34aab20c3f7c90b533a3e5cc2e4aabaf41c7ec421dd4c6bd9e441e953ef03b6feeabcfacf68083bc0576bee35eb30ce8575b662bf19b7809af2f350bacb95b53d1e1c84b060269493f4703d30b6ed5a7b22c0e72e302598a791235ea1045469efc38eb9fe574dbcb3736585278aab357bd9b37e8588d77ee04c6856d632947a5434f017c76aa18dac3f81c3c25de1bb3be418cf0345495612e500fe8301abbe1e98740c340c3d6a64390e1051df108533853a2add48473402c95fae82ac6cb5bbc1274a45421f3f42c64241fdb3a32e8e36574348669f643a2d4cea7d8eb51056d791e20cc60440a5ba5ea50f6feabae14b48d5589ec417773fc71036b681aa054d9cfa6351fabdb48097f1cb5b353995a910af5206a5faaa47ff0e0aefda31e75b4cae21dcd2197704a456718b2a2e6d3d7c1abd675dd8b5d602f73837e3079b7133b6aef744e8f78c64a08741389ffaba99407f3e43dfa21a278a4f35ee20ca5fc8d5ab9efb53f34026438065bda8cebf2ac622ae2b893feca858f4f2cc26f71b6cb6cc69542fed5b912756a4ea516def24626f0dcf306e53bc3e820a0d5027e0948d573474ba6532c1824764c9d235aef8144dd0db5d0466e233693bf86ec5d75076eb4546e49b5b883df8290f54deb7e548c77fb662518cc2c5a95f465d6a34be05a484828e08fbf993e304a4a02f3ab9ad85444b1f46c39164a12413588bb14bc72a7fb6be4d7dbf2a37489fc531fde69f6a24b5cfa22202fad7b0006a66d0a7b546a6ff4de72d0cd8907e6f064c263aa5949131ddaf6124416525ccf6fb0194879df27ad0a9062c5bef2c2a2136216da59f8b4d11cfbdaa6cfc00e23bea95db6d4848499719e076ea6ee9f0d23d4913eaa2f80ac54835397a32941cac938ba9ea2e2ae9ebe09bdade3425b141acbd8e2bc083e9ef12e0bc5be2fc6a276f7a73d4d295a26334de80ece57f548872f8c7b2bd7ccd1c4b888162969bdea9a5c458f66b9b9d9ed079ec09ce146174387945d5ffb2b4273103a25e608ca35389dedfbca378fd52a1e34095138b1a82418303b15afdeaa57319fa8ca58eb2b348a336fda9c2aebf5854d3e333b1b946edc5ec190f61b3c987ad2c41d693fe4b8659382bd189540885e473f0be7ade9e90ce13e02be61b296b24177a57559eb5ddee18377b98d1d787fe1623a14fe0be3243e6fd165209e2107026631270d62f7ec31bd0f79a38f19267bf65c8313a87d50b453d73fe32f3ef08ee71da492bd82d79e735c7851181d9ec9bbb055cc289ea0f9667418c03afc1e3930316172d4cb2d0642d13156cd16b8781339d2b8c54e208cae3132665547d5c58c012d3902ed83bce7351b8d0c05c71dc11c844449d58c08a7b948714cd7b78c2d0fc8a3b689f9530024f53e2a182c22b09035aee0132be413eca72b95bb65e11d29f20db3262d6005af5cfa84fd834ac41f16f60f85230b774de852fb3163a983d2f3c207f1e3e4"}}) socket$nl_netfilter(0x10, 0x3, 0xc) 13.640549642s ago: executing program 6 (id=3915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) io_setup(0x10000, &(0x7f0000000180)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) 12.611168489s ago: executing program 3 (id=3916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 12.273829511s ago: executing program 4 (id=3917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10dd3, 0x1ff) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) 10.592710734s ago: executing program 1 (id=3918): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(r1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, r4, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x20, r4, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLL', 0x19, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000280)={0x18, r4}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000340)={0x18, r4, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x18, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480), 0x0, 0x2}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r5, r4, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000540)={0x8, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000580)={0x18, r4}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) 9.461887607s ago: executing program 1 (id=3919): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9.388831578s ago: executing program 3 (id=3920): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) waitid(0x1, 0x0, 0x0, 0x4, 0x0) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x4008001, &(0x7f0000000040)={0x23, 0x0, 0x1, 0x3}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000006000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x38, 0xe, 0x0, &(0x7f0000000240)="00000000000800005bdfa092873f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.374258894s ago: executing program 5 (id=3921): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 7.94587809s ago: executing program 5 (id=3922): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.913843649s ago: executing program 4 (id=3923): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d080001"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@delqdisc={0x78, 0x25, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0xfff3, 0x3}, {0x0, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}, @TCA_RATE={0x6, 0x5, {0xb, 0x2}}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xaf, 0x2, 0x1000, 0x0, 0x1, 0x7, 0x8, 0x1}}, {0x6, 0x2, [0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x78}}, 0x40004) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.837866285s ago: executing program 3 (id=3924): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(r1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, r4, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x20, r4, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLL', 0x19, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000280)={0x18, r4}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r4, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000340)={0x18, r4, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r5, r4, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000540)={0x8, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000580)={0x18, r4}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) 5.795198981s ago: executing program 6 (id=3925): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 5.793698546s ago: executing program 3 (id=3926): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000600)=""/102400, 0x19000) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x8, @local, 0xb}, 0x1c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) 5.301988714s ago: executing program 1 (id=3927): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(r1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, r4, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x20, r4, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLL', 0x19, 0x1c}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r4, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x18, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, 0x0, 0x0, 0x2}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r5, r4, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000540)={0x8, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000580)={0x18, r4}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) 4.014507693s ago: executing program 1 (id=3928): socket$inet_sctp(0x2, 0x1, 0x84) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000004e200000100000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f0000000080), 0x0}, 0x20) 3.281782704s ago: executing program 4 (id=3929): r0 = socket(0xb, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="08000ad5818a1b9cea7a3726e43f4f2082002e80184c8705137f1f0f9a88723a7dcde7de17a3ca9213ed903ea416893b67e822437053c198734390e6b8111a11590d1b29", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0xc8bc, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efe", 0x53, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0}, &(0x7f0000000300)=0x40) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r8, 0x4b63, &(0x7f0000000000)=0x3) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in6={0xa, 0x4e23, 0x3, @private1, 0x2}, @in={0x2, 0x4620, @remote}}}, 0x118) 3.23237846s ago: executing program 3 (id=3930): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(r1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000100)={0x20, r4, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x20, r4, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLL', 0x19, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000280)={0x18, r4}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000340)={0x18, r4, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x18, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480), 0x0, 0x2}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r5, r4, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000540)={0x8, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000580)={0x18, r4}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) 2.225633596s ago: executing program 3 (id=3931): r0 = socket$isdn_base(0x22, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x27) syz_usb_connect$hid(0x6, 0x5d, 0x0, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) chdir(0x0) creat(0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x15, 0x5, 0x0) creat(0x0, 0x175) 2.130308686s ago: executing program 5 (id=3932): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x1, 0x25dfdbff, {{0x2}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x1c}}, 0x4044) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x80) 1.171457949s ago: executing program 5 (id=3933): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 704.857192ms ago: executing program 6 (id=3934): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) msgget$private(0x0, 0x208) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) lseek(0xffffffffffffffff, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 8.656353ms ago: executing program 1 (id=3935): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800, &(0x7f00000007c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x7fff}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 0s ago: executing program 6 (id=3936): openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xbdc, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : recv_control_msg error -71 req 04 val 1100 [ 1189.752387][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 1189.775434][ T5876] pwc: Registered as video103. [ 1189.799482][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 1189.851274][ T5876] usb 4-1: USB disconnect, device number 40 [ 1191.181115][T17606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2966'. [ 1191.205897][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1191.420160][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.483337][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1191.724044][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.748604][ T24] usb 5-1: config 0 descriptor?? [ 1191.861748][ T30] audit: type=1400 audit(2000000726.233:1789): avc: denied { create } for pid=17614 comm="syz.2.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1191.892118][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 1193.069764][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1193.119317][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 1193.150245][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1193.189759][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 1193.224125][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 1193.253199][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 1193.267810][T17612] kexec: Could not allocate control_code_buffer [ 1193.273259][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 1193.329791][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 1193.377429][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 1193.911628][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 1193.950518][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 1193.975426][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 1193.994838][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 1194.005436][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 1194.037033][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 1194.079124][ T24] pwc: Registered as video103. [ 1194.111818][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 1194.216642][ T24] usb 5-1: USB disconnect, device number 41 [ 1194.275005][T17648] syzkaller0: entered promiscuous mode [ 1195.319308][T17648] syzkaller0: entered allmulticast mode [ 1199.513542][T17686] netlink: 'syz.0.2989': attribute type 10 has an invalid length. [ 1199.521524][T17686] veth0_vlan: entered allmulticast mode [ 1199.529603][T17686] veth0_vlan: left promiscuous mode [ 1199.535602][T17686] veth0_vlan: entered promiscuous mode [ 1199.542597][T17686] team0: Device veth0_vlan failed to register rx_handler [ 1199.684253][T17678] kexec: Could not allocate control_code_buffer [ 1199.698529][T17690] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17690 comm=syz.4.2991 [ 1199.772496][T17690] netlink: 'syz.4.2991': attribute type 1 has an invalid length. [ 1199.992043][T17690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.018661][T17691] bond0: (slave dummy0): making interface the new active one [ 1200.049230][T17691] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1200.908104][T16752] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1203.253628][T16752] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1203.282737][T16752] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1203.319527][T16752] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1203.354765][T16752] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1203.697288][T16752] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1203.811631][T16752] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1204.859897][T16752] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1205.748838][T16752] usb 4-1: Product: syz [ 1205.748871][T14223] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1205.753014][T16752] usb 4-1: Manufacturer: syz [ 1205.755852][T16752] usb 4-1: can't set config #1, error -71 [ 1205.887415][T16752] usb 4-1: USB disconnect, device number 41 [ 1207.262735][ T6042] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1209.280335][T17772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3009'. [ 1209.289376][T17772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3009'. [ 1209.640312][ T30] audit: type=1326 audit(2000000742.778:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17767 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1719c799 code=0x7ffc0000 [ 1209.692156][T17773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3009'. [ 1209.702680][T17773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3009'. [ 1209.720850][T17776] netlink: 810 bytes leftover after parsing attributes in process `syz.3.3009'. [ 1209.772565][ T30] audit: type=1326 audit(2000000742.778:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17767 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1719c799 code=0x7ffc0000 [ 1209.821660][ T30] audit: type=1326 audit(2000000742.778:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17767 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efe1719c799 code=0x7ffc0000 [ 1209.907738][ T30] audit: type=1326 audit(2000000743.068:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17767 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1719c799 code=0x7ffc0000 [ 1209.959326][T17787] input: syz0 as /devices/virtual/input/input36 [ 1210.033566][ T30] audit: type=1326 audit(2000000743.068:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17767 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1719c799 code=0x7ffc0000 [ 1213.892074][ T792] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1214.073305][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 1214.083845][ T792] usb 2-1: too many endpoints for config 1 interface 0 altsetting 137: 255, using maximum allowed: 30 [ 1214.116089][ T792] usb 2-1: config 1 interface 0 altsetting 137 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1214.147465][ T792] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1214.163206][ T792] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.40 [ 1214.177274][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.195742][ T792] usb 2-1: Product: syz [ 1214.204511][ T792] usb 2-1: Manufacturer: syz [ 1214.213686][ T792] usb 2-1: SerialNumber: syz [ 1214.308345][ T30] audit: type=1800 audit(2000000747.326:1795): pid=17821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3023" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1215.084130][ T792] usbhid 2-1:1.0: can't add hid device: -71 [ 1215.092131][ T792] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1215.188621][ T30] audit: type=1400 audit(2000000748.065:1796): avc: denied { listen } for pid=17824 comm="syz.4.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1215.195314][ T792] usb 2-1: USB disconnect, device number 40 [ 1216.328153][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1216.511078][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1216.522189][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1216.552053][ T10] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1216.570770][ T10] usb 4-1: string descriptor 0 read error: -22 [ 1216.587270][ T10] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1216.636523][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1216.756488][ T10] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1216.788017][ T792] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1216.796677][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1216.837355][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1216.869895][ T10] usb 4-1: media controller created [ 1216.915191][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1216.940535][ T30] audit: type=1326 audit(2000000749.797:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17855 comm="syz.1.3031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbba179c799 code=0x0 [ 1218.132995][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1218.133084][ T792] usb 2-1: device not accepting address 41, error -71 [ 1218.321016][T17862] vivid-003: disconnect [ 1218.477662][T17855] vivid-003: reconnect [ 1219.289020][ T10] usb 4-1: USB disconnect, device number 42 [ 1219.325277][ T30] audit: type=1400 audit(2000000751.986:1798): avc: denied { name_bind 0x1000000 } for pid=17872 comm="syz.2.3036" path="socket:[61946]" dev="sockfs" ino=61946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1220.177694][T17878] syzkaller0: entered promiscuous mode [ 1221.172304][T17878] syzkaller0: entered allmulticast mode [ 1222.078553][T14223] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1222.537437][T17900] vivid-004: disconnect [ 1223.296119][T17909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3045'. [ 1223.305183][T17909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3045'. [ 1223.661138][ T30] audit: type=1326 audit(2000000755.898:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1719c799 code=0x7ffc0000 [ 1223.720769][T17910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3045'. [ 1223.729841][T17910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3045'. [ 1223.749397][T17912] netlink: 810 bytes leftover after parsing attributes in process `syz.3.3045'. [ 1223.832977][ T30] audit: type=1326 audit(2000000755.898:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1719c799 code=0x7ffc0000 [ 1223.870726][T17911] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 1223.940740][T17897] vivid-004: reconnect [ 1224.005791][ T30] audit: type=1326 audit(2000000755.898:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efe1719c799 code=0x7ffc0000 [ 1224.204063][T17929] syzkaller0: entered promiscuous mode [ 1224.210647][T17929] syzkaller0: entered allmulticast mode [ 1224.255902][T17929] tipc: Started in network mode [ 1224.268046][T17929] tipc: Node identity 5656efec05, cluster identity 4711 [ 1224.275189][T17929] tipc: Enabled bearer , priority 0 [ 1224.311238][T17928] tipc: Resetting bearer [ 1224.345317][T17928] tipc: Disabling bearer [ 1224.676960][T17941] syzkaller0: entered promiscuous mode [ 1224.695439][T17941] syzkaller0: entered allmulticast mode [ 1228.038891][ T30] audit: type=1400 audit(2000000760.175:1802): avc: denied { bind } for pid=17970 comm="syz.1.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1228.086707][T17970] delete_channel: no stack [ 1228.091429][ T30] audit: type=1400 audit(2000000760.175:1803): avc: denied { name_bind } for pid=17970 comm="syz.1.3062" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1228.655184][ T30] audit: type=1400 audit(2000000760.175:1804): avc: denied { node_bind } for pid=17970 comm="syz.1.3062" saddr=fc01::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1228.679847][ T30] audit: type=1400 audit(2000000760.203:1805): avc: denied { connect } for pid=17970 comm="syz.1.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1229.268860][T17988] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3065'. [ 1230.871175][T17994] netlink: 'syz.1.3067': attribute type 1 has an invalid length. [ 1230.879094][T17994] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3067'. [ 1230.888208][T17994] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3067'. [ 1230.898984][T17994] netlink: 'syz.1.3067': attribute type 1 has an invalid length. [ 1230.906823][T17994] netlink: 634 bytes leftover after parsing attributes in process `syz.1.3067'. [ 1231.247867][T18000] vivid-002: disconnect [ 1231.980187][T17993] vivid-002: reconnect [ 1232.106175][ T30] audit: type=1326 audit(2000000763.983:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17998 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0912f9c799 code=0x7ffc0000 [ 1232.845642][ T30] audit: type=1326 audit(2000000763.993:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17998 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0912f9c799 code=0x7ffc0000 [ 1233.014596][ T30] audit: type=1326 audit(2000000763.993:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17998 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0912f9c799 code=0x7ffc0000 [ 1233.589363][T14223] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1233.617864][T14223] Bluetooth: hci1: unexpected subevent 0x10 length: 32 > 2 [ 1233.668197][ T30] audit: type=1326 audit(2000000763.993:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17998 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0912f9c799 code=0x7ffc0000 [ 1234.877737][ T30] audit: type=1326 audit(2000000763.993:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17998 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f0912f9c799 code=0x7ffc0000 [ 1234.911313][ T30] audit: type=1326 audit(2000000763.993:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17998 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0912f9c799 code=0x7ffc0000 [ 1234.934979][ T30] audit: type=1326 audit(2000000763.993:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17998 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0912f9c799 code=0x7ffc0000 [ 1234.964713][ T30] audit: type=1326 audit(2000000763.993:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17998 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0912f5cfce code=0x7ffc0000 [ 1234.988396][ T30] audit: type=1326 audit(2000000763.993:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17998 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0912f5cfce code=0x7ffc0000 [ 1236.046073][ T30] audit: type=1326 audit(2000000764.002:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17998 comm="syz.2.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0912f5cfce code=0x7ffc0000 [ 1236.142027][T18040] tipc: Started in network mode [ 1236.146907][T18040] tipc: Node identity ba9fe70ec988, cluster identity 4711 [ 1236.293851][T18040] tipc: Enabled bearer , priority 0 [ 1236.322392][T18042] syzkaller0: entered promiscuous mode [ 1236.364636][T18042] syzkaller0: entered allmulticast mode [ 1236.459347][T18040] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1236.500628][T18040] tipc: Resetting bearer [ 1236.842642][T18039] tipc: Resetting bearer [ 1236.927135][T18039] tipc: Disabling bearer [ 1238.654801][T14223] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1240.196373][T18083] syzkaller0: entered promiscuous mode [ 1240.222021][T18083] syzkaller0: entered allmulticast mode [ 1240.416312][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1243.511257][T18099] ip6gre2: left promiscuous mode [ 1244.353820][T14223] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1244.999216][T18127] IPVS: length: 528 != 8 [ 1245.032278][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1245.032306][ T30] audit: type=1400 audit(2000000776.046:1831): avc: denied { getopt } for pid=18122 comm="syz.1.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1247.071990][ T29] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1247.253448][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 1247.265264][ T29] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1247.296171][ T29] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1247.312951][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1247.352903][ T29] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1247.381695][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.416592][ T29] usb 4-1: config 0 descriptor?? [ 1248.376117][ T29] hid_parser_main: 4007 callbacks suppressed [ 1248.376129][ T29] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 1248.413061][ T29] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 1248.429129][ T29] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 1248.458380][ T29] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 1248.482342][ T29] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 1248.519109][ T29] corsair-cpro 0003:1B1C:0C10.0015: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1248.625679][ T29] corsair-cpro 0003:1B1C:0C10.0015: probe with driver corsair-cpro failed with error -90 [ 1248.727558][T18157] random: crng reseeded on system resumption [ 1250.094877][T10922] usb 4-1: USB disconnect, device number 43 [ 1252.271416][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1252.500735][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1252.617951][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1252.672538][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1252.679953][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1252.706471][ T30] audit: type=1400 audit(2000000783.252:1832): avc: denied { mounton } for pid=18179 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1253.793338][T16752] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1254.872636][T14223] Bluetooth: hci5: command tx timeout [ 1254.926005][T16752] usb 4-1: Using ep0 maxpacket: 16 [ 1254.937845][T16752] usb 4-1: config 0 has no interfaces? [ 1254.950855][T16752] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1254.968751][T16752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.990125][T16752] usb 4-1: Product: syz [ 1254.994295][T16752] usb 4-1: Manufacturer: syz [ 1255.003828][T16752] usb 4-1: SerialNumber: syz [ 1255.024450][T16752] usb 4-1: config 0 descriptor?? [ 1255.356047][ T24] usb 4-1: USB disconnect, device number 44 [ 1255.500209][T18179] lo speed is unknown, defaulting to 1000 [ 1257.120168][T14223] Bluetooth: hci5: command tx timeout [ 1259.879125][T14223] Bluetooth: hci5: command tx timeout [ 1260.176155][T18226] kvm: pic: level sensitive irq not supported [ 1260.176222][T18226] kvm: pic: non byte read [ 1260.227644][T18226] kvm: pic: level sensitive irq not supported [ 1260.227698][T18226] kvm: pic: non byte read [ 1260.270508][T18226] kvm: pic: level sensitive irq not supported [ 1260.270562][T18226] kvm: pic: non byte read [ 1260.315326][T18226] kvm: pic: level sensitive irq not supported [ 1260.315365][T18226] kvm: pic: non byte read [ 1260.351684][T18226] kvm: pic: level sensitive irq not supported [ 1260.351738][T18226] kvm: pic: non byte read [ 1260.389947][T18226] kvm: pic: level sensitive irq not supported [ 1260.390002][T18226] kvm: pic: non byte read [ 1260.428076][T18226] kvm: pic: level sensitive irq not supported [ 1260.428138][T18226] kvm: pic: non byte read [ 1260.439283][T18035] syz_tun (unregistering): left allmulticast mode [ 1260.466711][T18226] kvm: pic: level sensitive irq not supported [ 1260.466751][T18226] kvm: pic: non byte read [ 1260.494743][T18226] kvm: pic: level sensitive irq not supported [ 1260.494782][T18226] kvm: pic: non byte read [ 1260.532467][T18226] kvm: pic: level sensitive irq not supported [ 1260.532507][T18226] kvm: pic: non byte read [ 1260.668461][T18141] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.783368][T18141] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.880642][T18141] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.990588][T18141] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.138975][T18233] syzkaller0: entered promiscuous mode [ 1261.147101][T18233] syzkaller0: entered allmulticast mode [ 1262.750038][ T5809] Bluetooth: hci5: command tx timeout [ 1262.755520][T14223] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1262.879711][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3126'. [ 1263.633704][T18179] chnl_net:caif_netlink_parms(): no params data found [ 1263.641418][T18249] nbd: socks must be embedded in a SOCK_ITEM attr [ 1264.141678][T16752] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1264.236520][T16752] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1264.344101][T18131] udevd[18131]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1267.521086][T18293] random: crng reseeded on system resumption [ 1267.560220][T18293] net_ratelimit: 22 callbacks suppressed [ 1267.560245][T18293] openvswitch: netlink: IP tunnel dst address not specified [ 1269.538377][T18141] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1269.567586][T18141] bond0 (unregistering): Released all slaves [ 1269.791846][T18179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.849880][T18179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.978967][T18179] bridge_slave_0: entered allmulticast mode [ 1270.041060][T18179] bridge_slave_0: entered promiscuous mode [ 1270.074390][T18179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.089863][T18179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.110998][T18179] bridge_slave_1: entered allmulticast mode [ 1270.118231][T18179] bridge_slave_1: entered promiscuous mode [ 1271.403252][T18325] overlayfs: failed to clone upperpath [ 1272.371620][T18141] tipc: Disabling bearer [ 1272.385353][T18141] tipc: Left network mode [ 1272.573793][T18179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.605617][T18179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.614851][ T30] audit: type=1400 audit(2000000801.883:1833): avc: denied { read } for pid=18335 comm="syz.4.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1273.202616][T18179] team0: Port device team_slave_0 added [ 1274.548687][T18179] team0: Port device team_slave_1 added [ 1274.918955][T18349] SELinux: failed to load policy [ 1275.879032][T18179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.925461][T18179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.559702][ T6234] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1276.635641][T18179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1277.121533][T18179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1277.202738][T18179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1277.387437][T18179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.011112][T18179] hsr_slave_0: entered promiscuous mode [ 1278.024358][T18179] hsr_slave_1: entered promiscuous mode [ 1278.035243][T18179] debugfs: 'hsr0' already exists in 'hsr' [ 1278.051018][T18179] Cannot create hsr debugfs directory [ 1278.117404][T18386] syzkaller0: entered promiscuous mode [ 1278.122863][T18386] syzkaller0: entered allmulticast mode [ 1280.031283][T18410] hpfs: Bad magic ... probably not HPFS [ 1280.486158][T18412] vivid-004: disconnect [ 1283.147492][T18179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1283.166280][T18406] vivid-004: reconnect [ 1283.458042][ T30] audit: type=1400 audit(2000000811.953:1834): avc: denied { getopt } for pid=18422 comm="syz.3.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1283.621058][T18179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1283.668727][T18179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1283.849423][T18179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1284.336951][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3163'. [ 1284.448349][T18141] hsr_slave_0: left promiscuous mode [ 1284.469802][T18141] hsr_slave_1: left promiscuous mode [ 1285.095140][T18141] veth1_macvtap: left promiscuous mode [ 1285.101197][T18141] veth0_macvtap: left promiscuous mode [ 1285.125448][T18141] veth1_vlan: left promiscuous mode [ 1285.290271][T18141] team0 (unregistering): Port device batadv1 removed [ 1289.400803][T18477] hpfs: Bad magic ... probably not HPFS [ 1289.827578][T18141] vcan0 (unregistering): left allmulticast mode [ 1290.525993][T18179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.580257][T18179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.616723][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.623791][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.660939][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.668053][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.313814][ T30] audit: type=1400 audit(2000000819.373:1835): avc: denied { setcurrent } for pid=18487 comm="syz.1.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1292.355511][T18141] IPVS: stop unused estimator thread 0... [ 1292.830602][T18179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.937849][T18507] vimc link validate: Scaler:src:4096x2160 (0x33424752, 12, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1295.644899][T18548] netlink: 'syz.3.3180': attribute type 4 has an invalid length. [ 1296.739378][T18179] veth0_vlan: entered promiscuous mode [ 1296.916678][T18179] veth1_vlan: entered promiscuous mode [ 1297.005306][T18179] veth0_macvtap: entered promiscuous mode [ 1297.053560][T18179] veth1_macvtap: entered promiscuous mode [ 1297.192071][T18179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.690081][T18179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.735975][T18561] netlink: zone id is out of range [ 1297.757023][T18561] netlink: zone id is out of range [ 1297.757778][ T77] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.787587][ T77] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.799152][T18561] netlink: zone id is out of range [ 1297.815325][T18561] netlink: zone id is out of range [ 1297.849242][ T77] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.926842][T18561] netlink: zone id is out of range [ 1297.942362][ T77] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.961990][T18561] netlink: zone id is out of range [ 1297.982337][T18561] netlink: zone id is out of range [ 1297.994294][T18561] netlink: zone id is out of range [ 1298.036721][T18561] netlink: zone id is out of range [ 1298.076827][T18561] netlink: zone id is out of range [ 1298.482397][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.521503][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.663258][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.699056][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.818028][ T30] audit: type=1400 audit(2000000826.411:1836): avc: denied { mounton } for pid=18179 comm="syz-executor" path="/root/syzkaller.epP7fl/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1299.284053][ T30] audit: type=1400 audit(2000000826.411:1837): avc: denied { mounton } for pid=18179 comm="syz-executor" path="/root/syzkaller.epP7fl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1299.386291][ T30] audit: type=1400 audit(2000000826.411:1838): avc: denied { mounton } for pid=18179 comm="syz-executor" path="/root/syzkaller.epP7fl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=65233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1299.495963][ T30] audit: type=1400 audit(2000000826.841:1839): avc: denied { mounton } for pid=18179 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1299.712033][ T30] audit: type=1400 audit(2000000826.841:1840): avc: denied { mount } for pid=18179 comm="syz-executor" name="/" dev="gadgetfs" ino=6963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1300.062727][ T29] libceph: connect (1)[c::]:6789 error -13 [ 1300.219906][T18596] ceph: No mds server is up or the cluster is laggy [ 1300.231729][T16752] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1300.254585][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1300.281208][ T30] audit: type=1400 audit(2000000826.850:1841): avc: denied { mounton } for pid=18179 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1300.484589][T16752] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.522989][T16752] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 1300.541497][T16752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.641482][T16752] usb 6-1: config 0 descriptor?? [ 1300.659376][T16752] pwc: Askey VC010 type 2 USB webcam detected. [ 1301.221487][T14223] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1301.874180][T16752] pwc: send_video_command error -71 [ 1301.914234][T16752] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1301.948637][T16752] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1303.177001][T16752] usb 6-1: USB disconnect, device number 2 [ 1307.252866][T14223] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1308.256635][T16752] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1308.831693][T16752] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.093550][T16752] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1309.143175][T16752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1309.275994][T16752] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1309.625081][ T30] audit: type=1400 audit(2000000836.517:1842): avc: denied { mount } for pid=18684 comm="syz.2.3207" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1309.626687][T16752] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1309.713252][T18683] CIFS: VFS: Malformed UNC in devname [ 1309.793661][ T30] audit: type=1400 audit(2000000836.517:1843): avc: denied { mounton } for pid=18684 comm="syz.2.3207" path="/665/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1309.861813][T16752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.940643][T16752] usb 4-1: Product: syz [ 1309.975862][T16752] usb 4-1: Manufacturer: syz [ 1310.004434][T16752] usb 4-1: SerialNumber: syz [ 1310.010154][ T77] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1310.070603][T16752] usb 4-1: config 0 descriptor?? [ 1310.135725][T16752] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 1310.221560][T16752] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1310.320051][T16752] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1311.528575][ T10] usb 4-1: USB disconnect, device number 45 [ 1311.549542][ T10] garmin_gps 4-1:0.0: device disconnected [ 1311.839337][ T30] audit: type=1400 audit(2000000838.595:1844): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1311.992350][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3211'. [ 1315.804421][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1316.038164][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1316.071338][ T10] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.147993][ T10] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1316.226162][ T10] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1316.851784][ T30] audit: type=1400 audit(2000000842.956:1845): avc: denied { create } for pid=18768 comm="syz.3.3220" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1316.924590][ T10] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1316.988605][ T10] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1317.044758][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.170093][ T30] audit: type=1400 audit(2000000843.583:1846): avc: denied { unlink } for pid=5803 comm="syz-executor" name="file0" dev="tmpfs" ino=3636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1317.204463][ T10] usb 3-1: Product: syz [ 1317.208610][ T10] usb 3-1: Manufacturer: syz [ 1317.213168][ T10] usb 3-1: SerialNumber: syz [ 1317.304726][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1317.454589][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input38 [ 1318.165982][ T10] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1318.563345][ T10] (id 0x00) [ 1319.343906][ T10] rc_core: IR keymap rc-imon-pad not found [ 1319.384422][ T10] Registered IR keymap rc-empty [ 1319.426844][ T10] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1319.582240][ T10] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1319.655049][ T10] imon:send_packet: packet tx failed (-71) [ 1319.694872][ T10] imon 3-1:155.0: remote input dev register failed [ 1319.775934][ T10] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 1321.413191][ T10] imon 3-1:155.0: unable to initialize intf0, err 0 [ 1321.714277][ T10] imon:imon_probe: failed to initialize context! [ 1321.752704][ T10] imon 3-1:155.0: unable to register, err -19 [ 1321.810438][ T10] usb 3-1: USB disconnect, device number 26 [ 1321.979224][T18800] kvm_pr_unimpl_wrmsr: 64 callbacks suppressed [ 1321.979240][T18800] kvm: kvm [18798]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1322.002402][ T30] audit: type=1400 audit(2000000848.112:1847): avc: denied { ioctl } for pid=18811 comm="syz.2.3229" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1322.315816][T18827] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1322.354717][T18827] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1324.933397][ T30] audit: type=1400 audit(2000000849.927:1848): avc: denied { watch_sb } for pid=18843 comm="syz.1.3234" path="/594/file0" dev="tmpfs" ino=3176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1325.827973][ T29] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1326.234079][ T29] usb 3-1: device descriptor read/64, error -71 [ 1327.131612][ T29] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1327.155583][T18886] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1327.698941][ T30] audit: type=1400 audit(2000000853.053:1849): avc: denied { write } for pid=18885 comm="syz.3.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1327.741504][T18887] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1327.805236][ T29] usb 3-1: device descriptor read/64, error -71 [ 1327.822136][T18887] picdev_read: 79 callbacks suppressed [ 1327.822146][T18887] kvm: pic: non byte read [ 1327.863851][T18887] kvm: pic: single mode not supported [ 1327.863894][T18887] kvm: pic: non byte read [ 1327.893898][T18887] kvm: pic: non byte read [ 1327.905439][T18887] kvm: pic: non byte read [ 1327.921621][T18887] kvm: pic: non byte read [ 1327.922887][ T29] usb usb3-port1: attempt power cycle [ 1327.958514][T18887] kvm: pic: non byte read [ 1327.972724][T18887] pic_ioport_write: 79 callbacks suppressed [ 1327.972737][T18887] kvm: pic: level sensitive irq not supported [ 1327.990194][T18887] kvm: pic: non byte read [ 1328.053574][T18891] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1328.062073][T18891] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1329.086747][ T29] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1330.316348][ T29] usb 3-1: device not accepting address 29, error -71 [ 1333.101870][T18940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3247'. [ 1333.112875][T18940] netlink: 30 bytes leftover after parsing attributes in process `syz.2.3247'. [ 1333.122209][T18940] tipc: Invalid UDP bearer configuration [ 1333.122247][T18940] tipc: Enabling of bearer rejected, failed to enable media [ 1336.482174][ T5876] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1336.691676][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 1336.711172][ T5876] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1336.759742][ T5876] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1336.791820][ T5876] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1336.801702][ T5876] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1336.964352][ T5876] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1336.984087][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.184370][T18969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.194032][T18969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.801307][ T5876] usb 4-1: usb_control_msg returned -32 [ 1338.814904][ T5876] usbtmc 4-1:16.0: can't read capabilities [ 1339.907785][ T24] usb 4-1: USB disconnect, device number 46 [ 1345.030852][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1345.276723][ T5876] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1345.479731][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 1345.779993][ T5876] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1345.788090][ T5876] usb 3-1: config 0 has no interface number 0 [ 1345.892012][ T5876] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1346.010911][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.057062][ T5876] usb 3-1: Product: syz [ 1346.061225][ T5876] usb 3-1: Manufacturer: syz [ 1346.121844][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'. [ 1346.504923][ T5876] usb 3-1: SerialNumber: syz [ 1346.535145][ T5876] usb 3-1: config 0 descriptor?? [ 1346.665690][T19037] netlink: 'syz.4.3277': attribute type 10 has an invalid length. [ 1347.189986][T19039] xt_TCPMSS: Only works on TCP SYN packets [ 1347.211833][T14223] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1348.364837][ T5876] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1348.432540][ T5876] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1348.475964][ T5876] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1348.600542][ T5876] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1349.187410][ T30] audit: type=1800 audit(2000000873.547:1850): pid=19056 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3278" name="bus" dev="ramfs" ino=67721 res=0 errno=0 [ 1349.224193][ T5876] usb 3-1: USB disconnect, device number 31 [ 1350.780520][ T5890] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1350.847837][T19080] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 1350.950840][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 1350.988146][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.047680][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1351.152229][ T5890] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1351.250151][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.402481][ T5890] usb 5-1: config 0 descriptor?? [ 1351.568210][ T5890] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1351.982267][T19085] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1351.991044][T19085] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1353.356613][ T30] audit: type=1400 audit(2000000877.459:1851): avc: denied { lock } for pid=19095 comm="syz.3.3290" path="socket:[67237]" dev="sockfs" ino=67237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1353.999951][ T30] audit: type=1400 audit(2000000878.057:1852): avc: denied { setopt } for pid=19099 comm="syz.1.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1354.857824][ T30] audit: type=1400 audit(2000000878.404:1853): avc: denied { map } for pid=19115 comm="syz.3.3294" path="socket:[67264]" dev="sockfs" ino=67264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1354.857874][ T30] audit: type=1400 audit(2000000878.404:1854): avc: denied { read } for pid=19115 comm="syz.3.3294" path="socket:[67264]" dev="sockfs" ino=67264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1354.857914][ T30] audit: type=1400 audit(2000000878.469:1855): avc: denied { setopt } for pid=19115 comm="syz.3.3294" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1355.076780][ T5876] usb 5-1: USB disconnect, device number 42 [ 1355.638070][ T30] audit: type=1400 audit(2000000879.583:1856): avc: denied { map } for pid=19125 comm="syz.4.3296" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1355.847389][T19131] overlayfs: failed to clone upperpath [ 1358.041684][T19145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=19145 comm=syz.1.3298 [ 1358.055522][ T30] audit: type=1400 audit(2000000881.838:1857): avc: denied { getopt } for pid=19138 comm="syz.1.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1358.501712][T19156] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1360.935998][ T30] audit: type=1400 audit(2000000884.543:1858): avc: denied { append } for pid=19177 comm="syz.5.3300" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1362.544549][T19189] IPVS: Error connecting to the multicast addr [ 1366.654310][T19220] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 1367.065034][T19221] lo speed is unknown, defaulting to 1000 [ 1370.024809][ T30] audit: type=1400 audit(2000000893.030:1859): avc: denied { append } for pid=19239 comm="syz.3.3319" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1370.060613][ T30] audit: type=1400 audit(2000000893.077:1860): avc: denied { map } for pid=19239 comm="syz.3.3319" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1370.083182][ T30] audit: type=1400 audit(2000000893.086:1861): avc: denied { execute } for pid=19239 comm="syz.3.3319" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1373.177003][T19273] CIFS mount error: No usable UNC path provided in device string! [ 1373.177003][T19273] [ 1373.177745][T19273] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1373.838389][ T5890] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1374.215745][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.201238][ T5890] usb 5-1: config 0 has no interfaces? [ 1375.210963][ T5890] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1375.226567][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.239985][ T5890] usb 5-1: Product: syz [ 1375.281531][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1375.978314][ T5890] usb 5-1: Manufacturer: syz [ 1375.982940][ T5890] usb 5-1: SerialNumber: syz [ 1375.990142][ T5890] usb 5-1: config 0 descriptor?? [ 1376.075060][ T5890] usb 5-1: can't set config #0, error -71 [ 1376.082427][ T5890] usb 5-1: USB disconnect, device number 43 [ 1376.180808][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1376.200173][ T24] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.390211][T19303] netlink: 'syz.2.3332': attribute type 1 has an invalid length. [ 1376.397976][T19303] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3332'. [ 1376.416246][ T30] audit: type=1400 audit(2000000899.038:1862): avc: denied { lock } for pid=19304 comm="syz.4.3333" path="socket:[68315]" dev="sockfs" ino=68315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1376.450563][T19306] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1377.342065][ T24] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.353399][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1377.374508][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.412564][ T24] usb 2-1: can't set config #128, error -71 [ 1377.430515][ T24] usb 2-1: USB disconnect, device number 43 [ 1377.906365][ T30] audit: type=1400 audit(2000000900.423:1863): avc: denied { getopt } for pid=19310 comm="syz.2.3334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1378.109107][ T5890] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1378.118246][ T30] audit: type=1400 audit(2000000900.601:1864): avc: denied { remove_name } for pid=19328 comm="syz.5.3337" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1378.626930][ T30] audit: type=1400 audit(2000000900.601:1865): avc: denied { unlink } for pid=19328 comm="syz.5.3337" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1378.651932][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1378.664632][ T30] audit: type=1400 audit(2000000900.704:1866): avc: denied { ioctl } for pid=19325 comm="syz.1.3338" path="socket:[68785]" dev="sockfs" ino=68785 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1378.868740][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.188008][ T5890] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1379.530050][ T5890] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1379.540472][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.557688][ T5890] usb 5-1: Product: syz [ 1379.568396][ T5890] usb 5-1: Manufacturer: syz [ 1379.573010][ T5890] usb 5-1: SerialNumber: syz [ 1379.666578][ T5890] usb 5-1: config 0 descriptor?? [ 1379.767344][T19346] netlink: 'syz.5.3340': attribute type 1 has an invalid length. [ 1379.775997][T19346] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3340'. [ 1380.427849][T19352] kAFS: unable to lookup cell '(' [ 1380.470102][T19352] kAFS: unable to lookup cell '(,c¾ûL' [ 1381.332284][ T24] usb 5-1: USB disconnect, device number 44 [ 1383.276271][ T30] audit: type=1326 audit(2000000905.448:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19368 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179c799 code=0x7ffc0000 [ 1383.497244][ T30] audit: type=1326 audit(2000000905.448:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19368 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179c799 code=0x7ffc0000 [ 1383.600722][T19389] overlayfs: failed to clone lowerpath [ 1383.683218][T19390] trusted_key: encrypted_key: insufficient parameters specified [ 1383.735564][ T30] audit: type=1326 audit(2000000905.448:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19368 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbba179c799 code=0x7ffc0000 [ 1383.983546][ T30] audit: type=1326 audit(2000000905.448:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19368 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179c799 code=0x7ffc0000 [ 1384.010223][ T30] audit: type=1326 audit(2000000905.448:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19368 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba179c799 code=0x7ffc0000 [ 1384.121552][ T30] audit: type=1400 audit(2000000905.757:1872): avc: denied { mounton } for pid=19382 comm="syz.3.3349" path="/715/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1384.261602][ T30] audit: type=1400 audit(2000000905.888:1873): avc: denied { remount } for pid=19382 comm="syz.3.3349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1385.297871][ T30] audit: type=1400 audit(2000000907.339:1874): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1387.141741][ T30] audit: type=1400 audit(2000000909.060:1875): avc: denied { bind } for pid=19396 comm="syz.5.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1389.402265][T19430] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1390.232757][ T5890] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1390.275713][ T30] audit: type=1400 audit(2000000911.746:1876): avc: denied { block_suspend } for pid=19431 comm="syz.3.3360" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1390.489710][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 1390.567387][T19441] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3361'. [ 1391.022486][ T30] audit: type=1400 audit(2000000912.270:1877): avc: denied { ioctl } for pid=19435 comm="syz.5.3361" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1391.346416][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1391.409201][ T30] audit: type=1400 audit(2000000912.794:1878): avc: denied { connect } for pid=19438 comm="syz.2.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1391.450790][ T5890] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1391.459885][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.468002][ T5890] usb 5-1: Product: syz [ 1391.472370][ T5890] usb 5-1: Manufacturer: syz [ 1391.476961][ T5890] usb 5-1: SerialNumber: syz [ 1391.483300][ T5890] usb 5-1: config 0 descriptor?? [ 1391.655431][ T5890] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1392.767108][ T6234] usb 5-1: Failed to submit usb control message: -110 [ 1392.810405][ T6234] usb 5-1: unable to send the bmi data to the device: -110 [ 1393.113523][ T6234] usb 5-1: unable to get target info from device [ 1393.136367][ T6234] usb 5-1: could not get target info (-110) [ 1393.145851][ T6234] usb 5-1: could not probe fw (-110) [ 1393.209756][ T24] usb 5-1: USB disconnect, device number 45 [ 1393.778536][T19483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3369'. [ 1393.790287][T19483] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3369'. [ 1396.143513][T19489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1396.516658][T19488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1399.288221][T19526] input: syz0 as /devices/virtual/input/input42 [ 1401.508786][T10914] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1401.752541][T10914] usb 5-1: Using ep0 maxpacket: 8 [ 1401.769862][T10914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.792851][T10914] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1401.803039][T10914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.811714][T10914] usb 5-1: Product: syz [ 1402.223925][T10914] usb 5-1: Manufacturer: syz [ 1402.245211][T10914] usb 5-1: SerialNumber: syz [ 1402.271122][T10914] usb 5-1: config 0 descriptor?? [ 1402.294231][T10914] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1402.328167][T19549] sp0: Synchronizing with TNC [ 1402.333044][T10914] usb 5-1: selecting invalid altsetting 1 [ 1403.701200][T10914] gspca_stk014: reg_r err -110 [ 1403.721125][T10914] stk014 5-1:0.0: probe with driver stk014 failed with error -110 [ 1404.063286][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3382'. [ 1404.156424][T19560] : entered promiscuous mode [ 1404.900453][ T5876] usb 5-1: USB disconnect, device number 46 [ 1406.488618][T19583] sg_write: data in/out 187/14 bytes for SCSI command 0x0-- guessing data in; [ 1406.488618][T19583] program syz.5.3391 not setting count and/or reply_len properly [ 1407.896219][T19591] Bluetooth: MGMT ver 1.23 [ 1409.140777][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1409.720358][ T5876] usb 6-1: device descriptor read/64, error -71 [ 1410.151437][ T5876] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1410.312274][ T5876] usb 6-1: device descriptor read/64, error -71 [ 1410.592231][ T5876] usb usb6-port1: attempt power cycle [ 1410.865979][ T30] audit: type=1400 audit(2000000931.267:1879): avc: denied { accept } for pid=19617 comm="syz.3.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1411.113214][ T5876] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1411.446399][ T5876] usb 6-1: device descriptor read/8, error -71 [ 1411.562066][ T29] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1411.918329][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1411.985868][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1412.036621][ T29] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 142, changing to 7 [ 1413.077895][ T77] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1413.113211][ T30] audit: type=1400 audit(2000000932.671:1880): avc: denied { mount } for pid=19632 comm="syz.5.3399" name="/" dev="rpc_pipefs" ino=70030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1413.147760][ T29] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 1413.157824][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.176927][ T29] usb 5-1: Product: syz [ 1413.189010][ T29] usb 5-1: Manufacturer: syz [ 1413.193673][ T29] usb 5-1: SerialNumber: syz [ 1416.057975][T19647] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1418.679914][ T29] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1418.696508][ T29] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1419.154146][ T29] usb 5-1: USB disconnect, device number 47 [ 1419.362069][T19538] udevd[19538]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1419.707605][T19669] 8021q: VLANs not supported on ipvlan0 [ 1420.420033][ T30] audit: type=1400 audit(2000000940.204:1881): avc: denied { unmount } for pid=18179 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1420.772677][T19685] ip6gretap0: entered promiscuous mode [ 1420.778916][T19685] vlan2: entered promiscuous mode [ 1421.106619][ T30] audit: type=1400 audit(2000000940.513:1882): avc: denied { connect } for pid=19675 comm="syz.2.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1421.425754][T19689] serio: Serial port ptm1 [ 1423.187366][ T30] audit: type=1400 audit(2000000942.796:1883): avc: denied { bind } for pid=19692 comm="syz.1.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1426.327303][T19726] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3418'. [ 1426.426958][ T30] audit: type=1400 audit(2000000945.837:1884): avc: denied { watch watch_reads } for pid=19724 comm="syz.1.3420" path="pipe:[4699]" dev="pipefs" ino=4699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1427.401749][T19730] overlayfs: missing 'lowerdir' [ 1427.913573][T19736] gfs2: not a GFS2 filesystem [ 1429.267430][T19733] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1429.274272][T19733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1429.356161][T19733] vhci_hcd vhci_hcd.0: Device attached [ 1429.376639][T19744] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 1429.383237][T19744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1429.623130][ T5876] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1430.009248][T19744] vhci_hcd vhci_hcd.0: Device attached [ 1430.032858][T19733] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 1430.039459][T19733] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1430.071055][T19733] vhci_hcd vhci_hcd.0: Device attached [ 1430.109541][T19752] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 1430.116143][T19752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1430.147971][T19733] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(22) [ 1430.154567][T19733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1430.195086][T19752] vhci_hcd vhci_hcd.0: Device attached [ 1430.221108][T19733] vhci_hcd vhci_hcd.0: Device attached [ 1430.316635][T19744] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1430.348417][T19733] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1430.519471][T19744] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1430.893990][T19761] xt_hashlimit: size too large, truncated to 1048576 [ 1431.068470][T19755] vhci_hcd: connection closed [ 1431.073639][T18141] vhci_hcd vhci_hcd.4: stop threads [ 1431.090573][T19753] vhci_hcd: connection closed [ 1431.090968][T19740] vhci_hcd: connection reset by peer [ 1431.096157][T19745] vhci_hcd: connection closed [ 1431.101124][T19750] vhci_hcd: connection closed [ 1431.107680][T18141] vhci_hcd vhci_hcd.4: release socket [ 1431.119340][T18141] vhci_hcd vhci_hcd.4: disconnect device [ 1431.125044][T18141] vhci_hcd vhci_hcd.4: stop threads [ 1431.181219][T18141] vhci_hcd vhci_hcd.4: release socket [ 1431.186778][T18141] vhci_hcd vhci_hcd.4: disconnect device [ 1431.194765][T18141] vhci_hcd vhci_hcd.4: stop threads [ 1431.199985][T18141] vhci_hcd vhci_hcd.4: release socket [ 1431.212008][T18141] vhci_hcd vhci_hcd.4: disconnect device [ 1431.219084][T18141] vhci_hcd vhci_hcd.4: stop threads [ 1431.224369][T18141] vhci_hcd vhci_hcd.4: release socket [ 1431.239691][T18141] vhci_hcd vhci_hcd.4: disconnect device [ 1431.326684][T18141] vhci_hcd vhci_hcd.4: stop threads [ 1431.352846][T18141] vhci_hcd vhci_hcd.4: release socket [ 1431.387317][T18141] vhci_hcd vhci_hcd.4: disconnect device [ 1433.146019][T19784] /dev/nullb0: Can't open blockdev [ 1434.533248][ T5890] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1434.842916][ T30] audit: type=1400 audit(2000000953.707:1885): avc: denied { setopt } for pid=19798 comm="syz.5.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1434.874445][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1434.906010][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1434.945028][ T5890] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1434.976208][T19804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3432'. [ 1435.018060][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.026110][ T5890] usb 5-1: Product: syz [ 1435.030419][ T5890] usb 5-1: Manufacturer: syz [ 1435.044049][ T5890] usb 5-1: SerialNumber: syz [ 1435.087759][ T5890] usb 5-1: config 0 descriptor?? [ 1435.105139][T19804] wg1: entered promiscuous mode [ 1435.110021][T19804] wg1: entered allmulticast mode [ 1435.349289][T19783] lo speed is unknown, defaulting to 1000 [ 1435.627422][ T5876] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1438.021756][ T5890] usb 5-1: USB disconnect, device number 48 [ 1438.178057][T19831] udevd[19831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1440.969969][ T30] audit: type=1400 audit(2000000959.388:1886): avc: denied { read } for pid=19846 comm="syz.1.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1441.247376][T14223] Bluetooth: hci1: unexpected cc 0x1001 length: 24 > 9 [ 1441.254485][T14223] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 1441.765291][T19864] netlink: 'syz.5.3442': attribute type 4 has an invalid length. [ 1441.840755][T19858] netlink: 'syz.5.3442': attribute type 4 has an invalid length. [ 1442.634512][T19871] netlink: 'syz.3.3446': attribute type 2 has an invalid length. [ 1442.750984][T19870] netlink: 'syz.3.3446': attribute type 2 has an invalid length. [ 1442.765293][T19870] !: left promiscuous mode [ 1442.783500][ T5890] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 1442.951661][ T5890] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1442.959805][ T5890] usb 6-1: config 0 has no interface number 0 [ 1442.973042][ T5890] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1442.995351][T16752] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1443.038799][ T5890] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1443.059924][ T5890] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1443.070288][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.095204][ T5890] usb 6-1: config 0 descriptor?? [ 1443.128381][T19875] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1443.195688][T16752] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1443.206423][T16752] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1443.236933][ T5890] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1443.253097][T16752] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1443.263652][T16752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.355888][T16752] usb 2-1: Product: syz [ 1443.362389][T16752] usb 2-1: Manufacturer: syz [ 1443.374026][T16752] usb 2-1: SerialNumber: syz [ 1444.382762][T16752] hub 2-1:1.0: bad descriptor, ignoring hub [ 1444.388930][T16752] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1444.720888][ T30] audit: type=1400 audit(2000000962.944:1887): avc: denied { getopt } for pid=19874 comm="syz.5.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1444.870153][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1444.879254][T16752] usb 6-1: USB disconnect, device number 7 [ 1445.110550][T19899] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3451'. [ 1446.057429][ T5890] usb 2-1: USB disconnect, device number 44 [ 1449.985343][ T6234] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1450.236441][ T30] audit: type=1400 audit(2000000968.100:1888): avc: denied { listen } for pid=19919 comm="syz.5.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1450.318241][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3460'. [ 1450.328047][T19935] syz_tun: left promiscuous mode [ 1450.333125][T19935] bridge0: port 3(syz_tun) entered disabled state [ 1450.348152][T19935] bridge_slave_1: left allmulticast mode [ 1450.353993][T19935] bridge_slave_1: left promiscuous mode [ 1450.359600][T19935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.457903][ T30] audit: type=1400 audit(2000000968.100:1889): avc: denied { accept } for pid=19919 comm="syz.5.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1450.478166][T19935] bridge_slave_0: left allmulticast mode [ 1450.484680][T19935] bridge_slave_0: left promiscuous mode [ 1450.490330][T19935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.330789][T19937] lo speed is unknown, defaulting to 1000 [ 1459.267938][T20001] kAFS: unable to lookup cell 'ÿ' [ 1459.273797][T20001] kAFS: unable to lookup cell '(,c¾Ì' [ 1459.724726][T16752] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1460.365148][T16752] usb 4-1: Using ep0 maxpacket: 32 [ 1460.371569][T16752] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 1460.380132][T16752] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.397185][T16752] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1460.406489][T16752] usb 4-1: config 0 has no interface number 1 [ 1460.429295][T16752] usb 4-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1460.445055][T16752] usb 4-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 1460.454363][T16752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.462519][T16752] usb 4-1: Product: syz [ 1460.466668][T16752] usb 4-1: Manufacturer: syz [ 1460.471671][T16752] usb 4-1: SerialNumber: syz [ 1460.488123][T16752] usb 4-1: config 0 descriptor?? [ 1460.493222][T20000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1460.511912][T16752] pwc: Logitech QuickCam Pro 3000 USB webcam detected. [ 1460.522510][T20000] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1460.558980][T20000] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1460.583784][T20000] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1460.612268][T20000] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1460.646312][T20000] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1460.718324][T16752] pwc: Failed to set LED on/off time (-71) [ 1460.731972][T16752] pwc: send_video_command error -71 [ 1460.751058][T16752] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1460.758551][T16752] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1460.815488][T16752] usb 4-1: USB disconnect, device number 47 [ 1460.965183][T20000] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1460.984035][T20000] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1462.607988][ T30] audit: type=1400 audit(2000000979.685:1890): avc: denied { append } for pid=20044 comm="syz.2.3482" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1466.488572][ T5862] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1467.610354][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 1467.625467][ T5862] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1467.646242][ T5862] usb 3-1: config 0 has no interface number 0 [ 1467.661613][ T5862] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1467.744435][ T5862] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1467.801777][ T5862] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1467.835299][ T5862] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1467.877427][ T5862] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1467.941517][ T5862] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1467.965028][ T5862] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1468.080535][ T5862] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1468.114192][ T5862] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1468.129303][ T5862] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1468.169448][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.286762][ T5862] usb 3-1: Product: syz [ 1468.290957][ T5862] usb 3-1: Manufacturer: syz [ 1468.678407][ T5862] usb 3-1: SerialNumber: syz [ 1468.911575][T20104] [U] ø [ 1468.911578][ T5862] usb 3-1: config 0 descriptor?? [ 1468.972472][T20073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1469.008181][ T5862] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1469.046016][ T5862] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1469.358522][T20121] netlink: 'syz.3.3499': attribute type 8 has an invalid length. [ 1469.458212][T20116] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3499'. [ 1470.048244][ T5862] usb 3-1: USB disconnect, device number 32 [ 1470.065289][T20126] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1470.128644][T20129] comedi: No check for data length of config insn id 1024 is implemented [ 1470.289238][T20129] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1471.211509][T20129] comedi: Assuming n=15 is correct [ 1471.810587][ T29] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1471.983314][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 1472.000502][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1472.050665][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1472.092205][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.092227][ T29] usb 4-1: Product: syz [ 1472.092242][ T29] usb 4-1: Manufacturer: syz [ 1472.092256][ T29] usb 4-1: SerialNumber: syz [ 1472.094358][ T29] usb 4-1: config 0 descriptor?? [ 1472.251399][ T29] msi2500 4-1:0.0: Registered as swradio24 [ 1472.267976][ T29] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1472.435042][T16752] usb 4-1: USB disconnect, device number 48 [ 1473.933837][ T30] audit: type=1400 audit(2000000990.288:1891): avc: denied { setopt } for pid=20179 comm="syz.5.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1474.332587][ T29] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1474.607605][T20201] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3513'. [ 1474.770245][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 1474.837040][ T29] usb 3-1: config index 0 descriptor too short (expected 2075, got 27) [ 1474.870712][ T29] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 1474.894158][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.921882][ T29] usb 3-1: config 0 has no interface number 0 [ 1474.951326][ T29] usb 3-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1475.054974][ T29] usb 3-1: config 0 interface 200 has no altsetting 0 [ 1475.917941][ T29] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1476.488189][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.864543][ T30] audit: type=1400 audit(2000000993.020:1892): avc: denied { getopt } for pid=20257 comm="syz.5.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1476.936571][ T29] usb 3-1: Product: syz [ 1477.022835][ T29] usb 3-1: Manufacturer: syz [ 1477.045434][ T29] usb 3-1: SerialNumber: syz [ 1477.166482][ T29] usb 3-1: config 0 descriptor?? [ 1477.293559][ T29] usbhid 3-1:0.200: couldn't find an input interrupt endpoint [ 1478.512411][ T29] usb 3-1: USB disconnect, device number 33 [ 1478.789499][ T30] audit: type=1400 audit(2000000994.836:1893): avc: denied { shutdown } for pid=20293 comm="syz.2.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1479.012134][ T30] audit: type=1400 audit(2000000995.032:1894): avc: denied { map } for pid=20299 comm="syz.3.3548" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1480.187799][T20310] comedi comedi4: bad chanlist[0]=0x0000000c chan=12 range length=2 [ 1480.364872][ T30] audit: type=1400 audit(2000000996.305:1895): avc: denied { ioctl } for pid=20321 comm="syz.1.3554" path="socket:[73835]" dev="sockfs" ino=73835 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1482.143732][T10914] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1482.191652][T20368] tmpfs: Bad value for 'mpol' [ 1482.319638][T16752] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1482.327628][T10914] usb 3-1: Using ep0 maxpacket: 16 [ 1482.341418][T10914] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1482.362903][T10914] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1482.402202][T10914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1483.398255][T10914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1483.411224][T10914] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1483.420392][T10914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.428471][T10914] usb 3-1: Product: syz [ 1483.432625][T10914] usb 3-1: Manufacturer: syz [ 1483.437245][T10914] usb 3-1: SerialNumber: syz [ 1483.446342][T10914] usb 3-1: config 0 descriptor?? [ 1483.817120][T16752] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1483.825434][T16752] usb 2-1: config 0 has no interface number 0 [ 1483.831578][T16752] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1483.843892][T16752] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1483.858221][T16752] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1483.867669][T16752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.882539][T16752] usb 2-1: Product: syz [ 1483.890561][T16752] usb 2-1: Manufacturer: syz [ 1483.896469][T16752] usb 2-1: SerialNumber: syz [ 1483.908135][T16752] usb 2-1: config 0 descriptor?? [ 1483.914075][T20362] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1483.924261][T16752] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1483.939347][T16752] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1484.055550][T10914] appledisplay: Apple Cinema Display connected [ 1484.162284][T20400] netlink: 'syz.5.3587': attribute type 1 has an invalid length. [ 1484.173340][T20400] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3587'. [ 1484.185456][T20400] NCSI netlink: No device for ifindex 0 [ 1484.304709][ T29] usb 3-1: USB disconnect, device number 34 [ 1484.309073][ C0] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1484.329752][ T29] appledisplay: Apple Cinema Display disconnected [ 1485.499947][ T5876] usb 2-1: USB disconnect, device number 45 [ 1486.535598][ T5876] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1486.567970][ T5876] cyberjack 2-1:0.69: device disconnected [ 1486.880750][T10914] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1486.962709][ T5876] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1487.068758][T10914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.086700][T10914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.119182][T10914] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1487.140697][T10914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.160856][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 1487.162539][T10914] usb 4-1: config 0 descriptor?? [ 1487.174896][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.204582][ T5876] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1487.215908][ T5876] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1487.226888][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.249340][ T5876] usb 2-1: Product: syz [ 1487.255463][ T5876] usb 2-1: Manufacturer: syz [ 1487.260056][ T5876] usb 2-1: SerialNumber: syz [ 1487.288693][ T5876] usb 2-1: config 0 descriptor?? [ 1487.394380][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'. [ 1487.528704][ T5890] usb 2-1: USB disconnect, device number 46 [ 1487.610997][T10914] arvo 0003:1E7D:30D4.0017: item fetching failed at offset 6/7 [ 1487.619124][T10914] arvo 0003:1E7D:30D4.0017: parse failed [ 1487.625084][T10914] arvo 0003:1E7D:30D4.0017: probe with driver arvo failed with error -22 [ 1487.836077][ T5890] usb 4-1: USB disconnect, device number 49 [ 1488.070789][T20267] net_ratelimit: 9 callbacks suppressed [ 1488.070805][T20267] Set syz1 is full, maxelem 65536 reached [ 1489.511553][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1490.693514][T20456] overlayfs: workdir and upperdir must be separate subtrees [ 1490.928784][T20463] input: syz0 as /devices/virtual/input/input44 [ 1491.636770][ T5876] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1491.832565][ T5876] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1491.888959][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.078739][ T5876] usb 5-1: config 0 descriptor?? [ 1492.656508][T20497] netlink: 'syz.1.3619': attribute type 10 has an invalid length. [ 1493.051991][ T5876] usb 5-1: Cannot read MAC address [ 1493.057919][ T5876] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1493.097658][ T5876] usb 5-1: USB disconnect, device number 49 [ 1493.203268][T20504] netlink: 'syz.3.3624': attribute type 1 has an invalid length. [ 1493.241148][T20504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1493.394865][T20511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1493.475320][T20513] input: syz0 as /devices/virtual/input/input45 [ 1494.389550][ T5876] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1494.539826][T16254] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1494.555944][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 1494.568981][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.586230][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1494.616537][ T5876] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1494.628796][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.651167][ T5876] usb 2-1: Product: syz [ 1494.659245][ T5876] usb 2-1: Manufacturer: syz [ 1494.663852][ T5876] usb 2-1: SerialNumber: syz [ 1494.723700][T16254] usb 4-1: Using ep0 maxpacket: 16 [ 1494.749947][T16254] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.770627][T16254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1494.786012][T16254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1494.799544][T16254] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1494.809667][T16254] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1494.824167][T16254] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1494.833947][T16254] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1494.842145][T16254] usb 4-1: Manufacturer: syz [ 1494.909413][T16254] usb 4-1: config 0 descriptor?? [ 1495.205322][ T5876] usb 2-1: cannot find UAC_HEADER [ 1495.310615][ T5876] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1495.344265][ T5876] usb 2-1: USB disconnect, device number 47 [ 1495.351317][T16254] rc_core: IR keymap rc-hauppauge not found [ 1495.366895][T16254] Registered IR keymap rc-empty [ 1495.375561][T16254] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.399515][T20078] udevd[20078]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1495.415501][T16254] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.438607][T16254] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1495.485111][T16254] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46 [ 1495.550124][T16254] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.598508][T16254] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.638169][T16254] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.672117][T16254] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.694123][T16254] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.714662][T16254] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.753995][T16254] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.779118][T16254] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.843656][T16254] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.918003][ T5876] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1495.925598][T16254] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1496.026696][T16254] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1496.228876][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.273776][T16254] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1496.282173][ T5876] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1496.298292][ T5876] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1496.356073][T20581] loop4: detected capacity change from 0 to 65536 [ 1496.420564][T20581] loop4: detected capacity change from 65536 to 524287995 [ 1496.486267][T16254] usb 4-1: USB disconnect, device number 50 [ 1496.816346][T20605] input: syz0 as /devices/virtual/input/input47 [ 1496.881297][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.121245][ T5876] usb 5-1: config 0 descriptor?? [ 1497.413747][T16254] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1498.813861][T16254] usb 4-1: Using ep0 maxpacket: 32 [ 1498.821426][T16254] usb 4-1: config 91 has an invalid interface number: 102 but max is 0 [ 1498.829878][T16254] usb 4-1: config 91 has no interface number 0 [ 1498.838643][T16254] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0 [ 1498.856996][T16254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.865084][T16254] usb 4-1: Product: syz [ 1498.869507][T16254] usb 4-1: Manufacturer: syz [ 1498.874167][T16254] usb 4-1: SerialNumber: syz [ 1498.880956][ T5876] Bluetooth: Can't get version to change to load ram patch err [ 1498.888732][ T5876] Bluetooth: Loading sysconfig file failed [ 1498.896430][ T5876] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 1498.906983][ T5876] usb 5-1: USB disconnect, device number 50 [ 1498.963160][ T30] audit: type=1400 audit(2000001013.702:1896): avc: denied { name_connect } for pid=20630 comm="syz.4.3670" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1499.071958][ T30] audit: type=1800 audit(2000001013.814:1897): pid=20633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3671" name="bus" dev="tmpfs" ino=639 res=0 errno=0 [ 1499.127444][T16254] ems_usb 4-1:91.102 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1499.146514][T16254] ems_usb 4-1:91.102: probe with driver ems_usb failed with error -22 [ 1499.183126][T16254] usb 4-1: USB disconnect, device number 51 [ 1499.385343][T20643] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3675'. [ 1500.523306][T10914] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1501.732761][T10914] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1502.102215][T10914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.153135][T10914] usb 4-1: config 0 descriptor?? [ 1502.187562][T10914] cp210x 4-1:0.0: cp210x converter detected [ 1502.532558][T16254] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1502.671650][T10914] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1502.733900][T16254] usb 5-1: Using ep0 maxpacket: 16 [ 1502.785050][T20699] input: syz0 as /devices/virtual/input/input48 [ 1502.785135][T16254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.852992][T16254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1502.862945][T16254] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1502.876656][T16254] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1502.893903][T16254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.930768][T16254] usb 5-1: config 0 descriptor?? [ 1503.080125][T10914] usb 4-1: USB disconnect, device number 52 [ 1503.131208][T10914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1503.169751][T10914] cp210x 4-1:0.0: device disconnected [ 1503.565029][T16254] microsoft 0003:045E:07DA.0018: unknown main item tag 0x2 [ 1503.576008][T16254] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1503.590743][T16254] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1503.598133][T16254] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1503.614616][T16254] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1503.646894][T16254] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1503.658486][T16254] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1503.666345][T16254] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1503.673959][T16254] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1503.683197][T16254] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 1503.699330][T16254] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1503.724164][T16254] microsoft 0003:045E:07DA.0018: no inputs found [ 1503.738315][T16254] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 1503.878872][T16254] usb 5-1: USB disconnect, device number 51 [ 1505.305497][T20732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3702'. [ 1505.493047][ T30] audit: type=1400 audit(2000001019.822:1898): avc: denied { create } for pid=20737 comm="syz.4.3706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 1506.980746][T10524] smc: removing ib device syz1 [ 1506.987285][ T5890] syz1: Port: 1 Link DOWN [ 1508.110458][ T5890] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1508.324086][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 1508.337695][ T5890] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1508.357691][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.379237][ T5890] usb 4-1: Product: syz [ 1508.383399][ T5890] usb 4-1: Manufacturer: syz [ 1508.387987][ T5890] usb 4-1: SerialNumber: syz [ 1508.490661][ T5890] usb 4-1: config 0 descriptor?? [ 1509.483379][ T5890] gspca_main: se401-2.14.0 probing 047d:5003 [ 1510.764356][ T5890] gspca_se401: ExtraFeatures: 255 [ 1510.769414][ T5890] gspca_se401: Too many frame sizes [ 1510.781440][T20778] Invalid argument reading file caps for ./file0 [ 1510.828042][ T5890] usb 4-1: USB disconnect, device number 53 [ 1511.309208][T20788] netlink: 'syz.4.3723': attribute type 10 has an invalid length. [ 1511.454364][T20788] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 1512.321798][ T5890] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1512.991738][ T297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1514.016062][ T5890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1514.024376][ T5890] usb 4-1: not running at top speed; connect to a high speed hub [ 1514.032486][ T297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.041923][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1514.062488][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 1514.096712][T20822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1514.109178][T20822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1514.118149][T20822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1514.127255][T20822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1514.138818][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 1514.150670][T20822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1514.163726][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1514.173816][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 1514.187322][ T5890] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1514.196703][T14223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1514.196725][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.205946][T14223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1514.211962][ T5890] usb 4-1: Product: syz [ 1514.211979][ T5890] usb 4-1: Manufacturer: syz [ 1514.211994][ T5890] usb 4-1: SerialNumber: syz [ 1514.250685][T14223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1514.261776][ T5890] usb 4-1: config 0 descriptor?? [ 1514.266936][T14223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1515.275880][T14223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1515.277423][T20802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1515.301312][ T297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1515.323328][ T297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.392007][ T5890] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1515.454392][T20821] lo speed is unknown, defaulting to 1000 [ 1516.565361][ T297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.613170][ T297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.648728][ T5890] usb 4-1: USB disconnect, device number 54 [ 1516.696225][T20127] udevd[20127]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1516.842319][ T297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.883603][ T297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.012603][ T5890] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1517.144620][ T297] bridge_slave_1: left allmulticast mode [ 1517.150269][ T297] bridge_slave_1: left promiscuous mode [ 1517.162090][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.174916][ T297] bridge_slave_0: left allmulticast mode [ 1517.180552][ T297] bridge_slave_0: left promiscuous mode [ 1517.186816][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.205607][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.225835][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.257171][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1517.300931][ T5890] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1517.323238][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.398820][ T5890] usb 4-1: config 0 descriptor?? [ 1517.497544][T20822] Bluetooth: hci0: command tx timeout [ 1517.985232][ T5862] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1518.138154][ T5890] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1518.162281][ T5862] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1518.174004][ T5862] usb 5-1: config 0 has no interface number 0 [ 1518.195207][ T5862] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.229143][ T5862] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.244526][ T5862] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1518.257548][ T5862] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1518.267464][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.277949][ T297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1518.278607][ T5862] usb 5-1: config 0 descriptor?? [ 1518.299539][ T297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.326593][ T297] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1518.343760][ T297] bond0 (unregistering): Released all slaves [ 1518.405907][ T5876] usb 4-1: USB disconnect, device number 55 [ 1518.512818][ T297] : left promiscuous mode [ 1519.716869][T20822] Bluetooth: hci0: command tx timeout [ 1519.904742][ T297] tipc: Left network mode [ 1519.989981][ T5862] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.001A/input/input50 [ 1520.127533][T20821] chnl_net:caif_netlink_parms(): no params data found [ 1520.152322][ T5862] uclogic 0003:28BD:0042.001A: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 1520.250416][ T5862] usb 5-1: USB disconnect, device number 52 [ 1520.607631][T20891] fido_id[20891]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1521.489106][T20821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.506131][T20821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.528391][T20821] bridge_slave_0: entered allmulticast mode [ 1521.544329][T20821] bridge_slave_0: entered promiscuous mode [ 1521.562217][T20821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.571510][T20821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.584759][T20821] bridge_slave_1: entered allmulticast mode [ 1521.592339][T20821] bridge_slave_1: entered promiscuous mode [ 1521.638668][T20918] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1521.752537][T20919] bond0: (slave bond_slave_0): Releasing backup interface [ 1521.788937][T20821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1521.807580][T20821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1521.913307][T20821] team0: Port device team_slave_0 added [ 1521.939565][T14223] Bluetooth: hci0: command tx timeout [ 1521.961054][T20821] team0: Port device team_slave_1 added [ 1522.207056][ T5876] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1522.340059][T20821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.349979][T20821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1522.377885][T20821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.396508][ T297] hsr_slave_0: left promiscuous mode [ 1522.408699][ T297] hsr_slave_1: left promiscuous mode [ 1522.414892][ T297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1522.423392][ T297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.444390][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1522.464826][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1522.484754][ T297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1522.500095][ T297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.513148][ T5876] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1522.522666][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.538475][ T5876] usb 6-1: config 0 descriptor?? [ 1522.591472][ T297] veth1_macvtap: left promiscuous mode [ 1522.597028][ T297] veth0_macvtap: left promiscuous mode [ 1522.603678][ T297] veth1_vlan: left promiscuous mode [ 1522.608980][ T297] veth0_vlan: left promiscuous mode [ 1522.746196][T20947] netlink: 'syz.1.3767': attribute type 10 has an invalid length. [ 1523.325502][ T49] smc: removing ib device syz2 [ 1523.349286][ T5876] hid_parser_main: 7 callbacks suppressed [ 1523.349302][ T5876] hid-steam 0003:28DE:1142.001B: unknown main item tag 0x0 [ 1523.371217][ T5876] hid-steam 0003:28DE:1142.001B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1523.444863][ T5876] hid-steam 0003:28DE:1142.001B: Steam wireless receiver connected [ 1523.460431][ T297] team0 (unregistering): Port device team_slave_1 removed [ 1523.465623][ T5876] hid-steam 0003:28DE:1142.001C: unknown main item tag 0x0 [ 1523.491819][ T5876] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1523.624983][ T5890] usb 6-1: USB disconnect, device number 8 [ 1523.632768][T20821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.640960][T20821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.672458][T20821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.677448][ T5890] hid-steam 0003:28DE:1142.001B: Steam wireless receiver disconnected [ 1524.802663][T20822] Bluetooth: hci0: command tx timeout [ 1524.880765][T20821] hsr_slave_0: entered promiscuous mode [ 1524.887114][T20821] hsr_slave_1: entered promiscuous mode [ 1524.912212][T20821] debugfs: 'hsr0' already exists in 'hsr' [ 1524.928968][T20821] Cannot create hsr debugfs directory [ 1525.377027][T20974] syzkaller1: entered promiscuous mode [ 1525.382667][T20974] syzkaller1: entered allmulticast mode [ 1525.539362][ T5862] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 1525.743698][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1525.777169][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8 [ 1525.817581][ T5862] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1525.859976][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.892163][ T5862] usb 4-1: config 0 descriptor?? [ 1525.897749][T20982] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1525.993397][T20821] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1526.035365][T20821] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1526.089183][T20821] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1526.108505][T20821] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1526.182371][ T5862] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1527.389552][ T5862] usb 4-1: USB disconnect, device number 56 [ 1527.594954][T20821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.634025][ T30] audit: type=1400 audit(2000001040.531:1899): avc: denied { read append } for pid=21031 comm="syz.1.3783" name="file1" dev="tmpfs" ino=3791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1527.642647][T20821] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.679359][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.686488][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.707464][ T30] audit: type=1400 audit(2000001040.531:1900): avc: denied { open } for pid=21031 comm="syz.1.3783" path="/709/bus/file1" dev="overlay" ino=3791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1527.763217][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 1527.769256][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 1527.776145][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.783211][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.867915][T21035] ceph: No mds server is up or the cluster is laggy [ 1529.141127][T21049] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1529.300147][T20821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.067395][T20821] veth0_vlan: entered promiscuous mode [ 1530.098337][T20821] veth1_vlan: entered promiscuous mode [ 1530.137759][T20821] veth0_macvtap: entered promiscuous mode [ 1530.149641][T20821] veth1_macvtap: entered promiscuous mode [ 1530.173666][T20821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.196035][T20821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.218006][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.256411][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.292186][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.347862][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.444381][T10524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.452207][T10524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.583753][ T5862] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1530.591708][T19842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.599683][T19842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.780656][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 1530.791825][ T5862] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1530.804945][ T5862] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1530.814439][ T5862] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1530.844565][ T5862] usb 4-1: Product: syz [ 1530.893437][ T5862] usb 4-1: Manufacturer: syz [ 1531.128328][ T5862] usb 4-1: SerialNumber: syz [ 1531.492391][ T5862] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1531.577790][ T5862] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1531.950962][T10922] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1532.125851][T10922] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1532.154476][T10922] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1532.183366][T10922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1532.196089][T10922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1532.210278][T10922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1532.223610][T10922] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1532.233199][T10922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.245380][T10922] usb 5-1: config 0 descriptor?? [ 1532.257232][T21130] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1532.432221][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1532.624242][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1532.632350][ T24] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1532.656195][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.664183][ T24] usb 7-1: Product: syz [ 1532.677562][ T24] usb 7-1: Manufacturer: syz [ 1532.682165][ T24] usb 7-1: SerialNumber: syz [ 1532.699851][ T24] usb 7-1: config 0 descriptor?? [ 1532.728293][T10922] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 1532.744860][T10922] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1532.997678][ T24] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 002 [ 1533.470686][T10914] usb 5-1: USB disconnect, device number 53 [ 1533.512808][ T24] usb 4-1: USB disconnect, device number 57 [ 1533.582766][T21155] input: syz0 as /devices/virtual/input/input52 [ 1533.773435][T21163] netlink: 'syz.3.3813': attribute type 10 has an invalid length. [ 1534.203544][T21139] i2c i2c-1: failure reading status [ 1534.245590][T10914] usb 7-1: USB disconnect, device number 2 [ 1535.744958][ T5862] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1535.958808][ T5862] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1535.967986][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.981638][ T5862] usb 6-1: Product: syz [ 1535.985818][ T5862] usb 6-1: Manufacturer: syz [ 1535.999937][ T5862] usb 6-1: SerialNumber: syz [ 1536.058163][T21190] kvm: pic: non byte read [ 1536.081750][T21190] kvm: pic: level sensitive irq not supported [ 1536.081805][T21190] kvm: pic: non byte read [ 1536.138453][T21190] kvm: pic: level sensitive irq not supported [ 1536.138509][T21190] kvm: pic: non byte read [ 1536.177785][T21190] kvm: pic: level sensitive irq not supported [ 1536.177839][T21190] kvm: pic: non byte read [ 1536.214952][T21190] kvm: pic: level sensitive irq not supported [ 1536.215007][T21190] kvm: pic: non byte read [ 1536.254680][T21190] kvm: pic: level sensitive irq not supported [ 1536.254733][T21190] kvm: pic: non byte read [ 1536.284553][T21190] kvm: pic: level sensitive irq not supported [ 1536.284607][T21190] kvm: pic: non byte read [ 1536.327197][T21190] kvm: pic: level sensitive irq not supported [ 1536.327252][T21190] kvm: pic: non byte read [ 1536.351258][T21190] kvm: pic: level sensitive irq not supported [ 1536.351313][T21190] kvm: pic: non byte read [ 1536.482108][ T5862] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1536.505023][ T5862] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1539.154890][ T5862] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1539.261198][ T5862] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1539.359979][ T5862] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1539.421870][ T5862] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1539.478474][ T5862] usb 6-1: USB disconnect, device number 9 [ 1540.130260][ T30] audit: type=1326 audit(2000001052.238:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21236 comm="syz.5.3835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe50679c799 code=0x0 [ 1541.838064][ T30] audit: type=1800 audit(2000001053.838:1902): pid=21257 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3837" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=4070 res=0 errno=0 [ 1542.588575][T21281] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1542.722518][T10914] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1542.896948][T10914] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1542.927254][T10914] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1542.973217][T10914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1543.977883][T10914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1543.989022][T10914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1544.021047][T10914] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1545.045829][T10914] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1545.054008][T10914] usb 2-1: Product: syz [ 1545.058160][T10914] usb 2-1: Manufacturer: syz [ 1545.070502][T10914] cdc_wdm 2-1:1.0: skipping garbage [ 1545.075854][T10914] cdc_wdm 2-1:1.0: skipping garbage [ 1545.084949][T10914] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1545.090850][T10914] cdc_wdm 2-1:1.0: Unknown control protocol [ 1545.462077][ T5862] usb 2-1: USB disconnect, device number 48 [ 1545.543461][T21318] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1545.656978][T21322] syzkaller0: entered promiscuous mode [ 1545.693344][T21322] syzkaller0: entered allmulticast mode [ 1545.795928][T21331] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3852'. [ 1545.805467][ T30] audit: type=1400 audit(2000001057.535:1903): avc: denied { getopt } for pid=21324 comm="syz.4.3852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1545.826505][T21333] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 1546.022484][ T30] audit: type=1400 audit(2000001057.740:1904): avc: denied { accept } for pid=21340 comm="syz.4.3855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1546.142024][T10922] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1546.314716][T10922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.331326][T10922] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1546.340908][T10922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.375686][T10922] usb 4-1: config 0 descriptor?? [ 1546.392746][T10922] pwc: Askey VC010 type 2 USB webcam detected. [ 1546.462933][ T24] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1546.643602][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.669720][ T24] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1546.684373][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.702776][ T24] usb 2-1: Product: syz [ 1546.712874][ T24] usb 2-1: Manufacturer: syz [ 1546.729198][ T24] usb 2-1: SerialNumber: syz [ 1546.745690][ T24] usb 2-1: config 0 descriptor?? [ 1546.761281][ T24] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1546.777037][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1546.808551][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1546.846010][T10922] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1546.861017][ T24] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1546.885339][ T24] usb 2-1: media controller created [ 1546.886148][T10922] pwc: recv_control_msg error -32 req 02 val 2700 [ 1546.899125][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1546.925306][T10922] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1546.937082][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1546.957177][T10922] pwc: recv_control_msg error -32 req 04 val 1000 [ 1546.957194][ T24] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1547.033200][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input53 [ 1547.067111][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1547.114469][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1547.146701][ T24] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1547.191317][T10922] pwc: recv_control_msg error -71 req 04 val 1400 [ 1547.198620][T10922] pwc: recv_control_msg error -71 req 02 val 2000 [ 1547.306874][ T30] audit: type=1400 audit(2000001058.891:1905): avc: denied { ioctl } for pid=21362 comm="syz.4.3858" path="socket:[79116]" dev="sockfs" ino=79116 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1547.636536][ T24] usb 2-1: USB disconnect, device number 49 [ 1547.664633][T10922] pwc: recv_control_msg error -71 req 02 val 2100 [ 1547.687118][T10922] pwc: recv_control_msg error -71 req 04 val 1500 [ 1547.699524][T10922] pwc: recv_control_msg error -71 req 02 val 2500 [ 1547.720660][T10922] pwc: recv_control_msg error -71 req 02 val 2400 [ 1547.733063][T10922] pwc: recv_control_msg error -71 req 02 val 2600 [ 1547.749292][T10922] pwc: recv_control_msg error -71 req 02 val 2900 [ 1547.756547][ T24] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1547.762834][T10922] pwc: recv_control_msg error -71 req 02 val 2800 [ 1547.801790][T10922] pwc: recv_control_msg error -71 req 04 val 1100 [ 1547.827035][T10922] pwc: recv_control_msg error -71 req 04 val 1200 [ 1547.857855][T10922] pwc: Registered as video103. [ 1547.876412][T10922] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 1547.921096][T10922] usb 4-1: USB disconnect, device number 58 [ 1549.551229][T21391] syzkaller0: entered promiscuous mode [ 1549.556701][T21391] syzkaller0: entered allmulticast mode [ 1550.458422][T21409] syzkaller0: entered promiscuous mode [ 1550.466905][T21409] syzkaller0: entered allmulticast mode [ 1551.739064][T21428] syzkaller0: entered promiscuous mode [ 1551.744664][T21428] syzkaller0: entered allmulticast mode [ 1551.878430][T21429] syz.6.3871 (21429): drop_caches: 2 [ 1554.849251][T21453] syzkaller0: entered promiscuous mode [ 1554.857840][T21453] syzkaller0: entered allmulticast mode [ 1556.149159][T21465] syzkaller0: entered promiscuous mode [ 1556.154657][T21465] syzkaller0: entered allmulticast mode [ 1556.180250][T21465] 0: reclassify loop, rule prio 0, protocol 800 [ 1556.391158][ T24] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1556.417447][T21467] syzkaller0: entered promiscuous mode [ 1556.442347][T21467] syzkaller0: entered allmulticast mode [ 1557.461102][T21473] syzkaller0: entered promiscuous mode [ 1557.466643][T21473] syzkaller0: entered allmulticast mode [ 1557.503244][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1557.511525][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 1557.533601][ T24] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 1557.543433][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.553477][ T24] usb 2-1: Product: syz [ 1557.558346][ T24] usb 2-1: Manufacturer: syz [ 1557.569330][ T24] usb 2-1: SerialNumber: syz [ 1558.262579][T10914] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1558.276756][ T24] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1558.391942][ T30] audit: type=1400 audit(2000001069.298:1906): avc: denied { write } for pid=21484 comm="syz.3.3887" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1558.513074][ T24] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1558.516467][T10914] usb 7-1: Using ep0 maxpacket: 32 [ 1558.538356][T10914] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.556495][T10914] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1558.579025][T10914] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1558.601354][T10914] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1558.643228][T10914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.663045][T10914] usb 7-1: config 0 descriptor?? [ 1561.069269][T10914] corsair-psu 0003:1B1C:1C09.001E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.6-1/input0 [ 1561.100830][ T24] usb 2-1: unable to issue vendor read request (ret = -71) [ 1561.135633][ T24] usb 2-1: unable to issue vendor read request (ret = -71) [ 1561.143473][ T24] usb 2-1: unable to issue vendor read request (ret = -71) [ 1561.150331][T10914] corsair-psu 0003:1B1C:1C09.001E: unable to initialize device (-38) [ 1561.184568][ T24] usb 2-1: USB disconnect, device number 50 [ 1561.384079][T10914] corsair-psu 0003:1B1C:1C09.001E: probe with driver corsair-psu failed with error -38 [ 1561.474065][T20828] udevd[20828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1561.556028][T10914] usb 7-1: USB disconnect, device number 3 [ 1563.421208][T21524] netlink: 'syz.6.3899': attribute type 10 has an invalid length. [ 1563.440576][T21524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1563.455175][T21524] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1566.209825][T21555] syzkaller0: entered promiscuous mode [ 1566.218158][T21555] syzkaller0: entered allmulticast mode [ 1566.337910][ T30] audit: type=1400 audit(2000001076.756:1907): avc: denied { mount } for pid=21553 comm="syz.5.3893" name="/" dev="configfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1571.005399][T21591] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3917'. [ 1571.960148][T21602] netlink: 'syz.3.3916': attribute type 1 has an invalid length. [ 1571.968513][T21602] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3916'. [ 1573.673978][ T30] audit: type=1400 audit(2000001083.578:1908): avc: denied { listen } for pid=21609 comm="syz.3.3920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1577.142679][ T5862] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1577.227987][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1577.379377][ T5862] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1577.402633][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.420487][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1577.425630][ T5862] usb 6-1: Product: syz [ 1577.430080][ T24] usb 5-1: no configurations [ 1577.434815][ T24] usb 5-1: can't read configurations, error -22 [ 1577.444952][ T5862] usb 6-1: Manufacturer: syz [ 1577.449537][ T5862] usb 6-1: SerialNumber: syz [ 1577.474642][ T5862] usb 6-1: config 0 descriptor?? [ 1577.598561][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1578.856070][ T5862] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 1578.883507][ T5862] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1578.894961][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1578.900731][ T24] usb 5-1: no configurations [ 1578.905464][ T24] usb 5-1: can't read configurations, error -22 [ 1578.931241][ T24] usb usb5-port1: attempt power cycle [ 1579.365233][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1579.563596][ T24] usb 5-1: device descriptor read/8, error -71 [ 1580.685182][ T5862] usb 6-1: USB disconnect, device number 10 [ 1582.800976][ T30] audit: type=1400 audit(2000001092.168:1909): avc: denied { accept } for pid=21663 comm="syz.3.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1583.334084][T21664] [ 1583.336434][T21664] ============================================ [ 1583.342570][T21664] WARNING: possible recursive locking detected [ 1583.348706][T21664] syzkaller #0 Tainted: G L [ 1583.354665][T21664] -------------------------------------------- [ 1583.360793][T21664] syz.3.3931/21664 is trying to acquire lock: [ 1583.366844][T21664] ffff888032a188f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 1583.375707][T21664] [ 1583.375707][T21664] but task is already holding lock: [ 1583.383047][T21664] ffff888032a198f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 1583.392691][T21664] [ 1583.392691][T21664] other info that might help us debug this: [ 1583.400723][T21664] Possible unsafe locking scenario: [ 1583.400723][T21664] [ 1583.408148][T21664] CPU0 [ 1583.411404][T21664] ---- [ 1583.414659][T21664] lock(&dev->mutex#4); [ 1583.418883][T21664] lock(&dev->mutex#4); [ 1583.423109][T21664] [ 1583.423109][T21664] *** DEADLOCK *** [ 1583.423109][T21664] [ 1583.431226][T21664] May be due to missing lock nesting notation [ 1583.431226][T21664] [ 1583.439519][T21664] 1 lock held by syz.3.3931/21664: [ 1583.444603][T21664] #0: ffff888032a198f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 1583.454687][T21664] [ 1583.454687][T21664] stack backtrace: [ 1583.460555][T21664] CPU: 0 UID: 0 PID: 21664 Comm: syz.3.3931 Tainted: G L syzkaller #0 PREEMPT(full) [ 1583.460577][T21664] Tainted: [L]=SOFTLOCKUP [ 1583.460583][T21664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1583.460591][T21664] Call Trace: [ 1583.460597][T21664] [ 1583.460603][T21664] dump_stack_lvl+0x100/0x190 [ 1583.460628][T21664] print_deadlock_bug.cold+0xbd/0xca [ 1583.460652][T21664] __lock_acquire+0x12bb/0x2630 [ 1583.460680][T21664] lock_acquire+0x1cf/0x380 [ 1583.460703][T21664] ? comedi_do_insn+0x2e/0x360 [ 1583.460720][T21664] ? __pfx___might_resched+0x10/0x10 [ 1583.460737][T21664] __mutex_lock+0x1a2/0x1b90 [ 1583.460753][T21664] ? comedi_do_insn+0x2e/0x360 [ 1583.460769][T21664] ? comedi_do_insn+0x2e/0x360 [ 1583.460786][T21664] ? __pfx___mutex_lock+0x10/0x10 [ 1583.460808][T21664] ? __pfx___might_resched+0x10/0x10 [ 1583.460825][T21664] ? __up_read+0x2c5/0x700 [ 1583.460841][T21664] ? comedi_do_insn+0x2e/0x360 [ 1583.460855][T21664] comedi_do_insn+0x2e/0x360 [ 1583.460873][T21664] comedi_dio_bitfield2+0x3c0/0x420 [ 1583.460891][T21664] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 1583.460910][T21664] ? do_insn_ioctl+0xda/0x4e0 [ 1583.460929][T21664] ? stack_trace_save+0x8e/0xc0 [ 1583.460946][T21664] ? __pfx_stack_trace_save+0x10/0x10 [ 1583.460965][T21664] bonding_dio_insn_bits+0x2b9/0x570 [ 1583.460987][T21664] ? kasan_save_track+0x14/0x30 [ 1583.461007][T21664] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 1583.461026][T21664] ? __x64_sys_ioctl+0x18e/0x210 [ 1583.461046][T21664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.461062][T21664] insn_rw_emulate_bits+0x2a2/0x5e0 [ 1583.461077][T21664] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 1583.461093][T21664] ? comedi_check_chanlist+0x27e/0x300 [ 1583.461116][T21664] parse_insn+0x83f/0x19f0 [ 1583.461134][T21664] ? trace_kmalloc+0x101/0x130 [ 1583.461147][T21664] ? __pfx_parse_insn+0x10/0x10 [ 1583.461164][T21664] ? __kmalloc_noprof+0x320/0x850 [ 1583.461185][T21664] do_insn_ioctl+0x152/0x4e0 [ 1583.461206][T21664] comedi_unlocked_ioctl+0xf68/0x3310 [ 1583.461226][T21664] ? tomoyo_path_number_perm+0x188/0x580 [ 1583.461243][T21664] ? futex_wait+0x125/0x380 [ 1583.461258][T21664] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1583.461281][T21664] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1583.461300][T21664] ? do_vfs_ioctl+0x226/0x13e0 [ 1583.461320][T21664] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1583.461339][T21664] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1583.461360][T21664] ? __fget_files+0x215/0x3d0 [ 1583.461373][T21664] ? hook_file_ioctl_common+0x146/0x410 [ 1583.461396][T21664] ? selinux_file_ioctl+0x139/0x290 [ 1583.461411][T21664] ? selinux_file_ioctl+0xb4/0x290 [ 1583.461427][T21664] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1583.461448][T21664] __x64_sys_ioctl+0x18e/0x210 [ 1583.461468][T21664] do_syscall_64+0x106/0xf80 [ 1583.461483][T21664] ? clear_bhb_loop+0x40/0x90 [ 1583.461498][T21664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.461512][T21664] RIP: 0033:0x7efe1719c799 [ 1583.461524][T21664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.461538][T21664] RSP: 002b:00007efe18015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.461554][T21664] RAX: ffffffffffffffda RBX: 00007efe17415fa0 RCX: 00007efe1719c799 [ 1583.461565][T21664] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000004 [ 1583.461574][T21664] RBP: 00007efe17232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1583.461583][T21664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1583.461592][T21664] R13: 00007efe17416038 R14: 00007efe17415fa0 R15: 00007fff4df47b88 [ 1583.461605][T21664] [ 1584.220752][T21663] base_sock_release(ffff8880584961c0) sk=ffff88802b3cf000