last executing test programs: 14.072395558s ago: executing program 1 (id=323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x3, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) read(r5, 0x0, 0x0) 12.58961108s ago: executing program 3 (id=325): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, 0x0, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x453, r4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3}]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) 11.527358102s ago: executing program 0 (id=328): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c000480080002400000000008000240df05007b08000240000007ff08000240000000330800014000000000080001400000000508000140000000c10500030084"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000005"], 0x50) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000540)={0x3, &(0x7f0000000900)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000680)="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", &(0x7f0000000040)=@tcp, 0x4}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6c", 0x41}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66", 0x8}], 0x1}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0xf01c, 0x524f01) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.710660989s ago: executing program 0 (id=330): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x200, 0x34565559, 0x5, 0x4, 0x5, 0x5, 0x9, 0x0, 0x6, 0x0, 0x5}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) recvmsg(r2, 0x0, 0x22020) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000380)={0x0, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0xfffffffe, 0x4, 0x0, 0xffff, 0x4, 0x549, 0xe910, 0x5, 0x9, 0x0, 0x6]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x1, 0x6}}}, 0x24}}, 0x0) 10.644826999s ago: executing program 4 (id=331): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r5, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r7, 0x1, 0x20000000, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x0, 0xffffffff, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf8}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 9.782514427s ago: executing program 1 (id=332): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x80000) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x86) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 9.62393076s ago: executing program 4 (id=333): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000002000100"], 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x71e, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}}, 0x0) 9.567589429s ago: executing program 4 (id=334): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000002000100"], 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x71e, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}}, 0x0) 9.496862856s ago: executing program 4 (id=335): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000"], 0x13c}}, 0x20040880) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 9.275440356s ago: executing program 3 (id=336): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0x100000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02080000010000000000000100000000"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 7.822414048s ago: executing program 3 (id=338): io_uring_setup(0x40b3, &(0x7f0000000400)={0x0, 0xf6b8, 0x40, 0x2, 0x6f}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setpgid(r0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae5ad00ff0000000000000017"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) syz_emit_ethernet(0x3e, 0x0, 0x0) getpid() semop(0x0, &(0x7f0000000040)=[{0x0, 0x85fd, 0x1000}], 0x1) semop(0x0, 0x0, 0x0) socket$inet(0x2, 0x4, 0x2) 6.841421261s ago: executing program 2 (id=339): syz_open_procfs(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400000000000000) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r5, r0, 0x80000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 6.841059655s ago: executing program 3 (id=340): socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_create_resource$binfmt(0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r7, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x627, 0x4c1, 0xb, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0xcc8f82, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 5.737605009s ago: executing program 2 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000640)={0x4, 0x4}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x560f, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@expire={0x104, 0x18, 0x1, 0x70bd28, 0x25dfdbfb, {{{@in=@broadcast, @in6=@private2, 0x4e22, 0x2, 0x4e20, 0x3e9, 0x2, 0x20, 0x80}, {@in6=@remote, 0x4d2, 0x3c}, @in=@broadcast, {0xb4ca, 0x9af, 0x8, 0x8, 0x1aea, 0xfffffffffffffffe, 0x8, 0x100}, {0x3, 0x7, 0x8000000000000000, 0x80000001}, {0x800, 0xaa1, 0x2}, 0x70bd28, 0x3505, 0xa, 0x1, 0x2}, 0xf}, [@mark={0xc, 0x15, {0x35075c, 0xc0}}]}, 0x104}, 0x1, 0x0, 0x0, 0x8080}, 0x2000402c) ioctl$VT_DISALLOCATE(r1, 0x5608) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = syz_pidfd_open(0xffffffffffffffff, 0x0) fcntl$getflags(r3, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team_slave_1\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 5.246730474s ago: executing program 1 (id=342): socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000100)=0x1) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8000, 0x1da}, &(0x7f0000000340), &(0x7f0000000040)) 5.184881322s ago: executing program 0 (id=343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x50) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, 0x0, 0x0, 0x8, 0xffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000280)={0x5, 0x0, 0x4000, 0x2000, &(0x7f0000d6c000/0x2000)=nil, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x13e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0xb3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8800}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f0000ef1000/0x2000)=nil, 0x2000) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xa47, 0x0, 0x7}]}) 5.136332363s ago: executing program 2 (id=344): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000002000100"], 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x71e, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}}, 0x0) 4.21830407s ago: executing program 0 (id=345): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x112002, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) splice(r1, 0x0, r0, 0x0, 0x1100000000f336, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x0, [{0x1, 0x2, 0x8000}, {0xc, 0x8000, 0xd0}]}]}, {0x0, [0x30, 0x61, 0x2e, 0x2e, 0x5f, 0x7f, 0x0, 0x2e]}}, &(0x7f0000000700)=""/236, 0x52, 0xec, 0x0, 0x6, 0x10000}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@udp=r0, 0x2}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x12, &(0x7f0000000f00)=ANY=[@ANYBLOB="549902000000000018110000ec45f8ed31ebca3e7a14c97ad72c41efe35315eadc45d1ba775909d478c0b100930ae0100b06adb0818d05c79dd2c385194d6c2f670fdee81179db8cbd8713d2ca173adbad083bc187ce328184a6c13b744dd9059b66e929ddccf164c709f92375cb63", @ANYRES32=r0, @ANYRES32, @ANYRESDEC=r7, @ANYBLOB, @ANYRESHEX], &(0x7f00000004c0)='syzkaller\x00', 0x8d0a, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0xb, 0xfffbffc0, 0x8bf}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0x1, r6, r8], &(0x7f00000008c0)=[{0x0, 0x1, 0xf, 0x6}, {0x0, 0x2, 0x3, 0x1}, {0x2005, 0x4, 0xe, 0x3}, {0xfffffffe, 0x3, 0x2, 0xb}], 0x10, 0x40000002}, 0x94) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r10, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read(r10, &(0x7f00000000c0)=""/20, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) 4.205088847s ago: executing program 4 (id=346): openat$kvm(0xffffffffffffff9c, 0x0, 0x401, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040600) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000005c0)={0x6, {{0xa, 0x4e20, 0xfffffffe, @mcast1={0xff, 0x7}, 0xf}}, {{0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4000}}}, 0x108) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r3, &(0x7f00000009c0)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfda67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63de020000000000000013af3a1e6f786088b31c35be117ee540dc4560aa500269b81a0bbc00000000000000000200"/251, 0xfb}, {&(0x7f00000006c0)="1d4ac370cf8c47025bd7a6546c8bd229bbf8fa504cc3774c0f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f50aa794861c0296ca92cb6c2ef9", 0x47}, {&(0x7f0000000800)}, {&(0x7f0000000b40)}, {&(0x7f0000004480)="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", 0xc74}], 0x5) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r3, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001780)={0x0, 0x1}, &(0x7f00000017c0)=0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0x80000007, 0x2, 0x1, 0x5, 0x6, 0x4, 0x2}, {0xb, 0x8, 0x0, 0x10001, 0x7ffffdff, 0x8015, 0xffff}, {0x80000019, 0xe5f, 0x3, 0x7, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x802bb, 0x1, 0xd, 0x66, 0x7ff, 0x400}, {0x80000001, 0x7ff, 0x0, 0x6, 0x7, 0x9}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) 4.142164813s ago: executing program 2 (id=347): socket(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0201000a0e000000000000000400000005000600000000000a00000000000000fc000000000000000000000000000000000004000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) 3.108824578s ago: executing program 0 (id=348): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x24000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000ffff27bd7037fcff732500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100fe0f00000c000200110000001300000008000500", @ANYRES32=r4, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) 3.012552782s ago: executing program 2 (id=349): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008", @ANYBLOB="01873300d00000000802110000010802110000"], 0x4c}}, 0x0) 2.590055496s ago: executing program 1 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xf03d}, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000f40)="ad5bb6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000005580)="b9c973acad96fc274d605b6ea5083e90f7854520a3d82c106c2af8caf9b5e405cc034349655ac1b02043573da783b7abbfb914c18faaa9f22793be794e48473a883838d23d387aa105d1935058122b84e197b38365433fb37bb8749ee0d3f510c764131b4218a46cd7c2d3c99ef99d5442a6472f74c677c431784c317607750b0f88b7575faf59a9f3d0cc346d0b5a7dd8949753cf51cb7b70eb86bd53a19b0661b0ec33ad3b24e8bd3ddfe2546ebd4ea346", 0xb2}, {0x0}], 0x2, 0x0, 0x0, 0x8011}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x160) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffc8, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) 2.464463232s ago: executing program 3 (id=351): openat$tun(0xffffffffffffff9c, 0x0, 0xc0b01, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35, 0x0, 0x1}, 0x28) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000003740)=""/102394, 0x18ffa}], 0x1, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) close(0xffffffffffffffff) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x62000, 0x80, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18160000", @ANYRES32=0x1, @ANYBLOB="000000000000000018230000", @ANYRES32, @ANYBLOB="00000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000001800000002000000000000000400000018100000", @ANYRES32, @ANYBLOB="0000000000000000e19ed27f2e7754efa51798a5f76c199b09955b82080c2c5a238ac566f9c62fe410"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x91, &(0x7f0000000400)=""/145, 0x41000, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000500)=[{0x3, 0x4, 0xa, 0xb}, {0x3, 0x1, 0x7, 0x7}, {0x4, 0x5, 0x2, 0x5}, {0x1, 0x2, 0xd, 0xa}, {0x5, 0x1, 0x5, 0xc}, {0x3, 0x5, 0xa}], 0x10, 0x1}, 0x94) move_pages(0x0, 0xfffffffffffffdc1, 0x0, 0x0, 0x0, 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0}) 1.590808658s ago: executing program 1 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) creat(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000880)) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80064}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f00000003c0)=""/243, &(0x7f00000000c0)=0xf3) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 1.1984209s ago: executing program 3 (id=353): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x200, 0x34565559, 0x5, 0x4, 0x5, 0x5, 0x9, 0x0, 0x6, 0x0, 0x5}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) recvmsg(r2, 0x0, 0x22020) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000380)={0x0, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0xfffffffe, 0x4, 0x0, 0xffff, 0x4, 0x549, 0xe910, 0x5, 0x9, 0x0, 0x6]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x1, 0x6}}}, 0x24}}, 0x0) 1.147589953s ago: executing program 1 (id=354): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x200, 0x34565559, 0x5, 0x4, 0x5, 0x5, 0x9, 0x0, 0x6, 0x0, 0x5}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001700)=""/4087, 0xff7}, {0x0}], 0x2}, 0x22020) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000380)={0x0, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0xfffffffe, 0x4, 0x0, 0xffff, 0x4, 0x549, 0xe910, 0x5, 0x9, 0x0, 0x6]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x1, 0x6}}}, 0x24}}, 0x0) 821.966642ms ago: executing program 0 (id=355): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) sendmsg$inet6(r3, 0x0, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800090300000000000000001ecfea000000000004ff04000800010002000000"], 0x24}}, 0x20000000) write$tcp_mem(0xffffffffffffffff, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) 255.162904ms ago: executing program 4 (id=356): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x5cb881, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) close(r4) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x44004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4000000) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 0s ago: executing program 2 (id=357): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000002000100"], 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x71e, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}}, 0x0) kernel console output (not intermixed with test programs): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="gadgetfs" ino=8243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.480384][ T1106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.524464][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.545600][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.576279][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.584155][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.650843][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.662740][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.704840][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.735238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.742125][ T36] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 63.762572][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.763115][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 63.965014][ T5922] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 64.092509][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.126355][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.231921][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.262709][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.267672][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.317769][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.405291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.550614][ T5809] Bluetooth: hci4: command tx timeout [ 64.558044][ T5809] Bluetooth: hci1: command tx timeout [ 64.566494][ T5816] Bluetooth: hci0: command tx timeout [ 64.625529][ T5816] Bluetooth: hci2: command tx timeout [ 64.632521][ T5809] Bluetooth: hci3: command tx timeout [ 64.885217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.037980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 65.235285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.468669][ T5947] syzkaller0: entered promiscuous mode [ 65.507247][ T5947] syzkaller0: entered allmulticast mode [ 65.550537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.559646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.568768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.577362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.586108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.875264][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 65.875272][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 65.906668][ T5952] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8'. [ 65.920490][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.926944][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.668274][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 66.668292][ T30] audit: type=1400 audit(1771429141.085:128): avc: denied { create } for pid=5959 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.695632][ T5821] Bluetooth: hci0: command tx timeout [ 66.701089][ T5821] Bluetooth: hci1: command tx timeout [ 66.718324][ T5821] Bluetooth: hci4: command tx timeout [ 66.725047][ T5816] Bluetooth: hci2: command tx timeout [ 66.725051][ T5821] Bluetooth: hci3: command tx timeout [ 66.741541][ T30] audit: type=1400 audit(1771429141.085:129): avc: denied { connect } for pid=5959 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.764546][ T30] audit: type=1400 audit(1771429141.085:130): avc: denied { write } for pid=5959 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.785367][ T5821] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 66.852810][ T30] audit: type=1400 audit(1771429141.345:131): avc: denied { ioctl } for pid=5963 comm="syz.1.12" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.981228][ T30] audit: type=1400 audit(1771429141.475:132): avc: denied { write } for pid=5963 comm="syz.1.12" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.146193][ T30] audit: type=1400 audit(1771429141.655:133): avc: denied { write } for pid=5971 comm="syz.0.14" name="sg0" dev="devtmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.192781][ T30] audit: type=1400 audit(1771429141.655:134): avc: denied { open } for pid=5971 comm="syz.0.14" path="/dev/sg0" dev="devtmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.223748][ T30] audit: type=1400 audit(1771429141.735:135): avc: denied { read write } for pid=5967 comm="syz.3.13" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 67.271285][ T30] audit: type=1400 audit(1771429141.735:136): avc: denied { open } for pid=5967 comm="syz.3.13" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 67.301518][ T5974] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 67.459599][ T5974] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.533422][ T5978] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 67.533422][ T5978] program syz.0.14 not setting count and/or reply_len properly [ 68.205108][ T30] audit: type=1400 audit(1771429141.825:137): avc: denied { create } for pid=5971 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.053200][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.146254][ T5821] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 71.285463][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 72.487744][ T9] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 72.519122][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 73.626745][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.685020][ T9] usb 2-1: Product: syz [ 73.705041][ T9] usb 2-1: Manufacturer: syz [ 73.715276][ T9] usb 2-1: SerialNumber: syz [ 73.741358][ T9] usb 2-1: config 0 descriptor?? [ 73.996772][ T9] usb 2-1: can't set config #0, error -71 [ 74.028482][ T9] usb 2-1: USB disconnect, device number 2 [ 74.142621][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 74.142637][ T30] audit: type=1400 audit(1771429148.655:162): avc: denied { setopt } for pid=6022 comm="syz.1.29" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.353518][ T6026] bond0: entered promiscuous mode [ 74.376433][ T6026] bond_slave_0: entered promiscuous mode [ 74.382658][ T6026] bond_slave_1: entered promiscuous mode [ 74.394736][ T6026] batadv0: entered promiscuous mode [ 74.418020][ T30] audit: type=1400 audit(1771429148.935:163): avc: denied { read } for pid=6029 comm="syz.0.32" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.443977][ T6026] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 74.451848][ T30] audit: type=1400 audit(1771429148.935:164): avc: denied { open } for pid=6029 comm="syz.0.32" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.483143][ T30] audit: type=1400 audit(1771429148.965:165): avc: denied { read write } for pid=6029 comm="syz.0.32" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.486504][ T6030] Bluetooth: MGMT ver 1.23 [ 74.508150][ T30] audit: type=1400 audit(1771429148.965:166): avc: denied { open } for pid=6029 comm="syz.0.32" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.540214][ T30] audit: type=1400 audit(1771429148.995:167): avc: denied { connect } for pid=6027 comm="syz.4.31" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.564906][ T30] audit: type=1400 audit(1771429148.995:168): avc: denied { bind } for pid=6029 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.597819][ T30] audit: type=1400 audit(1771429148.995:169): avc: denied { write } for pid=6029 comm="syz.0.32" path="socket:[8862]" dev="sockfs" ino=8862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.598328][ T6026] bond0: left promiscuous mode [ 74.626143][ T6026] bond_slave_0: left promiscuous mode [ 74.631818][ T6026] bond_slave_1: left promiscuous mode [ 74.672777][ T6026] batadv0: left promiscuous mode [ 75.491058][ T6028] Zero length message leads to an empty skb [ 75.522870][ T6037] [U]  [ 76.345011][ T5821] Bluetooth: hci1: command tx timeout [ 76.425157][ T1594] cfg80211: failed to load regulatory.db [ 76.467668][ T6054] syz.4.35 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.502630][ T30] audit: type=1400 audit(1771429151.015:170): avc: denied { create } for pid=6052 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.667555][ T30] audit: type=1400 audit(1771429151.015:171): avc: denied { bind } for pid=6052 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.631081][ T6071] fuse: Unknown parameter 'grou00000000000000000000' [ 78.915045][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.075334][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 79.086690][ T29] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 79.102444][ T29] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 79.114303][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.149225][ T29] usb 1-1: Product: syz [ 79.205438][ T29] usb 1-1: Manufacturer: syz [ 79.215193][ T29] usb 1-1: SerialNumber: syz [ 79.237469][ T29] usb 1-1: config 0 descriptor?? [ 79.264335][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 79.294063][ T29] usb 1-1: setting power ON [ 79.298920][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 79.317400][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 79.349927][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 79.361191][ T29] usb 1-1: media controller created [ 79.618087][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 79.618092][ T5917] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.618109][ T30] audit: type=1400 audit(1771429153.975:185): avc: denied { append } for pid=6068 comm="syz.0.40" name="i2c-1" dev="devtmpfs" ino=2803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.639803][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.655368][ T6084] dvb-usb: bulk message failed: -22 (3/0) [ 79.670186][ T6084] dvb-usb: bulk message failed: -22 (4/0) [ 79.728907][ T6084] cxusb: i2c read failed [ 79.828500][ T5917] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.848962][ T5917] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 79.862651][ T29] usb 1-1: selecting invalid altsetting 6 [ 79.873246][ T29] usb 1-1: digital interface selection failed (-22) [ 79.883631][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.899476][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 79.912650][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 79.935572][ T29] usb 1-1: setting power OFF [ 79.946159][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 79.954198][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 79.970448][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 79.994896][ T5917] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.004405][ T29] (NULL device *): no alternate interface [ 80.026973][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.081014][ T5917] usb 5-1: Product: syz [ 80.089113][ T5917] usb 5-1: Manufacturer: syz [ 80.208775][ T5917] cdc_wdm 5-1:1.0: skipping garbage [ 80.215168][ T5917] cdc_wdm 5-1:1.0: skipping garbage [ 80.377399][ T5917] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 80.386663][ T5917] cdc_wdm 5-1:1.0: Unknown control protocol [ 80.592959][ T30] audit: type=1400 audit(1771429155.065:186): avc: denied { node_bind } for pid=6076 comm="syz.4.42" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 80.773972][ T30] audit: type=1400 audit(1771429155.285:187): avc: denied { create } for pid=6090 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.405678][ T30] audit: type=1400 audit(1771429155.515:188): avc: denied { create } for pid=6090 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.507376][ T30] audit: type=1400 audit(1771429155.525:189): avc: denied { setopt } for pid=6090 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.540919][ T30] audit: type=1400 audit(1771429155.525:190): avc: denied { bind } for pid=6090 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.588666][ T30] audit: type=1400 audit(1771429155.895:191): avc: denied { read write } for pid=6076 comm="syz.4.42" name="cdc-wdm0" dev="devtmpfs" ino=2808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 81.617480][ T30] audit: type=1400 audit(1771429155.895:192): avc: denied { open } for pid=6076 comm="syz.4.42" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 81.630921][ T9] usb 5-1: USB disconnect, device number 2 [ 82.734837][ T30] audit: type=1400 audit(1771429157.245:193): avc: denied { read write } for pid=6103 comm="syz.1.47" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 82.812199][ T30] audit: type=1400 audit(1771429157.245:194): avc: denied { open } for pid=6103 comm="syz.1.47" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 82.890446][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 82.916354][ T9] usb 1-1: USB disconnect, device number 2 [ 82.995057][ T5916] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.635483][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 83.685290][ T6111] sctp: [Deprecated]: syz.4.50 (pid 6111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.685290][ T6111] Use struct sctp_sack_info instead [ 83.713344][ T5916] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 83.880801][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.987222][ T5916] usb 2-1: config 0 has no interface number 0 [ 84.006435][ T5916] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 84.023992][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.057143][ T5916] usb 2-1: Product: syz [ 84.061380][ T5916] usb 2-1: Manufacturer: syz [ 84.995047][ T5916] usb 2-1: SerialNumber: syz [ 85.007297][ T5916] usb 2-1: config 0 descriptor?? [ 85.025259][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 85.025276][ T30] audit: type=1400 audit(1771429159.535:197): avc: denied { create } for pid=6112 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.025423][ T5916] net1080 2-1:0.183: probe with driver net1080 failed with error -22 [ 85.183300][ T30] audit: type=1400 audit(1771429159.695:198): avc: denied { create } for pid=6124 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.205509][ T30] audit: type=1400 audit(1771429159.715:199): avc: denied { bind } for pid=6124 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.288242][ T30] audit: type=1400 audit(1771429159.805:200): avc: denied { ioctl } for pid=6122 comm="syz.4.53" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 85.861637][ T30] audit: type=1400 audit(1771429159.945:201): avc: denied { create } for pid=6124 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.881056][ T30] audit: type=1400 audit(1771429159.965:202): avc: denied { read } for pid=6124 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.471204][ T6139] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 86.667313][ T5916] IPVS: starting estimator thread 0... [ 86.822666][ T6140] IPVS: using max 47 ests per chain, 112800 per kthread [ 87.454538][ T30] audit: type=1400 audit(1771429161.965:203): avc: denied { append } for pid=6147 comm="syz.4.57" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 87.483519][ T6149] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 87.505146][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 87.728052][ T30] audit: type=1400 audit(1771429161.995:204): avc: denied { ioctl } for pid=6147 comm="syz.4.57" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.382377][ T29] usb 2-1: USB disconnect, device number 3 [ 89.239368][ T30] audit: type=1400 audit(1771429163.395:205): avc: denied { create } for pid=6152 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.355082][ T30] audit: type=1400 audit(1771429163.395:206): avc: denied { connect } for pid=6152 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.948990][ T6166] warning: `syz.0.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.964080][ T6169] fuse: Bad value for 'fd' [ 90.375862][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.546502][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 90.554403][ T29] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 90.727224][ T29] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 91.170785][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.211117][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.224354][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 91.239404][ T9] usb 1-1: can't read configurations, error -71 [ 91.257371][ T29] usb 5-1: Product: syz [ 91.263159][ T29] usb 5-1: Manufacturer: syz [ 91.270291][ T29] usb 5-1: SerialNumber: syz [ 91.279629][ T29] usb 5-1: config 0 descriptor?? [ 91.301119][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 91.326469][ T29] usb 5-1: setting power ON [ 91.331006][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 91.348677][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.472935][ T6182] sctp: [Deprecated]: syz.0.63 (pid 6182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.472935][ T6182] Use struct sctp_sack_info instead [ 91.755315][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 91.793453][ T29] usb 5-1: media controller created [ 91.910715][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.086710][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 92.086725][ T30] audit: type=1400 audit(1771429166.605:216): avc: denied { write } for pid=6187 comm="syz.1.65" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.117258][ T6192] input: syz0 as /devices/virtual/input/input5 [ 92.521406][ T29] usb 5-1: selecting invalid altsetting 6 [ 92.707296][ T29] usb 5-1: digital interface selection failed (-22) [ 92.825239][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 92.957253][ T29] usb 5-1: setting power OFF [ 93.035554][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 93.128917][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 93.197018][ T29] (NULL device *): no alternate interface [ 93.219343][ T30] audit: type=1400 audit(1771429167.725:217): avc: denied { create } for pid=6196 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.266922][ T30] audit: type=1400 audit(1771429167.725:218): avc: denied { getopt } for pid=6196 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.491763][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.501287][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 93.658540][ T30] audit: type=1400 audit(1771429168.135:219): avc: denied { block_suspend } for pid=6201 comm="syz.4.67" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.005319][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 94.013484][ T9] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 94.027285][ T9] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 94.038178][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.047083][ T9] usb 1-1: Product: syz [ 94.051258][ T9] usb 1-1: Manufacturer: syz [ 94.058458][ T9] usb 1-1: SerialNumber: syz [ 94.224792][ T29] usb 5-1: USB disconnect, device number 3 [ 94.254012][ T9] usb 1-1: config 0 descriptor?? [ 94.273840][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 94.295045][ T9] usb 1-1: setting power ON [ 94.357161][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 94.402662][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.413146][ T30] audit: type=1400 audit(1771429168.925:220): avc: denied { create } for pid=6207 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.588246][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 94.636182][ T9] usb 1-1: media controller created [ 94.650972][ T5821] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 94.659683][ T6215] dvb-usb: bulk message failed: -22 (3/0) [ 94.701799][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.710904][ T30] audit: type=1400 audit(1771429169.215:221): avc: denied { override_creds } for pid=6208 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.732914][ T6215] dvb-usb: bulk message failed: -22 (4/0) [ 94.775919][ T6215] cxusb: i2c read failed [ 95.056892][ T9] usb 1-1: selecting invalid altsetting 6 [ 95.112437][ T30] audit: type=1400 audit(1771429169.625:222): avc: denied { write } for pid=6220 comm="syz.2.71" name="psched" dev="proc" ino=4026532906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 95.116781][ T9] usb 1-1: digital interface selection failed (-22) [ 95.160234][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 95.250507][ T9] usb 1-1: setting power OFF [ 95.255622][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 95.271217][ T30] audit: type=1400 audit(1771429169.625:223): avc: denied { write } for pid=6220 comm="syz.2.71" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.299399][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 95.317173][ T9] (NULL device *): no alternate interface [ 95.401600][ T6226] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 95.446513][ T6226] veth1_macvtap: entered allmulticast mode [ 95.620316][ T30] audit: type=1400 audit(1771429170.135:224): avc: denied { setopt } for pid=6224 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.646429][ T5821] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 96.076137][ T30] audit: type=1400 audit(1771429170.235:225): avc: denied { read write } for pid=6227 comm="syz.4.73" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 96.239182][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 96.254795][ T9] usb 1-1: USB disconnect, device number 5 [ 96.713191][ T6246] sctp: [Deprecated]: syz.0.76 (pid 6246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.713191][ T6246] Use struct sctp_sack_info instead [ 97.228166][ T5821] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 97.942249][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 97.942267][ T30] audit: type=1400 audit(1771429172.065:228): avc: denied { mounton } for pid=6255 comm="syz.2.78" path="/13/file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.018491][ T30] audit: type=1400 audit(1771429172.085:229): avc: denied { mount } for pid=6255 comm="syz.2.78" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 98.040447][ T30] audit: type=1400 audit(1771429172.195:230): avc: denied { write } for pid=6255 comm="syz.2.78" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 98.366321][ T30] audit: type=1400 audit(1771429172.195:231): avc: denied { open } for pid=6255 comm="syz.2.78" path="/13/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 98.490682][ T30] audit: type=1400 audit(1771429172.215:232): avc: denied { ioctl } for pid=6255 comm="syz.2.78" path="/13/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 98.828923][ T30] audit: type=1400 audit(1771429172.865:233): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 98.863272][ T30] audit: type=1400 audit(1771429172.975:234): avc: denied { write } for pid=6264 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.003602][ T6281] xt_connbytes: Forcing CT accounting to be enabled [ 99.010455][ T6281] Cannot find set identified by id 0 to match [ 99.125840][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 99.505419][ T30] audit: type=1400 audit(1771429173.985:235): avc: denied { create } for pid=6283 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.535351][ T30] audit: type=1400 audit(1771429173.985:236): avc: denied { bind } for pid=6283 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.566738][ T30] audit: type=1400 audit(1771429173.985:237): avc: denied { connect } for pid=6283 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.837771][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.847649][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 102.855435][ T9] usb 2-1: can't read configurations, error -71 [ 103.103082][ T6309] fuse: Bad value for 'fd' [ 103.325032][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 103.325051][ T30] audit: type=1400 audit(1771429177.615:239): avc: denied { mounton } for pid=6307 comm="syz.1.89" path="/17/file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.577740][ T5821] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 103.853956][ T30] audit: type=1400 audit(1771429178.365:240): avc: denied { load_policy } for pid=6313 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 103.975654][ T5821] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 103.996255][ T30] audit: type=1400 audit(1771429178.505:241): avc: denied { append } for pid=6313 comm="syz.0.91" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.263287][ T30] audit: type=1400 audit(1771429178.545:242): avc: denied { map } for pid=6313 comm="syz.0.91" path="socket:[10148]" dev="sockfs" ino=10148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 104.591187][ T6329] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.598397][ T6329] overlayfs: failed to set xattr on upper [ 104.604142][ T6329] overlayfs: ...falling back to redirect_dir=nofollow. [ 104.611062][ T6329] overlayfs: ...falling back to index=off. [ 104.616950][ T6329] overlayfs: ...falling back to uuid=null. [ 104.665344][ T6330] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 104.679038][ T30] audit: type=1400 audit(1771429179.085:243): avc: denied { mounton } for pid=6323 comm="syz.4.93" path="/file0" dev="ramfs" ino=10598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 104.935030][ T30] audit: type=1400 audit(1771429179.145:244): avc: denied { mount } for pid=6323 comm="syz.4.93" name="/" dev="overlay" ino=10599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.109179][ T6337] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 105.392940][ T30] audit: type=1400 audit(1771429179.535:245): avc: denied { create } for pid=6332 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 105.465097][ T5821] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 105.508663][ T30] audit: type=1400 audit(1771429179.615:246): avc: denied { create } for pid=6332 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.837164][ T30] audit: type=1400 audit(1771429179.895:247): avc: denied { ioctl } for pid=6326 comm="syz.3.88" path="socket:[10613]" dev="sockfs" ino=10613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.385098][ T5820] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 106.534463][ T6356] fuse: Unknown parameter 'group_i00000000000000000000' [ 106.652189][ T30] audit: type=1400 audit(1771429181.155:248): avc: denied { bind } for pid=6352 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 107.055066][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.735022][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 107.781160][ T9] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 107.893535][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 107.902683][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.910721][ T9] usb 3-1: Product: syz [ 107.920792][ T9] usb 3-1: Manufacturer: syz [ 107.929621][ T9] usb 3-1: SerialNumber: syz [ 107.977004][ T9] usb 3-1: config 0 descriptor?? [ 108.009048][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 108.050219][ T9] usb 3-1: setting power ON [ 108.073140][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 108.174132][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.206851][ T6314] SELinux: failed to load policy [ 108.222033][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 108.272943][ T9] usb 3-1: media controller created [ 108.284379][ T5821] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 108.342853][ T6372] dvb-usb: bulk message failed: -22 (3/0) [ 108.356297][ T6372] dvb-usb: bulk message failed: -22 (4/0) [ 108.362221][ T6372] cxusb: i2c read failed [ 108.394219][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.436879][ T5821] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 108.502173][ T9] usb 3-1: selecting invalid altsetting 6 [ 108.553513][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 108.553529][ T30] audit: type=1400 audit(1771429183.065:250): avc: denied { write } for pid=6377 comm="syz.0.104" path="socket:[11641]" dev="sockfs" ino=11641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.607527][ T9] usb 3-1: digital interface selection failed (-22) [ 108.608153][ T6378] can: request_module (can-proto-0) failed. [ 108.650337][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 108.813662][ T9] usb 3-1: setting power OFF [ 108.831314][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 108.843556][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 108.859655][ T9] (NULL device *): no alternate interface [ 109.016635][ T30] audit: type=1400 audit(1771429183.475:251): avc: denied { unlink } for pid=6384 comm="syz.3.106" name="#3" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.093821][ T5820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.151440][ T5820] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 109.160137][ T5820] usb 2-1: can't read configurations, error -71 [ 109.886936][ T30] audit: type=1400 audit(1771429184.395:252): avc: denied { read write } for pid=6392 comm="syz.0.108" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 110.085171][ T30] audit: type=1400 audit(1771429184.395:253): avc: denied { open } for pid=6392 comm="syz.0.108" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 110.418679][ T30] audit: type=1400 audit(1771429184.775:254): avc: denied { set_context_mgr } for pid=6394 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 110.476897][ T5821] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 110.685081][ T5820] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.737478][ T30] audit: type=1400 audit(1771429185.255:255): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.866129][ T6409] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 111.165065][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 111.171533][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 111.187129][ T5820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.213095][ T5820] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 111.227220][ T9] usb 3-1: USB disconnect, device number 2 [ 111.240355][ T5820] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 111.245427][ T5821] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 111.391172][ T5820] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 111.426427][ T5820] usb 2-1: config 128 has no interface number 0 [ 111.441192][ T5820] usb 2-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.460256][ T5820] usb 2-1: config 128 interface 127 has no altsetting 0 [ 111.478096][ T5820] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 111.518747][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.532346][ T5820] usb 2-1: Product: syz [ 111.544304][ T5820] usb 2-1: Manufacturer: syz [ 111.554168][ T5820] usb 2-1: SerialNumber: syz [ 112.049065][ T5821] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 112.073183][ T5820] usb 2-1: USB disconnect, device number 7 [ 112.174752][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.844403][ T30] audit: type=1400 audit(1771429187.325:256): avc: denied { execute } for pid=6430 comm="syz.2.118" path="/19/file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.030595][ T5868] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 113.099307][ T30] audit: type=1804 audit(1771429187.335:257): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.118" name="/newroot/19/file0" dev="tmpfs" ino=118 res=1 errno=0 [ 113.160666][ T30] audit: type=1400 audit(1771429187.665:258): avc: denied { append } for pid=6434 comm="syz.1.119" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 115.107283][ T30] audit: type=1400 audit(1771429189.045:259): avc: denied { create } for pid=6440 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.178867][ T6449] fuse: Bad value for 'user_id' [ 115.183861][ T6449] fuse: Bad value for 'user_id' [ 115.495774][ T5868] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.912754][ T5868] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 115.920458][ T5868] usb 5-1: can't read configurations, error -71 [ 116.036382][ T30] audit: type=1400 audit(1771429190.555:260): avc: denied { write } for pid=6455 comm="syz.4.124" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.039195][ T6457] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.083012][ T5882] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.030512][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 118.185618][ T30] audit: type=1400 audit(1771429192.705:261): avc: denied { write } for pid=6464 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.294133][ T6476] bridge0: port 3(syz_tun) entered blocking state [ 118.301344][ T6476] bridge0: port 3(syz_tun) entered disabled state [ 118.310239][ T6476] syz_tun: entered allmulticast mode [ 118.325490][ T6476] syz_tun: entered promiscuous mode [ 118.326150][ T30] audit: type=1400 audit(1771429192.795:262): avc: denied { create } for pid=6471 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.354445][ T6476] bridge0: port 3(syz_tun) entered blocking state [ 118.361302][ T6476] bridge0: port 3(syz_tun) entered forwarding state [ 119.013532][ T30] audit: type=1400 audit(1771429192.805:263): avc: denied { getopt } for pid=6471 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.333498][ T5882] usb 3-1: device descriptor read/all, error -71 [ 119.673715][ T6516] fuse: Unknown parameter 'grou00000000000000000000' [ 119.709364][ T6518] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 120.065786][ T6523] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 120.084782][ T5882] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.287729][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 120.330199][ T5882] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 120.362094][ T5882] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 120.371401][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.381336][ T5882] usb 3-1: Product: syz [ 120.385936][ T5882] usb 3-1: Manufacturer: syz [ 120.752283][ T5882] usb 3-1: SerialNumber: syz [ 120.870454][ T5882] usb 3-1: config 0 descriptor?? [ 120.888571][ T5882] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 120.913180][ T5882] usb 3-1: setting power ON [ 120.998351][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 121.028743][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.058630][ T5882] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 121.080696][ T5882] usb 3-1: media controller created [ 121.127026][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.478976][ T6531] dvb-usb: bulk message failed: -22 (3/0) [ 121.484736][ T6531] dvb-usb: bulk message failed: -22 (4/0) [ 121.490545][ T6531] cxusb: i2c read failed [ 121.549178][ T5882] usb 3-1: selecting invalid altsetting 6 [ 121.555046][ T5882] usb 3-1: digital interface selection failed (-22) [ 121.581411][ T5882] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 121.604386][ T5882] usb 3-1: setting power OFF [ 121.610641][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 121.622722][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 121.640944][ T5882] (NULL device *): no alternate interface [ 122.235030][ T29] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 122.806990][ T6544] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 124.106698][ T6554] sctp: [Deprecated]: syz.0.138 (pid 6554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.106698][ T6554] Use struct sctp_sack_info instead [ 124.510380][ T6559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.140'. [ 124.975019][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.986552][ T30] audit: type=1400 audit(1771429199.105:264): avc: denied { read } for pid=6552 comm="syz.4.139" path="socket:[12009]" dev="sockfs" ino=12009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 124.987319][ T29] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 125.020617][ T30] audit: type=1400 audit(1771429199.155:265): avc: denied { ioctl } for pid=6552 comm="syz.4.139" path="socket:[12009]" dev="sockfs" ino=12009 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 125.078823][ T29] usb 4-1: can't read configurations, error -71 [ 125.176574][ T6567] netlink: 'syz.1.140': attribute type 10 has an invalid length. [ 125.188930][ T30] audit: type=1400 audit(1771429199.645:266): avc: denied { write } for pid=6557 comm="syz.1.140" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 125.215613][ T5821] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 125.218775][ T6564] netlink: 'syz.4.141': attribute type 4 has an invalid length. [ 125.228613][ T30] audit: type=1400 audit(1771429199.645:267): avc: denied { open } for pid=6557 comm="syz.1.140" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 125.266370][ T6568] netlink: 'syz.1.140': attribute type 10 has an invalid length. [ 125.283922][ T6568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.140'. [ 125.389198][ T6572] sctp: [Deprecated]: syz.0.143 (pid 6572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.389198][ T6572] Use struct sctp_sack_info instead [ 125.639722][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 125.664875][ T6568] batadv0: entered promiscuous mode [ 125.685576][ T5882] usb 3-1: USB disconnect, device number 4 [ 125.708378][ T6568] batadv0: entered allmulticast mode [ 125.728484][ T6568] bridge0: port 3(batadv0) entered blocking state [ 125.840768][ T6568] bridge0: port 3(batadv0) entered disabled state [ 125.884414][ T6568] bridge0: port 3(batadv0) entered blocking state [ 125.891098][ T6568] bridge0: port 3(batadv0) entered forwarding state [ 126.324645][ T1170] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 126.334183][ T1170] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 126.346087][ T30] audit: type=1400 audit(1771429200.475:268): avc: denied { bind } for pid=6574 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.403431][ T6567] bridge0: port 3(batadv0) entered disabled state [ 126.418626][ T6567] batadv0: left allmulticast mode [ 126.442900][ T6567] batadv0: left promiscuous mode [ 126.452808][ T6567] bridge0: port 3(batadv0) entered disabled state [ 126.472327][ T6567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.484758][ T6567] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 126.602811][ T6581] kvm: kvm [6580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 126.611817][ T6581] kvm: kvm [6580]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 126.629485][ T6581] kvm: kvm [6580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x662f2e00 [ 126.681295][ T6581] kvm: kvm [6580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x662f2e20 [ 127.695913][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.702262][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.714680][ T30] audit: type=1400 audit(1771429201.225:269): avc: denied { create } for pid=6585 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.971044][ T6593] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 127.980521][ T6593] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 127.994024][ T30] audit: type=1400 audit(1771429202.505:270): avc: denied { firmware_load } for pid=6587 comm="syz.1.146" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 128.014563][ T6593] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 128.025858][ T6594] No buffer was provided with the request [ 128.164741][ T30] audit: type=1400 audit(1771429202.535:271): avc: denied { shutdown } for pid=6587 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.209614][ T6581] kvm: kvm [6580]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 130.741210][ T30] audit: type=1400 audit(1771429202.535:272): avc: denied { getopt } for pid=6587 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.947551][ T30] audit: type=1400 audit(1771429202.755:273): avc: denied { ioctl } for pid=6589 comm="syz.0.148" path="ipc:[4026532803]" dev="nsfs" ino=4026532803 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.155108][ T5916] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 131.226108][ T30] audit: type=1400 audit(1771429202.855:274): avc: denied { write } for pid=6589 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 131.881716][ T30] audit: type=1400 audit(1771429203.315:275): avc: denied { mount } for pid=6598 comm="syz.3.149" name="/" dev="rpc_pipefs" ino=11206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 131.920155][ T30] audit: type=1400 audit(1771429205.995:276): avc: denied { mounton } for pid=6607 comm="syz.0.153" path="/proc/131/task" dev="proc" ino=12224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 132.188531][ T5916] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 132.196198][ T5916] usb 4-1: can't read configurations, error -71 [ 132.560866][ T6623] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.877053][ T6624] sctp: [Deprecated]: syz.2.154 (pid 6624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.877053][ T6624] Use struct sctp_sack_info instead [ 132.916423][ T30] audit: type=1400 audit(1771429207.045:277): avc: denied { mount } for pid=6615 comm="syz.0.155" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 132.939123][ T5916] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 133.498700][ T30] audit: type=1400 audit(1771429207.995:278): avc: denied { create } for pid=6625 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 133.818059][ T30] audit: type=1400 audit(1771429207.995:279): avc: denied { ioctl } for pid=6625 comm="syz.1.157" path="socket:[11262]" dev="sockfs" ino=11262 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 134.058631][ T30] audit: type=1400 audit(1771429208.305:280): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 134.102082][ T6632] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 134.135281][ T5821] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 134.456108][ T5868] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.665012][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 134.787887][ T5868] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.426331][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.433035][ T5868] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 135.443812][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.471682][ T5868] usb 2-1: config 0 descriptor?? [ 135.606822][ T30] audit: type=1400 audit(1771429210.115:281): avc: denied { ioctl } for pid=6650 comm="syz.4.163" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 135.805071][ T30] audit: type=1400 audit(1771429210.145:282): avc: denied { getopt } for pid=6650 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 135.806327][ T6653] fuse: Unknown parameter 'group_i00000000000000000000' [ 135.961073][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.009628][ T6660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6660 comm=syz.0.164 [ 136.061693][ T5916] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 136.084363][ T5868] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 136.123670][ T5916] usb 4-1: can't read configurations, error -71 [ 136.204994][ T5882] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.213931][ T5916] usb usb4-port1: attempt power cycle [ 136.522799][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 136.558825][ T6662] capability: warning: `syz.1.159' uses deprecated v2 capabilities in a way that may be insecure [ 137.141599][ T5882] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 137.160421][ T5882] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 137.206326][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.229015][ T5882] usb 3-1: Product: syz [ 137.323043][ T5882] usb 3-1: Manufacturer: syz [ 137.333555][ T5882] usb 3-1: SerialNumber: syz [ 137.348287][ T5882] usb 3-1: config 0 descriptor?? [ 137.366387][ T5882] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 137.366432][ T5882] usb 3-1: setting power ON [ 137.366448][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 137.371320][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.382900][ T5882] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 137.382943][ T5882] usb 3-1: media controller created [ 137.412493][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.424026][ T5917] usb 2-1: USB disconnect, device number 8 [ 137.457536][ T5882] usb 3-1: selecting invalid altsetting 6 [ 137.457559][ T5882] usb 3-1: digital interface selection failed (-22) [ 137.457573][ T5882] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 137.459682][ T6672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.462462][ T5882] usb 3-1: setting power OFF [ 137.462486][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 137.462497][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 137.462505][ T5882] (NULL device *): no alternate interface [ 138.032756][ T6658] dvb-usb: bulk message failed: -22 (3/0) [ 138.032775][ T6658] dvb-usb: bulk message failed: -22 (4/0) [ 138.032782][ T6658] cxusb: i2c read failed [ 138.478704][ T6682] fuse: Unknown parameter 'group_id00000000000000000000' [ 138.488862][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.648337][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 138.782746][ T6686] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 138.792056][ T6686] overlayfs: missing 'lowerdir' [ 139.161259][ T30] audit: type=1400 audit(1771429213.235:283): avc: denied { create } for pid=6683 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 139.183547][ T9] usb 1-1: config 0 has no interfaces? [ 139.213963][ T30] audit: type=1400 audit(1771429213.245:284): avc: denied { write } for pid=6683 comm="syz.1.169" path="socket:[13563]" dev="sockfs" ino=13563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 139.238907][ T5917] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 139.271469][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.282165][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.291206][ T9] usb 1-1: Manufacturer: syz [ 139.298000][ T9] usb 1-1: config 0 descriptor?? [ 139.381109][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 139.426859][ T5882] usb 3-1: USB disconnect, device number 5 [ 139.475003][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 139.669200][ T5917] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 139.860853][ T6697] loop2: detected capacity change from 0 to 7 [ 140.005673][ T6676] autofs: Bad value for 'fd' [ 140.038311][ T5917] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 140.047863][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.056088][ T6697] Dev loop2: unable to read RDB block 7 [ 140.070515][ T9] usb 1-1: USB disconnect, device number 6 [ 140.078078][ T5917] usb 4-1: Product: syz [ 140.087745][ T6697] loop2: unable to read partition table [ 140.093100][ T5917] usb 4-1: Manufacturer: syz [ 140.133303][ T5917] usb 4-1: SerialNumber: syz [ 140.160644][ T6697] loop2: partition table beyond EOD, truncated [ 140.235209][ T6697] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 140.286122][ T5917] usb 4-1: config 0 descriptor?? [ 140.392840][ T5917] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 140.401659][ T5917] usb 4-1: setting power ON [ 140.407314][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 140.503649][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.521071][ T5917] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 140.542668][ T5917] usb 4-1: media controller created [ 140.571607][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.762691][ T6708] dvb-usb: bulk message failed: -22 (3/0) [ 140.776068][ T6708] dvb-usb: bulk message failed: -22 (4/0) [ 140.781945][ T6708] cxusb: i2c read failed [ 140.874526][ T5917] usb 4-1: selecting invalid altsetting 6 [ 140.880286][ T5917] usb 4-1: digital interface selection failed (-22) [ 140.955965][ T5917] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 140.972388][ T5917] usb 4-1: setting power OFF [ 140.981399][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 141.018129][ T5917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 141.052529][ T5917] (NULL device *): no alternate interface [ 141.105704][ T5868] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 142.447688][ T5809] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 142.456341][ T5809] Bluetooth: hci3: Injecting HCI hardware error event [ 142.463806][ T5809] Bluetooth: hci3: hardware error 0x00 [ 142.607772][ T5917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 142.663872][ T5917] usb 4-1: USB disconnect, device number 7 [ 143.876879][ T6722] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 144.585033][ T6732] ufs: You didn't specify the type of your ufs filesystem [ 144.585033][ T6732] [ 144.585033][ T6732] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 144.585033][ T6732] [ 144.585033][ T6732] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 144.616890][ T6732] ufs: ufstype=old is supported read-only [ 144.653212][ T5809] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 144.960993][ T30] audit: type=1400 audit(1771429219.085:285): avc: denied { create } for pid=6729 comm="syz.2.180" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.029289][ T30] audit: type=1400 audit(1771429219.095:286): avc: denied { mounton } for pid=6729 comm="syz.2.180" path="/29/file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.775023][ T30] audit: type=1400 audit(1771429219.815:287): avc: denied { setcurrent } for pid=6733 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 145.834462][ T30] audit: type=1401 audit(1771429219.815:288): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 145.950131][ T30] audit: type=1400 audit(1771429220.285:289): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.067774][ T5868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.081534][ T5868] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 146.119618][ T5868] usb 1-1: can't read configurations, error -71 [ 146.176724][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 146.455152][ T9] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 146.463258][ T9] usb 5-1: config 0 has no interface number 0 [ 146.469397][ T9] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 146.480849][ T9] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 146.492913][ T9] usb 5-1: config 0 interface 11 has no altsetting 0 [ 146.595920][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 146.608809][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.618780][ T9] usb 5-1: config 0 descriptor?? [ 146.635772][ T6738] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 146.648031][ T9] keyspan 5-1:0.11: Keyspan 4 port adapter converter detected [ 146.666870][ T9] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 146.676152][ T9] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 146.687308][ T9] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 146.719429][ T9] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 146.728810][ T9] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 146.740559][ T9] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 146.765537][ T9] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 146.809968][ T9] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 146.837278][ T9] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 146.862098][ T9] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 146.862299][ T6738] netlink: 184 bytes leftover after parsing attributes in process `syz.4.177'. [ 147.069682][ T9] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 147.095910][ T9] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 147.588194][ T9] usb 5-1: USB disconnect, device number 6 [ 148.331309][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 148.362344][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 148.377650][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 148.402923][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 148.461114][ T9] keyspan 5-1:0.11: device disconnected [ 148.631419][ T6775] fuse: Bad value for 'user_id' [ 148.636413][ T6775] fuse: Bad value for 'user_id' [ 148.781955][ T6773] bond0: entered promiscuous mode [ 148.787167][ T6773] bond_slave_0: entered promiscuous mode [ 148.792908][ T6773] bond_slave_1: entered promiscuous mode [ 148.799803][ T6773] batadv0: entered promiscuous mode [ 148.806491][ T6773] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 148.905007][ T5882] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 149.280591][ T6779] capability: warning: `syz.0.192' uses 32-bit capabilities (legacy support in use) [ 149.385045][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 149.396563][ T6780] tipc: Enabling of bearer rejected, failed to enable media [ 149.506015][ T5882] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 149.551400][ T5882] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 149.595109][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.603100][ T5882] usb 2-1: Product: syz [ 149.641657][ T5882] usb 2-1: Manufacturer: syz [ 149.715048][ T5882] usb 2-1: SerialNumber: syz [ 149.770448][ T5882] usb 2-1: config 0 descriptor?? [ 149.785139][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 149.799883][ T5882] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 149.829742][ T6785] sctp: [Deprecated]: syz.2.193 (pid 6785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.829742][ T6785] Use struct sctp_sack_info instead [ 149.832958][ T5882] usb 2-1: setting power ON [ 150.585026][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 150.638393][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 150.662666][ T9] usb 1-1: config 0 has no interface number 0 [ 150.669859][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 150.750463][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 150.761845][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.770230][ T9] usb 1-1: Product: syz [ 150.770616][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.774485][ T9] usb 1-1: Manufacturer: syz [ 150.849698][ T5882] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 150.861890][ T9] usb 1-1: SerialNumber: syz [ 150.866831][ T30] audit: type=1400 audit(1771429225.375:290): avc: denied { read write } for pid=6795 comm="syz.3.194" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 151.017228][ T9] usb 1-1: config 0 descriptor?? [ 151.026983][ T5882] usb 2-1: media controller created [ 151.028029][ T30] audit: type=1400 audit(1771429225.375:291): avc: denied { open } for pid=6795 comm="syz.3.194" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 151.141847][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 151.455845][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 151.533438][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.581332][ T5882] usb 2-1: selecting invalid altsetting 6 [ 151.602155][ T5882] usb 2-1: digital interface selection failed (-22) [ 151.625019][ T5882] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 151.669986][ T5882] usb 2-1: setting power OFF [ 151.684589][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 151.755013][ T5868] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 151.770640][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 151.781586][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 151.833536][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 151.884856][ T5882] (NULL device *): no alternate interface [ 151.975857][ T30] audit: type=1400 audit(1771429226.485:292): avc: denied { bind } for pid=6801 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.131301][ T30] audit: type=1400 audit(1771429226.485:293): avc: denied { setopt } for pid=6801 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.793059][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 153.045453][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 153.053177][ T5820] usb 1-1: USB disconnect, device number 9 [ 153.062628][ T5820] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 153.100116][ T5820] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 153.138622][ T5820] quatech2 1-1:0.51: device disconnected [ 153.545992][ T9] usb 2-1: USB disconnect, device number 9 [ 153.807136][ T6826] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 153.816348][ T6826] overlayfs: missing 'lowerdir' [ 154.368399][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.425270][ T5868] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 154.575828][ T5868] usb 3-1: can't read configurations, error -71 [ 155.065064][ T30] audit: type=1400 audit(1771429229.205:294): avc: denied { read } for pid=6827 comm="syz.0.200" name="sg0" dev="devtmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 155.223160][ T30] audit: type=1400 audit(1771429229.205:295): avc: denied { ioctl } for pid=6827 comm="syz.0.200" path="/dev/sg0" dev="devtmpfs" ino=828 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 155.578118][ T30] audit: type=1400 audit(1771429229.825:296): avc: denied { sqpoll } for pid=6830 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.632382][ T6843] fuse: Unknown parameter 'group_id00000000000000000000' [ 155.687529][ T30] audit: type=1400 audit(1771429230.165:297): avc: denied { create } for pid=6836 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.828719][ T30] audit: type=1400 audit(1771429230.165:298): avc: denied { bind } for pid=6836 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.881437][ T6848] random: crng reseeded on system resumption [ 155.912839][ T30] audit: type=1400 audit(1771429230.175:299): avc: denied { write } for pid=6836 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.939247][ T30] audit: type=1400 audit(1771429230.395:300): avc: denied { create } for pid=6844 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 155.985024][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 156.012416][ T30] audit: type=1400 audit(1771429230.395:301): avc: denied { write } for pid=6844 comm="syz.0.204" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.041325][ T30] audit: type=1400 audit(1771429230.395:302): avc: denied { open } for pid=6844 comm="syz.0.204" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.139135][ T5820] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.155104][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 156.165686][ T9] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 156.187770][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 156.206344][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.215646][ T9] usb 2-1: Product: syz [ 156.219977][ T9] usb 2-1: Manufacturer: syz [ 156.225705][ T9] usb 2-1: SerialNumber: syz [ 156.242780][ T9] usb 2-1: config 0 descriptor?? [ 156.256464][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 156.265154][ T9] usb 2-1: setting power ON [ 156.270786][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 156.291869][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.301280][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 156.309793][ T5820] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 156.318172][ T5820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.328750][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 156.337662][ T5820] usb 4-1: config 0 has no interface number 0 [ 156.343900][ T9] usb 2-1: media controller created [ 156.349688][ T5820] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.366699][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.375196][ T5820] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 156.401953][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.410691][ T9] usb 2-1: selecting invalid altsetting 6 [ 156.416513][ T9] usb 2-1: digital interface selection failed (-22) [ 156.424569][ T5820] usb 4-1: config 0 descriptor?? [ 156.434299][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 156.449076][ T5820] ldusb 4-1:0.55: Interrupt in endpoint not found [ 156.462740][ T6841] dvb-usb: bulk message failed: -22 (3/0) [ 156.467719][ T9] usb 2-1: setting power OFF [ 156.474149][ T6841] dvb-usb: bulk message failed: -22 (4/0) [ 156.481647][ T6841] cxusb: i2c read failed [ 156.483598][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 156.500845][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 156.512007][ T9] (NULL device *): no alternate interface [ 157.573694][ T30] audit: type=1400 audit(1771429232.085:303): avc: denied { ioctl } for pid=6846 comm="syz.3.205" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12661 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.038960][ T6859] kvm: pic: non byte write [ 158.238733][ T6861] sctp: [Deprecated]: syz.0.209 (pid 6861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.238733][ T6861] Use struct sctp_sack_info instead [ 158.415130][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 158.511418][ T6866] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.747816][ T9] usb 2-1: USB disconnect, device number 10 [ 158.870204][ T5868] usb 4-1: USB disconnect, device number 8 [ 159.425188][ T30] audit: type=1400 audit(1771429233.905:304): avc: denied { write } for pid=6871 comm="syz.1.213" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.795053][ T30] audit: type=1400 audit(1771429233.905:305): avc: denied { bind } for pid=6871 comm="syz.1.213" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.821940][ T30] audit: type=1400 audit(1771429233.905:306): avc: denied { name_bind } for pid=6871 comm="syz.1.213" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 159.843536][ T30] audit: type=1400 audit(1771429233.905:307): avc: denied { node_bind } for pid=6871 comm="syz.1.213" saddr=fc00::1 src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 160.150428][ T6891] fuse: Bad value for 'user_id' [ 160.163394][ T6891] fuse: Bad value for 'user_id' [ 160.244716][ T6894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.012019][ T6895] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.349312][ T5868] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.156468][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 162.164648][ T5868] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 162.176178][ T5868] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 162.185467][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.193481][ T5868] usb 3-1: Product: syz [ 162.575104][ T5868] usb 3-1: Manufacturer: syz [ 162.579745][ T5868] usb 3-1: SerialNumber: syz [ 162.597446][ T5868] usb 3-1: config 0 descriptor?? [ 162.610412][ T5868] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 162.618737][ T5868] usb 3-1: setting power ON [ 162.623272][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 162.632231][ T6908] fuse: Unknown parameter 'group_id00000000000000000000' [ 162.636293][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 162.650710][ T5868] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 162.665016][ T5868] usb 3-1: media controller created [ 162.686237][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.713174][ T5868] usb 3-1: selecting invalid altsetting 6 [ 162.719268][ T5868] usb 3-1: digital interface selection failed (-22) [ 162.924132][ T5868] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 162.996884][ T5868] usb 3-1: setting power OFF [ 163.002317][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 163.008787][ T5868] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 163.046379][ T6917] fuse: Unknown parameter 'group_id00000000000000000000' [ 163.085045][ T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.086906][ T5868] (NULL device *): no alternate interface [ 163.237306][ T6918] dvb-usb: bulk message failed: -22 (3/0) [ 163.261454][ T6918] dvb-usb: bulk message failed: -22 (4/0) [ 163.267491][ T6918] cxusb: i2c read failed [ 163.295808][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 163.346043][ T5820] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.359436][ T29] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 163.399416][ T29] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 163.583993][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 163.596538][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.604995][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 163.631998][ T5820] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 163.647590][ T29] usb 4-1: Product: syz [ 163.663684][ T29] usb 4-1: Manufacturer: syz [ 163.712474][ T29] usb 4-1: SerialNumber: syz [ 163.777851][ T29] usb 4-1: config 0 descriptor?? [ 163.783114][ T5820] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 163.800379][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 163.820546][ T29] usb 4-1: setting power ON [ 163.833350][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 163.848350][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.870409][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.896413][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.915654][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 163.916119][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.945363][ T5820] usb 1-1: Product: syz [ 163.963699][ T5820] usb 1-1: Manufacturer: syz [ 163.973888][ T29] usb 4-1: media controller created [ 163.979644][ T5820] usb 1-1: SerialNumber: syz [ 163.987804][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.990568][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.043224][ T5820] usb 1-1: config 0 descriptor?? [ 164.052058][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.071324][ T5820] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 164.089851][ T6920] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 164.104416][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.117730][ T5820] usb 1-1: setting power ON [ 164.130489][ T5820] dvb-usb: bulk message failed: -22 (2/0) [ 164.149520][ T6923] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 164.183842][ T5820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.205333][ T6923] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 164.222310][ T6923] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 164.234561][ T6923] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 164.264868][ T6923] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 164.291824][ T6923] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 164.304255][ T6923] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 164.315197][ T6923] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 164.323525][ T6923] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 164.355323][ T6923] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 164.364121][ T29] usb 4-1: selecting invalid altsetting 6 [ 164.364439][ T5820] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 164.414137][ T5820] usb 1-1: media controller created [ 164.420974][ T29] usb 4-1: digital interface selection failed (-22) [ 164.445114][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 164.476726][ T29] usb 4-1: setting power OFF [ 164.481411][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 164.535566][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 164.564808][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.593808][ T29] (NULL device *): no alternate interface [ 164.615842][ T9] usb 2-1: USB disconnect, device number 11 [ 164.723039][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 164.759864][ T5820] usb 1-1: selecting invalid altsetting 6 [ 164.792508][ T5820] usb 1-1: digital interface selection failed (-22) [ 164.801220][ T5820] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 164.813421][ T5820] usb 1-1: setting power OFF [ 164.818656][ T5820] dvb-usb: bulk message failed: -22 (2/0) [ 164.826960][ T5820] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 165.461229][ T30] audit: type=1400 audit(1771429239.585:308): avc: denied { write } for pid=6919 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 165.486841][ T5820] (NULL device *): no alternate interface [ 165.492071][ T30] audit: type=1400 audit(1771429239.665:309): avc: denied { connect } for pid=6919 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 165.543896][ T5820] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 165.555895][ T5868] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 165.614001][ T5868] usb 3-1: USB disconnect, device number 8 [ 165.777022][ T5927] usb 4-1: USB disconnect, device number 9 [ 166.388138][ T6941] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 166.426320][ T5820] usb 1-1: USB disconnect, device number 10 [ 166.550526][ T30] audit: type=1400 audit(1771429240.975:310): avc: denied { read } for pid=6931 comm="syz.2.223" path="socket:[14024]" dev="sockfs" ino=14024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 167.317746][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.325863][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.362853][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.370364][ T6950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.377819][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.384943][ T6950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.396912][ T6950] bridge0: entered promiscuous mode [ 167.403546][ T6950] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 168.459205][ T6961] kAFS: unable to lookup cell 'ÿ' [ 168.466093][ T6964] kAFS: unable to lookup cell '(,c¾Ì' [ 168.806800][ T30] audit: type=1400 audit(1771429243.295:311): avc: denied { ioctl } for pid=6969 comm="syz.3.232" path="socket:[14099]" dev="sockfs" ino=14099 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.115673][ T30] audit: type=1400 audit(1771429243.295:312): avc: denied { setopt } for pid=6969 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.138681][ T30] audit: type=1400 audit(1771429243.375:313): avc: denied { bind } for pid=6969 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 169.285082][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 170.048092][ T30] audit: type=1400 audit(1771429244.565:314): avc: denied { name_bind } for pid=6976 comm="syz.3.234" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 171.132693][ T30] audit: type=1400 audit(1771429245.645:315): avc: denied { mount } for pid=6976 comm="syz.3.234" name="/" dev="autofs" ino=14177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 172.304147][ T7000] fuse: Unknown parameter 'group_id00000000000000000000' [ 172.457387][ T5809] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 172.595039][ T5868] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 172.785318][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 172.816304][ T5868] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 172.828871][ T5868] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 172.844757][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.853145][ T5868] usb 2-1: Product: syz [ 172.892869][ T5868] usb 2-1: Manufacturer: syz [ 173.094471][ T5868] usb 2-1: SerialNumber: syz [ 173.116712][ T5868] usb 2-1: config 0 descriptor?? [ 173.145439][ T5868] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 173.153451][ T5868] usb 2-1: setting power ON [ 173.222945][ T7009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.319074][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 173.363766][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.444435][ T5868] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 173.473780][ T5868] usb 2-1: media controller created [ 174.033552][ T30] audit: type=1400 audit(1771429248.155:316): avc: denied { setopt } for pid=7015 comm="syz.0.243" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.075241][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.103509][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 174.139896][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 174.148122][ T10] usb 5-1: can't read configurations, error -71 [ 174.169582][ T5868] usb 2-1: selecting invalid altsetting 6 [ 174.189585][ T5868] usb 2-1: digital interface selection failed (-22) [ 174.216062][ T5868] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 174.251075][ T5868] usb 2-1: setting power OFF [ 174.263086][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 174.280993][ T5868] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 174.309059][ T5868] (NULL device *): no alternate interface [ 174.560050][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 174.607304][ T7026] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.815319][ T7025] netlink: 56 bytes leftover after parsing attributes in process `syz.0.245'. [ 175.049385][ T7025] geneve2: entered promiscuous mode [ 175.075165][ T7025] geneve2: entered allmulticast mode [ 175.562875][ T30] audit: type=1400 audit(1771429249.675:317): avc: denied { bind } for pid=7027 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.014193][ T30] audit: type=1400 audit(1771429249.675:318): avc: denied { setopt } for pid=7027 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.374460][ T5868] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 176.541744][ T5868] usb 2-1: USB disconnect, device number 12 [ 176.726775][ T5809] Bluetooth: Frame is too long (len 18, expected len 4) [ 177.336118][ T7052] fuse: Bad value for 'fd' [ 177.479992][ T30] audit: type=1400 audit(1771429251.955:319): avc: denied { write } for pid=7040 comm="syz.1.249" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.532436][ T30] audit: type=1400 audit(1771429251.955:320): avc: denied { open } for pid=7040 comm="syz.1.249" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.579626][ T30] audit: type=1400 audit(1771429251.955:321): avc: denied { ioctl } for pid=7040 comm="syz.1.249" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.672527][ T30] audit: type=1400 audit(1771429251.955:322): avc: denied { read } for pid=7040 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.374121][ T7058] mmap: syz.0.252 (7058) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 178.668992][ T5868] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 178.961830][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 179.957726][ T5868] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 180.585404][ T5868] usb 5-1: string descriptor 0 read error: -71 [ 180.591689][ T5868] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 180.606964][ T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 180.637312][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.666045][ T5868] usb 5-1: config 0 descriptor?? [ 180.682325][ T5868] usb 5-1: can't set config #0, error -71 [ 180.698408][ T5868] usb 5-1: USB disconnect, device number 9 [ 180.708564][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 180.714688][ T5134] Bluetooth: hci1: command 0x0406 tx timeout [ 180.717170][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 180.720809][ T5134] Bluetooth: hci2: command 0x0406 tx timeout [ 181.413868][ T7073] Invalid logical block size (7) [ 181.824416][ T7085] fuse: Bad value for 'user_id' [ 181.829400][ T7085] fuse: Bad value for 'user_id' [ 181.891975][ T7088] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 182.611422][ T30] audit: type=1804 audit(1771429256.745:323): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.260" name="/newroot/49/file0" dev="tmpfs" ino=293 res=1 errno=0 [ 182.676592][ T5917] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 182.834952][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 183.084702][ T5917] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 183.127801][ T5917] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 183.145200][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.202765][ T5917] usb 2-1: Product: syz [ 183.219400][ T5917] usb 2-1: Manufacturer: syz [ 183.231322][ T5917] usb 2-1: SerialNumber: syz [ 183.255067][ T5917] usb 2-1: config 0 descriptor?? [ 183.352028][ T7098] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 183.632589][ T5917] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 183.657978][ T5917] usb 2-1: setting power ON [ 183.693708][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 183.742020][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.780277][ T5917] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 183.795517][ T5917] usb 2-1: media controller created [ 183.837730][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.866784][ T7085] dvb-usb: bulk message failed: -22 (3/0) [ 183.872659][ T7085] dvb-usb: bulk message failed: -22 (4/0) [ 183.878644][ T7085] cxusb: i2c read failed [ 184.006117][ T5917] usb 2-1: selecting invalid altsetting 6 [ 184.011960][ T5917] usb 2-1: digital interface selection failed (-22) [ 184.018951][ T5917] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 184.039184][ T5917] usb 2-1: setting power OFF [ 184.046137][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 184.053480][ T5917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 184.589604][ T5917] (NULL device *): no alternate interface [ 184.621479][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 184.762961][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 184.809785][ T10] usb 3-1: can't read configurations, error -71 [ 185.097561][ T5917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 185.981323][ T7107] syz.2.264 (7107): drop_caches: 2 [ 186.173924][ T5917] usb 2-1: USB disconnect, device number 13 [ 186.484272][ T7118] process 'syz.3.263' launched './file0' with NULL argv: empty string added [ 186.525356][ T30] audit: type=1400 audit(1771429261.005:324): avc: denied { execute_no_trans } for pid=7103 comm="syz.3.263" path="/52/file0" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 187.238536][ T7127] vxcan1: entered promiscuous mode [ 187.267971][ T7127] team0: Device vxcan1 is of different type [ 187.991109][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 188.212213][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.230980][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.273311][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 188.294976][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 188.311905][ T9] usb 1-1: Manufacturer: syz [ 188.337816][ T9] usb 1-1: config 0 descriptor?? [ 188.351749][ T7135] fuse: Bad value for 'user_id' [ 188.356773][ T7135] fuse: Bad value for 'user_id' [ 188.383709][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 188.502480][ T30] audit: type=1400 audit(1771429262.975:325): avc: denied { mount } for pid=7133 comm="syz.3.271" name="/" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 188.553717][ T30] audit: type=1400 audit(1771429262.975:326): avc: denied { mounton } for pid=7133 comm="syz.3.271" path="/54/file0" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.635842][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'. [ 188.645225][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.690296][ T30] audit: type=1400 audit(1771429262.985:327): avc: denied { read } for pid=7133 comm="syz.3.271" name="/" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.793169][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.804671][ T5868] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 188.804966][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.867043][ T30] audit: type=1400 audit(1771429262.985:328): avc: denied { read } for pid=7133 comm="syz.3.271" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.893299][ T30] audit: type=1400 audit(1771429262.985:329): avc: denied { open } for pid=7133 comm="syz.3.271" path="/54/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.915241][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 189.160812][ T30] audit: type=1400 audit(1771429262.985:330): avc: denied { read } for pid=7133 comm="syz.3.271" name="/" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.212979][ T30] audit: type=1400 audit(1771429262.985:331): avc: denied { read } for pid=7133 comm="syz.3.271" name="/" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.250860][ T9] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 189.265730][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 189.279353][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.454705][ T9] usb 5-1: Product: syz [ 189.471232][ T5868] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 189.897159][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.966639][ T9] usb 5-1: Manufacturer: syz [ 189.971375][ T30] audit: type=1400 audit(1771429263.575:332): avc: denied { create } for pid=7123 comm="syz.0.269" name="#f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 189.994291][ T9] usb 5-1: SerialNumber: syz [ 190.004569][ T5868] usb 4-1: Product: syz [ 190.013619][ T5868] usb 4-1: Manufacturer: syz [ 190.018494][ T5868] usb 4-1: SerialNumber: syz [ 190.168140][ T9] usb 5-1: config 0 descriptor?? [ 190.185176][ T30] audit: type=1400 audit(1771429263.585:333): avc: denied { link } for pid=7123 comm="syz.0.269" name="#f" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 190.327729][ T30] audit: type=1400 audit(1771429263.585:334): avc: denied { rename } for pid=7123 comm="syz.0.269" name="#10" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 190.418642][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 190.841022][ T5868] usb 4-1: config 0 descriptor?? [ 190.895032][ T9] usb 5-1: setting power ON [ 190.953307][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 190.953957][ T5823] Bluetooth: hci5: urb ffff8880370bdf00 submission failed (2) [ 191.150862][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.163318][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 191.172089][ T9] usb 5-1: media controller created [ 191.183542][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.353330][ T5917] usb 1-1: USB disconnect, device number 11 [ 191.428732][ T9] usb 5-1: selecting invalid altsetting 6 [ 191.618479][ T7158] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 192.296721][ T5868] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 192.314629][ T9] usb 5-1: digital interface selection failed (-22) [ 192.321704][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 192.356075][ T9] usb 5-1: setting power OFF [ 192.360701][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 192.485026][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 192.494527][ T9] (NULL device *): no alternate interface [ 192.634033][ T5820] usb 4-1: USB disconnect, device number 10 [ 192.687515][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 192.751526][ T9] usb 5-1: USB disconnect, device number 10 [ 192.765114][ T5917] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 192.912770][ T7169] sctp: [Deprecated]: syz.3.278 (pid 7169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.912770][ T7169] Use struct sctp_sack_info instead [ 192.955193][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 192.973177][ T5917] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 193.021628][ T5917] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.185079][ T5917] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.210486][ T5917] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.231266][ T5917] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.247857][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.279'. [ 193.359494][ T5917] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.368968][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.596761][ T5917] usb 1-1: GET_CAPABILITIES returned 0 [ 193.609223][ T5917] usbtmc 1-1:16.0: can't read capabilities [ 193.876644][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.893550][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.902649][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.911840][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 193.920943][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 194.013958][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 194.013976][ T30] audit: type=1400 audit(1771429268.455:340): avc: denied { egress } for pid=7179 comm="syz.3.280" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 194.066344][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 194.075467][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 194.084537][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 194.093596][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 194.102660][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 194.113879][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 194.125369][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 194.135122][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 194.146797][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 194.157400][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 194.168111][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 194.196947][ T30] audit: type=1400 audit(1771429268.455:341): avc: denied { sendto } for pid=7179 comm="syz.3.280" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 194.691913][ T29] usb 1-1: USB disconnect, device number 12 [ 194.734227][ T30] audit: type=1400 audit(1771429268.505:342): avc: denied { getopt } for pid=7179 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 194.794336][ T30] audit: type=1400 audit(1771429268.505:343): avc: denied { bind } for pid=7179 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 194.824008][ T5823] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 196.385354][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 196.405614][ T5868] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 196.413683][ T5868] usb 3-1: can't read configurations, error -71 [ 196.461606][ T5823] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 196.566468][ T7202] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 196.574978][ T7202] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 196.583463][ T7202] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 196.844840][ T30] audit: type=1400 audit(1771429271.345:344): avc: denied { map } for pid=7199 comm="syz.0.284" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 197.108676][ T30] audit: type=1400 audit(1771429271.605:345): avc: denied { map } for pid=7199 comm="syz.0.284" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.257347][ T7207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.380925][ T7212] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 197.455130][ T5917] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 197.756739][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 197.772141][ T5917] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 197.789393][ T5917] usb 2-1: config 0 has no interface number 0 [ 197.808229][ T5917] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 197.818801][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.832626][ T5917] usb 2-1: Product: syz [ 197.845550][ T5917] usb 2-1: Manufacturer: syz [ 197.850337][ T5917] usb 2-1: SerialNumber: syz [ 197.872392][ T5917] usb 2-1: config 0 descriptor?? [ 197.888218][ T5917] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 198.258141][ T5917] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 198.273172][ T7224] fuse: Bad value for 'fd' [ 198.296859][ T7225] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 198.321312][ T5917] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 198.467749][ T5823] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 198.525854][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 198.648596][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 198.657068][ T5868] usb 2-1: USB disconnect, device number 14 [ 198.665884][ T5868] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 198.797556][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 198.806202][ T9] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 198.824760][ T5868] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 198.842535][ T9] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 199.427548][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.444371][ T5868] quatech2 2-1:0.51: device disconnected [ 199.474374][ T9] usb 4-1: Product: syz [ 199.488850][ T9] usb 4-1: Manufacturer: syz [ 199.504377][ T9] usb 4-1: SerialNumber: syz [ 199.637992][ T9] usb 4-1: config 0 descriptor?? [ 199.672662][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 200.014988][ T9] usb 4-1: setting power ON [ 200.019554][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 200.093734][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.155143][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 200.185502][ T9] usb 4-1: media controller created [ 200.327453][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.688867][ T7254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6093 sclass=netlink_route_socket pid=7254 comm=syz.4.296 [ 200.701438][ T30] audit: type=1400 audit(1771429275.205:346): avc: denied { connect } for pid=7246 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.725476][ T9] usb 4-1: selecting invalid altsetting 6 [ 200.767278][ T9] usb 4-1: digital interface selection failed (-22) [ 200.899441][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 200.945244][ T9] usb 4-1: setting power OFF [ 200.954381][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 201.023750][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 201.058340][ T9] (NULL device *): no alternate interface [ 201.075317][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 201.185327][ T9] usb 4-1: USB disconnect, device number 11 [ 201.430943][ T30] audit: type=1400 audit(1771429275.945:347): avc: denied { name_bind } for pid=7258 comm="syz.2.298" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 201.497168][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 201.585281][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 201.608876][ T30] audit: type=1400 audit(1771429276.055:348): avc: denied { create } for pid=7258 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 202.665062][ T30] audit: type=1400 audit(1771429277.105:349): avc: denied { name_connect } for pid=7263 comm="syz.0.300" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 202.876734][ T30] audit: type=1400 audit(1771429277.235:350): avc: denied { create } for pid=7265 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 203.571448][ T7279] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 203.578219][ T7279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.262961][ T7279] vhci_hcd vhci_hcd.0: Device attached [ 204.524972][ T5917] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 204.802076][ T7282] vhci_hcd: connection reset by peer [ 205.123565][ T7298] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 205.143833][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.151829][ T49] vhci_hcd vhci_hcd.4: stop threads [ 205.160146][ T49] vhci_hcd vhci_hcd.4: release socket [ 205.176945][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 205.404223][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 205.502586][ T9] usb 4-1: can't read configurations, error -71 [ 206.746195][ T30] audit: type=1400 audit(1771429281.265:351): avc: denied { ioctl } for pid=7326 comm="syz.3.305" path="socket:[15581]" dev="sockfs" ino=15581 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.463921][ T30] audit: type=1400 audit(1771429282.955:352): avc: denied { create } for pid=7348 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 208.522583][ T7356] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 208.536359][ T5916] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 208.694529][ T30] audit: type=1400 audit(1771429283.155:353): avc: denied { connect } for pid=7352 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.832380][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 208.848307][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 208.860825][ T5823] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 208.999585][ T5916] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.030011][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.042565][ T5916] usb 2-1: Product: syz [ 209.052650][ T5916] usb 2-1: Manufacturer: syz [ 209.090088][ T5916] usb 2-1: SerialNumber: syz [ 209.114654][ T5916] usb 2-1: config 0 descriptor?? [ 209.340547][ T7367] syz.0.312 uses obsolete (PF_INET,SOCK_PACKET) [ 209.795206][ T5917] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 210.451852][ T30] audit: type=1400 audit(1771429284.965:354): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 210.451979][ T5916] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 210.585446][ T5823] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 210.680350][ T5916] usb 2-1: USB disconnect, device number 15 [ 210.760007][ T6925] udevd[6925]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.054650][ T7378] /dev/sg0: Can't lookup blockdev [ 211.077190][ T30] audit: type=1400 audit(1771429285.565:355): avc: denied { mounton } for pid=7372 comm="syz.2.316" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 211.713682][ T7387] ======================================================= [ 211.713682][ T7387] WARNING: The mand mount option has been deprecated and [ 211.713682][ T7387] and is ignored by this kernel. Remove the mand [ 211.713682][ T7387] option from the mount to silence this warning. [ 211.713682][ T7387] ======================================================= [ 212.695332][ T30] audit: type=1400 audit(1771429286.529:356): avc: denied { setopt } for pid=7385 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.723152][ T30] audit: type=1400 audit(1771429286.538:357): avc: denied { shutdown } for pid=7385 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.800437][ T7382] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 212.842053][ T30] audit: type=1400 audit(1771429286.548:358): avc: denied { connect } for pid=7385 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.949232][ T7395] fuse: Bad value for 'fd' [ 213.257647][ T5917] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 213.267042][ T7399] fuse: Invalid rootmode [ 213.324872][ T30] audit: type=1400 audit(1771429287.118:359): avc: denied { mount } for pid=7380 comm="syz.0.318" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 213.393074][ T30] audit: type=1400 audit(1771429287.352:360): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 213.491407][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 213.532999][ T5917] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 213.570957][ T5917] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 213.580610][ T29] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 213.605908][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.631905][ T5917] usb 5-1: Product: syz [ 213.636062][ T5917] usb 5-1: Manufacturer: syz [ 213.649042][ T5917] usb 5-1: SerialNumber: syz [ 213.676635][ T5917] usb 5-1: config 0 descriptor?? [ 213.713565][ T30] audit: type=1400 audit(1771429288.054:361): avc: denied { read append } for pid=7400 comm="syz.1.314" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 213.747557][ T5917] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 213.756144][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 213.907206][ T29] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 213.924173][ T5917] usb 5-1: setting power ON [ 213.939698][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 214.249532][ T30] audit: type=1400 audit(1771429288.540:362): avc: denied { create } for pid=7400 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 214.440526][ T29] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 214.472944][ T30] audit: type=1400 audit(1771429288.550:363): avc: denied { ioctl } for pid=7400 comm="syz.1.314" path="socket:[15771]" dev="sockfs" ino=15771 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 214.499566][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.562379][ T5917] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 214.570963][ T5917] usb 5-1: media controller created [ 214.577278][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.604877][ T29] usb 1-1: Product: syz [ 214.662680][ T29] usb 1-1: Manufacturer: syz [ 214.667287][ T29] usb 1-1: SerialNumber: syz [ 214.685617][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.712182][ T29] usb 1-1: config 0 descriptor?? [ 214.817464][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 214.829838][ T5917] usb 5-1: selecting invalid altsetting 6 [ 214.835968][ T5917] usb 5-1: digital interface selection failed (-22) [ 214.847301][ T29] usb 1-1: setting power ON [ 214.855756][ T5917] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 214.855906][ T7408] dvb-usb: bulk message failed: -22 (3/0) [ 214.882760][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 214.901562][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.917263][ T5917] usb 5-1: setting power OFF [ 214.933575][ T7408] dvb-usb: bulk message failed: -22 (4/0) [ 214.947900][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 214.953735][ T7408] cxusb: i2c read failed [ 214.968658][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 214.980309][ T5917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 215.014655][ T29] usb 1-1: media controller created [ 215.029195][ T5917] (NULL device *): no alternate interface [ 215.041234][ T7412] fuse: Bad value for 'rootmode' [ 215.103615][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.128681][ T7399] dvb-usb: bulk message failed: -22 (4/0) [ 215.134668][ T7399] cxusb: i2c read failed [ 215.148272][ T29] usb 1-1: selecting invalid altsetting 6 [ 215.156792][ T29] usb 1-1: digital interface selection failed (-22) [ 215.164806][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 215.174479][ T29] usb 1-1: setting power OFF [ 215.179167][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 215.205513][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 215.216085][ T29] (NULL device *): no alternate interface [ 215.366541][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 216.122721][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 216.908985][ T30] audit: type=1400 audit(1771429290.664:364): avc: denied { map } for pid=7421 comm="syz.3.325" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 216.939746][ T30] audit: type=1400 audit(1771429290.664:365): avc: denied { execute } for pid=7421 comm="syz.3.325" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 216.968950][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 217.013603][ T9] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 217.046147][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 217.099377][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.120165][ T9] usb 2-1: Product: syz [ 217.137327][ T9] usb 2-1: Manufacturer: syz [ 217.240534][ T9] usb 2-1: SerialNumber: syz [ 217.246646][ T5917] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 217.256959][ T29] usb 1-1: USB disconnect, device number 13 [ 217.283768][ T9] usb 2-1: config 0 descriptor?? [ 217.302292][ T5917] usb 5-1: USB disconnect, device number 11 [ 217.518239][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 217.553543][ T9] usb 2-1: setting power ON [ 217.571196][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 217.601109][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.642528][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 217.680098][ T9] usb 2-1: media controller created [ 217.696928][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.716334][ T9] usb 2-1: selecting invalid altsetting 6 [ 217.734282][ T9] usb 2-1: digital interface selection failed (-22) [ 217.746471][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 217.772257][ T7411] dvb-usb: bulk message failed: -22 (3/0) [ 217.787395][ T9] usb 2-1: setting power OFF [ 217.793707][ T7411] dvb-usb: bulk message failed: -22 (4/0) [ 217.799533][ T7411] cxusb: i2c read failed [ 217.806115][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 217.814808][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 217.824189][ T9] (NULL device *): no alternate interface [ 217.968014][ T5823] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 218.313826][ T7454] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 218.940799][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 219.146499][ T30] audit: type=1400 audit(1771429293.133:366): avc: denied { mount } for pid=7456 comm="syz.1.332" name="/" dev="ramfs" ino=15902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 219.183197][ T9] usb 2-1: USB disconnect, device number 16 [ 223.663785][ T7496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.936166][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 223.955627][ T7496] tipc: Started in network mode [ 223.960523][ T7496] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 223.979264][ T7496] tipc: Enabled bearer , priority 10 [ 225.169285][ T9] tipc: Node number set to 1 [ 225.521457][ T30] audit: type=1400 audit(1771429298.970:367): avc: denied { bind } for pid=7512 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 225.892634][ T7531] vlan2: entered promiscuous mode [ 225.913167][ T7531] bridge0: port 3(hsr0) entered blocking state [ 225.919581][ T7531] bridge0: port 3(hsr0) entered disabled state [ 225.926021][ T7531] hsr0: entered allmulticast mode [ 225.931058][ T7531] hsr_slave_0: entered allmulticast mode [ 225.958092][ T7531] hsr_slave_1: entered allmulticast mode [ 225.966799][ T7531] hsr0: entered promiscuous mode [ 225.973094][ T7531] bridge0: port 3(hsr0) entered blocking state [ 225.979360][ T7531] bridge0: port 3(hsr0) entered forwarding state [ 226.553340][ T7539] vlan0: entered promiscuous mode [ 226.564116][ T7539] team0: Port device vlan0 added [ 226.576314][ T30] audit: type=1400 audit(1771429300.064:368): avc: denied { ioctl } for pid=7533 comm="syz.1.350" path="socket:[15265]" dev="sockfs" ino=15265 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 228.218099][ T7561] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 228.404872][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 228.504504][ T30] audit: type=1400 audit(1771429301.888:369): avc: denied { open } for pid=7565 comm="syz.4.356" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 228.513241][ T7559] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 229.069118][ C0] [ 229.071478][ C0] ============================================ [ 229.077598][ C0] WARNING: possible recursive locking detected [ 229.083715][ C0] syzkaller #0 Tainted: G L [ 229.089659][ C0] -------------------------------------------- [ 229.095772][ C0] syz.4.356/7567 is trying to acquire lock: [ 229.101628][ C0] ffff888074ccef70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x208/0x400 [ 229.110641][ C0] [ 229.110641][ C0] but task is already holding lock: [ 229.117972][ C0] ffff88807a6a4f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_prp_supervision_frame+0x17c/0x5e0 [ 229.128206][ C0] [ 229.128206][ C0] other info that might help us debug this: [ 229.136264][ C0] Possible unsafe locking scenario: [ 229.136264][ C0] [ 229.143695][ C0] CPU0 [ 229.146945][ C0] ---- [ 229.150204][ C0] lock(&hsr->seqnr_lock); [ 229.154678][ C0] lock(&hsr->seqnr_lock); [ 229.159160][ C0] [ 229.159160][ C0] *** DEADLOCK *** [ 229.159160][ C0] [ 229.167271][ C0] May be due to missing lock nesting notation [ 229.167271][ C0] [ 229.175556][ C0] 11 locks held by syz.4.356/7567: [ 229.180637][ C0] #0: ffff888076ae31b8 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 229.190272][ C0] #1: ffffc90000007ca8 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x670 [ 229.200335][ C0] #2: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x88/0x3e0 [ 229.209442][ C0] #3: ffff88807a6a4f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_prp_supervision_frame+0x17c/0x5e0 [ 229.220107][ C0] #4: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xa7/0x28a0 [ 229.229554][ C0] #5: ffffffff8e7e9380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x4750 [ 229.239458][ C0] #6: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xb7/0x10d0 [ 229.248913][ C0] #7: ffffffff8e7e9380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x4750 [ 229.258793][ C0] #8: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x181/0x1880 [ 229.267987][ C0] #9: ffffffff8e7e9380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x4750 [ 229.277866][ C0] #10: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x39/0x400 [ 229.287054][ C0] [ 229.287054][ C0] stack backtrace: [ 229.292930][ C0] CPU: 0 UID: 0 PID: 7567 Comm: syz.4.356 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.292948][ C0] Tainted: [L]=SOFTLOCKUP [ 229.292952][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.292959][ C0] Call Trace: [ 229.292963][ C0] [ 229.292967][ C0] dump_stack_lvl+0x100/0x190 [ 229.292987][ C0] print_deadlock_bug.cold+0xbd/0xca [ 229.293005][ C0] __lock_acquire+0x12bb/0x2630 [ 229.293023][ C0] lock_acquire+0x1cf/0x380 [ 229.293038][ C0] ? hsr_dev_xmit+0x208/0x400 [ 229.293052][ C0] _raw_spin_lock_bh+0x33/0x40 [ 229.293068][ C0] ? hsr_dev_xmit+0x208/0x400 [ 229.293079][ C0] hsr_dev_xmit+0x208/0x400 [ 229.293091][ C0] dev_hard_start_xmit+0x121/0x7d0 [ 229.293106][ C0] __dev_queue_xmit+0x6dd/0x4750 [ 229.293118][ C0] ? lock_acquire+0x1cf/0x380 [ 229.293134][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 229.293147][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 229.293160][ C0] ? __pfx_warn_bogus_irq_restore+0x10/0x10 [ 229.293177][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 229.293189][ C0] ? ebt_do_table+0x1938/0x2250 [ 229.293202][ C0] ? br_nf_post_routing+0x5f9/0x16a0 [ 229.293224][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 229.293240][ C0] ? __pfx_ebt_do_table+0x10/0x10 [ 229.293250][ C0] ? ebt_do_table+0x1ce6/0x2250 [ 229.293262][ C0] ? lock_acquire+0x1cf/0x380 [ 229.293277][ C0] ? find_held_lock+0x2b/0x80 [ 229.293289][ C0] br_dev_queue_push_xmit+0x360/0x550 [ 229.293305][ C0] br_forward_finish+0x102/0x4d0 [ 229.293319][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 229.293334][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 229.293348][ C0] ? __br_forward+0x325/0x970 [ 229.293361][ C0] ? __br_forward+0x325/0x970 [ 229.293375][ C0] __br_forward+0x6b1/0x970 [ 229.293388][ C0] ? __pfx___br_forward+0x10/0x10 [ 229.293401][ C0] ? __asan_memcpy+0x3c/0x60 [ 229.293417][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 229.293436][ C0] ? __skb_clone+0x570/0x760 [ 229.293451][ C0] maybe_deliver+0xf0/0x180 [ 229.293470][ C0] br_flood+0x193/0x650 [ 229.293493][ C0] br_dev_xmit+0x10b0/0x1880 [ 229.293505][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 229.293516][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.293530][ C0] ? skb_network_protocol+0xac/0x3d0 [ 229.293542][ C0] ? validate_xmit_xfrm+0x44f/0x1360 [ 229.293558][ C0] dev_hard_start_xmit+0x121/0x7d0 [ 229.293572][ C0] __dev_queue_xmit+0x6dd/0x4750 [ 229.293584][ C0] ? lock_acquire+0x1cf/0x380 [ 229.293599][ C0] ? find_held_lock+0x2b/0x80 [ 229.293611][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 229.293625][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 229.293638][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 229.293651][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 229.293664][ C0] ? kernel_text_address+0x8d/0x100 [ 229.293675][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 229.293688][ C0] ? __kernel_text_address+0xd/0x30 [ 229.293699][ C0] ? netdev_lower_get_next_private_rcu+0xa3/0x100 [ 229.293716][ C0] ? bond_get_slave_by_id+0x285/0x5c0 [ 229.293727][ C0] ? __pfx_bond_get_slave_by_id+0x10/0x10 [ 229.293738][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.293752][ C0] bond_dev_queue_xmit+0xc9/0x180 [ 229.293765][ C0] bond_start_xmit+0x2f6/0x10d0 [ 229.293785][ C0] ? prp_create_tagged_frame+0x440/0xb40 [ 229.293807][ C0] ? hsr_forward_skb+0x113a/0x28a0 [ 229.293829][ C0] ? __pfx_bond_start_xmit+0x10/0x10 [ 229.293843][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.293856][ C0] ? __pfx_passthru_features_check+0x10/0x10 [ 229.293869][ C0] ? skb_network_protocol+0xac/0x3d0 [ 229.293881][ C0] ? validate_xmit_xfrm+0x44f/0x1360 [ 229.293897][ C0] dev_hard_start_xmit+0x121/0x7d0 [ 229.293911][ C0] __dev_queue_xmit+0x6dd/0x4750 [ 229.293923][ C0] ? rcu_is_watching+0x12/0xc0 [ 229.293934][ C0] ? trace_kmalloc+0x101/0x130 [ 229.293949][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 229.293962][ C0] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 229.293977][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 229.293990][ C0] ? kmalloc_reserve+0xf9/0x350 [ 229.294001][ C0] ? __asan_memcpy+0x3c/0x60 [ 229.294012][ C0] ? skb_copy_bits+0x5c8/0x8d0 [ 229.294026][ C0] ? __asan_memcpy+0x3c/0x60 [ 229.294037][ C0] ? __asan_memcpy+0x3c/0x60 [ 229.294048][ C0] ? skb_copy_header+0x20/0x2b0 [ 229.294060][ C0] ? skb_headers_offset_update+0x129/0x260 [ 229.294071][ C0] ? skb_copy_expand+0x32b/0x410 [ 229.294085][ C0] ? skb_put+0x138/0x180 [ 229.294095][ C0] ? hsr_addr_subst_dest+0xef/0x6e0 [ 229.294106][ C0] hsr_forward_skb+0xcbc/0x28a0 [ 229.294120][ C0] ? __pfx_prp_drop_frame+0x10/0x10 [ 229.294134][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 229.294149][ C0] ? __asan_memset+0x23/0x50 [ 229.294159][ C0] ? __skb_pad+0x252/0x600 [ 229.294169][ C0] send_prp_supervision_frame+0x3e6/0x5e0 [ 229.294183][ C0] ? __pfx_send_prp_supervision_frame+0x10/0x10 [ 229.294195][ C0] hsr_announce+0x169/0x3e0 [ 229.294210][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 229.294223][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 229.294235][ C0] call_timer_fn+0x19a/0x670 [ 229.294248][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 229.294261][ C0] ? debug_object_activate+0x331/0x490 [ 229.294273][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 229.294284][ C0] ? mark_held_locks+0x40/0x70 [ 229.294300][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 229.294311][ C0] __run_timers+0x757/0xb30 [ 229.294326][ C0] ? __pfx___run_timers+0x10/0x10 [ 229.294342][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 229.294357][ C0] run_timer_base+0x114/0x190 [ 229.294371][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 229.294385][ C0] run_timer_softirq+0x1a/0x50 [ 229.294399][ C0] handle_softirqs+0x1eb/0x9e0 [ 229.294412][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 229.294425][ C0] __irq_exit_rcu+0xef/0x150 [ 229.294437][ C0] irq_exit_rcu+0x9/0x30 [ 229.294448][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 229.294467][ C0] [ 229.294470][ C0] [ 229.294474][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 229.294486][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 229.294503][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 83 52 f6 48 89 df e8 fe d2 52 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 95 09 43 f6 65 8b 05 9e 1e 7b 08 85 c0 74 16 5b [ 229.294513][ C0] RSP: 0018:ffffc9000655f838 EFLAGS: 00000246 [ 229.294523][ C0] RAX: 0000000000000002 RBX: ffff888076ae3300 RCX: 0000000000000040 [ 229.294530][ C0] RDX: 0000000000000000 RSI: ffffffff8de713c7 RDI: ffffffff8c1aefa0 [ 229.294536][ C0] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 229.294542][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888076ae3150 [ 229.294549][ C0] R13: ffff888076ae3340 R14: ffff888076ae2ca8 R15: ffff888074edc780 [ 229.294558][ C0] __unix_dgram_recvmsg+0x31a/0xc30 [ 229.294573][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 229.294586][ C0] ? __lock_acquire+0x4a5/0x2630 [ 229.294603][ C0] ? iovec_from_user+0xbb/0x140 [ 229.294617][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 229.294630][ C0] ____sys_recvmsg+0x5f7/0x6b0 [ 229.294642][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 229.294655][ C0] ? ___sys_recvmsg+0x177/0x1a0 [ 229.294666][ C0] ? kfree+0x2ec/0x6b0 [ 229.294675][ C0] ? irqentry_exit+0x180/0x670 [ 229.294684][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 229.294701][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 229.294713][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 229.294727][ C0] ? __pfx___might_resched+0x10/0x10 [ 229.294739][ C0] do_recvmmsg+0x301/0x760 [ 229.294751][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 229.294764][ C0] ? do_futex+0x192/0x350 [ 229.294782][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 229.294798][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 229.294819][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 229.294840][ C0] do_syscall_64+0x106/0xf80 [ 229.294849][ C0] ? clear_bhb_loop+0x40/0x90 [ 229.294861][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.294872][ C0] RIP: 0033:0x7f833979c629 [ 229.294885][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.294902][ C0] RSP: 002b:00007f833a64d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 229.294918][ C0] RAX: ffffffffffffffda RBX: 00007f8339a16090 RCX: 00007f833979c629 [ 229.294926][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 229.294932][ C0] RBP: 00007f8339832b39 R08: 0000000000000000 R09: 0000000000000000 [ 229.294938][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 229.294944][ C0] R13: 00007f8339a16128 R14: 00007f8339a16090 R15: 00007ffda118df58 [ 229.294953][ C0] [ 230.214296][ T30] audit: type=1400 audit(1771429302.272:370): avc: denied { ioctl } for pid=7565 comm="syz.4.356" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x4b6d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 230.559726][ T30] audit: type=1400 audit(1771429303.591:371): avc: denied { setopt } for pid=7571 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1